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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x940e, 0x101, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) [ 183.041958][ T7718] sctp: [Deprecated]: syz-executor.4 (pid 7718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.041958][ T7718] Use struct sctp_sack_info instead executing program 2: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x4, '{'}, @feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 183.108528][ T7721] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 183.183600][ T7721] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.203620][ T7721] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 183.254990][ T7721] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. executing program 1: socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003bc0)=@base={0x0, 0x4, 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00'}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4521], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcec}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f, 0x0, 0x0, @prog_fd}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r0, r1, 0x2f, 0x2028, 0x4, @link_id=r2}, 0x20) executing program 4: r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x8a6}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f02002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c1180fc0b2f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) [ 183.295742][ T7496] hsr_slave_0: entered promiscuous mode [ 183.351458][ T7496] hsr_slave_1: entered promiscuous mode executing program 1: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r0, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 183.464796][ T7734] netlink: 137620 bytes leftover after parsing attributes in process `syz-executor.4'. executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, '\x00\x00'}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "deb7"}, @local=@item_4={0x3, 0x2, 0xa, "a1dcf445"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @global=@item_4={0x3, 0x1, 0x0, "d7a60565"}]}}, 0x0}, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x47c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x450, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9, 0x0, 0x2, 0x0, 0x3ff, 0x4, 0x7fffffff, 0x1, 0x1ff, 0x7, 0x40, 0x40, 0x8, 0x9, 0x9e, 0x0, 0x8]}, @TCA_TBF_RATE64={0xc, 0x4, 0xcd615781902fcbf1}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf9b979f9a7792f71}, @TCA_TBF_PBURST={0x8, 0x7, 0x16ce}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x7f}}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f3800bbf540dceb260f015f009d0f6f140f20d86635080000000f22d867660f38022066b96c0800000f322e2e0f88070066b9800000c00f326635010000000f30", 0x41}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 4: pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f00000000c0)=0x139, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0xe8, 0x0) write$binfmt_aout(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="0801010000000000"], 0x120) [ 184.019584][ T5290] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 184.062198][ T4488] Bluetooth: hci2: command tx timeout executing program 4: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_info_req={{0xa, 0x7, 0x2}}, @l2cap_info_req={{0xa, 0x0, 0x2}}]}}, 0x15) executing program 3: ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x8001}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) executing program 4: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000340)=[{}], 0x1, 0x6c, &(0x7f00000003c0)={[0x80]}, 0x8) close(r0) [ 184.271989][ T5290] usb 2-1: Using ep0 maxpacket: 16 [ 184.291773][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.358257][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.417883][ T5290] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.474198][ T5290] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 184.488517][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.524972][ T5290] usb 2-1: config 0 descriptor?? executing program 3: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90124fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 4: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 184.694574][ T7496] netdevsim netdevsim0 netdevsim0: renamed from eth0 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 184.735871][ T7496] netdevsim netdevsim0 netdevsim1: renamed from eth1 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x8a6}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f02002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c1180fc0b2f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) [ 184.811582][ T7496] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.849782][ T7496] netdevsim netdevsim0 netdevsim3: renamed from eth3 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f", 0x30}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 184.988185][ T7782] netlink: 137620 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.990798][ T5290] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 185.047819][ T7782] debugfs: Directory 'ü !' with parent 'ieee80211' already present! [ 185.081064][ T5290] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x47c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x450, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9, 0x0, 0x2, 0x0, 0x3ff, 0x4, 0x7fffffff, 0x1, 0x1ff, 0x7, 0x40, 0x40, 0x8, 0x9, 0x9e, 0x0, 0x8]}, @TCA_TBF_RATE64={0xc, 0x4, 0xcd615781902fcbf1}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf9b979f9a7792f71}, @TCA_TBF_PBURST={0x8, 0x7, 0x16ce}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x7f}}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) [ 185.180382][ T5290] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 185.232925][ T7496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.244221][ T5290] usb 2-1: USB disconnect, device number 7 executing program 3: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f00000002c0)="5c4794a3536802904a0601a6ea6d973f601813255db1ca48faf998f02619d836cac005d0b9bbd60d5d", 0x200002e9}, {&(0x7f0000002b80)="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", 0xe57}, {&(0x7f0000003c80)="0f", 0x1}], 0x3, &(0x7f0000001700)=[@cred={{0x1c}}], 0x20}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r3, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r4) ioctl$FS_IOC_FSSETXATTR(r0, 0x5451, 0x0) [ 185.321723][ T7496] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.358546][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.365866][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.408830][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.416087][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f3800bbf540dceb260f015f009d0f6f140f20d86635080000000f22d867660f38022066b96c0800000f322e2e0f88070066b9800000c00f326635010000000f30", 0x41}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 185.542992][ T7496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.647630][ T7496] veth0_vlan: entered promiscuous mode [ 185.675455][ T7496] veth1_vlan: entered promiscuous mode [ 185.721011][ T7496] veth0_macvtap: entered promiscuous mode [ 185.732418][ T7496] veth1_macvtap: entered promiscuous mode [ 185.758883][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.772920][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.783548][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.794366][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.804995][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) executing program 1: unshare(0x20020400) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) [ 185.818021][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.828668][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.842531][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.858651][ T7496] batman_adv: batadv0: Interface activated: batadv_slave_0 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000140)={0x2c, 0x9, 0x6, 0x350d27364b276d03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) [ 185.937800][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.983939][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.012807][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 executing program 3: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000680), 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000600000000000000e50000000698090004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffda99534e0203ffffb702000008000000b703000001040000850000000600000095000000"], &(0x7f0000000240)='GPL\x00', 0x9, 0x70, &(0x7f0000000280)=""/112, 0x41100, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x4, 0x7ff, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r0, 0x1, 0x1], &(0x7f0000000480)=[{0x0, 0x5, 0x0, 0xc}, {}, {0x0, 0x0, 0x2, 0x9}, {0x5, 0x3, 0xe, 0x8}, {0x4}, {0x3, 0x4, 0x7, 0xa}, {0x0, 0x0, 0x0, 0x4b4b54feb7c72bc3}, {}]}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000600), 0x8) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x20, 0xd6a}, 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0x4, 0x0, &(0x7f00000007c0)="9f449487", 0x0, 0x241, 0x60000000, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000740)="128d16d90c697b08f3c9704225d1", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6, @ANYBLOB="f5caca8ebcea447e080000000000"], 0x20}}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_fd=r3}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) [ 186.034549][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.058119][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 186.080493][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.095893][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.108825][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.131933][ T7496] batman_adv: batadv0: Interface activated: batadv_slave_1 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 186.171557][ T7800] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 186.178768][ T7800] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 186.190945][ T7496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180001010000000000b1ff0700009c847f00000000000000600002"], 0x0}, 0x90) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0400002000"}) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x47c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x450, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9, 0x0, 0x2, 0x0, 0x3ff, 0x4, 0x7fffffff, 0x1, 0x1ff, 0x7, 0x40, 0x40, 0x8, 0x9, 0x9e, 0x0, 0x8]}, @TCA_TBF_RATE64={0xc, 0x4, 0xcd615781902fcbf1}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf9b979f9a7792f71}, @TCA_TBF_PBURST={0x8, 0x7, 0x16ce}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x7f}}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) [ 186.233415][ T7496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180"], 0x4c}}, 0x0) [ 186.299639][ T7496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.308397][ T7496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) [ 186.359260][ T7806] hsr_slave_0: left promiscuous mode [ 186.383163][ T7806] hsr_slave_1: left promiscuous mode executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa01a0c200080081"], 0x0) executing program 1: socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a", 0x1e) [ 186.493527][ T7812] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f3800bbf540dceb260f015f009d0f6f140f20d86635080000000f22d867660f38022066b96c0800000f322e2e0f88070066b9800000c00f326635010000000f30", 0x41}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f0000000040)='ext4_da_release_space\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000240), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f0000000040)='ext4_da_release_space\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) executing program 3: socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32, @ANYBLOB="14000100ff010000000000000000000000000001080008000204"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) executing program 1: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x4, '{'}, @feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) executing program 4: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 186.923528][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180001010000000000b1ff0700009c847f00000000000000600002"], 0x0}, 0x90) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0400002000"}) [ 186.979241][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c00000000000000000200000009000100859584b15cc0b28108000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x47c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x450, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9, 0x0, 0x2, 0x0, 0x3ff, 0x4, 0x7fffffff, 0x1, 0x1ff, 0x7, 0x40, 0x40, 0x8, 0x9, 0x9e, 0x0, 0x8]}, @TCA_TBF_RATE64={0xc, 0x4, 0xcd615781902fcbf1}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf9b979f9a7792f71}, @TCA_TBF_PBURST={0x8, 0x7, 0x16ce}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x7f}}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) [ 187.067736][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.076825][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180"], 0x4c}}, 0x0) executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800", 0x23) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x0, 0xf1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc) close(r3) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3400000010", @ANYRES32=r3], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 187.270465][ T5290] usb 2-1: new high-speed USB device number 8 using dummy_hcd executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000800000002"], 0xfdef) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="c7", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000000240)="1a", 0x19ff4, 0x0, 0x0, 0x0) executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f3800bbf540dceb260f015f009d0f6f140f20d86635080000000f22d867660f38022066b96c0800000f322e2e0f88070066b9800000c00f326635010000000f30", 0x41}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) [ 187.509416][ T5290] usb 2-1: Using ep0 maxpacket: 32 [ 187.519562][ T5290] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 187.542188][ T5290] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 executing program 2: socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32, @ANYBLOB="14000100ff010000000000000000000000000001080008000204"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) [ 187.553782][ T5290] usb 2-1: too many endpoints for config 1 interface 1 altsetting 4: 123, using maximum allowed: 30 [ 187.574132][ T5290] usb 2-1: config 1 interface 1 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 123 [ 187.637443][ T5290] usb 2-1: config 1 interface 1 has no altsetting 0 [ 187.673462][ T5290] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180001010000000000b1ff0700009c847f00000000000000600002"], 0x0}, 0x90) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0400002000"}) [ 187.735086][ T5290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.746681][ T5290] usb 2-1: Product: syz [ 187.768397][ T5290] usb 2-1: Manufacturer: syz [ 187.780875][ T5290] usb 2-1: SerialNumber: syz executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x47c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x450, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9, 0x0, 0x2, 0x0, 0x3ff, 0x4, 0x7fffffff, 0x1, 0x1ff, 0x7, 0x40, 0x40, 0x8, 0x9, 0x9e, 0x0, 0x8]}, @TCA_TBF_RATE64={0xc, 0x4, 0xcd615781902fcbf1}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf9b979f9a7792f71}, @TCA_TBF_PBURST={0x8, 0x7, 0x16ce}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x7f}}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800", 0x23) executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c00000000000000000200000009000100859584b15cc0b28108000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff00000000000000000006", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0) [ 188.034207][ T7874] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.119387][ T5290] usb 2-1: 0:2 : does not exist executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000050505050505000000004"], 0x4c}}, 0x0) executing program 4: unshare(0x20040600) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name, 0x10) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000800000002"], 0xfdef) [ 188.211418][ T5290] usb 2-1: USB disconnect, device number 8 executing program 2: socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32, @ANYBLOB="14000100ff010000000000000000000000000001080008000204"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) [ 188.323744][ T5210] udevd[5210]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory executing program 0: r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0xfc0}, {&(0x7f00000024c0)}, {&(0x7f00000025c0)="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", 0xa9b}], 0x6}}], 0x1, 0x0) [ 188.397721][ T7891] tipc: Can't bind to reserved service type 0 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@ptr, @func, @restrict, @int]}}, 0x0, 0x4e}, 0x20) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180001010000000000b1ff0700009c847f00000000000000600002"], 0x0}, 0x90) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0400002000"}) executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff0000000000000000000600", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0) executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800", 0x23) [ 188.711228][ T7904] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000004f000000350000000000000085000000230000009500000000000000f4670880271e3503200ffa95a2c8c037c5a142dfa8ba6287066c5197fabd5f7010e89ae0b737126ea6d40dfeceed29d0608d38665cb6e22ff5dde54704d27779949c23e2e6979df3a2350ea7c09cc28de194f44842a5f0a8320e13822c8707f8612c10b100000000b0d3712c7e93363af3c075ff1e23160000000000000000f3d576090c4867a7b6393e366c6386d5ec7209d031cb30f6b7f40f3000e9576e51a7f550afc852003b2f7846c744ae6af3c037102124d85cec074c6949e1d76d067a97000247fe5f17fd32aaab800f4104dbaba46aac3a815b1e5c6d1d224b64be6c4d7f47ef6d02ba536cdacecf7eb6baaa4a9779f8555eaea768c1f2c221c110ef050000000ee282ab76f593d928cf95846be6277c04b8c5324812696a623cd8a4f8dc8dcba00b1b2d2547c45b0c52087b5efabf8496b9a951667dd58ea0327b56c0ebfb19a34268335648e1f844ce328c10752a42dca52fb98c1452b651ebf942f7297f7b2744419a2f238f173d0cd46dafc663373d700b9096bf701fe95500f53e5309ec91d83cf4fbd775d9c07d8d591a4dac60ff00e629b3b20000000000000000000000000000000000000000000000614fc97bff9cfa139a35a8b7d58e334ee5ee82a334dddd39459185ca47f48f3f897ba1d21c33f2b14910616aa9cb3e42b6b5e57ba3a20ef511e52e2d36ebd098379f9f7cbd9cf2860bc5e874e8a0ccce67f185b43c516d3f8bfd8b1bba365d29cba56e92d6860d96c16324fa6933dc2443325a7e2d8145fe00eb8f3859d56a4707c0512d03e6096a5806920bf2af3707814fc5b8d18734aa915cc7e182642a4fbdab97eaf408786d07464d69246055c18da4ce055e4b94042aed861c98012b535193fc5c30e3dfff1c3fe8154444f649b6cde6b9d954b4cd03ec91ef97f7d7ffe6fdf0ff0a5fa5eaca3ac8ebf45ff7d77880cdda3ade4ee2000ec7e7efeea3d87a7a73e010f1bd6c3aec07ef0dee2d3314398fb708303947d5346e443f7db380d49d7f1f40b3c165152dd643767af4ff2b656e984537fc0ab38dffaac0b30c3adb92b415c75eec0cd5d0b9c2541466db05000000f87d97fb6c327c0fe7902ff943bbf51516408257a379635ee2483acd024bddd5470d9f824b37f2b17529513336a79503799523cccf646451cb3cae91755075f42f57a799b254b3d92260aa4c974465ca4793c00c841760fb6457147688ffdd3ad2c51d92955eb50d39b965b9a4c25c1f2b43e3a2e5b2691c9ca21ade26568c7fd4c5750d971ec61811ca2e10b46c69b143b8d6ed638abc60eb29feee7a9b45adf3f032675b918d6c5470ae962083419a4462dbfa263db8bfdf1e827114d2c9808c968b4722d2df5115e247c9cff176070b67bba09d9911a75496c310794ed868fb959aa9790010310fa60eee856ef40625c47b01cc97e98773e8a1ee4d2bc9759f32adb9f8666c71f7f52679b72da4d5507971ff735431c4b497c38050987e88594fa57360f6dfd6324ed0a0f946635ff18a20ffc1fe5b725a26bf422703bfc5e8ea413e0383119e3052adbbaac9207ceece962a1a5dce7b45e769f29e89b381adc85f62efb1ce64c277e2a09017642df9a615241bb732614be1017c8070de02d7caed82b33cb284f2d4340839c3137e92f16b3983924195cae21a193ab1e227a318b612ba5ab7ede79e42b6e47162c7f92f"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b605a7", 0x0, 0x1bd0}, 0x28) executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c00000000000000000200000009000100859584b15cc0b28108000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) executing program 1: setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x0) executing program 2: socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000100ff010000000000000000000000000001080008000204"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x120, 0x0, 0x0, 0x21, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000010c0)=0xffff) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x8c}}, 0x0) sendmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="bb9a3f584f7764dcecb9611cf07da00ed086ffb190f482bc6d1d7024d51015a017e2f407395a034e9354bd30e24f96e53d9e7a3ab2bf7c165a26cb73adb2d53e342c0730960e1c8289be467d3256af55b2261f18496c46037dbdf0042aab344300530a00f45e6a2797414ae00ac1232b212d9c48c701b5f06496927f72a9960a9c223e5f7e40fbe77507ecb1ad3d81a0c573b862b74325fc607460c624a11d8632c44ee1267b9434a3c6c46e4daf1456f4f9feec13dada35", @ANYBLOB="4a65a2a3c06dbeb114d8df4736daf4f69d5dbcd95b4ed51e9b598da8b252bad47bb3343e35ccec0b1083d316860b1c8a4004fe7ec01ea473a573181e6bd9904f26a5a696b33d16dc9b7a418110dd768774c6ae6a78e2e08b4d8c18653238e4d7d0ca77b5ac653b5182cd46444fed4feb5fb4e8595e6d08f8d21ee6da96a384af4077972ef8026073e3"], 0x20}}], 0x1, 0x4) executing program 0: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x4, '{'}, @feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) executing program 3: bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) socket$rxrpc(0x21, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_PROTO_DOWN={0x5}]}, 0x28}}, 0x0) executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x182200) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff0000000000000000000600", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x4c}}, 0x0) executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f7508003900", 0x25) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) [ 189.375099][ T7939] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) [ 189.450015][ T5171] usb 1-1: new high-speed USB device number 5 using dummy_hcd executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c00000000000000000200000009000100859584b15cc0b28108000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) [ 189.589466][ T7947] bridge0: entered promiscuous mode executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@empty, @dev}, 0x10) executing program 2: socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000100ff010000000000000000000000000001080008000204"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 189.673991][ T5171] usb 1-1: Using ep0 maxpacket: 32 [ 189.714470][ T5171] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 189.757356][ T5171] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 189.791440][ T5171] usb 1-1: too many endpoints for config 1 interface 1 altsetting 4: 123, using maximum allowed: 30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x24, 0x0, 0x0) [ 189.806511][ T5171] usb 1-1: config 1 interface 1 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 123 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40}, {0x6}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0xffffffff) write$ppp(r0, &(0x7f0000000240)="5f14", 0x2) executing program 1: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000680), 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000600000000000000e50000000698090004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffda99534e0203ffffb702000008000000b703000001040000850000000600000095000000"], &(0x7f0000000240)='GPL\x00', 0x9, 0x70, &(0x7f0000000280)=""/112, 0x41100, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x4, 0x7ff, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r0, 0x1, 0x1], &(0x7f0000000480)=[{0x0, 0x5, 0x0, 0xc}, {}, {0x0, 0x0, 0x2, 0x9}, {0x5, 0x3, 0xe, 0x8}, {0x4}, {0x3, 0x4, 0x7, 0xa}, {0x0, 0x0, 0x0, 0x4b4b54feb7c72bc3}, {}]}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000600), 0x8) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x20, 0xd6a}, 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0x4, 0x0, &(0x7f00000007c0)="9f449487", 0x0, 0x241, 0x60000000, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000740)="128d16d90c697b08f3c9704225d1", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6, @ANYBLOB="f5caca8ebcea447e080000000000"], 0x20}}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_fd=r3}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) [ 189.855494][ T5171] usb 1-1: config 1 interface 1 has no altsetting 0 [ 189.888880][ T5171] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff0000000000000000000600", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) [ 189.917979][ T5171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) [ 189.961745][ T5171] usb 1-1: Product: syz [ 189.990346][ T5171] usb 1-1: Manufacturer: syz [ 189.995090][ T5171] usb 1-1: SerialNumber: syz executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) [ 190.077535][ T7965] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 190.084172][ T7965] hsr_slave_1: hsr_addr_subst_dest: Unknown node executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x11, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x69}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='ext4_remove_blocks\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) [ 190.121200][ T7965] hsr_slave_0: left promiscuous mode [ 190.128209][ T7969] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.138003][ T7965] hsr_slave_1: left promiscuous mode executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f7508003900", 0x25) [ 190.234642][ T5171] usb 1-1: 0:2 : does not exist [ 190.266907][ T7970] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c00000000000000000200000009000100859584b15cc0b28108000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x4c}}, 0x0) [ 190.316403][ T5171] usb 1-1: USB disconnect, device number 5 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d661321aafe161f8", 0x9}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b09f5b752b2121b7fad3d1f6b7470ed80fece2a9b225b6f374dfe7761a3e1947198cd2e80db5039319fc789e105efe29c9fed9105d6c33e0349a8e3330282f27a58632de84541cac2cc7b21d99b0fd5ae4bfb5659bbda08606d62763806122f79162c835206d1d7adead527011943d2ce", 0x9f}, {&(0x7f0000002a40)="cedd02", 0x3}, {&(0x7f0000002b00)="ccf4d478ea4674b674d304c2", 0xc}], 0x4}}], 0x1, 0x0) executing program 2: socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x44}}, 0x0) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000240)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={{{}, {}, @broadcast}, 0x0, @val={0x8c, 0x10, {0x0, "532101b8aac8", @short="8fceac6374bfd1f3"}}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) [ 190.519483][ T5210] udevd[5210]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.564549][ T7983] bridge0: entered promiscuous mode executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000540)=ANY=[], 0x100) executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x20, r4, 0x301, 0x0, 0x0, {{0x32}, {@void, @val={0xc}}}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x24004000) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000002700)=@newtfilter={0x4a0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {}, {0xfff8}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1f}}, @filter_kind_options=@f_basic={{0xa}, {0x45c, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x4}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0x6}}, @TCA_BASIC_POLICE={0x424, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x5, 0xfffffffe, 0x6, 0xffffffff, 0x1f, 0x80000001, 0x9, 0x0, 0x3, 0x8001, 0x9, 0x6, 0x8, 0x100, 0x1000, 0xd6, 0x6, 0x80000001, 0x0, 0x1, 0x8, 0x1, 0x5, 0x0, 0x9, 0xd54a, 0x5da, 0xb793, 0x1, 0x0, 0x1000, 0x5, 0x0, 0x1, 0x3, 0x800, 0x0, 0x1, 0x0, 0x1, 0x7, 0x7, 0x40, 0xa6, 0x6, 0xfd, 0x5, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x8, 0x7fffffff, 0x5, 0x398, 0x1, 0x9, 0x2d9, 0x6, 0x0, 0x1, 0x2, 0x4, 0x1f, 0x6, 0xe7, 0x0, 0x400, 0x0, 0xfffffff8, 0x0, 0x200, 0x2, 0x7, 0x240, 0x9, 0x8, 0x1, 0xfa, 0x1, 0x81f, 0x0, 0x0, 0x1, 0xfffffffd, 0xbc4c, 0x6, 0x0, 0x100, 0x4, 0x2, 0x8, 0xc, 0x1, 0x80, 0x2, 0xfff, 0x5, 0x0, 0x7fffffff, 0x6, 0x5, 0x100, 0x121, 0x7f, 0x4, 0x4, 0x1a98, 0xfffffff7, 0x793fe070, 0x9, 0x8, 0xffffffff, 0x1, 0x0, 0xffffffff, 0x80000001, 0x9c, 0x1fa, 0x908, 0x4, 0x200, 0x4, 0x0, 0x273, 0x5, 0x0, 0x1000, 0xffe0000, 0x2, 0x30, 0x4, 0x8000, 0x6, 0x8, 0x2, 0xffff, 0x1, 0x3ff, 0x7, 0x8, 0x95, 0x5, 0xd238, 0x2, 0x5, 0x0, 0xffffffff, 0x4000000, 0x4, 0x1, 0x0, 0x3, 0x4, 0x90, 0x647, 0x8, 0x428b311b, 0x1000, 0x80, 0x7, 0x0, 0x3, 0xfffffff7, 0x4, 0x5, 0x0, 0x2, 0x4, 0x4, 0x2, 0x6, 0x5, 0x7fff, 0x5, 0x80000000, 0x0, 0x7, 0x3, 0x0, 0xc53, 0x0, 0x1, 0x7, 0xffff, 0x0, 0x6, 0x2, 0x91f, 0x7, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, 0x400, 0x0, 0x6, 0x0, 0xd3c3, 0x4, 0x0, 0x1, 0x0, 0x60, 0xcbc, 0x400, 0x0, 0x6, 0x0, 0x7b, 0xc1c, 0x0, 0x0, 0x7, 0x7ec, 0x683c, 0x0, 0x0, 0x7, 0x0, 0x5, 0x2, 0x9, 0xffffffff, 0x5, 0x1, 0xc9, 0x8000, 0x4, 0xffff, 0x6, 0xdf, 0xb0, 0x5, 0x7fffffff, 0x0, 0xffffffff, 0x8, 0x0, 0x63f4, 0x7, 0x0, 0x7, 0x7, 0x8, 0x9, 0x8000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x2}}, @TCA_BASIC_CLASSID={0x8}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x2}}]}}]}, 0x4a0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x454, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x428, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9, 0x0, 0x2, 0x0, 0x3ff, 0x4, 0x7fffffff, 0x1, 0x1ff, 0x7, 0x40, 0x40, 0x8, 0x9, 0x9e, 0x0, 0x8]}, @TCA_TBF_RATE64={0xc, 0x4, 0xcd615781902fcbf1}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf9b979f9a7792f71}, @TCA_TBF_PBURST={0x8, 0x7, 0x16ce}]}}]}, 0x454}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0x22, 0x0, 0x0) executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f7508003900", 0x25) executing program 4: syz_emit_ethernet(0x14, &(0x7f0000002080)={@link_local, @dev, @val={@void}, {@generic={0x8863, "911e"}}}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c00000000000000000200000009000100859584b15cc0b28108000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000009c00)=[{{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000980)="cc", 0x1}, {&(0x7f0000000a80)='r', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000041c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000004380)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x20000}}], 0x2, 0x4080) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d661321aafe161f8", 0x9}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b09f5b752b2121b7fad3d1f6b7470ed80fece2a9b225b6f374dfe7761a3e1947198cd2e80db5039319fc789e105efe29c9fed9105d6c33e0349a8e3330282f27a58632de84541cac2cc7b21d99b0fd5ae4bfb5659bbda08606d62763806122f79162c835206d1d7adead527011943d2ce", 0x9f}, {&(0x7f0000002a40)="cedd02", 0x3}, {&(0x7f0000002b00)="ccf4d478ea4674b674d304c2", 0xc}], 0x4}}], 0x1, 0x0) executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000680)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) sendmmsg$inet(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000500)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0xa8}}], 0x2, 0x0) executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a010200000000000000"], 0xe8}}, 0x0) executing program 2: socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x44}}, 0x0) executing program 1: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x4, '{'}, @feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 191.187213][ T8012] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x454, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x428, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9, 0x0, 0x2, 0x0, 0x3ff, 0x4, 0x7fffffff, 0x1, 0x1ff, 0x7, 0x40, 0x40, 0x8, 0x9, 0x9e, 0x0, 0x8]}, @TCA_TBF_RATE64={0xc, 0x4, 0xcd615781902fcbf1}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf9b979f9a7792f71}, @TCA_TBF_PBURST={0x8, 0x7, 0x16ce}]}}]}, 0x454}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) [ 191.273629][ T8019] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x22020400) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0x40049, 0x4) executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26) executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0x38}}, 0x0) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x34, r1, 0x615, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x5}, 0x0) [ 191.614578][ T5165] usb 2-1: new high-speed USB device number 9 using dummy_hcd executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380), 0x208e24b) readv(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0xffe8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d661321aafe161f8daa3aa686b", 0xe}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b09f5b752b2121b7fad3d1f6b7470ed80fece2a9b225b6f374dfe7761a3e1947198cd2e80db5039319fc789e105efe29c9fed9105d6c33e0349a8e3330282f27a58632de84541cac2cc7b21d99b0fd5ae4bfb5659bbda08606d62763806122f79162c835206d1d7adead527011943d2ce", 0x9f}, {&(0x7f0000002a40)="cedd02", 0x3}, {&(0x7f0000002b00)="ccf4d478ea4674b674d304c2", 0xc}], 0x4}}], 0x1, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) [ 191.840547][ T5165] usb 2-1: Using ep0 maxpacket: 32 [ 191.859264][ T5165] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) [ 191.930658][ T5165] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 191.945919][ T5165] usb 2-1: too many endpoints for config 1 interface 1 altsetting 4: 123, using maximum allowed: 30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x454, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x428, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9, 0x0, 0x2, 0x0, 0x3ff, 0x4, 0x7fffffff, 0x1, 0x1ff, 0x7, 0x40, 0x40, 0x8, 0x9, 0x9e, 0x0, 0x8]}, @TCA_TBF_RATE64={0xc, 0x4, 0xcd615781902fcbf1}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf9b979f9a7792f71}, @TCA_TBF_PBURST={0x8, 0x7, 0x16ce}]}}]}, 0x454}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) [ 191.998417][ T5165] usb 2-1: config 1 interface 1 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 123 [ 192.050647][ T8049] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.051806][ T5165] usb 2-1: config 1 interface 1 has no altsetting 0 [ 192.086986][ T5165] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.089483][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.103858][ T5165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x44}}, 0x0) [ 192.151698][ T5165] usb 2-1: Product: syz [ 192.161771][ T5165] usb 2-1: Manufacturer: syz [ 192.171675][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.179261][ T5165] usb 2-1: SerialNumber: syz executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000), 0x4) executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26) [ 192.414691][ T5165] usb 2-1: 0:2 : does not exist executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 192.499646][ T5165] usb 2-1: USB disconnect, device number 9 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="70f792928d0828caa12cc76e1aed8044df064f2d2ceacf2978358bab3905874fd8640722ae423300c07d6363735fc9e3a7f12af131ed93dfad5db9f777ae439623db6c0e72c6aeb4f451ffecd32703b8c0858f1f80170e4446ce6914087a7add8cfa04dd47101f70334ff70ef97a50db02ff7518c416ecc47d1cbeacb5a87d9c2c8c62ac5603fa5b40ede93bdb20de9afd77da48bef9ff4e1e03944480d3c4222bad5deb61e955f15d9acde45d1caf1a85df5003234963124cbee9d642668af99ce4247886b7b9eae03e5ce3275647af917bfb11c7cf5d1851e89b6afb2ddde6400c595c217811f2dd91", 0xea}, {&(0x7f0000000200)="b8e0c5f55c8deb7dad20c6c30447785b90f08249b35bd2bb0784422bacffe70475f1f303309e22a9c0a44863f098803cec87a2bd2ff267e04b7db888c50ab69d8f51119304913c21277eeedcc27e55a55dc7a77678bf6dfaa1a5acabc10ced6f30c0f66e87ad7963ac9ad6d4cf887f1c44e02e31b354619c68747aa73abca8870d657db018f3a5a1f1af4fc92c3a755c4f1b4923fd348cb7183dd745c7100da078013f6e00acc8f667893a49ae25bbd841118d9c0ea4ee71fc7bc682b5afde1e6e9998d92721a61e487427a3be1deb5f2569b833a935acbdc799c770b4cbd9208c89e09b706d858d69e493f8a633a058be024701a1d946aaf025d27a5f1b80520ca51dd89d3ca1dce0ff8753e6a0071a6f71c6de3474f01d273a515f0df581b3cb0bb7488b8861afe7e2c0f67c7c9a98690497e3cd5c6e831d9ce948bf059bea06c667d67da998755a9a72e900a2ebdbcc43787d78ab5b3e92211df781cee11dd5c33603a7abd8c6371355173dd60c080f1b31ee00193b818b763c039c3ea26d9c88c03480e1814b6c92ecaf32e6f5ae0f5d3de1b83aa1e7d4f26fcc2d8faed52533c33a4eef65794bf8ea35ffbe87bbe30e251adb0e1e8fa41b7d8b499af9e2dbf9d2122c2e25068040c294eccab859994c2692dd0569b73db9a8779bcc1665b0016bb7a9c1fac2a98b17e32f6080819d28b56dfe1cc48987c52581e2e20ec1375800bedbea9840aa3e43d60ea49b54172fd1cb36899d8a32d15c2121cbfe24ca89f6a52f379839813a860f48e338e83dc5a79b6c030f1969d2c3ff535fa4f1df189513dede233ee135edd1e42900c9c8ec07732fd9cb11864c77043c2aeaa4bb9138d50a6429095e59e4223ffa29710d570cea5f7a66e04b7a3e011624da81f9031f618c23c3fb26d4d92c9c1c7a8ef43e46f026e7c2cdc9241ab2bae98485ff20f04172f45cc866c3ce324a83350c9ccda93bfabbe9071ff7a3ac41ed2eb87cda7cacc85471ca2a7bef4d13c9b63dc3092a86678eca8d7afae7fc509452c6be16fc3e8583a65a668d83d4b210286681f92469ec357913ff81d1def43c01f883dc97b619c6132b12c20fd4a79dba4fd3c4f50f63ca5b94bb70c1", 0x31b}], 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB], 0x88}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4008400}, 0x0) [ 192.594176][ T5210] udevd[5210]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @empty, @mcast1}}) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d661321aafe161f8daa3aa686b", 0xe}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b09f5b752b2121b7fad3d1f6b7470ed80fece2a9b225b6f374dfe7761a3e1947198cd2e80db5039319fc789e105efe29c9fed9105d6c33e0349a8e3330282f27a58632de84541cac2cc7b21d99b0fd5ae4bfb5659bbda08606d62763806122f79162c835206d1d7adead527011943d2ce", 0x9f}, {&(0x7f0000002a40)="cedd02", 0x3}, {&(0x7f0000002b00)="ccf4d478ea4674b674d304c2", 0xc}], 0x4}}], 0x1, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f041e0000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26) executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a10900000008ee2780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000c00000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e1"], 0x0}, 0x90) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000020c0)=ANY=[@ANYBLOB="c02104d0256abc"], 0x20) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380), 0x208e24b) readv(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x39) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xa1a) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 1: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d661321aafe161f8daa3aa686b", 0xe}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b09f5b752b2121b7fad3d1f6b7470ed80fece2a9b225b6f374dfe7761a3e1947198cd2e80db5039319fc789e105efe29c9fed9105d6c33e0349a8e3330282f27a58632de84541cac2cc7b21d99b0fd5ae4bfb5659bbda08606d62763806122f79162c835206d1d7adead527011943d2ce", 0x9f}, {&(0x7f0000002a40)="cedd02", 0x3}, {&(0x7f0000002b00)="ccf4d478ea4674b674d304c2", 0xc}], 0x4}}], 0x1, 0x0) executing program 2: chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6609) executing program 2: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x4, '{'}, @feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 193.575315][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 4: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)='\a', 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x1, 0x692acf6e, 0x4) fallocate(r0, 0x20, 0x0, 0xfffffeff000) executing program 3: syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200242c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa840000070000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70280000907800000002"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0481) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x0, 0x0, 0x80}) executing program 4: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040f0404011920"], 0x7) [ 193.883444][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@bridge_delvlan={0x18, 0x56, 0x1}, 0x18}}, 0x0) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000000109022f00010000000009040000000e0100000524", @ANYRES64=r0], 0x0) executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$kcm(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0) socket(0x200000100000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x10, &(0x7f0000000ac0)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x7}, 0x10) close(r2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r1, 0x7, 0x0, 0x0, @prog_id}, 0x20) [ 194.539469][ T5171] usb 5-1: new high-speed USB device number 10 using dummy_hcd executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d661321aafe161f8daa3aa686b4920", 0x10}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b09f5b752b2121b7fad3d1f6b7470ed80fece2a9b225b6f374dfe7761a3e1947198cd2e80db5039319fc789e105efe29c9fed9105d6c33e0349a8e3330282f27a58632de84541cac2cc7b21d99b0fd5ae4bfb5659bbda08606d62763806122f79162c835206d1d7adead527011943d2ce", 0x9f}, {&(0x7f0000002a40)="cedd02", 0x3}, {&(0x7f0000002b00)="ccf4d478ea4674b674d304c2", 0xc}], 0x4}}], 0x1, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) [ 194.702451][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.719412][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.729337][ T5171] usb 5-1: Using ep0 maxpacket: 8 [ 194.741666][ T5171] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, 0x0}, 0x90) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000140)={0x38, 0x9, 0x6, 0x350d27364b276d03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev}}]}]}, 0x38}}, 0x0) executing program 1: syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008f80)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000000000000bfbffffffff000003000000ff000000fb3d00000300000003000000000000000000000000000000080000800600000003000000070000000700000003000000ed0000000000000000000000000000000d000000ff0100000500000049f00000ff00000001010000880a000000000000000000000000000000000000f7ffffff03000000724b00000200000007000000000800000000000000000000000000000700"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 194.758208][ T8150] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.762470][ T5171] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 194.830083][ T5171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.864835][ T5171] usb 5-1: config 0 descriptor?? executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000700)='9', 0x1}]) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) executing program 0: unshare(0x20020400) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) [ 195.097920][ T5171] usb 5-1: USB disconnect, device number 10 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x44}}, 0x0) executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001500)=ANY=[@ANYBLOB="380100001a00bd9f0000000000000000ac1414aa000000000000000000000000fe88000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000059e70c6d68d265546c000000fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000020000000000000000000000480003"], 0x138}}, 0x0) executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$kcm(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0) socket(0x200000100000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) [ 195.836916][ T8179] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d661321aafe161f8daa3aa686b4920", 0x10}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b09f5b752b2121b7fad3d1f6b7470ed80fece2a9b225b6f374dfe7761a3e1947198cd2e80db5039319fc789e105efe29c9fed9105d6c33e0349a8e3330282f27a58632de84541cac2cc7b21d99b0fd5ae4bfb5659bbda08606d62763806122f79162c835206d1d7adead527011943d2ce", 0x9f}, {&(0x7f0000002a40)="cedd02", 0x3}, {&(0x7f0000002b00)="ccf4d478ea4674b674d304c2", 0xc}], 0x4}}], 0x1, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x16c0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x337) [ 196.085738][ T8188] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 3: unshare(0x20020400) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x44}}, 0x0) executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/2219], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r5) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) open(&(0x7f00000001c0)='mnt/encrypted_dir\x00', 0x101000, 0x1ae) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) [ 196.379830][ T5171] usb 2-1: new high-speed USB device number 10 using dummy_hcd executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 196.494475][ T8202] syzkaller0: entered promiscuous mode [ 196.500208][ T8202] syzkaller0: entered allmulticast mode [ 196.580201][ T5171] usb 2-1: Using ep0 maxpacket: 32 [ 196.592872][ T5171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 executing program 2: syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008f80)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000000000000bfbffffffff000003000000ff000000fb3d00000300000003000000000000000000000000000000080000800600000003000000070000000700000003000000ed0000000000000000000000000000000d000000ff0100000500000049f00000ff00000001010000880a000000000000000000000000000000000000f7ffffff03000000724b00000200000007000000000800000000000000000000000000000700"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 4: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) [ 196.637252][ T5171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.691789][ T5171] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000700)='9', 0x1}]) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) [ 196.753206][ T5171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.793092][ T5171] usb 2-1: config 0 descriptor?? executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d661321aafe161f8daa3aa686b4920", 0x10}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b09f5b752b2121b7fad3d1f6b7470ed80fece2a9b225b6f374dfe7761a3e1947198cd2e80db5039319fc789e105efe29c9fed9105d6c33e0349a8e3330282f27a58632de84541cac2cc7b21d99b0fd5ae4bfb5659bbda08606d62763806122f79162c835206d1d7adead527011943d2ce", 0x9f}, {&(0x7f0000002a40)="cedd02", 0x3}, {&(0x7f0000002b00)="ccf4d478ea4674b674d304c2", 0xc}], 0x4}}], 0x1, 0x0) [ 196.840817][ T5171] usbhid 2-1:0.0: can't add hid device: -22 [ 196.846888][ T5171] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800451830"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) creat(&(0x7f00000056c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) preadv(r6, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x60, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x5}, @IFLA_AF_SPEC={0x38, 0x1a, 0x0, 0x1, [@AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x81}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}]}]}]}, 0x60}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}}}, 0xe8) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_FREEZE(r8, 0x400c620e, &(0x7f00000000c0)={r0, 0x0, 0xfffffffd}) close(r4) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0xe000000, 0x0, 0xffffffff, 0x1b0, 0xa8, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port, @gre_key}}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @remote, @private, @icmp_id, @gre_key}}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @broadcast, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) [ 197.013890][ T5165] usb 2-1: USB disconnect, device number 10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x337) [ 197.607843][ T8226] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. executing program 3: unshare(0x20020400) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000140)={0x38, 0x9, 0x6, 0x350d27364b276d03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev}}]}]}, 0x38}}, 0x0) executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x44}}, 0x0) executing program 3: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x4, '{'}, @feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 198.481181][ T5171] usb 4-1: new high-speed USB device number 7 using dummy_hcd executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 1: syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008f80)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000000000000bfbffffffff000003000000ff000000fb3d00000300000003000000000000000000000000000000080000800600000003000000070000000700000003000000ed0000000000000000000000000000000d000000ff0100000500000049f00000ff00000001010000880a000000000000000000000000000000000000f7ffffff03000000724b00000200000007000000000800000000000000000000000000000700"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 198.681558][ T5171] usb 4-1: Using ep0 maxpacket: 32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d661321aafe161f8daa3aa686b49201e", 0x11}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b09f5b752b2121b7fad3d1f6b7470ed80fece2a9b225b6f374dfe7761a3e1947198cd2e80db5039319fc789e105efe29c9fed9105d6c33e0349a8e3330282f27a58632de84541cac2cc7b21d99b0fd5ae4bfb5659bbda08606d62763806122f79162c835206d1d7adead527011943d2ce", 0x9f}, {&(0x7f0000002a40)="cedd02", 0x3}, {&(0x7f0000002b00)="ccf4d478ea4674b674d304c2", 0xc}], 0x4}}], 0x1, 0x0) [ 198.728606][ T5171] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) [ 198.771317][ T5171] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) [ 198.819497][ T5171] usb 4-1: too many endpoints for config 1 interface 1 altsetting 4: 123, using maximum allowed: 30 [ 198.869838][ T5171] usb 4-1: config 1 interface 1 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 123 [ 198.898713][ T5171] usb 4-1: config 1 interface 1 has no altsetting 0 [ 198.918108][ T8257] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="0fdd557c26f72f0f232c650fc7aa000036d2ef0f01ca0f20660f07baf80c66b875a5ab8966efbafc0cb069eef4", 0x2d}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @random="69a97916a817"}, 0x10) executing program 0: unshare(0x20020400) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) [ 198.961082][ T5171] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.992195][ T5171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.024171][ T5171] usb 4-1: Product: syz [ 199.028764][ T5171] usb 4-1: Manufacturer: syz [ 199.034122][ T5171] usb 4-1: SerialNumber: syz executing program 1: syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000000000000bfbffffffff000003000000ff000000fb3d00000300000003000000000000000000000000000000080000800600000003000000070000000700000003000000ed000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x44}}, 0x0) executing program 2: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) [ 199.265929][ T5171] usb 4-1: 0:2 : does not exist executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "068d27a7"}]}}, 0x0}, 0x0) [ 199.380517][ T5171] usb 4-1: USB disconnect, device number 7 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c01128009000100766c616e00000000fc0002800600010000000000580003800c000100ff010000030000000c000100ff0f0000060000000c00010006000000510100000c000100ab040000080000000c0001005b060000090000000c00010001000080030000000c000100020000000000ffff0c00020004000000020000000c000200540a000018000000100004800c0001000600000006000000700004800c00010000000100120001000c00010005000000680000000c00010005000000ee9500000c00010003000000018000000c000100220b0000010000000c00010004000000010000000c00010006000000020000000c0001007fae000001de00000c0001007f0000000600000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x13c}, 0x1, 0xba01}, 0x0) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e03"], 0xffdd) [ 199.471381][ T5210] udevd[5210]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d661321aafe161f8daa3aa686b49201e", 0x11}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b09f5b752b2121b7fad3d1f6b7470ed80fece2a9b225b6f374dfe7761a3e1947198cd2e80db5039319fc789e105efe29c9fed9105d6c33e0349a8e3330282f27a58632de84541cac2cc7b21d99b0fd5ae4bfb5659bbda08606d62763806122f79162c835206d1d7adead527011943d2ce", 0x9f}, {&(0x7f0000002a40)="cedd02", 0x3}, {&(0x7f0000002b00)="ccf4d478ea4674b674d304c2", 0xc}], 0x4}}], 0x1, 0x0) executing program 0: syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008f80)="672aa7a236875cb4b5c363256b94deedaa0a09fa0daf0f0c09a29705b82272ad1960d34c6211d26972dd21eb2a53f3c5d0ff1632c4b182973021300223762c1c4fc2cbd368765f6da3db30c140e2fb86a09bcdabf57fafc9b46385b02970f831cd78ae7d53b475d76e0fe591f231076e6d341dc7259cf9e4723e09b502e6900b66ac5ccc8bdbe1dd021f0f39d3eb87da67b869ab54146f159a88aa1c27537339001d1a7b51df190edda5f3134bd48f4914ae5fc4ff42a7ce353bb09696336266e93cfdfe2053f57fa6e2afdcfa0d54166a6b7a7dcefa2fd9bb80616db5e73d5bf57681017d117a1c1a14e832eae31e64db24c68e16a94e8ff1f36f709722363f469bc250ebd11cc58d652776a5bf9c2dc49fdb7d073afb5dc124df0512033bbc723cae908de541034bf4ea7b087cd804dfe027ad55c1af43b03320b6fc7d0be3ebadfc132fc01371ffee44894a221134d8cd57dbfddf9a90b9c78a96e8e77c166e98a56fb91f70fb5168076045b3fe2fe8f957085e57a1458c54efb21bb8a54bae5517233be5f1138ff6e70bea977f1c345855cc3a9057fc866e948cf0d2cd6d4ed6dc5a78758b0110c371f300ff6e6084faba10bedd71fb413557f2def9593bcc40b34f5e16fcd559451964af0a2ec1430e955e4fe70427134bd6cc107028bc8ba5c9524dbf11ba657995229957cba43e34b3dd1433b63800fbb42d02dd9621101be0a3f46c5a41b03437983adc2234d0026ff88de5d71ff6b5213fb8db7fee64abf9db545fe104ff7cfdd27baeeae5ea114321a8a4b83221c4387553bf5644a1b8342299343f67f2bc5fd24e9e2b1bd273a3383eb6c54158cc16047bbb44785f80708d62599450541dedf52ac7d527207892b31fc92b799de86dc083b7611890bb46b91a30c01423ae4019060e7e754bc488dbd5be7c2135c0f80b8116b4cfdeff2bbe439afefbd7b730d56feb596e081c82d2d9283f3f6496739a64f8313bd932780ec433b5df0a26c74923e668c76fe907d9ec58fa6f1463fa1b4a3f15956ea0db203a31c407462284a9b7984b8f74f4511e66bcd4ab431095bd760c90ccc158b004bc2e4194ddf40f00019227aad06fe0e0e59c3b907d61cbcecb9c430c71cd018f4c83647e02a5911b4c0cf2e95adf29c8d684389d8461eab2b9b909e05b6c13c03323c1d2470af622587223326868464bcce7c4305a612cf7f585de72b795c38f095a7c52a68042bcc417e909183bfd77c75d9960cc776e8864763c5bbc40f8b7699b7ac974704744643c9711f2692347d8b79ce92f7c107a4a422d934b8d9c35da299ede2bb8c3624d18bcec01c706ae8b3cf14a2491a76cf6b84e63271a35303ad66566794234f9d9e202c831171d860d42bedd6c8a65fb6ee5b3ca5c49edc36d16b1912d4b75dbaf757b85059965514fc993f2bee56fb40396bce56c14c77c696ee22d2983ca34e6eefa5bcdf3eb84bf3ef6e27195d597c57ad8fa5d861a062c517750ab77c9d872a28b74c87d8f24317687e73e9d171a848309855d48140e4927f4e95bc2cefb38f900ef94334e490b3bb82729746592fa66d417baae75278e5174e1797207c7bffb9744064db4121652d6a962b7d272079eaee34c6e58a7f0b0c45192ee3ca6feb73593a05df82dda03d0ba31662ca716b3dbc22dc4dcc77f166e622a8748267fc5fe720bab0d0cc23d83332e7fd5b05878e09213223f9862ab051dc4c27a152d7970af7bb7d67ce95507257a9cf07413e0f1803e7cdca562e3003bffa14a5e07f0fb68993b491982b0b0b08d0502a5b01f60d4f30eb6e72328f2d332237be24f688eee2145473f8b2da1980d34aa917e0ad463233dddf35dab96f15185f8d0b210baed8fcc26f52766833c57f29a4e82293ad7043d72e04298335c9381adacd7fa9099511fa0c5130555367e39b6ddfc398c289a64a32e29f1d7f3b7a7d53160c60217232b7c77b6dad5d95f7c1799e30c088a2e602ddddaedd60f46e718bd24c157b8c4a7da6b6823d38623daf833c9562a59c508c53e78a6eb94eb8cc8599e0b39b935e55aa0578970eab4d1088be243dde77c24e60b848a9b3a89a3b4f7b051df64d977f147b8fb0bd295324ade8c6ad52cf0746f4018641e7c96c1e055b0aaf1e3ea62c4b45dffcc2fb80f1c95a1358346f536702443208fdb68506750be6d0b629cfabc422315721664da8f719a9ecbb50856758216f0941bda412d847480d2067a40c4eb351c88037bb78166b566db16377d8f930cd9f8b187cdcd49c3feaf40706a8fc1aad68af2410236b14294e0fcae189c0933f5337eb9486e9dcbf6955a1c85e9626c20d349898c3e9bac39c0609d3e32a9c92e2a80512955893b6f81d107bd845e5462d415ad5d019c402d46b501d8b624935c0d2f48f1d6302cca46be8c1351d07931ce1408511fc2bf7223f368aa0ce8f1cb6bea5cbc99c8877a88e3353036fd5e5a33fdf15b15bb955f352bd3321ee2f87d4c9ec0d1d94896c1fd7589e8a24943e81e4fe2c368f7088c6d1fa8c62943cacb61f6b700359b5a9fa88ff203423361c654be5b3e00c0c89fff1f84db931eed293236d8deefbdeb0a4d466ddfd35fd71d160eb8cab640646501108356e527ce365788a5c6158856b0ce745180971244bc8985b68a737d6824d3a34e2752b3e99ca9bc15bce48519d1820142f5572737d58e41b264d9eda7a059b897f978460e031225ce815cf1ab66264f2cc434590f4c6b8272eb77d7b37546860e7a9ec6f788be67975b0ad897d0c798d5a29eca29e8928b69ffcfd26ab9f2e02330427bc1512585bcde828088c289471ee522c3c2c6a5cb6674567cd58f04b643620d10ea356a7ae50a183a7ded18f9d3ae9e8606cc037078b804a39fc01ac37e4f271bf02e7c0adcaa1c06034145a204026781cd3bb516c8bf8c17df378624b3d80fc6befd01dd620f35b112a704d99676234b1af8fbc76922bc7b27c1363dbbdc1febc3f599accf981f67eb5648eb72470a42269a660f97c15bb7bedaf7c4abc2a4da33d397f2d51eda31ea73866f9d0a6975c85cb20d97a52e7e23e4878b58b8786e18cbf06883e0e84e6e7aa7d3f85ce5ae6297068ddc50e71258867d5eccbc58403307fdf24f3f343bd663b5b7f09e3b489c827a006acd0d4d6c77cd76b071acd1c05d674cd4d79d9bc8ff130e660c93ae9b959aae12fa792eb949232785518eebf1ed47f6f4bbfe91eb56600c74c8c16273be4a17d8e6a75967c3a219d289d232e313fb4b614ee9316de57fa7d7cf1fa14cbe43855bfb6ddb782635ae4d10ea594c382511d361881492671abc54e9d56d21f2faf33878cbcb1148d2d70bb5581cc86697bb99436b533d2537c0265d2663d4e2457c6f379028f35875f1b29c8bd50e88911e10cc5cb6566669e9c7edf606a18792f330d6dea2d0ea930b4b3029569ffa938bec86621a88712bf46a2b174f8c2edaa83239214db36f8a2b2ade83b3e5ba1fab54f2d93ec226fbcede63cf9cfcbd8db37dc2bd9c5fa90604de425125e5463f8fbd4e53261fef780f6b0899e3a64e9e1ab0adc4443c22b8ab08de53a1b2adba692f6fec2495e09850ebb9aa9e375c70b9e16c93b10732dd6f86128fb8ea3226e272e3bf3e2a2f5b77bb7053fb1a759f654b312053ea60c6a2d7194ae1f27144ff63dd7bf69e026d53936fd4ad1ff1038c8629de5da3961e5e1e62fac0a38b6ce0fd51b248b82a42a685aa3b5ee8ccd60f749de60a1357e8b50f4e79169151ec21278c3e936939fa7af3191d5911c39e59de9de43ceddd8a1cc2d7b4b403a264f4026688f14ad5c329826f7c434f9bc2fdada90289dbbfafe6d18917db4525dba94152a00ca3fc5bfd733521aa4d4bcab66db0a99719baeba691833e027094b062d257f4a810e619a30f47b819829754d634ebcd770ba67ad0c8e376b1af97b621fb99fb32bee3f6b108ed8db638b93b97b9178144ab123e650c43fadea6354fc0f915a86914bde9cd0dc15b2b3a643391b080312cb5f8a50ce86742135982c2733ce8cce953fe6f2caf6ac8e6778d1f57fadc0c343fc129f3a4225ac59b66e8f84884bbcab304a29227e0c46e7feda345c6a4ab1a0c5a44152f58dc1e72e418385e5ecf54f092ffbf852fefc5d5d5d6481c9567b6ba9fe7488bde726a9137d572bb66b176a40899df069844d5a6fe959d6dce329a391daccfdeda8b45aae6575c4018fc3fae137fd644f7edecbe8aa24be1d27a946519ed0d9aff0b2f32df69db83ca66fffe82a4b394878adf890287e139b1fac592a3f264d4389e57141522405c960656e9379be5fcdf3302e08a40e85a1de6afa2490f20908ba17271586590899255446ba6e11cc8dbe0f69b33e8cc83b7b207131bc1c7105fe7407279f3f0e004a6501b2e081114824be961f79d7321012d080b0caa780b020c7a9431f64ec7e601a214d81115ad4fc092220b20c964db35c3fc917428a4b698aea0a5d0162886e2d64967d200868354f794124963697fb2bab4b635d6d9d011e23719d53a26988b06b927f37bb75f8c925c95c35b9c99c3550dc266b8420058e76113de92ef1f17eac47bc332791a39741181f5ccfa27230f9797c88f24bd0e7e3dabacc9d71f65e4ce6094e127b8581cf3d1384878680654dd899f668a483c8d81eef78a47c1a2449a56cd74d3517cedf3d712d0e95f20e216981e6d6f13bb7828bc33813bfb2a8aacfd478255b135eebe3b0ed241322a6fff564d73a006de508b4c96bb24775fc3ee2cbfd00fc87869d8c64f28dcad7bb2f696fed0f48b34fb801818980d1d34ecec01bdb26598b94533d0c9b065492bacb5523d1e58a72e67c772cb1adf0d454a80e65e82eaffe2d313d33780965ab298cfee73ba67c897ad7a5786864c356806b823e2e441a1b6886f5671d01632cccbc7e21b979d122527f9458d0bdf5764775ab0548e98076ed7d50558a5379b3923450891f38a5639ac5829b9542ac97b13a297574dbf1383e35414f3c95e3fd61f83b5a81fc09923ea53c843f4ae2adfaa5c7769a5fecf1ee28c168b6459795bdc624725ac4f5f9627d34a3353e9e69fcef5966e62655cff7902ca071453b5908fa3990be28161e168ce2716929ca73228f1a309e1fb2ae66853132dd06c1e3df267e0919309ae208c7ffb06acbfe20465e9927bfbb0288e1485c10173b5f4ccd636fb224e3d070b2a9d99605243bb8d9653976f06fa399eca9bb03f4fd19114596542ad6ee1d240544c07c317853daacec6d7ff883db3b1f8a417caa8877a3e7412639bede74e1c4bba66a538b618d5e1a4d9f7c8e75ea547331a0ef2e7151a6008cfd9f94431b60f7da61b812c1971838a18081776de4ecdbea28d23d3dc8330c9d76d301ed0f5bafd294e1961ea458f477631607f4c2c807f1624df8e7180ec6dc330aba556b680f66ba97a847064205825799fc788d3a7a8c9162d7a0cf63765be25922073db3d24af94de34b99a5eef387b329ada7dd43906708ffaa3fb10b1910a942937b867564b9d74920f63d848345464e5869b136391cbf00cdfc41afe08ffea0e6ba0b6d1b9423c6fdf7e79d47d7d78ff73f5c966ab6ba1856d2a8deca00a100dd88a2a16316b63c7315503852513bd375a3b181a9c2f9fc501efa164c5a7f41471af3211bdafd8c5bb662a76d0150186a093501b83160b81e1c58a34e2f7507016c66cbafe34edff2d609b466751c3f92604c9e2b427b2dcdeb24071fed270df0d8cc8254528d9593ce23c53abbcafd2d45965116efa654b2eb60c72630ecf72a47425c50d220437f2e9da9dc251c8b2142d8c854f10e016be93aa29e91804f500352cd1621e40f7f62098cebc0ce5a6a4572f511778f31d0ad91d1497573bccbec4d19d7dfb1ebada4e58871b360863481a457de1b0f7eeeeecc51f6de1a3c47bad6f5d97e5b5d6abaebab06d6b64460ee4a381d8ce96f2006f2212df5fffd9e1dbc3f17d3e0749b8961c31f682053bf340de3d4301d8820424bce316b91d6c57e7ba132149ef82c966d933dfc0571ca28635f3123165cc92929d25981e530891cb30e97bd559c70f781821a4e9f18a0fe0611df94d067f1486c6def4d63396397a51d0a6cbacef86ad791871871024910630dfefedb05397b0f59fef99a3feee2013cbb6a6b07d210f5ae6692cf62d17eca73fd30009195253f1aa76bc95f96823ab32a1d13cfa87411ec231008fe344cdf3cf5e86f11d7a26e9703ced2ab69c5e54599f30d9dd629a219446f7d688f83e44e8c25d89903ac7bb1bb7c6dc5f19c810b0275c3467530e44eb990da82c9823563973c45fc2cde21478d6008bd7214c095216b602508c5f5e5a8e11fad957b615ca610d39aa45c848ad3b8aab3cf45b9629dbb893e8e5dc6cf1387b9ea3086b4a4cdf1255ce47e364e232cacfc3bd5957ee364ea1454b0b661aa3101ec7fe5b32dc541d5bc7f29c64b92bb4f6ca1439f692885c1437d4170bebf1b20d8ed15295ed004690addf27113ec0669b81d3c317ee8ec8b26cbac126c5b4f11f44913f3b96e2c2279242ab433dddba9c0cf484a6a674c100377aed9a59fc3ab5bcfe31065f5953ad1bacc8b31d95a2e09c6f0cf239f838df2effb679952cebbfff0f016fc253057c08946f0c85a2156a7bfc1e03520ac6947c7915647e6d8078f18da64e5fc10772f2fafe372e039d03a861c4f4b958b4bb55e265b0d184bba6302e519d21cb09d40d2aaa73f6b2caddb89d285493c67fc713f89d5063e444edf45739d978d9d2a781d4abfcdad2dc3f195177c8e23194e9007d0193d14d9610dea860da2fbccd40a1b46d1e467aa2ea00a3c24caf1a5c67135d0fcd5a3b31efea0af2763a9461df195b91fb22a40e1e65758c65b636efc85913b95af1ff18833d0809b7291ff49445fe57e7bfe408fab10fc228b76c3b89370a5bcde726cf45acec55a19ff47a4114bd40cb8f2f2fd0ef364f02ad2a054333c826e025a4a6c671a39febe226a88b76def455692ecfeaae1f22cd266904829e17ef5576b199438267a35ed75214dfe7cf6bbfda3a027ae11438d8ef30fe01fa3418c1692e928147765593533f4ad1367bccd5ecbeaf71428e83ab3d51a5e737a74b3ebaee8952d6f7e21016f04f1001dab4b90729c0a307bc67e900d50e39fb90189695e77b09d73da7b13ca69156b6e3917969d1d96e322ab1b3f0e6bf1dcc0012c8ac58757c41b6b88dadbc5407acdca5bc09e5e76ee346a11c52f22849c4f6c882339e42b226d0c0d945c98bbe0f3d779b8cbbcedb40965ff7ed78c039e05165728bd003cff80c419e7dd4c8027cd36f14f99c1d9959e5e3e82afc09b2162cc92bbd423dbea141cb3c02f3bbb2225ada64a18b40279a34bb8e7aabd914463805ba0a5b4e137bed5ab9afe99197c5495b2c33314ea537060d4ad299524b59d469c4bb14efbe78131b973243dd19aec3e836570b0e2ff053698e8b8b1e78d0ecf56101d87eae8044fe45fe42cead7ba6b4d0e1cf58044ff4fa341bdc85cb89163f322688a2b131ad0bc7ab07480134f9c7469a33eb246a9c31610af062e7391b9363fe2578099c84c8d27efabacd477674097b76362e196a0a4c532d8367ff4a2c08a14dd2dbc51c1f1af62499aa1e70f2a35510de5c039e98a20ad9b28c3b11d149e923ccad83a0718fb4bab862ed4d6faced2dba0372bb59f1b9da3bdb5f8ba1ca502a8b08a44c5c1d7c8cdb220da728ebd0cb60a2332ea78273f1bc15c6dcb5cb64b90e7e30a3ece4ad6e3f1e139d1fc49f125500233d161125ea72c8a2201643520276fa928ca8ac3e4cda67099aa0f9f4ebe5dff5c815c8c2388611e2d4a40ddafdd280d3903f4cb534179556c5425f90d1c22ccda31125af03c56cc46afc2a827a12da6bf352d28630bc6c9bf5d61a6c290283c66986fbf8a90943364dbb31752db4329ac03085a054c1996305f18021ad96ba98202f062423e1f17593b52ef704c90c25fb7a203ca33d8542b403343261f1d9972c061fef045e953a3607888bd019b699ab50d4499c30686fcd8b3b1ac291ffd73553627574d8856300161c0462a9fcb92a4907ad0de1e8b80548abaf37986f4e4568ae10a5d5a019d6295b89137d8772f307ec4bfeafcc533e77428633944e158f9bd95d6ea71f6f7910aa95a2e14e0d65dc94e6ededef9c113510df709ccfdf7674d2a847fff094d2c55d3b31a98721c10417bc7eeba96cbc3945991b256db58e1ebaf78e495dcd5c804dbadfe53e1a285cc00e409a8ab620972f5bd0204ae1783d256cd97c154105ba922e5ce87b97e101b83ed5c3b7061e83123d845da585044fbc10bfcc91865966f359a05b17ff97652d49f3d05d98296496fe4f081801203096fdc26fc79c82e62abcd4132287a3f4b1273806928f027da1bc76f48452cb0c5ac4ac8369840231896092cc2e83a008d15c304120fbd70991933a91c366c4779c343175e033e40de9f882125d8c6d5f5ed3aa50f3100c7a7e6c676f80260b9512c6fe8aebdd2487616553e018ee861f509415d1956ddf25fdd850a554096656956e22c94d7a3edc853a6b78401b3c94f15e83690d98bcbe96289bd3dcb5c84478097894b18521889dfea7995511a173cc2937ad5cfbed211f5f0fdf097c303982ab81093cabcd64e932d1cab3d789257b72464185afe1feae7e143cdd43acaac4f0c5e7a58caa2b5e0f10043035c55005f028542257c8b8f7c41bcc29ba10bc15310e6095c89553e611112a730b53f3b6c6b92f0abd729c5353be58da8b0d9eec5b307b3cdf4a34f3ce71a88f458350acae8645e66e75835336f74d644eb2a62df53e22b6b4b10600965c47b6bfe1e5b34072b6b89536193f4be95baa8a928d4f63313f8a2a1795054f851e092b76e0dfaef666fab96860a223f652b74e42e894c46d9a349584fb2a60824c5f7f526d04a34f0a8152c2e98bbcd3dac68684eaa497342383e3c11848a9a62346d0bcb49077b945e7effd640fd093f6aee4ad7bd03bd1571dd50c97b6c2415dec6f58c41f709970a54ee0dd4359cea1aa2a4c5ccec27137d558753e39df279b5d9f48c46642db6f5362c5f0c479357ebabe547f48943985217ed81673d6aa5ae65116d0cb55cb9917b65fc5aeb7325b0bec48785f9043ce710f7705cbaf3b3aefbc8dc5dcc21ee8825a625c71782c162e93943f616b7a18cb3fd568dcf3920e4cfbb4e0ef21c69bbae0184805509e7548d6ef77e276b03a523a7b61d5145f0ce34d7f44b58769c3ce8da8b8517c430970d537d1a58b3160eafceaf2c035f025d557561445c5068d960c9f168e64f146b224f6efa23618303d6660abe20dcf316634e6e2bd4fe728348f5d4084b01927495165cf7a8e02a5230c765fc962b0abe53503fd0fe60c66c5fcfb09700668956753c6ed324239e6ebe32a6518afd20fbce6be3dba522c7ecf92160c67d5b3045025e3c0cedfd68df575ea63ee6c128a8f5b3220a87f4196810ea0f87683b5b3d6178a997c4c5e0844e41a49f78082e6339512c4eba6d1c87e520e2583dfeb197d9b6651b6a2a9c4742d86c16c817c5c4cf3e4993089bf9d6f94f8cc2df7bfbbc95cb8c911fe815c644f33ff5a167b12809cc9a63e9ba6baf7c5d6ceb4946c3998f0eb6ba0e603a6a318c19b87c324d34ff326e4802bd018cf60803d29b882547387fe840983e7bd4148139facebaca7069409a93015ecd0c5747fa0f7cc6979bbf9c23546ee8e72524b24638f0ace2253c031457d71f4fc5e8c6c1983c0b468f9271d98c17c8141fb4af8256af353c714bac0ca91814cbb39adcdb622eb89989540d163d5ee76af6291aa5eb50ef8f9d40dda73378724be7cf3d9f9338262c16f3cd6025c79d75f6b8da656bab8e1a2232edbaa0915bd045625c25ea2c6212c107ff1e0865cdda721f4914705aa7a48b8c560cc939211fd263a1d4a3aa1ff361ba0732c2d6a0fe11c48aa6ca3d852a60ce02d831fdc979812c314e2b78c7286ffc9152836816a17ca6fcaa17ef0ce5bf525b6c82dbece850006753313b4d95366e3338750fb439b58a5c95c30bbc7cf502767eda5cf1fa29d5a9018f04b60f57ef60bec20e04f3f0b40d655b456d84cc73b3e77bdb0b25dfffb0476dfd3143ef78b92d6d0afd1dff8487e2c4e73e589c0503b635ec80a174d9b60878a5b3906eb0aa96300a9b28a229a59afc3f11cf0cd7b238eb2bc17aa3fbfd12f0ece35424b3add5501392c47caf352a35ce42e47f6723ae6e869e09d5c6797175d224d48f6e91c0eec43fca8e8818ada0d75d6de13cfbdac32b3daad393700f91cb9afcb6e9c852eac6a1f0772119d0cb64c2c8f924dc11cac6f0091f0bc4020ef598c28bd9779aacf7ee5dc7d2c0c0c623973a51c118d00cf074ae969d8954d80690a4bf75c766c6bd78243b286c7e2b4901026474b7d63111098b3305171f754f077902c08f179eb262b83f1d15aea2f6b5de192489c4988c69a4705e10f8be9218f703db3a6de5dc0565676c1978c3904a663321e6f1201a0c7a13f7986a7e5d0c85911bed445e645854c60613a0d723603409af5b4d978ed7a77ffa23a507b2d6bd8e98fb16a7d412e69f663236139dcf188037c7f5ac7f6358bd4360cd563104d276f140bfc636aaadce7548c010ab0ea6203b7b3ad9039fe3555b637adc5970d6b1fe432929ba8633c3fe496b60714b384d9490fbcb6d0289cfa4c0bd18e190e9bcc68501e9583ce6c1f9713fad8d1fbaf56984282c08d823c013f8bafd3846683240df1145cacaf6bdefb1f9af8fbb2c21157280afe7cd4a97ecfd10184b4c72cc7ba77abce20f1b5fbdabd15cfa69684705a8c105583bf3e4606b31177a1f25caaa771d3cbf2dd65b6d0838d7bb87d8596f37bd49c2c46575cecf4aa4013570d4766a5c00d453c204608d5b663aca0198079ac791406e722a6f0792b58d22b8236a5e1d5b9c72c85b8d5f7efa7547a321328076e1a309f2e65fbda02354d1be9149553500999d52ed452635b49499a0d78aa7769c46d82f87748db165d44b6d66dac1ab45742c421cfaf65fb9ee287dbe74273e54eb253a2fc1113a5853d57febfb69f11f6e318f28f4cef67b6bc60040e064e398775202bd3b6ae701d261af29873a72fc5bc356bbd8c1a9824a9627a52e2ba23c7375ae8a3dff43c54a8c7215e9686d5751e8447ba1cdc884eb043597989d6231bceb2e2713bfbad6e5bce541ce9045c8e3b603d6b5313164bea470e6d38a840db15dc473e4b1d03f7850475e10d5fe6ab1f6ff8de23cfa93b51399e58c5cab7d0a6f86c71b8ff29a7da3ccc2271f297a04089d9f301daa896b6b3bdcad2ef6a9b540f3267c760e11137c4b7e5b906642f718615f0fc871306dbb04e0784a855f0d13a14a75afa482c11a2accc4cf05eaf49b9e259b1554e4c608450cb228692a2d2b9c3c30a00e12809ba716b98adf1277d1c490620724c8276c65a7b3e1166072b6eec289c22527804e4d0181902b1a33252087f5fb8b92007891da94c203768c4f28b21f439e02f3214815e857455cc2a7499cc3a95fc51072ca06a6e5300", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000000000000bfbffffffff000003000000ff000000fb3d00000300000003000000000000000000000000000000080000800600000003000000070000000700000003000000ed0000000000000000000000000000000d000000ff0100000500000049f00000ff00000001010000880a000000000000000000000000000000000000f7ffffff03000000724b00000200000007000000000800000000000000000000000000000700"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 3: unshare(0x20020400) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) [ 199.788260][ T8288] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000640)={0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r1, 0x0, r2}) executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x44}}, 0x0) executing program 4: syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000000000000bfbffffffff000003000000ff000000fb3d00000300000003000000000000000000000000000000080000800600000003000000070000000700000003000000ed000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x13c}, 0x1, 0xba01}, 0x0) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e03"], 0xffdd) executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) executing program 0: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x4, '{'}, @feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d661321aafe161f8daa3aa686b49201e", 0x11}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b09f5b752b2121b7fad3d1f6b7470ed80fece2a9b225b6f374dfe7761a3e1947198cd2e80db5039319fc789e105efe29c9fed9105d6c33e0349a8e3330282f27a58632de84541cac2cc7b21d99b0fd5ae4bfb5659bbda08606d62763806122f79162c835206d1d7adead527011943d2ce", 0x9f}, {&(0x7f0000002a40)="cedd02", 0x3}, {&(0x7f0000002b00)="ccf4d478ea4674b674d304c2", 0xc}], 0x4}}], 0x1, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000000000000200000009000200"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 4: unshare(0x20020400) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a0000000000000109022d000100000000090400000503000000092100000001220500090581034000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) read$hidraw(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) [ 201.210650][ T8324] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x44}}, 0x0) [ 201.254731][ T8324] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. executing program 1: syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008f80)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000000000000bfbffffffff000003000000ff000000fb3d00000300000003000000000000000000000000000000080000800600000003000000070000000700000003000000ed0000000000000000000000000000000d000000ff0100000500000049f00000ff00000001010000880a000000000000000000000000000000000000f7ffffff03000000724b00000200000007000000000800000000000000000000000000000700"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 201.339362][ T5171] usb 1-1: new high-speed USB device number 6 using dummy_hcd executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x0, 0x0, 0x8000, 0x100}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b40)={{r2}, &(0x7f0000001ac0), &(0x7f0000001b00)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) [ 201.520767][ T5171] usb 1-1: Using ep0 maxpacket: 32 [ 201.539424][ T5291] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 201.546123][ T5171] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 201.590011][ T5171] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 201.599053][ T5171] usb 1-1: too many endpoints for config 1 interface 1 altsetting 4: 123, using maximum allowed: 30 [ 201.619358][ T5171] usb 1-1: config 1 interface 1 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 123 [ 201.649164][ T5171] usb 1-1: config 1 interface 1 has no altsetting 0 [ 201.656275][ T8339] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 201.666451][ T5171] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.682382][ T5171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) close(r2) [ 201.709167][ T5171] usb 1-1: Product: syz [ 201.713442][ T5171] usb 1-1: Manufacturer: syz [ 201.718071][ T5171] usb 1-1: SerialNumber: syz [ 201.736841][ T5291] usb 4-1: Using ep0 maxpacket: 32 [ 201.764786][ T5291] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.793593][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.811253][ T5291] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 201.834250][ T5291] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 201.851435][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e03"], 0xffdd) [ 201.870802][ T5291] usb 4-1: config 0 descriptor?? [ 201.963713][ T5171] usb 1-1: 0:2 : does not exist [ 202.004188][ T5171] usb 1-1: USB disconnect, device number 6 [ 202.063887][ T5210] udevd[5210]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 4: syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000000000000bfbffffffff000003000000ff000000fb3d00000300000003000000000000000000000000000000080000800600000003000000070000000700000003000000ed000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) [ 202.318976][ T5291] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 202.341923][ T5291] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 202.351327][ T5291] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b707000001009fa35070000000000000280000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b71d0e6adff07f1d8f7faf75e0f226bd99eea7960707142fa2dc79b9723741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988ee99fbfbf9b0a4def23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837079e468ee2cf49822775985bf31b715f5888b24efa000000000000ffffffdf0000000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b9349e31aa3701c38c527d3237c18e521ab219efdebb7b3de8f67581cf796a1d4223b90b80fcad3f6c962b9f292324b7ab7f7da31cf41ab12012fb1e0a494034127de745409e35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d307db98ca112874ec309baed0499104dcfe7c00004bd5fc9e66d058b75fa4c81e5c9f42d9383e41d277b10392a96286744f049c3f128f8f92ef992239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353009e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b2e00916de48a4e70f03cc415ba77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b638c234bbb55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bf6cf8809c3a0d46ff7f000000000000ad1e1f493354b2822b9837421134c0167d78e6c24ed0a2768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4cc302b52e2101de18a1f1f7c551b3fa00055cc1c46c5fd9c26a54d43fa050645bd6109b113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e97c870800000047546103f123f661c84726e7c7c55eff231a1b033d8f841ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef7be184f5e93ba5c8c2a4c04450b652b8d4c2ff030000000000000007c6bbd6cb2b240ce7d47ae636a5dbe9864a117d27326850a7c3b57086a4482c218b10af13d7be94987005088a83880ccab9c99220002af8c5e13d52c87c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a700a86c814459f3cdaaf99000000000000000000bf2130d1b32c826563c718d0ad23bc83ba3f3757210a057e177615c0683f000000000000006d4e0413ab52f5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fcff030000629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa63966945d93c33b038ce0d890f85f8a6ab8487c383e24d4a8051f80e1811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f207ea3df3d6c0002a41783078e56c70afe8016b3dd9dc7785b36e609f173cc747837d600283b3452c57a5d44cacd363589845637071320921d32c1663964eddec97cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b200100000b7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dcb0c42c4d719347f3d16304fa000008ffffffffffffff003049ca923d059c0ab5d886a491adacb7e4b43b1b57586e5fe2aa611f6232a9b71882ce24fce75cf105fa57f000756755b7230e2c0c1fed5487271c4f2981cf8f4351ef5d08641dacaed000080000000000000000000000fa36bbac00bb77c933d3961556585295ce05643b0000000000000000000000967aef9c5706e13d5889e77dab80a2548ec31629b7355a2bb8b93e4b6323061f545b26accc4621b568ab0bfaf30aa4f60705532c4a09c0a4a5487c762167edf362be35b9c90ad7e372a66bbb1471aa21000000000000104061c66a7432f25687618e31dcef8c5d4a2457a93f3fc6d3d7131746c75ccf400fc1a7a51826832ef7f5fbc78827d937768443a1c1ca3aba93a34efd21aa1201d9225256df8de405d1f12c17cdaff3ad675aa333aa7e919459babd3cc1000000000000000000000000000000000000000000000000000000040000000059fdc6a54a2a8b28fa7d9b92aeb58e78e3b8594a5ef6bb67e52bf43b6145f544273a8f62852706c0abef368bfc72f92fa99a7bf121019cff8001fd7d2f6c2c295a5cab383235fec4c1decbed258ee9df8963c0fc828ad2119ffefe36c78692fffb6942b9da0922b2aa8f6b66c14ee7f42d5951ede3549f851ca340d9e425e355c1decb785a1042a72c1c98a084b04b1d9be473e50a15d76b110eda3b7cc1f2501211773cf510a43888422c1328476dd6f42659c61a18618fd28d5cd342c276aa9c4cc035077fa09d672b8dcfb3ac1751628647047d07338a8619037e3449a173ddd697f541a0795a2de7ef1396d70675341ebf004be122de04b5275fe7e53d28ebdc5051cec00759d73ca97229d93b965926060b6f91d01324bd458b425ea51c5d5b69551d599188fc6040370ac9ca7ae9eea9e5ede79bd66bd3d616dd7d7dd4c3a8fd055a3585af6fe7f5046c61154598cd33c33a48ece1072afd04b1fd85eb1655d9f3f813392c9634200d892dc6810b436820a1e0f6b464855e28953eb63cd3d6fc1b7bfb588ce28a51af1658d45d759a8399da55a3ff6597bb9f47167fe55ca240623a001e5fe15d9ddefea06a3750501916163844106c4ce662f418d9fc509e5447f712048d53e7e36ee7de083c5ea1119969d858eb6785395fc5a2c551de9a086cb4583f55c47828645e30464609"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r3}, 0xc) [ 202.373524][ T5291] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 202.389478][ T5291] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 202.409799][ T5291] ntrig 0003:1B96:000A.0007: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="00000700000007007673ed26b029a925ac675bd612d8ab87"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000000)={0x0, "1cf250d2528722061e2daedcbbf930dedf4904d8f9e64f62c3d0e156e87ed3dbfac38f0c1faada797532454dd344c00c8a007369f5d86fe64007aa38577e4db7"}) syz_usb_control_io(r0, 0x0, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000000000000200000009000200"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) [ 202.559653][ T5291] usb 4-1: USB disconnect, device number 8 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x44}}, 0x0) [ 202.680952][ T8358] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.692322][ T8358] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x170, 0x9403, 0x4, 0x0, 0x2c0, 0x2a8, 0x4a8, 0x3d8, 0x2a8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vxcan1\x00', 'macvtap0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macsec0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0xa}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local}}}, {{@ipv6={@remote, @remote, [], [], 'wlan1\x00', 'ipvlan0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) nanosleep(&(0x7f00000006c0), 0x0) executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) close(r2) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e03"], 0xffdd) executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="0fdd557c26f72f0f232c650fc7aa000036d2ef0f01ca0f20660f07baf80c66b875a5ab8966efbafc0cb069eef4", 0x2d}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @random="69a97916a817"}, 0x10) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "068d27a7"}]}}, 0x0}, 0x0) executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r3}, 0xc) executing program 4: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x4, '{'}, @feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 203.689583][ T785] usb 2-1: new high-speed USB device number 11 using dummy_hcd executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000000000000200000009000200"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) [ 203.882221][ T785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.903329][ T785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.919555][ T45] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 203.927400][ T785] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 203.948345][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000"], 0x4c}}, 0x0) [ 203.973380][ T785] usb 2-1: config 0 descriptor?? [ 203.992503][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.004464][ T8391] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.081421][ T8393] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.119230][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 204.130963][ T45] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 204.141951][ T45] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 204.151242][ T45] usb 5-1: too many endpoints for config 1 interface 1 altsetting 4: 123, using maximum allowed: 30 [ 204.162351][ T45] usb 5-1: config 1 interface 1 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 123 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x2ed5, &(0x7f0000000280)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000180), 0x0) [ 204.175780][ T45] usb 5-1: config 1 interface 1 has no altsetting 0 [ 204.190343][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.199915][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.208170][ T45] usb 5-1: Product: syz [ 204.212816][ T45] usb 5-1: Manufacturer: syz [ 204.217690][ T45] usb 5-1: SerialNumber: syz executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e03"], 0xffdd) executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x337) [ 204.434313][ T785] wacom 0003:056A:0010.0008: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 204.452606][ T45] usb 5-1: 0:2 : does not exist [ 204.467761][ T785] wacom 0003:056A:0010.0008: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.1-1/input0 [ 204.492808][ T785] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0010.0008/input/input11 [ 204.538152][ T45] usb 5-1: USB disconnect, device number 11 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x805, 0x0, 0x0, {{0xe}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) [ 204.622095][ T5210] udevd[5210]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) [ 204.713154][ T5166] usb 2-1: USB disconnect, device number 11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_insert_delayed_block\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000b40), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f0000001280), 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f0000000120013070000", @ANYRES32=0x0, @ANYRES32=0xee00], 0xf0}}, 0x0) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a31000000000800044000000000090001007379"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) [ 204.964121][ T8414] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000"], 0x4c}}, 0x0) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x82940, 0x0) utime(&(0x7f0000000340)='./file0\x00', 0x0) [ 205.022991][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 205.074644][ T8417] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e03"], 0xffdd) executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x337) [ 205.128324][ T8420] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 4: ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r0, 0x0, 0x0, 0x0, {{0xe}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 2: syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000540)=""/115, 0x200005b3}], 0x1, 0x0, 0x0) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x0) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a31000000000800044000000000090001007379"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e03"], 0xffdd) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex_waitv(&(0x7f00000040c0)=[{0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x945933a53746ed8e}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x13, 0x0, 0x0, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x337) [ 205.861309][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) [ 205.909246][ T8448] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000"], 0x4c}}, 0x0) executing program 1: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "068d27a7"}]}}, 0x0}, 0x0) executing program 1: ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) [ 206.129390][ T8456] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000200)={r2, 0x0, 0x3}) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x0) executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) [ 206.469346][ T785] usb 1-1: new high-speed USB device number 7 using dummy_hcd executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_insert_delayed_block\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x337) [ 206.705444][ T785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.729174][ T785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a31000000000800044000000000090001007379"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) [ 206.750822][ T785] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 206.769256][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e03"], 0xffdd) [ 206.802025][ T785] usb 1-1: config 0 descriptor?? executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) executing program 1: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a0000000000000109022d000100000000090400000503000000092100000001220500090581034000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) read$hidraw(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000"], 0x4c}}, 0x0) [ 207.151313][ T8490] netlink: 'syz-executor.1': attribute type 6 has an invalid length. executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 207.257171][ T785] wacom 0003:056A:0010.0009: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 207.289666][ T785] wacom 0003:056A:0010.0009: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.0-1/input0 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x16c0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 207.311744][ T785] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0010.0009/input/input14 [ 207.409442][ T5281] usb 5-1: new high-speed USB device number 12 using dummy_hcd executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x0) [ 207.497493][ T785] usb 1-1: USB disconnect, device number 7 [ 207.599214][ T5281] usb 5-1: Using ep0 maxpacket: 32 [ 207.606593][ T5281] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x337) [ 207.643367][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.657988][ T5281] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x170, 0x9403, 0x4, 0x0, 0x2c0, 0x2a8, 0x4a8, 0x3d8, 0x2a8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vxcan1\x00', 'macvtap0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macsec0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0xa}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local}}}, {{@ipv6={@remote, @remote, [], [], 'wlan1\x00', 'ipvlan0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) nanosleep(&(0x7f00000006c0), 0x0) [ 207.691390][ T5281] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 207.703214][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.715800][ T5281] usb 5-1: config 0 descriptor?? [ 207.729366][ T5291] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 207.919188][ T5291] usb 2-1: Using ep0 maxpacket: 32 [ 207.927839][ T5291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.944136][ T5291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.966704][ T5291] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 207.978894][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.005145][ T5291] usb 2-1: config 0 descriptor?? [ 208.021531][ T5291] usbhid 2-1:0.0: can't add hid device: -22 [ 208.027599][ T5291] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 208.174826][ T5281] ntrig 0003:1B96:000A.000A: unknown main item tag 0x0 [ 208.186059][ T5281] ntrig 0003:1B96:000A.000A: unknown main item tag 0x0 [ 208.196127][ T5281] ntrig 0003:1B96:000A.000A: unknown main item tag 0x0 [ 208.203708][ T5281] ntrig 0003:1B96:000A.000A: unknown main item tag 0x0 [ 208.210936][ T5281] ntrig 0003:1B96:000A.000A: unknown main item tag 0x0 [ 208.236650][ T5281] ntrig 0003:1B96:000A.000A: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 208.278899][ T5165] usb 2-1: USB disconnect, device number 12 [ 208.405565][ T5281] usb 5-1: USB disconnect, device number 12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r1}, &(0x7f0000000500)=0x8) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e03"], 0xffdd) executing program 1: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000"], 0x4c}}, 0x0) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) [ 208.969326][ T8518] netlink: 'syz-executor.2': attribute type 6 has an invalid length. executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fstat(r2, &(0x7f0000001780)) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x337) executing program 4: syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x170, 0x9403, 0x4, 0x0, 0x2c0, 0x2a8, 0x4a8, 0x3d8, 0x2a8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vxcan1\x00', 'macvtap0\x00'}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macsec0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0xa}}}, @common=@inet=@dscp={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local}}}, {{@ipv6={@remote, @remote, [], [], 'wlan1\x00', 'ipvlan0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) nanosleep(&(0x7f00000006c0), 0x0) executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r1}, &(0x7f0000000500)=0x8) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='ext4_es_insert_delayed_block\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) [ 209.449241][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 209.559296][ T785] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 209.655360][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.684551][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e03"], 0xffdd) [ 209.714055][ T45] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 209.748781][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.769380][ T785] usb 5-1: Using ep0 maxpacket: 32 [ 209.788186][ T785] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.814969][ T45] usb 2-1: config 0 descriptor?? [ 209.833791][ T785] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.892853][ T785] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) [ 209.941795][ T785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.975694][ T785] usb 5-1: Product: syz [ 210.000737][ T785] usb 5-1: Manufacturer: syz [ 210.016862][ T785] usb 5-1: SerialNumber: syz [ 210.233683][ T8544] __nla_validate_parse: 5 callbacks suppressed [ 210.233756][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.322120][ T785] usb 5-1: 0:2 : does not exist executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000"], 0x4c}}, 0x0) [ 210.423349][ T785] usb 5-1: USB disconnect, device number 13 [ 210.516928][ T5210] udevd[5210]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.539388][ T8546] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 210.547525][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x0) executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x1, 0x0, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) [ 210.776487][ T45] usb 2-1: string descriptor 0 read error: -71 [ 210.796351][ T45] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #200: -71 [ 210.815418][ T45] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 210.824475][ T45] uclogic 0003:256C:006D.000B: failed probing pen v2 parameters: -71 [ 210.836668][ T45] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 210.853286][ T45] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r1}, &(0x7f0000000500)=0x8) executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) [ 210.874109][ T45] usb 2-1: USB disconnect, device number 13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e03"], 0xffdd) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) io_setup(0x7, &(0x7f0000000040)) [ 210.987374][ T8561] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 4: signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008"], 0x4c}}, 0x0) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 211.153799][ T8573] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000640)={0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r1, 0x0, r2}) executing program 3: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) [ 211.250696][ T8577] netlink: 'syz-executor.0': attribute type 6 has an invalid length. executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r6}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) executing program 0: syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0), &(0x7f0000000500)=0x8) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e03"], 0xffdd) executing program 3: r0 = socket(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000b40), &(0x7f0000000180)=@tcp}, 0x20) recvfrom$inet(0xffffffffffffffff, &(0x7f00000001c0)=""/134, 0x86, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001280), 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f000000012001307", @ANYBLOB], 0xf0}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fb000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r4}, 0x38) executing program 3: bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r0, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 211.680808][ T8599] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) [ 211.759892][ T5165] usb 1-1: new high-speed USB device number 8 using dummy_hcd executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008"], 0x4c}}, 0x0) executing program 3: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) [ 211.840904][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 211.857267][ T8606] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000020000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r3}, 0x10) write$cgroup_type(r1, &(0x7f0000000000), 0x9) [ 211.950244][ T5165] usb 1-1: Using ep0 maxpacket: 32 [ 211.957923][ T5165] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.971009][ T5165] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.978101][ T8609] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 211.994504][ T5165] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.004213][ T5165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.015104][ T5165] usb 1-1: Product: syz [ 212.020389][ T5165] usb 1-1: Manufacturer: syz [ 212.025390][ T5165] usb 1-1: SerialNumber: syz executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0), &(0x7f0000000500)=0x8) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e03"], 0xffdd) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10) close(r2) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) [ 212.254988][ T5165] usb 1-1: 0:2 : does not exist executing program 3: bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r0, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 212.290031][ T5165] usb 1-1: USB disconnect, device number 8 [ 212.364055][ T5210] udevd[5210]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.460282][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 212.652731][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.665317][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.675255][ T45] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 212.686517][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.697276][ T45] usb 2-1: config 0 descriptor?? [ 213.537222][ T45] usb 2-1: string descriptor 0 read error: -71 [ 213.553370][ T45] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 213.564982][ T45] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 213.573586][ T45] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 213.582036][ T45] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 213.591136][ T45] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 213.612118][ T45] usb 2-1: USB disconnect, device number 14 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) executing program 4: unshare(0x22040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0) executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008"], 0x4c}}, 0x0) executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) [ 213.840693][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.877158][ T8634] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 2: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000004000020d3"]) [ 213.943999][ T8639] netlink: 'syz-executor.0': attribute type 6 has an invalid length. executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0), &(0x7f0000000500)=0x8) executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, r1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002040)) getpeername(r0, 0x0, &(0x7f0000000080)) [ 214.071473][ T8644] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system', 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.allow\x00', 0x63, 0x0) executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup(r0) write$FUSE_WRITE(r1, &(0x7f0000000100)={0xfffffeec}, 0xffffffd1) write$FUSE_STATFS(r1, &(0x7f0000000280)={0x60}, 0x60) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000200)={{0x0, 0x3938700}, {r3, r4+60000000}}, 0x0) close(r1) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000100), 0x2, 0x0) fcntl$getown(r3, 0x9) executing program 4: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r2}, 0x10) write$cgroup_pid(r0, &(0x7f0000000000), 0xfdef) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fb000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) [ 214.435395][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.460155][ T8668] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c000280080003000100000008000600000000000800"], 0x4c}}, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) close(r0) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000d00850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r4}, 0x10) write$cgroup_pid(r3, &(0x7f0000000980), 0x12) [ 214.664422][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.672346][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='hrtimer_init\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000016c0)={'pimreg0\x00', 0x41}) [ 214.946677][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.971713][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000200), &(0x7f0000000380)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000740)='ext4_fc_track_inode\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000740)='ext4_fc_track_inode\x00', r1}, 0x10) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) [ 215.153650][ T8662] macsec0: left allmulticast mode [ 215.167586][ T8662] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.185495][ T8662] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r1}, &(0x7f0000000500)=0x8) [ 215.217088][ T8662] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.244669][ T8662] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 executing program 1: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) [ 215.378615][ T8662] bridge0: left promiscuous mode [ 215.395031][ T8675] netlink: 'syz-executor.4': attribute type 6 has an invalid length. executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000007b00b67018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='ext4_evict_inode\x00', r2}, 0x10) unlink(&(0x7f0000000000)='./cgroup\x00') executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10) close(r1) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = gettid() sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec663189d3348bf13f872a468352b72482b5b2b364a29c6f0f2c4e741bf6457d1418455e157253231681a3889f39b3da6b60dbe404cb9a145d0d49cfd1668a32b96ff302975748993a8a534144d211c681ff3d91ffa436d40b9afe648ec8bde2f7553fb5d3f3b8423873903abd024284bfd01511c149b6101851f7aae4675df76e7d32d7b91659e4adcc14ddfff8a2b49d1393de72b9d970ee7f45a755c1d9f7b4d43e37e17d6eaff5fe352d507eb0424ab937980ae8fae8a9062b651a53b6543733e259ee3083a308a78ac50f0972629b74e6aadefedf2352d024d8f27d4bc8703493b08bbe75e34ee5796d0d275cae3d3c0eba179e145feee0c8acc98af7888a374dbe705e058fc565e40677890a39e6999ae47202a9237803e9eee30f368725ca8571a8f6a8ba396905f4f023a60acb644bab6b0b8964aa514c37f23509c685648d6adb0e230aca690c91e664bc49fa30ae42a2c71abc7517181d4157ef996628b3624f367519970366acca85d399e2c7703930e2abd4bdbac076230ad16368ccb350357d57626ea47a15f0fa16bd5efa8233fa3ea1183da730204a455a673c783c10a26411c5de816699f7af3401b9f38592a4cd9f3f0b7de18cd69f831eee87a3d2edb64ecf517d201f32f86b80fcd3287330f286465260370527e6116df0651001405563622e14af715f6c3dd10e1986e3b95ebf618ff42bdd7a74f0d0cc2cc8dab1048eb5fdbfb72cb16f9e2a196b512720cbfbb4696f291200a153c383cc441091c62649a88ef173a42eced93a374e4f0a078244e56c14b3c4cc9625b3e9e1853839ecb00d6cfc2d2398634935aedd9a545e4b13895a3b8b05c8fca9af2bba82762db85a449f5d9c6ff87b724f19dc1805eca58445e67782a30f03e7b1272685ab8306c255604360b0d6e53cc443b0b81bcf92b470b8734b7b7b2ccf2d51fc1a8b43d8dba290e875f35b0bdb66790a3bb4d8391c5fdde5f461b5922c56f8a858865c0fd8b39cb79e8e182342ef0398641ca3c76620482705878ff0d9fe2eaae18a8ad73313663e36feca9bae81834482bb19c651e273bc04333963f2a64d516761280db45fc4217b5c2ab73a8a04c5d2c2aced37bb2825d17f68c4d65dfcc54057a46f045bf435391b7304ee376977220e71e97919cd67e3f0f0f63e0dcee8d90d80ead12a5eda22db217bd362c1a4f9244c99da91d618c6b71b21ed80826d4df95aee10786e61b3141002e342490f2d842051305d2e8d41aca580a13cd48a850eada7dfee4bda67a5491acf4cfdd3919135e7b113a1973595b99d6ba152ae8cc63fd95c1d7d4a59b038c426ffdb949fe1a6004df2bbae2acce3f5720419dc597229f2d120c689b07a344e75f4c631d83b3130cc927412daa9607c8c0fa254cde27306360a9a5d18ff9d4d4ed38162a5202ba214db4486887b5831d727bd93e6e7cddfa4d3480cb3b4683b1de52bdff534016719324051f81bdf49a5c12dd7b389107b3eb5dc4858caebe8c0a9866ff632deebc16492f95d202ce0f454476ab77871d3188ec83fc74f2ec1055893b2a138cce27ac5553c5496cbf147002a9c55fdb202969a4802ca3556453a58d2aa8e19f40e577fa280625468d385af8659a0f3ab69fabf4fa1326f7a7ebad98a23958c91f28c4b03ff9f343b6ecdb82e820bcb7de6f51d0fcfbbcef902d21a7eed03ea125363b758085022ade27451ba5e0acd9a0044ec50571d234855448be132e14517ae38b798482cc07e1c009c1a4cdd5c42f3862dd6d4c3b18f9c41d0bf5b709d742877ef7ee6d9932c6d7a9fd09bede9f80645a5c4b97ae48734985131f948bf20e93f82b93d6e69479491158d83655244d91bb5e9dfdf103e2238a95a92f35750769b87dce1d0e8bac4e6ee5467f9800a12fe27a2c8f727bbda617899ca26d13ec3b68b4acd7200b3206852aafb13c94681413ee7d0987f4d067b4bc5fc5e01ebe9bdbfc0198232f92da3371d12023388f86a4bb4db9bd559570aef27a96812dd2583c72732922266b98c89c264311577621ceb2625dac0af0fd08f5c27a658645777cb36d687d6f0e6835587cbe65ed922cbd1190b1d60259024be61e7e32b1ecb5e72799103c3a3ea91191667418fedf79d839200ee75da4d68fd6facdd1243f30727c40c6a7c4ffa3d937f4c21b076d146f439d8961258526d56336f7d94e945f90053ef865dd9f939b12d8b6b72b1f20a050b69b8a3b8bc88584766bf9783116c8fc8c4883f8dca31dbfd2775675d868136e5f5e16e3508986750fa8825231fed43ae2b444f5992011f0b80b1f3b0e397ff98fe81da3bd00593329f3014315fb4828fdfec77c8f3c8a92278866f7d299f9a0818e36d1bbad629a61345e01e495dfc4412fcc8b64eac5259de21dae5f5b34c06ee81c0e46b12203b639cfef7f12871287abca6b2f70ffa2cb225585bfbf2c0cd010bdd1b2b3f560016e4db6c30a26e517b608633aa40ab1802da8e94188bad14ab007e415ec41c3dabf4d2817a43a082313529e4a80596807b785af9391117f780db637f2214bb8082373303da889ffd89fa43f4cca427b43e3c17942d314a577112cfb31e841ae40fd18220e9aaa24e382936c0b859a3a425c2018b093e42648b7517dcce9af1366dc5ea8fd575001cbe880ddbb0a768033ee3802c68c4b2fc290fcb84f1e33318543fd2ddf065503c0767c86fcde6931797f275ee4c149d616ff02a9a019c223c16cfd6e618b07c7bd8009d3201a92b91a0944ff21d71ffc53c39b7a318c6451d80b05f9d9c81fd1a78ef35e14cbebc1b4e2de28039301042c0fa09ad2e43d5f78ab4104218bab2da5034050bbf625c6803496dd3d77b574aed51badd3e9967548014b8b318dfb2e0a6ce6637cee786806ec06b359d6569c65df2e538b43862be27d4ddb2710447ed7e56cb4a02779c8767e11056cfaca1ab1aea20d4198a050e98695ae3f2a0aadb5b34b6b945379b81259ebe7abe6d3ca23cae048429b6c850813706f59231034fce07c4111961193d581e3bbbd6c9afd8b3d1e0604807dbd880d2ccc5266818a18287e8c4bda311be83c6f1c5e7f571b9f5ab1f84f8252df9d62f75865adcdd61eaaf7df4cbdd994ab17d2d5d684f95715d4636a6cb69fa2619c6b76ee060202a0a8c934aa537d2c5cf736142349b19fb9b532b05e6dff05c4c635f4134bcc0ef2e38c3fd75d8664d7dfa3139e1b2c2cbbdbe4fc0e2e80870ade368b730d4c06946b608088991f346765afaad6765e5a16267b2d249ee22ea1c6cb85d5d0f8ee48204a5dc48ae6415e3802fd8a431d249f95c72f6895978b36c424e40f83dfe1d0ca01dca14c4a308e926fe726ea0b456dcd976147e61744675f81f38bd5ef06ed76692ac8ac03744c8dc313f06aa28832a3286e626d5e29c748c21164475c739d3f6c6ad046fbb1a149867faf770c089b3513a0649d787208f06e7db6f8a44a9e32c6bd8dd9cca53bcd8ba7ec49d4068d7018b4c8fbd13070f9b0d02d3686b54f96a21e74e346c380a99f21f33925d4a39d510842ed84f2605a15051a784d8216364c2f8ec79f7884ec151ac56d11e30e058d2c49998147c1d54e04aea5d2e9bcc5bf051690d7aa905fdd68528309afda3fd5920cecfae73f6d5f8962e647f5e909748ff9105097118feecf28d6d514ede8cb2d4201da6efc9f3c24893570b227dfe673158e6c17bfcd91625bc4f87eb6fc67e5b647b18231da1da165220815b24431144fc05e1e207e12dbd9e26254d61bc9f47e4ec7e5e19a58ea2444e97a6daf57c895ec35c497d84e2f0c2e520e123f3cadf380a7e54836f7b5a9ba24b1bbe690b7f3de459adbe4d80a648ac2d8158e8b0948ea6ec4b8ac3ce4dafc8ed0f709c13a5ada9fa6c254b57e3cc83411e26dacb6aee290ced0bd65f18884b33dfd1229acd273f97d3edf7673747193ececc83e9ba1e1a73ceb8c347ac88333308df5e4d9ea133e2c6fa4bb1489980cf8ce20201bbba6334936fbc6bb7e6495ba48a3648fe57a0957de758182d3248601ab2bc9d2edf826255d5774021ae4d5d7f87a18927ac866b24e9fa2ca4fb5623c9e0ccbe491a61566f5f649047f97db9cea177ce08ec58c28e7e174f427b38c2e3c2d7165b321eeffe4fc03e8acc2c0ba7520699e8f6480261de487e33d3169790024cec06e3d776c98ccbc5da2ec0032c8241bedea3db12687a82e1eafa4ff828f5347e8ae0b22bcfa5de853d05381a04e8eb953a54c5ebb528bc03d4f7d74b1741f7833a7b90456ff847619b5893bd1515ed87cfd9aa44208572d1578849d5e7310b29e4a5af6026d9d5d2d6c18cc222fa375bc756e86d30a673420c4ac99c0b0a6baadd5bb53bf161074e85b105d5c8f704ea4fef269b3e2d62dc9e494393957a9aba76d7a7c79a1f37a9c0b20a69c47f74b489a8d60bb017272497f2cc7e3dd85a6622c0c1038978ca44170229f1ef25d11d2757940a5b6d35eab977937a5cccfb979dd79accb86476ae7da6fa96527a0ad6a7613c9008fd3cb2cbf81d7be93304dab9059c38cb54a191118bdf39148f6a7e44eca45272a3a2f1812ab6ac72f3009c235abcfe300a5599340b7baa1d6b07797a8fc29533b1d39b24642a867cc188327927d224045bb65e47238f7e260dbe81e2fdd8dac3f3da3724817975e008e0ccbfd958fec78f01cd6cf9d46594513d8a67c9ff5d1f745a7b1b82ee0d1b0babcbea6d4334f8f474c0f1d438d80da71e1158865621613cb9eb1b08f224fca3c26ed879fb13a7148d7a65ea7d2364b71568e2b56e7ab492866ff1d9f0d83647682fd3a31ca4c3735ed4accb26d45e9b26f80856a287fdd42a12de98d1b5d4f2278dd78a8b287a18d8edd003d338049214faef3d6c17b3117da3e1c60715480e1739b52ac39265803d5d6019559d028bbc2c874071c021c581458c67aea919e14db399a54314b1d734eaeafee4844ee9c208887b1c4b7c475997146ccd5f6df48262ab997fc0e5f3ef5e68506fd1d9835b7028c22933024dd9ea325dbb1f8172f9c564b973a1668fb8b566e484a6f821c7bf709aecc0794a71ecc8bcf2fd5ac8d0c76b19f4ce02fefa9780549df3f606a0e520b059f95cb4f749b8c9204f1a052a588ce8ccc519a89e5444aec50739e92a914782bd1c991ae6e403aec0655570e1f90d921695548a645c317d9c13d36da32f86bb104d4b36b66b1e766731dfca460354bd9194e90523afc4e36d9aadd8dc777cfe26c955dcf57736139668b29f4c8ad197050737ebba3d55eb30cc94bdc3a1e28c3573a98ca4d5502d9893755cf2dfec4843fa39eb0a9948b6589eceebfe750b2db0", 0x3eff}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000ade46e36f6ff9c7b38299019db0071dba0c7b034d4f37438d502ad238e8ead24822492a5506049f6bc777a4edef7f1efaa2d087d46bd8c658f69d1949e1dbe11d3def83e14b69ca4b3f419623ec98f03784d08dd2f23c6b5f2871154e85c5138dec112174e0cd89b6239210a3c8e3d356468e0b0f3f7d5cc5a40cf95925ed83be6942680f119eae3acd4b72ba7dd59a608a7597fca5dd41ad160bd"], 0x60}, 0x0) executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x8, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) executing program 0: unshare(0x20000400) socket(0x18, 0x0, 0x2) bind$rds(0xffffffffffffffff, 0x0, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000140)) executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r1}, &(0x7f0000000500)=0x8) executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) [ 215.861555][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.916594][ T8711] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000500)='ext4_allocate_blocks\x00', r1}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c000280080003000100000008000600000000000800"], 0x4c}}, 0x0) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00'}, 0x18) [ 216.119046][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.127126][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3101}) ioctl$TUNSETNOCSUM(r2, 0x8923, 0x20000000) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000400), &(0x7f0000000600)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) write$cgroup_pid(r3, 0x0, 0x2) [ 216.378013][ T8707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.418338][ T8707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.554933][ T8707] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.565690][ T8707] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.579511][ T8707] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.588440][ T8707] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x7fdf, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) [ 216.667889][ T8715] netlink: 'syz-executor.1': attribute type 6 has an invalid length. executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x12) write$cgroup_pid(r2, &(0x7f0000000340), 0xfdef) [ 216.820171][ T8726] : renamed from ipvlan1 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000300)='ext4_fc_commit_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='ext4_fc_commit_start\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x42400) executing program 2: unshare(0x20000400) socket(0x18, 0x0, 0x2) bind$rds(0xffffffffffffffff, 0x0, 0x0) executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000085af660600000000000018110000ed8135ffc145013eaff161686ad2b3689ee5d9af2ec76e1ea556c1666ade6cda719e00c746d72290e49fe97fc4ae075b2f44e950936921221ccf1990ef1cd9013bc16503"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000009c0), 0x1000, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000001200)=""/119, &(0x7f0000000440), &(0x7f00000007c0), 0x7, r0}, 0x38) executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r1}, &(0x7f0000000500)=0x8) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000020007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000005c0), 0x6, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='ext4_ext_remove_space\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000340)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x9, 0x4002, 0x7, 0x0, 0xffffffffffffffff, 0x9}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00', r2}, 0x10) executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) [ 217.086958][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)='%pK \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r3}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') [ 217.138511][ T8745] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000f1ff18110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_evict_inode\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='ext4_evict_inode\x00', r1}, 0x10) unlink(&(0x7f0000000000)='./cgroup\x00') executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c000280080003000100000008000600000000000800"], 0x4c}}, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r1}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x3, 0x8}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_es_remove_extent\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='ext4_es_remove_extent\x00', r3}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3101}) ioctl$TUNSETNOCSUM(r2, 0x8923, 0x20000000) executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) [ 217.433931][ T8761] : renamed from ipvlan1 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r1}, &(0x7f0000000500)=0x8) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='ext4_fc_commit_stop\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='ext4_fc_commit_stop\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x42400) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) [ 217.557816][ T8766] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 217.586852][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) executing program 0: r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340), 0x208e24b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) [ 217.605913][ T8771] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) creat(&(0x7f0000000140)='./file0\x00', 0x21) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x2, 0x100, 0x3f, 0x8a4, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48) mmap(&(0x7f0000f9f000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x4, 0x82011, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendfile(r4, r3, 0x0, 0x10001) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00040008000300", @ANYRES32=r8, @ANYBLOB="2f00330040000000080211000000080211000001505050505050"], 0x4c}}, 0x0) executing program 3: syz_emit_ethernet(0xaa, &(0x7f0000000380)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x70, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @empty, [@hopopts={0x3a, 0x6, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x81, 0x5, 0x8, 0xfffffffffffffffc]}}]}]}}}}}}}, 0x0) executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000de"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000", @ANYBLOB], 0xb8}}, 0x0) executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x1db6) [ 218.086492][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.127811][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.164694][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 0: socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000140)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x2, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, 0x0, 0x0}, 0x20) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendfile(r1, r0, 0x0, 0x10001) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000004c0)=ANY=[], 0x0) [ 218.195055][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.203087][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000200), 0x4) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r1}, &(0x7f0000000500)=0x8) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) [ 218.644495][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.654642][ T8786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) [ 218.702201][ T8786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000020c0)=ANY=[@ANYBLOB="c02104"], 0x4) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000044000000080003", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) [ 219.080357][ T8786] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.096101][ T8786] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.105317][ T8786] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.114949][ T8786] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) executing program 3: syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r1}, &(0x7f0000000500)=0x8) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000018001108000000000000000002000000fd00fe020000000008000400", @ANYRES32=r2, @ANYBLOB="08000700fe"], 0x2c}}, 0x0) executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) bpf$ITER_CREATE(0x22, &(0x7f0000000040)={r3}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 1: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB='\b'], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000010401010000000000000000000000000a0002"], 0x20}}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000044000000080003", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) executing program 1: r0 = memfd_create(&(0x7f0000000700)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOE\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sRG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a\xddJ\x9f\xc0\xf9\xfdm9\x84T\xd4#,\xe1W\\K\xa36\r\x04\x87\xf2\x16\x8b\x967\x11MR\xcc\xf4\xa8\x92\xdb\x94&R\xc2Q\xb9\x19\xdc\xa5\x88\a\xda\x1c\xf2\xab\x19\x00\xb12\xcb\x06X', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x800000b) setxattr$system_posix_acl(&(0x7f0000003700)='./file0\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfffffe89, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = memfd_create(&(0x7f0000000640)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x8c*\x91R\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d`+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x82Xa2fo\x7f\x92G\x0e.\xce\x01\x00\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x03D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\xab\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x92\x03\v\xf4@\x86\x1d\xc8&^Q\xcf&\xf2\x9f\xf4\x83\xac]S\xce\xa55\x98\xa5\x97\xb3\xa6\r:L\x10\xb3;\x18G\r\xd8\xee4\xa3\xacI\xfc\xf6a\xde\rL\xcb\xbbE\xfe&&xL\xc49\x02\xe8A\x91\xfd\x15\xaeY:^E^>a\xd8\xdcJu\x16B!\x0et\xf0c\xc3W\x9c\xb8\xc2c\xbc\x99\xcb\x91xA2^\xe3\xfeq\xac2X\xd1\x1cG\x1b\xe0\x8d\x1a\x11\xddX\x16H\xae\x00#\x92\nW9C\v\xbf\xe7Q\xe7\x06\x81v\x15Y\x1bY\x0f+b\xb5\xa63\xc4\x1bx\xfd< \a\x01\x00\x00\x00^f\x11]&\"\xd5\x84/\xab\xac\xeaB\xa2V3\xdd.\x8c\xe0\xb8\xf8\x8c\xf4\r\t\xb1\xa9)$\xf5\x1d\x87\x1aJ\x1b\xf3\xefj\xac\xf3\a\xdc\x9a\x05\x14\xa6\xc1\xe9\xe1\xab\xb7\xe0\x95\xa0U\xa1\x1e\xb5\xc5gw\x9cpk4\'en\xc28\xd2\x00\x00\x00\x00&\x82\xe9:;\xa9(xf\x9b\xd3a\x15\xb4W\"Y\x8f5Q\x13R\x84\x83H\xb2n\xbc\\\x11\xd4\xb4}O*\xab6\xf5Ym\xe3\xdf\x17\xcc\xb0o9\xff\xe7G\x0e\x1d\xfcH\xe9J\xeefu\x04\xfb\x9b\xc1\xfa\xff\x03\x00\x00\\\xb8\xbdNX\x1e\x97\x911m\xa3\x15\x8e_\xda\x8f\x06\x8fA^\xc2\x05\xf4\x8b\x02[\xa4jR\x96%&\xdf\xf9c\x8a4\x00\xa4tA\n\xfb\x7f\xf1S\xfd<\v\x18\xeb\xfb\xd6\xcb:\xbb\xb0\xe6,\x89\vcU\x00\x1e\xa0\x8b\xae\xe3M\xa6l\x15\x9c\x96\xf6\xbeXU\x17,\x94\x97\f\xfb', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x400000c, 0x11, r0, 0xb8e76000) fallocate(r0, 0x0, 0x0, 0x8008007) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x8901, 0x20000000) executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r1}, &(0x7f0000000500)=0x8) executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) ioctl$TUNSETDEBUG(r0, 0x5450, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 4: pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8904, &(0x7f0000000140)={'syztnl1\x00', 0x0}) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 1: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB='\b'], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000010401010000000000000000000000000a0002"], 0x20}}, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000044000000080003", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) executing program 2: r0 = socket(0x1d, 0x2, 0x6) sendmsg$NL80211_CMD_DEL_PMK(r0, 0x0, 0x0) executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, 0x0, 0x0) executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) executing program 3: r0 = memfd_create(&(0x7f0000000700)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOE\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sRG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a\xddJ\x9f\xc0\xf9\xfdm9\x84T\xd4#,\xe1W\\K\xa36\r\x04\x87\xf2\x16\x8b\x967\x11MR\xcc\xf4\xa8\x92\xdb\x94&R\xc2Q\xb9\x19\xdc\xa5\x88\a\xda\x1c\xf2\xab\x19\x00\xb12\xcb\x06X', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x800000b) setxattr$system_posix_acl(&(0x7f0000003700)='./file0\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfffffe89, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) executing program 4: r0 = memfd_secret(0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x38c2, &(0x7f0000000180), 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000200)="0e", 0x1) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r0, &(0x7f0000000340)=""/98, 0x62) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)) [ 221.558870][ T8878] __nla_validate_parse: 11 callbacks suppressed [ 221.558892][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 4: syz_open_procfs$namespace(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) [ 221.885396][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.893410][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.239328][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 222.243881][ T8873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.288931][ T8873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000de6a0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x58, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x4, 0x6, 0xfff, 0x1008, r5, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x200, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0x64, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x95}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x20008580}, @generic={0x81, 0x4, 0x5, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6}, @ldst={0x2, 0x3, 0x3, 0xa, 0x8, 0x18, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 2: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000001240)='!', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r0, 0x0) accept4(r0, &(0x7f0000000340)=@nfc, 0x0, 0x0) [ 222.473483][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.499608][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.521363][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 222.538095][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.580170][ T9] usb 4-1: config 0 descriptor?? executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "068d27a7"}]}}, 0x0}, 0x0) [ 222.737568][ T5170] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 222.738866][ T8873] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.762214][ T8873] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.775150][ T8873] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.794604][ T8873] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.909917][ T8873] bridge0: left promiscuous mode executing program 1: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a0000000000000109022d000100000000090400000503000000092100000001220500090581034000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) read$hidraw(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) [ 222.971488][ T5170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.979376][ T5189] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 222.983252][ T5170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.027229][ T5170] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 223.074207][ T5170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.102509][ T5170] usb 1-1: config 0 descriptor?? [ 223.195286][ T5189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.208737][ T5189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.225549][ T5189] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 223.235566][ T5189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.253674][ T5189] usb 5-1: config 0 descriptor?? executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x337) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) [ 223.330192][ T5272] usb 2-1: new high-speed USB device number 15 using dummy_hcd executing program 2: pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f00000000c0)=0x139, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0xe8, 0x0) write$binfmt_aout(r1, 0x0, 0x120) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) [ 223.519595][ T5272] usb 2-1: Using ep0 maxpacket: 32 [ 223.528886][ T5272] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.548723][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.596442][ T5272] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 223.634274][ T5272] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800dd8d0000200000000000020000000000000600000600060015000100000018001680140001000000000000000100"], 0x3c}}, 0x0) [ 223.639044][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 223.674138][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) [ 223.721372][ T5189] wacom 0003:056A:0010.000E: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 223.740502][ T5272] usb 2-1: config 0 descriptor?? [ 223.789909][ T5189] wacom 0003:056A:0010.000E: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.4-1/input0 [ 223.816782][ T5189] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0010.000E/input/input17 executing program 2: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB='\b'], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000010401010000000000000000000000000a0002"], 0x20}}, 0x0) [ 223.833642][ T9] uclogic 0003:256C:006D.000D: v1 frame probing failed: -71 [ 223.852168][ T9] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 223.882057][ T9] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) [ 223.947272][ T9] usb 4-1: USB disconnect, device number 9 [ 223.979261][ T5170] hid (null): bogus close delimiter [ 224.035860][ T5189] usb 5-1: USB disconnect, device number 14 [ 224.221834][ T5272] ntrig 0003:1B96:000A.0010: unknown main item tag 0x0 [ 224.228777][ T5272] ntrig 0003:1B96:000A.0010: unknown main item tag 0x0 [ 224.239506][ T5272] ntrig 0003:1B96:000A.0010: unknown main item tag 0x0 [ 224.246612][ T5272] ntrig 0003:1B96:000A.0010: unknown main item tag 0x0 [ 224.259172][ T5272] ntrig 0003:1B96:000A.0010: unknown main item tag 0x0 [ 224.271721][ T5272] ntrig 0003:1B96:000A.0010: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 executing program 3: syz_open_procfs$namespace(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) [ 224.471691][ T5272] usb 2-1: USB disconnect, device number 15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) executing program 4: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000001240)='!', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r0, 0x0) accept4(r0, &(0x7f0000000340)=@nfc, 0x0, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x337) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) executing program 2: pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f00000000c0)=0x139, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0xe8, 0x0) write$binfmt_aout(r1, 0x0, 0x120) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a0101000000000000000002"], 0x28}}, 0x0) executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800dd8d000020000000000002000000000000060000060006001500010000001800168014000100000000000000010000001000"], 0x3c}}, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) [ 225.148375][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 1: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB='\b'], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000010401010000000000000000000000000a0002"], 0x20}}, 0x0) executing program 2: r0 = memfd_create(&(0x7f0000000700)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOE\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sRG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a\xddJ\x9f\xc0\xf9\xfdm9\x84T\xd4#,\xe1W\\K\xa36\r\x04\x87\xf2\x16\x8b\x967\x11MR\xcc\xf4\xa8\x92\xdb\x94&R\xc2Q\xb9\x19\xdc\xa5\x88\a\xda\x1c\xf2\xab\x19\x00\xb12\xcb\x06X', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x800000b) setxattr$system_posix_acl(&(0x7f0000003700)='./file0\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfffffe89, 0x0) executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) [ 225.381937][ T5170] usb 1-1: string descriptor 0 read error: -71 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x337) [ 225.452887][ T5170] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #200: -71 [ 225.505777][ T5170] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) [ 225.554046][ T5170] uclogic 0003:256C:006D.000F: failed probing pen v2 parameters: -71 [ 225.602809][ T5170] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 225.610916][ T5170] uclogic 0003:256C:006D.000F: probe with driver uclogic failed with error -71 [ 225.630032][ T5170] usb 1-1: USB disconnect, device number 9 executing program 4: pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f00000000c0)=0x139, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0xe8, 0x0) write$binfmt_aout(r1, 0x0, 0x120) executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, 0x0, 0x0) executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800dd8d000020000000000002000000000000060000060006001500010000001800168014000100000000000000010000001000"], 0x3c}}, 0x0) [ 225.927524][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB='\b'], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000010401010000000000000000000000000a0002"], 0x20}}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r0, &(0x7f0000000340)=""/98, 0x62) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)) executing program 1: syz_open_procfs$namespace(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371"}}}}}, 0x0) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) shutdown(r0, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x20000005, &(0x7f0000b63fe4), 0x1c) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000000000000000bbfe88000000000000000000000000000189"], 0xfce) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) [ 226.746448][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@llx}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000800)=@abs={0x1, 0x2}, 0x6e, 0x0}, 0x0) [ 226.805736][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) preadv(r2, &(0x7f00000024c0), 0x0, 0x2, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c01128009000100766c616e00000000fc0002800600010000000000580003800c000100ff010000030000000c000100ff0f0000060000000c00010006000000510100000c000100ab040000080000000c0001005b060000090000000c00010001000080030000000c000100020000000000ffff0c00020004000000020000000c000200540a000018000000100004800c0001000600000006000000700004800c00010000000100120001000c00010005000000680000000c00010005000000ee9500000c0001000300", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x13c}, 0x1, 0xba01}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, 0x0, 0x0) [ 226.933327][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.943648][ T8994] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 227.025834][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 3: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000001240)='!', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r0, 0xda8c) accept4(0xffffffffffffffff, &(0x7f0000000340)=@nfc, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x4000423) executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371"}}}}}, 0x0) executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000000000000000bbfe88000000000000000000000000000189"], 0xfce) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c01128009000100766c616e00000000fc0002800600010000000000580003800c000100ff010000030000000c000100ff0f0000060000000c00010006000000510100000c000100ab040000080000000c0001005b060000090000000c00010001000080030000000c000100020000000000ffff0c00020004000000020000000c000200540a000018000000100004800c0001000600000006000000700004800c00010000000100120001000c00010005000000680000000c00010005000000ee9500000c0001000300", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x13c}, 0x1, 0xba01}, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, 0x0, 0x0) [ 227.593447][ T9013] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.601411][ T9013] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.705998][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) preadv(r2, &(0x7f00000024c0), 0x0, 0x2, 0x0) [ 227.970440][ T9013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 228.048276][ T9013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x337) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x4000423) [ 228.325269][ T9013] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.338170][ T9013] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.360975][ T9013] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xd1, &(0x7f0000000000), 0x4) [ 228.385446][ T9013] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r3 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 228.523342][ T9027] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.537627][ T9027] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) shutdown(r0, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x20000005, &(0x7f0000b63fe4), 0x1c) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) executing program 4: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000001240)='!', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r0, 0xda8c) accept4(0xffffffffffffffff, &(0x7f0000000340)=@nfc, 0x0, 0x0) executing program 0: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) preadv(r2, &(0x7f00000024c0), 0x0, 0x2, 0x0) executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 228.777368][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x4000423) executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371"}}}}}, 0x0) [ 228.921242][ T9072] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c01128009000100766c616e00000000fc0002800600010000000000580003800c000100ff010000030000000c000100ff0f0000060000000c00010006000000510100000c000100ab040000080000000c0001005b060000090000000c00010001000080030000000c000100020000000000ffff0c00020004000000020000000c000200540a000018000000100004800c0001000600000006000000700004800c00010000000100120001000c00010005000000680000000c00010005000000ee9500000c00010003000000018000000c000100220b0000010000000c00010004000000010000000c00010006", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x13c}, 0x1, 0xba01}, 0x0) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000), 0x4) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x337) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000000000000000bbfe88000000000000000000000000000189"], 0xfce) executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r3 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x4000423) executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b"}}}}}, 0x0) executing program 0: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) preadv(r2, &(0x7f00000024c0)=[{0x0}], 0x1, 0x2, 0x0) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c01128009000100766c616e00000000fc0002800600010000000000580003800c000100ff010000030000000c000100ff0f0000060000000c00010006000000510100000c000100ab040000080000000c0001005b060000090000000c00010001000080030000000c000100020000000000ffff0c00020004000000020000000c000200540a000018000000100004800c0001000600000006000000700004800c00010000000100120001000c00010005000000680000000c00010005000000ee9500000c00010003000000018000000c000100220b0000010000000c00010004000000010000000c00010006", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x13c}, 0x1, 0xba01}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000), 0x4) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x337) executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r3 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000000000000000bbfe88000000000000000000000000000189"], 0xfce) executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) shutdown(r0, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x20000005, &(0x7f0000b63fe4), 0x1c) executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x4000423) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b"}}}}}, 0x0) executing program 4: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000001240)='!', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r0, 0xda8c) accept4(0xffffffffffffffff, &(0x7f0000000340)=@nfc, 0x0, 0x0) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000), 0x4) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x28}}, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c01128009000100766c616e00000000fc0002800600010000000000580003800c000100ff010000030000000c000100ff0f0000060000000c00010006000000510100000c000100ab040000080000000c0001005b060000090000000c00010001000080030000000c000100020000000000ffff0c00020004000000020000000c000200540a000018000000100004800c0001000600000006000000700004800c00010000000100120001000c00010005000000680000000c00010005000000ee9500000c00010003000000018000000c000100220b0000010000000c00010004000000010000000c00010006", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x13c}, 0x1, 0xba01}, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454d0, 0x337) executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)) r3 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) preadv(r2, &(0x7f00000024c0)=[{0x0}], 0x1, 0x2, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b"}}}}}, 0x0) executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x4000423) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000000000000000bbfe88000000000000000000000000000189"], 0xfce) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x28}}, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x13c}, 0x1, 0xba01}, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r1, 0x0, 0xd1, 0x0, 0x0) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)) r3 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454d0, 0x337) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) preadv(r2, &(0x7f00000024c0)=[{0x0}], 0x1, 0x2, 0x0) executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c"}}}}}, 0x0) executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) capget(&(0x7f0000000000)={0x20071026}, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c01128009000100766c616e00000000fc0002800600010000000000580003800c000100ff010000030000000c000100ff0f0000060000000c00010006000000510100000c000100ab040000080000000c0001005b060000090000000c00010001000080030000000c000100020000000000ffff0c00020004000000020000000c000200540a000018000000100004800c0001000600000006000000700004800c00010000000100120001000c00010005000000680000000c00010005000000ee9500000c00010003000000018000000c000100220b0000010000000c00010004000000010000000c00010006000000020000000c0001007fae000001de00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x13c}, 0x1, 0xba01}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x28}}, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000000000000000bbfe88000000000000000000000000000189"], 0xfce) [ 231.167263][ T9214] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r1, 0x0, 0xd1, 0x0, 0x0) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)) r3 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 0: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000001240)='!', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r0, 0xda8c) accept4(r0, 0x0, 0x0, 0x0) executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c"}}}}}, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454d0, 0x337) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}}, 0x0) executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x13c}, 0x1, 0xba01}, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[], 0x28}}, 0x0) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000000000000000bbfe88000000000000000000000000000189"], 0xfce) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1e03"], 0xffdd) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 231.777978][ T9254] __nla_validate_parse: 22 callbacks suppressed [ 231.777999][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = dup(0xffffffffffffffff) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x0, r1}) r3 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) preadv(r2, &(0x7f00000024c0)=[{&(0x7f0000000140)=""/178, 0x2}], 0x1, 0x0, 0x0) executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}}, 0x0) [ 232.009532][ T9266] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(0xffffffffffffffff, 0x0) link(0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c"}}}}}, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x13c}, 0x1, 0xba01}, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[], 0x28}}, 0x0) [ 232.193151][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1e03"], 0xffdd) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000000000000000bbfe88000000000000000000000000000189"], 0xfce) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 232.342266][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = dup(0xffffffffffffffff) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x0, r1}) r3 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x4000423) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x4000423) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x13c}, 0x1, 0xba01}, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}}, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x82940, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) utime(&(0x7f0000000340)='./file0\x00', 0x0) [ 232.590420][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 232.600586][ T9303] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) preadv(r2, &(0x7f00000024c0)=[{&(0x7f0000000140)=""/178, 0x2}], 0x1, 0x0, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[], 0x28}}, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x0) executing program 4: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000001240)='!', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r0, 0xda8c) accept4(r0, 0x0, 0x0, 0x0) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 232.748676][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, 0x0, 0xffdd) executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x4000423) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x4000423) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x13c}, 0x1, 0xba01}, 0x0) executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = dup(0xffffffffffffffff) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x0, r1}) r3 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) [ 233.038593][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002140)={0x20, 0x0, r3, {0x0, 0x0, 0x80003ff}}, 0x20) lstat(&(0x7f0000008800)='./file0\x00', 0x0) getdents(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008d00)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) fchmodat(r1, &(0x7f0000002180)='./file1\x00', 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r4}, 0x10) [ 233.183293][ T9341] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454d0, 0x0) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 233.309605][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, 0x0, 0xffdd) executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x4000423) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x4000423) executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) executing program 4: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) preadv(r2, &(0x7f00000024c0)=[{&(0x7f0000000140)=""/178, 0x2}], 0x1, 0x0, 0x0) executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, &(0x7f0000000500)) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, 0x0, 0xffdd) executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) [ 234.131133][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 234.148375][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 234.161922][ T5123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 executing program 4: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000001240)='!', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r0, 0xda8c) accept4(r0, 0x0, 0x0, 0x0) executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x4000423) [ 234.192577][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 234.205198][ T5123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 234.215028][ T5123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) [ 234.822096][ T9396] chnl_net:caif_netlink_parms(): no params data found executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 235.172517][ T62] bridge_slave_1: left allmulticast mode [ 235.178233][ T62] bridge_slave_1: left promiscuous mode [ 235.189387][ T62] bridge0: port 2(bridge_slave_1) entered disabled state executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0), &(0x7f0000000500)=0x8) [ 235.218121][ T62] bridge_slave_0: left allmulticast mode [ 235.239126][ T62] bridge_slave_0: left promiscuous mode [ 235.245048][ T62] bridge0: port 1(bridge_slave_0) entered disabled state executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x540d, 0x0) executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002140)={0x20, 0x0, r3, {0x0, 0x0, 0x80003ff}}, 0x20) lstat(&(0x7f0000008800)='./file0\x00', 0x0) getdents(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008d00)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) fchmodat(r1, &(0x7f0000002180)='./file1\x00', 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r4}, 0x10) executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x4000423) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0xffdd) executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="e8000000000000002c00128009000100626f6e64000000001c0002800800030001000000080006000000000008001c"], 0x4c}}, 0x0) [ 236.098225][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.107864][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.124215][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.133498][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.151156][ T5123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 236.158591][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.299302][ T5123] Bluetooth: hci3: command tx timeout [ 236.391113][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.408833][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.418992][ T62] bond0 (unregistering): Released all slaves [ 236.441116][ T62] bond1 (unregistering): Released all slaves executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x54}}, 0x0) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 236.558906][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.576856][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.599988][ T9396] bridge_slave_0: entered allmulticast mode [ 236.607213][ T9396] bridge_slave_0: entered promiscuous mode executing program 2: getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x1, "fa"}, &(0x7f0000000040)=0x9) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r0, 0x1ff, 0x80000001}, &(0x7f00000000c0)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r1, 0x2, 0x10}, 0xc) flistxattr(r2, &(0x7f0000000140)=""/246, 0xf6) finit_module(r2, &(0x7f0000000240)=')\x00', 0xf6e52af2d617a62e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000002c0)={r1, 0x803}, &(0x7f0000000300)=0x8) read$FUSE(r3, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000002380)={0x18, 0x0, r4, {0x6dfb}}, 0x18) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000023c0)={r0, 0x7}, &(0x7f0000002400)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002440), 0x2, 0x0) write$FUSE_INTERRUPT(r5, &(0x7f0000002480)={0x10, 0x0, r4}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000024c0), 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000002500), &(0x7f0000002540)={'U-', 0x5}, 0x16, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0), &(0x7f0000000500)=0x8) [ 236.643920][ T9396] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.651753][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.659267][ T9396] bridge_slave_1: entered allmulticast mode [ 236.667283][ T9396] bridge_slave_1: entered promiscuous mode executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a010100"], 0x28}}, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000de6a0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x58, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x4, 0x6, 0xfff, 0x1008, r5, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x200, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0x64, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x95}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x20008580}, @generic={0x81, 0x4, 0x5, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6}, @ldst={0x2, 0x3, 0x3, 0xa, 0x8, 0x18, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x4000423) [ 236.835054][ T9458] __nla_validate_parse: 5 callbacks suppressed [ 236.835075][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.852843][ T9458] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) write$FUSE_IOCTL(r0, 0x0, 0x0) lstat(&(0x7f0000008800)='./file0\x00', 0x0) getdents(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008d00)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) fchmodat(r1, &(0x7f0000002180)='./file1\x00', 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r3}, 0x10) [ 236.970244][ T9396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.033693][ T9396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000009c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 237.163775][ T5280] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 237.275593][ T9396] team0: Port device team_slave_0 added [ 237.392176][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.406203][ T9396] team0: Port device team_slave_1 added [ 237.416343][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.450966][ T5280] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 237.479168][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.525966][ T5280] usb 5-1: config 0 descriptor?? [ 237.545726][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.559907][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.598696][ T9396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.638625][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.646664][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.685533][ T9396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.705872][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.714682][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.758788][ T4488] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.770284][ T4488] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.779628][ T4488] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.792588][ T4488] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.812274][ T4488] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 237.826015][ T4488] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0xffdd) [ 238.229211][ T4488] Bluetooth: hci1: command tx timeout [ 238.315630][ T5280] hid (null): bogus close delimiter [ 238.379326][ T4488] Bluetooth: hci3: command tx timeout [ 238.640627][ T62] team0 (unregistering): Port device team_slave_1 removed [ 238.714206][ T62] team0 (unregistering): Port device team_slave_0 removed [ 239.014788][ T5280] usb 5-1: string descriptor 0 read error: -71 [ 239.035752][ T5280] uclogic 0003:256C:006D.0011: failed retrieving string descriptor #200: -71 [ 239.055923][ T5280] uclogic 0003:256C:006D.0011: failed retrieving pen parameters: -71 [ 239.064621][ T5280] uclogic 0003:256C:006D.0011: failed probing pen v2 parameters: -71 [ 239.073618][ T5280] uclogic 0003:256C:006D.0011: failed probing parameters: -71 [ 239.081362][ T5280] uclogic 0003:256C:006D.0011: probe with driver uclogic failed with error -71 [ 239.119608][ T5280] usb 5-1: USB disconnect, device number 15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 239.588561][ T9396] hsr_slave_0: entered promiscuous mode executing program 2: ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x406855c9, 0x0) [ 239.639639][ T9396] hsr_slave_1: entered promiscuous mode [ 239.659762][ T9396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.667384][ T9396] Cannot create hsr debugfs directory executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0), &(0x7f0000000500)=0x8) [ 239.899667][ T4488] Bluetooth: hci2: command tx timeout [ 239.928898][ T9447] chnl_net:caif_netlink_parms(): no params data found executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a010100"], 0x28}}, 0x0) [ 240.176007][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.226421][ T9503] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9, 0x0, 0x2, 0x0, 0x3ff, 0x4, 0x7fffffff, 0x1]}, @TCA_TBF_PARMS={0x28}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) [ 240.286010][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.299900][ T5123] Bluetooth: hci1: command tx timeout [ 240.307041][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.317620][ T5123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.327091][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.336375][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 240.349775][ T5123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0x4000423) [ 240.459331][ T5123] Bluetooth: hci3: command tx timeout [ 240.487836][ T9513] sch_tbf: burst 0 is lower than device lo mtu (65550) ! executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) [ 240.623217][ T9447] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.640695][ T9447] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.648123][ T9447] bridge_slave_0: entered allmulticast mode [ 240.673671][ T9447] bridge_slave_0: entered promiscuous mode executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000010401010000000000000000000000000a0002"], 0x20}}, 0x0) [ 240.745542][ T9484] chnl_net:caif_netlink_parms(): no params data found executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) write$FUSE_IOCTL(r0, 0x0, 0x0) lstat(&(0x7f0000008800)='./file0\x00', 0x0) getdents(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008d00)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) fchmodat(r1, &(0x7f0000002180)='./file1\x00', 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r3}, 0x10) [ 240.855117][ T9447] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.895888][ T9447] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.904127][ T9447] bridge_slave_1: entered allmulticast mode [ 240.928174][ T9447] bridge_slave_1: entered promiscuous mode [ 241.132816][ T9447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.145984][ T9447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.333410][ T9447] team0: Port device team_slave_0 added [ 241.343852][ T9447] team0: Port device team_slave_1 added [ 241.389240][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.396523][ T9484] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.404444][ T9484] bridge_slave_0: entered allmulticast mode [ 241.414076][ T9484] bridge_slave_0: entered promiscuous mode [ 241.550460][ T9447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.557454][ T9447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.590998][ T9447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.604413][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.612047][ T9484] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.624054][ T9484] bridge_slave_1: entered allmulticast mode [ 241.632243][ T9484] bridge_slave_1: entered promiscuous mode [ 241.714988][ T9447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.724753][ T9447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.752756][ T9447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0xffdd) [ 241.805276][ T9484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.882065][ T9484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 241.979270][ T5123] Bluetooth: hci2: command tx timeout [ 242.107199][ T9484] team0: Port device team_slave_0 added executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f00000039c0)) [ 242.300591][ T9484] team0: Port device team_slave_1 added [ 242.323787][ T9447] hsr_slave_0: entered promiscuous mode [ 242.338861][ T9447] hsr_slave_1: entered promiscuous mode [ 242.347057][ T9447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.363341][ T9447] Cannot create hsr debugfs directory [ 242.379243][ T5123] Bluetooth: hci1: command tx timeout [ 242.477732][ T5123] Bluetooth: hci4: command tx timeout [ 242.495703][ T9511] chnl_net:caif_netlink_parms(): no params data found [ 242.528714][ T4488] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.537843][ T4488] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.545089][ T5121] Bluetooth: hci3: command tx timeout [ 242.565217][ T4488] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.574904][ T4488] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.587181][ T4488] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 242.597698][ T4488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.688114][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.696670][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.724678][ T9484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.738761][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.746037][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.772364][ T9484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.822960][ T9396] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 242.834305][ T9396] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 242.892392][ T9396] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 242.981325][ T9396] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 243.138023][ T9511] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.146136][ T9511] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.153808][ T9511] bridge_slave_0: entered allmulticast mode [ 243.161284][ T9511] bridge_slave_0: entered promiscuous mode [ 243.187808][ T9484] hsr_slave_0: entered promiscuous mode [ 243.195332][ T9484] hsr_slave_1: entered promiscuous mode [ 243.203234][ T9484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.211343][ T9484] Cannot create hsr debugfs directory [ 243.254064][ T9511] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.261745][ T9511] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.268964][ T9511] bridge_slave_1: entered allmulticast mode [ 243.276530][ T9511] bridge_slave_1: entered promiscuous mode [ 243.391678][ T9511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.456062][ T9511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.565281][ T9511] team0: Port device team_slave_0 added [ 243.621025][ T9511] team0: Port device team_slave_1 added [ 243.667830][ T9547] chnl_net:caif_netlink_parms(): no params data found [ 243.706082][ T9511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.713371][ T9511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.740006][ T9511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.802696][ T9511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.810534][ T9511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.836756][ T9511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.936074][ T9547] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.944086][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.951754][ T9547] bridge_slave_0: entered allmulticast mode [ 243.958913][ T9547] bridge_slave_0: entered promiscuous mode [ 243.968439][ T9547] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.976345][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.983813][ T9547] bridge_slave_1: entered allmulticast mode [ 243.991828][ T9547] bridge_slave_1: entered promiscuous mode [ 244.034409][ T9547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.047601][ T9547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.059422][ T4488] Bluetooth: hci2: command tx timeout [ 244.194101][ T9547] team0: Port device team_slave_0 added [ 244.206100][ T9547] team0: Port device team_slave_1 added [ 244.218817][ T9511] hsr_slave_0: entered promiscuous mode [ 244.226753][ T9511] hsr_slave_1: entered promiscuous mode [ 244.236106][ T9511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.254141][ T9511] Cannot create hsr debugfs directory [ 244.278282][ T62] bridge_slave_1: left allmulticast mode [ 244.284444][ T62] bridge_slave_1: left promiscuous mode [ 244.290740][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.303489][ T62] bridge_slave_0: left allmulticast mode [ 244.314790][ T62] bridge_slave_0: left promiscuous mode [ 244.322578][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.333711][ T62] bridge_slave_1: left allmulticast mode [ 244.340516][ T62] bridge_slave_1: left promiscuous mode [ 244.346396][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.358354][ T62] bridge_slave_0: left allmulticast mode [ 244.364205][ T62] bridge_slave_0: left promiscuous mode [ 244.370505][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.383274][ T62] bridge_slave_1: left allmulticast mode [ 244.388932][ T62] bridge_slave_1: left promiscuous mode [ 244.395133][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.404852][ T62] bridge_slave_0: left allmulticast mode [ 244.410761][ T62] bridge_slave_0: left promiscuous mode [ 244.416469][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.469390][ T4488] Bluetooth: hci1: command tx timeout [ 244.546357][ T4488] Bluetooth: hci4: command tx timeout [ 244.619591][ T4488] Bluetooth: hci0: command tx timeout [ 245.133952][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.148498][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.158480][ T62] bond0 (unregistering): Released all slaves [ 245.173242][ T62] bond1 (unregistering): Released all slaves [ 245.191143][ T62] bond2 (unregistering): Released all slaves [ 245.296510][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.306902][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.317037][ T62] bond0 (unregistering): Released all slaves [ 245.330575][ T62] bond1 (unregistering): Released all slaves [ 245.345125][ T62] bond2 (unregistering): Released all slaves [ 245.366727][ T62] bond3 (unregistering): Released all slaves [ 245.473303][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.484615][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.494876][ T62] bond0 (unregistering): Released all slaves [ 245.509699][ T62] bond1 (unregistering): Released all slaves [ 245.524072][ T62] bond2 (unregistering): Released all slaves [ 245.538669][ T62] bond3 (unregistering): Released all slaves [ 245.557307][ T62] bond4 (unregistering): Released all slaves [ 245.694431][ T9547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.711752][ T9547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.750681][ T9547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.873842][ T9547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.886352][ T9547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.949183][ T9547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.141928][ T4488] Bluetooth: hci2: command tx timeout [ 246.172051][ T9547] hsr_slave_0: entered promiscuous mode [ 246.190081][ T9547] hsr_slave_1: entered promiscuous mode [ 246.196912][ T9547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.213547][ T9547] Cannot create hsr debugfs directory [ 246.484619][ T9396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.619248][ T4488] Bluetooth: hci4: command tx timeout [ 246.699464][ T4488] Bluetooth: hci0: command tx timeout [ 246.821619][ T9396] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.880646][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.887844][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.977323][ T9447] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.999993][ T9447] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.090580][ T9447] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.112067][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.119277][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.169272][ T9447] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.234519][ T62] hsr_slave_0: left promiscuous mode [ 247.248882][ T62] hsr_slave_1: left promiscuous mode [ 247.267909][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.286337][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.302587][ T62] hsr_slave_0: left promiscuous mode [ 247.321411][ T62] hsr_slave_1: left promiscuous mode [ 247.327743][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.336346][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.362319][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.383157][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.004858][ T62] team0 (unregistering): Port device team_slave_1 removed [ 248.091202][ T62] team0 (unregistering): Port device team_slave_0 removed [ 248.699575][ T4488] Bluetooth: hci4: command tx timeout [ 248.779588][ T4488] Bluetooth: hci0: command tx timeout [ 248.988395][ T62] team0 (unregistering): Port device team_slave_1 removed [ 249.034187][ T62] team0 (unregistering): Port device team_slave_0 removed [ 249.727702][ T62] team0 (unregistering): Port device team_slave_1 removed [ 249.773731][ T62] team0 (unregistering): Port device team_slave_0 removed [ 250.298190][ T9396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.488727][ T9396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.629737][ T9484] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 250.655093][ T9484] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 250.747319][ T9447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.768349][ T9484] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 250.800092][ T9484] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 250.859452][ T4488] Bluetooth: hci0: command tx timeout [ 250.980585][ T9447] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.006477][ T9396] veth0_vlan: entered promiscuous mode [ 251.103351][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.110564][ T5189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.147434][ T9396] veth1_vlan: entered promiscuous mode [ 251.161853][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.169023][ T5189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.384293][ T9447] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.394858][ T9447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.459769][ T9396] veth0_macvtap: entered promiscuous mode [ 251.505980][ T9396] veth1_macvtap: entered promiscuous mode [ 251.557268][ T9484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.586003][ T9447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.662755][ T9484] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.682880][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.718959][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.726232][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.746660][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.810576][ T9396] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.825052][ T9396] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.834668][ T9396] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.849279][ T9396] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.863481][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.870790][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.915603][ T9447] veth0_vlan: entered promiscuous mode [ 251.931354][ T9447] veth1_vlan: entered promiscuous mode [ 251.938173][ T62] bridge_slave_1: left allmulticast mode [ 251.946332][ T62] bridge_slave_1: left promiscuous mode [ 251.954310][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.963290][ T62] bridge_slave_0: left allmulticast mode [ 251.968938][ T62] bridge_slave_0: left promiscuous mode [ 251.974973][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.256337][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.271088][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.283441][ T62] bond0 (unregistering): Released all slaves [ 252.298952][ T62] bond1 (unregistering): Released all slaves [ 252.314154][ T62] bond2 (unregistering): Released all slaves [ 252.340832][ T9511] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 252.432441][ T9511] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 252.464520][ T9511] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.475881][ T9511] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.726552][ T9447] veth0_macvtap: entered promiscuous mode [ 252.871815][ T9447] veth1_macvtap: entered promiscuous mode [ 252.879484][ T9547] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 252.959965][ T9547] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 252.983780][ T9547] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.010691][ T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.021105][ T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.076597][ T9547] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.108783][ T62] hsr_slave_0: left promiscuous mode [ 253.120028][ T62] hsr_slave_1: left promiscuous mode [ 253.132672][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.141367][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.466516][ T62] team0 (unregistering): Port device team_slave_1 removed [ 253.512028][ T62] team0 (unregistering): Port device team_slave_0 removed [ 253.947286][ T5280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.965912][ T9484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.969102][ T5280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.987016][ T9447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.001023][ T9447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.018339][ T9447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.053551][ T9447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.065068][ T9447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.083904][ T9447] batman_adv: batadv0: Interface activated: batadv_slave_1 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000000000000000bbfe88000000000000000000000000000189"], 0xfce) [ 254.183136][ T9447] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.195194][ T9447] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.206269][ T9447] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.215785][ T9447] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.278383][ T9511] 8021q: adding VLAN 0 to HW filter on device bond0 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r1}, 0x0) [ 254.396566][ T9511] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.436333][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.443585][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a010100"], 0x28}}, 0x0) [ 254.523750][ T9484] veth0_vlan: entered promiscuous mode [ 254.561833][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.577031][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.591129][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.596233][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.598283][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.610978][ T9660] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9, 0x0, 0x2, 0x0, 0x3ff, 0x4, 0x7fffffff]}, @TCA_TBF_PARMS={0x28}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) [ 254.722303][ T975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.731224][ T9484] veth1_vlan: entered promiscuous mode [ 254.740023][ T975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0x4000423) [ 254.777512][ T9662] sch_tbf: burst 0 is lower than device lo mtu (65550) ! executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000010401010000000000000000000000000a0002"], 0x20}}, 0x0) [ 254.972993][ T9484] veth0_macvtap: entered promiscuous mode executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) write$FUSE_IOCTL(r0, 0x0, 0x0) lstat(&(0x7f0000008800)='./file0\x00', 0x0) getdents(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008d00)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) fchmodat(r1, &(0x7f0000002180)='./file1\x00', 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r3}, 0x10) [ 255.061919][ T9547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.074716][ T9484] veth1_macvtap: entered promiscuous mode [ 255.095126][ T9511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.147714][ T9547] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.187621][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.201260][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.214049][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.225007][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.241427][ T9484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.256444][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.263672][ T5114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.278098][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.290237][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.301546][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.313391][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.325587][ T9484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.346180][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.353392][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.401094][ T9484] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.410604][ T9484] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.420846][ T9484] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.430305][ T9484] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.462347][ T9511] veth0_vlan: entered promiscuous mode [ 255.497338][ T9511] veth1_vlan: entered promiscuous mode [ 255.518905][ T9547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.533150][ T9547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.652774][ T9511] veth0_macvtap: entered promiscuous mode [ 255.696331][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.710784][ T9511] veth1_macvtap: entered promiscuous mode [ 255.716799][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.748589][ T9547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.787074][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.803145][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.813816][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.825653][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.837097][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.850196][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.863632][ T9511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.884499][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xffdd) [ 255.897278][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.910538][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.921081][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.931519][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.942212][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.960952][ T9511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.988502][ T5163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.008596][ T5163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.063745][ T9511] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.076615][ T9511] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.086546][ T9511] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.095904][ T9511] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000009c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 256.142908][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.149482][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) sync_file_range(r0, 0x1, 0xb2, 0x0) r1 = dup(r0) r2 = mq_open(&(0x7f0000000100)='-.(\x00', 0x40, 0x40, &(0x7f0000000140)={0x7fffffffffffffff, 0xdc4b, 0x26}) dup3(r2, r1, 0x0) [ 256.276898][ T9547] veth0_vlan: entered promiscuous mode executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000000000000000bbfe88000000000000000000000000000189"], 0xfce) [ 256.336205][ T9547] veth1_vlan: entered promiscuous mode [ 256.433456][ T975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r1}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a01010000000000"], 0x28}}, 0x0) [ 256.598745][ T975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.668232][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.686512][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.725520][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.748514][ T9547] veth0_macvtap: entered promiscuous mode [ 256.760523][ T9687] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9, 0x0, 0x2, 0x0, 0x3ff, 0x4]}, @TCA_TBF_PARMS={0x28}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) [ 256.812116][ T975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 256.875748][ T9689] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 256.948786][ T975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.990246][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.991323][ T9547] veth1_macvtap: entered promiscuous mode [ 256.998086][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0x4000423) [ 257.069744][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.085462][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.096238][ T5123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 executing program 2: ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x406855c9, 0x0) [ 257.120154][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.132071][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.142998][ T5123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 257.156659][ T5123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 executing program 2: r0 = socket(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) [ 257.229157][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.248068][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.258664][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, 0x0, {0x0, 0x0, 0x80003ff}}, 0x20) lstat(&(0x7f0000008800)='./file0\x00', 0x0) getdents(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008d00)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) fchmodat(r1, &(0x7f0000002180)='./file1\x00', 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r3}, 0x10) [ 257.269829][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.280469][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.290339][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.300834][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.314223][ T9547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.363863][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.395042][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.412434][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.425009][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.436855][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.451821][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.462236][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.474493][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.486965][ T9547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.502935][ T9547] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.511802][ T9547] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.521092][ T9547] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.531248][ T9547] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.648623][ T975] bridge_slave_1: left allmulticast mode [ 257.655380][ T975] bridge_slave_1: left promiscuous mode [ 257.668186][ T975] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.682753][ T975] bridge_slave_0: left allmulticast mode [ 257.688573][ T975] bridge_slave_0: left promiscuous mode [ 257.695858][ T975] bridge0: port 1(bridge_slave_0) entered disabled state executing program 2: r0 = socket(0x29, 0x80005, 0x0) sendmsg$xdp(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24000000) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xffdd) [ 258.119458][ T975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.158849][ T975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 258.180157][ T975] bond0 (unregistering): Released all slaves executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000000000000000bbfe88000000000000000000000000000189"], 0xfce) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a01010000000000"], 0x28}}, 0x0) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9, 0x0, 0x2, 0x0, 0x3ff]}, @TCA_TBF_PARMS={0x28}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 258.909291][ T5189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.917264][ T5189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.925489][ T9728] sch_tbf: burst 0 is lower than device lo mtu (65550) ! executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x104c, &(0x7f0000001440)) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) close(r1) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0x4000423) [ 259.131375][ T975] hsr_slave_0: left promiscuous mode [ 259.137640][ T975] hsr_slave_1: left promiscuous mode [ 259.148270][ T975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.156022][ T975] batman_adv: batadv0: Removing interface: batadv_slave_0 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_FSSETXATTR(r1, 0x5452, &(0x7f0000000040)) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) truncate(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x541b, 0x0) [ 259.174450][ T975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.196278][ T975] batman_adv: batadv0: Removing interface: batadv_slave_1 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0xa0028cf0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) [ 259.259891][ T4488] Bluetooth: hci3: command tx timeout [ 259.295855][ T975] veth1_macvtap: left promiscuous mode [ 259.301889][ T975] veth0_macvtap: left promiscuous mode [ 259.307776][ T975] veth1_vlan: left promiscuous mode [ 259.313478][ T975] veth0_vlan: left promiscuous mode [ 259.591415][ T5123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.614470][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.627159][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.638193][ T5123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.646262][ T5123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 259.654057][ T5123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.971659][ T975] team0 (unregistering): Port device team_slave_1 removed [ 260.017430][ T975] team0 (unregistering): Port device team_slave_0 removed [ 260.499883][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.539514][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.585239][ T9699] chnl_net:caif_netlink_parms(): no params data found executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f00000039c0)) executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, 0x0, {0x0, 0x0, 0x80003ff}}, 0x20) lstat(&(0x7f0000008800)='./file0\x00', 0x0) getdents(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008d00)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) fchmodat(r1, &(0x7f0000002180)='./file1\x00', 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r3}, 0x10) [ 260.862746][ T9699] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.876667][ T9699] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.884046][ T9699] bridge_slave_0: entered allmulticast mode [ 260.892785][ T9699] bridge_slave_0: entered promiscuous mode [ 260.901718][ T9699] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.908867][ T9699] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.919211][ T9699] bridge_slave_1: entered allmulticast mode [ 260.926697][ T9699] bridge_slave_1: entered promiscuous mode [ 260.983693][ T9699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.008139][ T9699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.131694][ T9699] team0: Port device team_slave_0 added [ 261.215904][ T9699] team0: Port device team_slave_1 added [ 261.304731][ T9699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.337976][ T9699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.364836][ T5123] Bluetooth: hci3: command tx timeout [ 261.371855][ T9699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.390893][ T9747] chnl_net:caif_netlink_parms(): no params data found [ 261.416710][ T9699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.436707][ T9699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.469488][ T9699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xffdd) [ 261.613251][ T975] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.723931][ T9699] hsr_slave_0: entered promiscuous mode [ 261.730851][ T9699] hsr_slave_1: entered promiscuous mode [ 261.739601][ T5123] Bluetooth: hci2: command tx timeout [ 261.775154][ T975] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.895311][ T975] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.928902][ T9747] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.937770][ T9747] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.948741][ T9747] bridge_slave_0: entered allmulticast mode [ 261.956395][ T9747] bridge_slave_0: entered promiscuous mode [ 262.007026][ T975] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.024942][ T9747] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.032919][ T9747] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.041352][ T9747] bridge_slave_1: entered allmulticast mode [ 262.050942][ T9747] bridge_slave_1: entered promiscuous mode executing program 4: r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x7d, 0x0, 0x0) [ 262.112174][ T9747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.157924][ T9747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.240486][ T9747] team0: Port device team_slave_0 added [ 262.280689][ T9747] team0: Port device team_slave_1 added [ 262.437005][ T9747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.444248][ T9747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.474448][ T9747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.537690][ T9747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.545358][ T9747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.574125][ T9747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.755113][ T975] bridge_slave_1: left allmulticast mode [ 262.762370][ T975] bridge_slave_1: left promiscuous mode [ 262.771189][ T975] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.783533][ T975] bridge_slave_0: left allmulticast mode [ 262.799672][ T975] bridge_slave_0: left promiscuous mode [ 262.805818][ T975] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.247012][ T975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.260184][ T975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.272778][ T975] bond0 (unregistering): Released all slaves [ 263.308465][ T9747] hsr_slave_0: entered promiscuous mode [ 263.315226][ T9747] hsr_slave_1: entered promiscuous mode [ 263.321689][ T9747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.347865][ T9747] Cannot create hsr debugfs directory [ 263.420744][ T5123] Bluetooth: hci3: command tx timeout [ 263.738349][ T975] hsr_slave_0: left promiscuous mode [ 263.747787][ T975] hsr_slave_1: left promiscuous mode [ 263.757884][ T975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.765759][ T975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.774654][ T975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.782283][ T975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.806738][ T975] veth1_macvtap: left promiscuous mode [ 263.812532][ T975] veth0_macvtap: left promiscuous mode [ 263.818251][ T975] veth1_vlan: left promiscuous mode [ 263.824147][ T975] veth0_vlan: left promiscuous mode [ 263.831272][ T5123] Bluetooth: hci2: command tx timeout [ 264.288009][ T975] team0 (unregistering): Port device team_slave_1 removed [ 264.331762][ T975] team0 (unregistering): Port device team_slave_0 removed [ 264.941547][ T9699] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.976936][ T9699] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.022904][ T9699] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.033792][ T9699] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.312601][ T975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.407499][ T9699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.509515][ T5123] Bluetooth: hci3: command tx timeout [ 265.525887][ T975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.547850][ T9747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.575989][ T9699] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.607269][ T9747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.653694][ T975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.677443][ T9747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.697735][ T9747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.730915][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.738113][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.766866][ T975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.791278][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.798437][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.880385][ T9699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.899997][ T5123] Bluetooth: hci2: command tx timeout [ 266.085656][ T9699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.116964][ T975] bridge_slave_1: left allmulticast mode [ 266.122907][ T975] bridge_slave_1: left promiscuous mode [ 266.128713][ T975] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.149570][ T975] bridge_slave_0: left allmulticast mode [ 266.155276][ T975] bridge_slave_0: left promiscuous mode [ 266.167306][ T975] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.850782][ T975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.886155][ T975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.913495][ T975] bond0 (unregistering): Released all slaves [ 267.028598][ T9747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.214103][ T9747] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.235981][ T9699] veth0_vlan: entered promiscuous mode [ 267.274990][ T9699] veth1_vlan: entered promiscuous mode [ 267.387952][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.395221][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.418710][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.426012][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.514060][ T975] hsr_slave_0: left promiscuous mode [ 267.520598][ T975] hsr_slave_1: left promiscuous mode [ 267.526996][ T975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.539743][ T975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.553092][ T975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.560794][ T975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.584950][ T975] veth1_macvtap: left promiscuous mode [ 267.603630][ T975] veth0_macvtap: left promiscuous mode [ 267.610502][ T975] veth1_vlan: left promiscuous mode [ 267.615880][ T975] veth0_vlan: left promiscuous mode [ 267.979765][ T5123] Bluetooth: hci2: command tx timeout [ 268.324550][ T975] team0 (unregistering): Port device team_slave_1 removed [ 268.385043][ T975] team0 (unregistering): Port device team_slave_0 removed [ 268.974779][ T9699] veth0_macvtap: entered promiscuous mode [ 269.061219][ T9699] veth1_macvtap: entered promiscuous mode [ 269.142380][ T9699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.158752][ T9699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.177058][ T9699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.188063][ T9699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.213000][ T9699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.248403][ T9699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.271704][ T9699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.285624][ T9699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.297754][ T9699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.315432][ T9699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.337137][ T9747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.354964][ T9699] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.366759][ T9699] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.384686][ T9699] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.394079][ T9699] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.556420][ T9747] veth0_vlan: entered promiscuous mode [ 269.566236][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.595257][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.624779][ T9747] veth1_vlan: entered promiscuous mode [ 269.678316][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.692601][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.741955][ T9747] veth0_macvtap: entered promiscuous mode [ 269.762607][ T9747] veth1_macvtap: entered promiscuous mode [ 269.795401][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.811407][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.832404][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.846076][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.856086][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.867480][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.881085][ T9747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.908895][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.928005][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.938407][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.955253][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.966145][ T9747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.984741][ T9747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.998512][ T9747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.024405][ T9747] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.038668][ T9747] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.054189][ T9747] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.065260][ T9747] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.193778][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.209408][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.273081][ T975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.282163][ T975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c00000000000000000200000009000100859584b15cc0b28108000240000000020900010073797a31000000001400000011"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9, 0x0, 0x2]}, @TCA_TBF_PARMS={0x28}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0x4000423) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000000000000000bbfe88000000000000000000000000000189"], 0xfce) executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r1}, 0x0) executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a01010000000000"], 0x28}}, 0x0) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, 0x0}, 0x90) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, 0x0, {0x0, 0x0, 0x80003ff}}, 0x20) lstat(&(0x7f0000008800)='./file0\x00', 0x0) getdents(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008d00)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) fchmodat(r1, &(0x7f0000002180)='./file1\x00', 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r3}, 0x10) [ 285.350165][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e"], 0xffdd) [ 285.405640][T10096] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4051) executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x841, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 285.794997][ T4488] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.808845][ T4488] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.822062][ T4488] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.845408][ T4488] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.856363][ T4488] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.864398][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.875074][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.889307][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.897399][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.907449][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.915724][ T5118] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 285.923934][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r1}, 0x0) executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0x4000423) executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, 0x0}, 0x90) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 286.601701][T10121] chnl_net:caif_netlink_parms(): no params data found [ 286.635946][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.848357][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a010100000000000000"], 0x28}}, 0x0) [ 286.894745][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.905241][T10146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.914719][T10146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.937804][T10146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.949309][T10146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.067240][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xffdd) [ 287.265794][T10122] chnl_net:caif_netlink_parms(): no params data found [ 287.350343][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.388459][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.399946][ T5121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.410377][T10121] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.410400][ T5121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.426290][ T5121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.428207][T10121] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.451353][T10121] bridge_slave_0: entered allmulticast mode [ 287.457832][ T5121] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 287.466922][ T5121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.467229][T10121] bridge_slave_0: entered promiscuous mode [ 287.574342][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.595343][T10121] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.608536][T10121] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.617664][T10121] bridge_slave_1: entered allmulticast mode [ 287.631081][T10121] bridge_slave_1: entered promiscuous mode executing program 3: sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @remote, 0x7}}}, &(0x7f0000000280)=0x84) r1 = open_tree(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000440)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x6, [@struct={0xc, 0x2, 0x0, 0x4, 0x1, 0xcf, [{}, {0x0, 0x4}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x4}, @ptr, @fwd={0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x80}}]}, {0x0, [0x61, 0x30, 0x5f, 0x0]}}, &(0x7f0000000540)=""/3, 0x7e, 0x3, 0x0, 0xf4}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f00000006c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000740)) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@map=r1, r1, 0x1a, 0x0, 0x0, @link_fd=r1}, 0x20) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000ec0)={0x0, 'erspan0\x00'}) [ 287.818843][T10121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link executing program 3: socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400010000000000000000000a0000", @ANYRES32=r4, @ANYBLOB="14000100ff010000000000000000000000000001080008000204"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) [ 287.886046][T10121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.900578][ T5121] Bluetooth: hci0: command tx timeout [ 287.948704][T10122] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.965126][T10122] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.972953][T10122] bridge_slave_0: entered allmulticast mode [ 287.979574][ T5121] Bluetooth: hci5: command tx timeout [ 287.980856][T10122] bridge_slave_0: entered promiscuous mode [ 288.063019][T10121] team0: Port device team_slave_0 added [ 288.076095][T10122] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.105406][T10122] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.113100][T10122] bridge_slave_1: entered allmulticast mode [ 288.127256][T10122] bridge_slave_1: entered promiscuous mode [ 288.193742][T10121] team0: Port device team_slave_1 added executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES64=r1], 0x40}}, 0x0) [ 288.242989][T10184] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 288.328220][T10122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.391449][T10122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.436750][T10121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.448421][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.478008][T10121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.497856][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) [ 288.550176][T10122] team0: Port device team_slave_0 added [ 288.579679][T10121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.602237][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.641558][T10121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3}, 0x20) lstat(&(0x7f0000008800)='./file0\x00', 0x0) getdents(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008d00)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) fchmodat(r1, &(0x7f0000002180)='./file1\x00', 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r4}, 0x10) [ 288.700994][T10122] team0: Port device team_slave_1 added [ 288.711852][ T51] bridge_slave_1: left allmulticast mode [ 288.717555][ T51] bridge_slave_1: left promiscuous mode [ 288.746038][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.758924][ T51] bridge_slave_0: left allmulticast mode [ 288.765060][ T51] bridge_slave_0: left promiscuous mode [ 288.773896][ T51] bridge0: port 1(bridge_slave_0) entered disabled state executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0x4000423) [ 289.146074][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.157693][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.168967][ T51] bond0 (unregistering): Released all slaves [ 289.315653][T10122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.326025][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.354989][T10122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 289.499813][ T5121] Bluetooth: hci4: command tx timeout [ 289.540636][T10122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.547639][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.609117][T10122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) [ 289.731079][T10121] hsr_slave_0: entered promiscuous mode [ 289.761827][T10121] hsr_slave_1: entered promiscuous mode [ 289.781011][T10121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.812304][T10121] Cannot create hsr debugfs directory [ 289.979561][ T5121] Bluetooth: hci0: command tx timeout [ 290.062231][ T5121] Bluetooth: hci5: command tx timeout [ 290.173837][ T51] hsr_slave_0: left promiscuous mode [ 290.196477][ T51] hsr_slave_1: left promiscuous mode [ 290.215127][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.225697][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.238944][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.248623][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.266296][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.276700][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.286580][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.298824][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.303424][ T51] veth1_macvtap: left promiscuous mode [ 290.311837][ T51] veth0_macvtap: left promiscuous mode [ 290.313822][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 290.317531][ T51] veth1_vlan: left promiscuous mode [ 290.329306][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.333369][ T51] veth0_vlan: left promiscuous mode [ 290.837971][ T51] team0 (unregistering): Port device team_slave_1 removed [ 290.883787][ T51] team0 (unregistering): Port device team_slave_0 removed [ 291.281896][T10122] hsr_slave_0: entered promiscuous mode [ 291.288426][T10122] hsr_slave_1: entered promiscuous mode [ 291.295330][T10122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.303381][T10122] Cannot create hsr debugfs directory [ 291.357568][T10166] chnl_net:caif_netlink_parms(): no params data found [ 291.579895][ T5121] Bluetooth: hci4: command tx timeout [ 291.840622][T10166] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.847920][T10166] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.862687][T10166] bridge_slave_0: entered allmulticast mode [ 291.875981][T10166] bridge_slave_0: entered promiscuous mode [ 292.021425][T10166] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.028607][T10166] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.041794][T10166] bridge_slave_1: entered allmulticast mode [ 292.059278][T10166] bridge_slave_1: entered promiscuous mode [ 292.059402][ T5121] Bluetooth: hci0: command tx timeout [ 292.139428][ T5121] Bluetooth: hci5: command tx timeout [ 292.277451][T10166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.314143][T10166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.379491][ T5121] Bluetooth: hci3: command tx timeout [ 292.502656][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.586219][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.654653][T10166] team0: Port device team_slave_0 added [ 292.691673][T10166] team0: Port device team_slave_1 added [ 292.735601][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.756826][T10230] chnl_net:caif_netlink_parms(): no params data found [ 292.784781][T10166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.791868][T10166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.817946][T10166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.835957][T10166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.845701][T10166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.874401][T10166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.924259][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.197086][T10122] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.226293][T10121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 293.301371][T10166] hsr_slave_0: entered promiscuous mode [ 293.308485][T10166] hsr_slave_1: entered promiscuous mode [ 293.325640][T10166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.338089][T10166] Cannot create hsr debugfs directory [ 293.368198][T10121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 293.380961][T10121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 293.418562][T10122] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.482213][T10121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 293.495808][T10230] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.508264][T10230] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.515817][T10230] bridge_slave_0: entered allmulticast mode [ 293.524760][T10230] bridge_slave_0: entered promiscuous mode [ 293.534086][T10230] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.542961][T10230] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.550349][T10230] bridge_slave_1: entered allmulticast mode [ 293.558008][T10230] bridge_slave_1: entered promiscuous mode [ 293.595327][T10122] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.659625][ T5121] Bluetooth: hci4: command tx timeout [ 293.730828][T10122] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.775727][T10230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.810248][T10230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.967269][T10230] team0: Port device team_slave_0 added [ 294.045842][T10230] team0: Port device team_slave_1 added [ 294.052887][ T62] bridge_slave_1: left allmulticast mode [ 294.058581][ T62] bridge_slave_1: left promiscuous mode [ 294.065745][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.076761][ T62] bridge_slave_0: left allmulticast mode [ 294.083183][ T62] bridge_slave_0: left promiscuous mode [ 294.088991][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.139275][ T5121] Bluetooth: hci0: command tx timeout [ 294.220764][ T5121] Bluetooth: hci5: command tx timeout [ 294.470046][ T5121] Bluetooth: hci3: command tx timeout [ 294.576772][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.588236][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.600054][ T62] bond0 (unregistering): Released all slaves [ 294.724475][T10230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.731725][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.761006][T10230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.774616][T10230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.789122][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.817742][T10230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.977681][T10122] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 294.992119][T10122] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 295.030722][T10230] hsr_slave_0: entered promiscuous mode [ 295.037320][T10230] hsr_slave_1: entered promiscuous mode [ 295.044729][T10230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.052836][T10230] Cannot create hsr debugfs directory [ 295.069424][T10122] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 295.080486][T10122] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 295.194896][ T62] hsr_slave_0: left promiscuous mode [ 295.207039][ T62] hsr_slave_1: left promiscuous mode [ 295.240697][ T62] veth1_macvtap: left promiscuous mode [ 295.246303][ T62] veth0_macvtap: left promiscuous mode [ 295.254870][ T62] veth1_vlan: left promiscuous mode [ 295.264344][ T62] veth0_vlan: left promiscuous mode [ 295.743929][ T5121] Bluetooth: hci4: command tx timeout [ 295.895497][ T62] team0 (unregistering): Port device team_slave_1 removed [ 295.943862][ T62] team0 (unregistering): Port device team_slave_0 removed [ 296.539697][ T5121] Bluetooth: hci3: command tx timeout [ 296.834481][T10121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.934075][T10121] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.965034][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.972275][ T5189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.062817][T10166] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 297.079088][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.086259][ T5189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.127249][T10166] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 297.145622][T10166] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 297.195319][T10122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.213984][T10166] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 297.320503][T10122] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.404985][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.412244][ T5280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.509591][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.516788][ T5280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.585068][T10121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.647601][T10230] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 297.706605][T10230] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 297.751118][T10230] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 297.800138][T10230] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 297.929865][T10121] veth0_vlan: entered promiscuous mode [ 297.946290][T10121] veth1_vlan: entered promiscuous mode [ 298.008136][T10166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.055227][T10122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.094665][T10166] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.147183][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.154425][ T5272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.167775][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.175006][ T5272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.303836][T10121] veth0_macvtap: entered promiscuous mode [ 298.357716][T10121] veth1_macvtap: entered promiscuous mode [ 298.412815][T10122] veth0_vlan: entered promiscuous mode [ 298.442614][T10230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.482554][T10122] veth1_vlan: entered promiscuous mode [ 298.508409][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.528644][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.547958][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.567456][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.583158][T10121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.619441][ T5121] Bluetooth: hci3: command tx timeout [ 298.647595][T10230] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.721313][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.728531][ T5272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.754254][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.761507][ T5272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.785106][T10166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.820669][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.838307][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.848742][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.868085][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.881203][T10121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.917332][T10121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.930066][T10121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.951521][T10121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.969361][T10121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.058859][T10122] veth0_macvtap: entered promiscuous mode [ 299.125632][T10122] veth1_macvtap: entered promiscuous mode [ 299.232893][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.244545][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.257214][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.270083][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.280437][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.292921][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.305741][T10122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.361843][T10166] veth0_vlan: entered promiscuous mode [ 299.413671][T10166] veth1_vlan: entered promiscuous mode [ 299.432746][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.447922][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.460770][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.480836][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.498203][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.517311][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.531159][T10122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.585511][ T2783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.591823][T10230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.600827][ T2783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.611244][T10122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.625636][T10122] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.636045][T10122] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.646219][T10122] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.757665][ T975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.780623][ T975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.789538][T10166] veth0_macvtap: entered promiscuous mode executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000000000000000bbfe88000000000000000000000000000189"], 0xfce) [ 299.884526][T10166] veth1_macvtap: entered promiscuous mode [ 299.955378][T10230] veth0_vlan: entered promiscuous mode [ 300.060992][T10230] veth1_vlan: entered promiscuous mode [ 300.071958][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.088025][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.210944][ T2783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.218817][ T2783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.221021][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.243572][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.263564][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.274277][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.284232][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.295925][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, 0x0}, 0x90) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 300.307220][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.318039][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.336427][T10166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.353138][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.389122][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.409160][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.439300][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.468761][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) [ 300.491428][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.523714][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.536194][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.562248][T10166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.605958][T10166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.629940][T10166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.642112][T10166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9, 0x0, 0x2]}, @TCA_TBF_PARMS={0x28}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) [ 300.653289][T10166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.674736][T10230] veth0_macvtap: entered promiscuous mode [ 300.688125][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 300.727735][T10230] veth1_macvtap: entered promiscuous mode [ 300.767799][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70500000000000061107d00000000000700000000000000950000bebed8bff4eb9691fa9b990000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xffdd) [ 300.832796][T10388] sch_tbf: burst 0 is lower than device lo mtu (65550) ! executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24}, 0x24}}, 0x0) [ 300.903103][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.964972][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.984471][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.999194][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! executing program 1: socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400010000000000000000000a0000", @ANYRES32=r4, @ANYBLOB="14000100ff010000000000000000000000000001080008000204"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) [ 301.015708][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.033796][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.051885][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.073651][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.086051][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.104360][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.127917][T10230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.218035][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.229207][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.239791][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.252311][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.271505][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.286818][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.304656][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.315494][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.325648][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.345514][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.366143][T10230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.396944][T10403] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.434611][ T2783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES64=r1], 0x40}}, 0x0) executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) [ 301.449311][ T2783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.500413][T10230] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.543750][T10230] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.578311][T10230] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3}, 0x20) lstat(&(0x7f0000008800)='./file0\x00', 0x0) getdents(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008d00)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) fchmodat(r1, &(0x7f0000002180)='./file1\x00', 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r4}, 0x10) executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x0) [ 301.596781][T10230] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.692473][ T5272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.722888][ T5272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000150a010100000000000000"], 0x28}}, 0x0) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037b05f318f70b13ef9a874803a442dfdfc09c736c4b402fa6c76a92d9859d6357f0b5460fe57f0cfe6b4952070601529e2f266303ebfe1c5a0e520189b2729f4e5d6d9f91be1a05ff8611f297855da2d332217e16b3a65291d1a818de5885be1daf4f3ada8cd659d2a477623cb2b951756b2c1c3a7c73a3c34a7ddab9c11b8f501a808310a178396fb07ea894724050000000000000032faaaefa5471e1398745a25d9bbf6f1", 0xb5}, {&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d4", 0x4b}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 301.896588][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.911602][T10421] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.954050][ T5166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.001433][ T5166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.074578][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.122688][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.966812][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.088744][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.202463][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.297764][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.497165][ T11] bridge_slave_1: left allmulticast mode [ 303.517250][ T11] bridge_slave_1: left promiscuous mode [ 303.526907][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.545753][ T11] bridge_slave_0: left allmulticast mode [ 303.554137][ T11] bridge_slave_0: left promiscuous mode [ 303.572098][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.203219][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.228911][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.253833][ T11] bond0 (unregistering): Released all slaves [ 304.613078][ T11] hsr_slave_0: left promiscuous mode [ 304.629613][ T11] hsr_slave_1: left promiscuous mode [ 304.636697][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.653649][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.665080][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.672940][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.703776][ T11] veth1_macvtap: left promiscuous mode [ 304.716544][ T11] veth0_macvtap: left promiscuous mode [ 304.724975][ T11] veth1_vlan: left promiscuous mode [ 304.737511][ T11] veth0_vlan: left promiscuous mode [ 305.568566][ T11] team0 (unregistering): Port device team_slave_1 removed [ 305.641990][ T11] team0 (unregistering): Port device team_slave_0 removed executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9]}, @TCA_TBF_PARMS={0x28}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000000000000000bbfe88000000000000000000000000000189"], 0xfce) executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, 0x0}, 0x90) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 315.846971][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000001fc0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void, @void}}}, 0x14}}, 0xd0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}}, 0x24) executing program 2: socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000100ff010000000000000000000000000001080008000204"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) [ 315.939319][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES64=r1], 0x40}}, 0x0) executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x0) [ 316.505731][T10899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.569430][T10899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.594776][T10899] bond0 (unregistering): Released all slaves [ 316.625132][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.644557][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.654308][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) [ 316.670035][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.687286][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 316.694849][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14}, 0x14}}, 0x4000004) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4000080) [ 316.912781][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.923941][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.942533][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.953724][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0xee01) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, 0x0, &(0x7f0000000080)) [ 316.962296][ T5118] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 316.972332][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0xfce) executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x148}}, 0x0) executing program 3: r0 = add_key$fscrypt_provisioning(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x1}, &(0x7f0000001280)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r0, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES64=r1], 0x40}}, 0x0) executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) executing program 1: socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000100ff010000000000000000000000000001080008000204"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) [ 317.588019][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.599073][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x0) [ 317.686753][T10926] chnl_net:caif_netlink_parms(): no params data found executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x841, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 317.755855][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 317.843545][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 1: r0 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x104c, &(0x7f00000001c0)) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) close(r1) openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) executing program 1: r0 = timerfd_create(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$P9_RAUTH(r0, 0x0, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0xfce) [ 318.373885][T10926] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.405402][T10926] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.417270][T10926] bridge_slave_0: entered allmulticast mode [ 318.439352][T10926] bridge_slave_0: entered promiscuous mode [ 318.447401][T10940] chnl_net:caif_netlink_parms(): no params data found executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_USER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) [ 318.494684][T10926] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.503249][T10926] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.512110][T10926] bridge_slave_1: entered allmulticast mode [ 318.520239][T10926] bridge_slave_1: entered promiscuous mode executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES64=r1], 0x40}}, 0x0) executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) executing program 3: socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000100ff010000000000000000000000000001080008000204"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) [ 318.779442][ T5121] Bluetooth: hci0: command tx timeout executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0) [ 318.909588][T10926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.972848][T10940] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.996383][T10940] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.017135][T10940] bridge_slave_0: entered allmulticast mode executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$nl_netfilter(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x0) [ 319.033044][T10940] bridge_slave_0: entered promiscuous mode [ 319.062514][T10926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) write$P9_RRENAME(r0, 0x0, 0x0) [ 319.098859][T10940] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.108648][ T5121] Bluetooth: hci6: command tx timeout [ 319.129505][T10940] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.150955][T10940] bridge_slave_1: entered allmulticast mode [ 319.158697][T10940] bridge_slave_1: entered promiscuous mode executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) [ 319.278858][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 1: r0 = timerfd_create(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$P9_RAUTH(r0, 0x0, 0x0) [ 319.376575][T10940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.402684][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.485222][T11041] team0: Port device team_slave_1 removed executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000002380)) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES64=r1], 0x40}}, 0x0) [ 319.603159][T10926] team0: Port device team_slave_0 added [ 319.634806][T10926] team0: Port device team_slave_1 added [ 319.675681][T10940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.852615][T10926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.861858][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.888441][T10926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.912159][T10940] team0: Port device team_slave_0 added [ 319.923517][T10940] team0: Port device team_slave_1 added [ 319.931213][T10926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.938203][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.964920][T10926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.081773][T10940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.088870][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.116374][T10940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.172616][T10926] hsr_slave_0: entered promiscuous mode [ 320.180518][T10926] hsr_slave_1: entered promiscuous mode [ 320.188101][T10940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.196108][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.224429][T10940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.313113][T10940] hsr_slave_0: entered promiscuous mode [ 320.320947][T10940] hsr_slave_1: entered promiscuous mode [ 320.327278][T10940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.335469][T10940] Cannot create hsr debugfs directory [ 320.642712][T10926] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.752223][T10926] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.844248][T10926] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.859634][ T5121] Bluetooth: hci0: command tx timeout [ 320.928716][T10926] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.179258][ T5121] Bluetooth: hci6: command tx timeout [ 321.199772][T10926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.212131][T10926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.235191][T10926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 321.327593][T10926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.618371][T10926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.666886][T10926] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.716444][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.724055][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.752810][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.760046][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.926960][T10940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 321.943411][T10940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 321.976477][T10940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 322.001402][T10940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 322.027323][T10926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.188664][T10926] veth0_vlan: entered promiscuous mode [ 322.247909][T10926] veth1_vlan: entered promiscuous mode [ 322.348066][T10940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.377127][T10926] veth0_macvtap: entered promiscuous mode [ 322.393156][T10926] veth1_macvtap: entered promiscuous mode [ 322.407783][T10940] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.436718][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.443953][ T5289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.458040][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.471774][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.482757][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.493762][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.504376][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.518284][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.528270][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.549185][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.569670][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.588469][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.611366][T10926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.638713][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.646016][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.705054][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.721376][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.731438][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.742493][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.752524][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.763186][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.774581][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.790473][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.806901][T10926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.818252][T10926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.831741][T10926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.905800][T10926] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.916172][T10926] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.927493][T10926] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.936920][T10926] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.948000][ T5121] Bluetooth: hci0: command tx timeout [ 323.103223][T10940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.158293][ T2863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.188224][ T2863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.246024][ T5273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.265021][ T5121] Bluetooth: hci6: command tx timeout [ 323.276808][T10940] veth0_vlan: entered promiscuous mode [ 323.276933][ T5273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.334792][T10940] veth1_vlan: entered promiscuous mode [ 323.438262][T10940] veth0_macvtap: entered promiscuous mode [ 323.467228][T10940] veth1_macvtap: entered promiscuous mode [ 323.507964][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.519691][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.537660][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.548925][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.567869][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.594884][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.608226][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.625020][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.637755][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.654627][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.666862][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.692408][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.705227][T10940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.736982][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.767077][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.777512][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.792576][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.803341][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.814454][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.825088][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.836019][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.846408][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.857263][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.867610][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.878721][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.891124][T10940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.906729][T10940] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.917243][T10940] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.926462][T10940] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.935879][T10940] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.094008][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.114503][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.186109][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.208525][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.019970][ T5121] Bluetooth: hci0: command tx timeout [ 325.340209][ T5121] Bluetooth: hci6: command tx timeout executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, 0x0}, 0x90) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1, 0x9]}, @TCA_TBF_PARMS={0x28}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0xfce) executing program 2: syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000380)={0x0, {{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000002c0)=0x84) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) [ 346.875226][T11246] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 3: socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000100ff010000000000000000000000000001080008000204"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) [ 346.917287][T11248] sch_tbf: burst 0 is lower than device lo mtu (65550) ! executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x20440, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="355ab5fd2d22ba2b66700041b37a959b7c7c6a9ed9bc53d83ba2c3f7052cafd8b5a2fc3c54f50664e1a651d08875efe5b5bd26f63ab6b0b93b8d351b6dade51eed89c274ec5fb5f088d202503f311a089d95318c52a4afc6ecbff1d84b6b119001486bbabe9b1462b59c70c51e8caa86a02576062cf855f6eeabd21c") ioctl$TIOCSCTTY(r0, 0x540e, 0x6e3fedcd) flistxattr(0xffffffffffffffff, &(0x7f00000000c0)=""/189, 0xbd) fsetxattr$security_ima(r0, &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x3, 0x0, 0xb, 0x1ff, 0x5e, "9172c44dc2f5d5f2e4ffccbc9daab3a44d59f53944c27eff8797cb4a5ba078ec36964c305f4b250673cb1062afb662eb2fc375ae560755bd357fa6a6dcfc562e145851ab54692c3a6d2a83fdd2c6bb0cd5a9b6f036ec5f54864bee83f4be"}, 0x67, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x80001, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000280)) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000002c0)) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000300)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000340)=@v2={0x2, @aes128, 0x8, '\x00', @auto="8032cacd455ce919c65a62ad8a136677"}) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000480)={{&(0x7f0000000380)=""/133, 0x85}, &(0x7f0000000440), 0x4}, 0x20) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000004c0)=""/4096) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) getresgid(&(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0)=0x0) syz_mount_image$fuse(&(0x7f00000014c0), &(0x7f0000001500)='./file0\x00', 0x80, &(0x7f0000001600)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}], [{@fsmagic={'fsmagic', 0x3d, 0xae9}}, {@dont_hash}, {@seclabel}, {@dont_appraise}, {@dont_appraise}, {@flag='ro'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '/dev/ttynull\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}, 0x0, 0x0, &(0x7f0000001740)="63de1feca744c3ab41ff070562b3050d966abf07550df52ed24270478ad013dfa8ef1a6cd599af83533009720a349461bfaa7836edfab707da9c0fb842f782c1e541c003b2aabf94338d91a3af3849b2007594d7c9423cafa024837b9e9032143076db40eabe5222a4e55a8c7c2603c98c6ee044b5eaf57c832ee7af880dee85fdeacc14") ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000001800)=0x1, 0x4) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001840)={0x0, "ae69a06ddba01f98cf516ac370791eb3"}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002840)={r3, "37669efe368bb68a19867f46233e45ad"}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000003980)={0x2, 0x1, &(0x7f0000003840)=""/55, &(0x7f0000003880)=""/95, &(0x7f0000003900)=""/67, 0x5000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000003a00), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000003b00)={&(0x7f00000039c0), 0xc, &(0x7f0000003ac0)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x4045014) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000003d00)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003b80)={0x120, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf6e}, @NL80211_ATTR_FRAME_MATCH={0xf6, 0x5b, "49dee3f21a86dc6b5eb642795e69cacf8ebffb016a21118dbc22eea214d5d729ba2662ca563e1d4e6443a238144b7d7776114a9474cfc226cb5bda32660171a4f607b0281150f43e14297cfa4c4acaff5f2506105ca1708cfedb7148b4a85f3ead1152a7c77d1613b5561a16ab83c6e5838ae5948fbd95f265ffa36617c7d36be08f819765b67baefc97ddf353caada3912ad2f4ebe550f33dffed18c507362aef14890e379b3f1e9ce6363789d629cfa8dc617e03186745fc7b0ac4ed6550368516bbb649891816f8bd89e4d481f815b1a843d66035b6876201bf9bf599a3d317430171860b81385ca58aceaebd5b3bfcdb"}]}, 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x51) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003d40), 0x4) cachestat(r4, &(0x7f0000003d80)={0xe, 0x1000}, &(0x7f0000003dc0), 0x0) statx(r1, &(0x7f0000003e00)='./file0\x00', 0x0, 0x1, &(0x7f0000003e40)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000003f40)={0xa0, 0x0, 0x0, {{0x0, 0x2, 0x9, 0x80000000, 0x2, 0x9, {0x3, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0x7fffffffffffffff, 0x6, 0x2, 0xffffff8e, 0x0, 0x0, 0x128, r5, r2, 0x6, 0x7}}, {0x0, 0x8}}}, 0xa0) epoll_create1(0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000004040)=0x1, 0x4) executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/class/net', 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x5421, &(0x7f0000000000)) executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) executing program 3: r0 = timerfd_create(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$P9_RAUTH(r0, 0x0, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) [ 347.280746][T11261] fuse: Bad value for 'user_id' executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x101842) write$FUSE_STATFS(r0, 0x0, 0x0) [ 347.348490][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, 0x0, 0x0) executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) [ 347.479485][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={0x0}}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80, 0x1]}, @TCA_TBF_PARMS={0x28}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) [ 347.605155][T11277] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfce) [ 347.709719][ T5118] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 347.721421][ T5118] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 347.733673][ T5118] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 347.746025][ T5118] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, 0x0}, 0x90) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 347.760492][ T5118] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 347.773846][ T5118] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.846073][T11288] sch_tbf: burst 0 is lower than device lo mtu (65550) ! executing program 1: socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000100ff010000000000000000000000000001080008000204"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) executing program 4: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) executing program 1: r0 = timerfd_create(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$P9_RAUTH(r0, 0x0, 0x0) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xffffff81}}, 0x0) [ 348.240027][T11290] chnl_net:caif_netlink_parms(): no params data found executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0x0) executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000080)=0x80) close(r2) ioctl$TCSETAW(r0, 0x5450, 0x0) executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, 0x0}, 0x90) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 348.505460][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000, 0x80]}, @TCA_TBF_PARMS={0x28}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) [ 348.596365][T11319] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 348.613219][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 348.680872][T11290] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.688113][T11290] bridge0: port 1(bridge_slave_0) entered disabled state executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfce) [ 348.722833][T11290] bridge_slave_0: entered allmulticast mode [ 348.739798][T11290] bridge_slave_0: entered promiscuous mode executing program 3: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) setxattr$security_evm(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0xffffff3f, 0x0) [ 348.764268][T11325] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 348.803231][T11290] bridge0: port 2(bridge_slave_1) entered blocking state executing program 1: socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000100ff010000000000000000000000000001080008000204"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) [ 348.829599][T11290] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.836899][T11290] bridge_slave_1: entered allmulticast mode [ 348.851688][T11290] bridge_slave_1: entered promiscuous mode executing program 3: pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x0, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14}, 0x14}}, 0x0) executing program 1: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/class/tpm', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @loopback}}}}) [ 349.036677][T11290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.071491][T11290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r0, r1, 0x0) recvmmsg$unix(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0) close(r3) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) executing program 1: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/module/ccp', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000000000", @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) [ 349.206907][T11290] team0: Port device team_slave_0 added [ 349.238731][T11290] team0: Port device team_slave_1 added executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, 0x0}, 0x90) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14}, 0x14}}, 0x0) [ 349.364923][T11290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.372948][T11290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.405674][T11290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.417906][T11351] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 349.429774][T11290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.437073][T11290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x7fffffff, 0xfffffffe, 0x800, 0x8, 0x3, 0x4dbf, 0x1000, 0xc6c, 0x1, 0x0, 0x3, 0x81, 0x0, 0x3, 0xfff, 0x0, 0x9, 0x10001, 0x9, 0x8001, 0x8, 0x401, 0xa29b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x80000000, 0xffffffff, 0x3ff, 0x1, 0x3, 0x2, 0x1, 0x5, 0x6, 0xad0b612, 0x5, 0x3, 0xde, 0x1ff, 0x2, 0xa6, 0x0, 0xffb, 0x0, 0x4, 0x4d9, 0xfffffffd, 0x5, 0x59, 0x8, 0x0, 0x0, 0x0, 0x100, 0x6, 0x7, 0x8, 0x80000000, 0x8, 0x2, 0x2550531c, 0x4, 0x2, 0x6, 0x7d6e, 0x8, 0x10001, 0xf4, 0xfffffffa, 0x3, 0x401, 0x81, 0x1, 0x0, 0x2, 0xffff, 0x10000, 0x8, 0x0, 0x97e, 0x0, 0x1, 0x6, 0x18, 0x7, 0x1, 0x68, 0x7fffffff, 0x10001, 0x8001, 0x0, 0x69, 0xa, 0x101, 0x412e919f, 0x1, 0x3, 0x6, 0x0, 0x81, 0x100, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0x1, 0x4b, 0x9, 0x3, 0x2, 0xf58, 0x7ff, 0x3, 0x100, 0x10000, 0x3fec, 0x4, 0x5e8, 0xfffeffff, 0xc24, 0x2, 0x8, 0x8, 0x9, 0x9, 0x80, 0x8, 0x101, 0xfc00, 0x1a2b, 0x7, 0x8, 0xfffffffd, 0x6, 0x800, 0x4, 0x101, 0x2, 0x3, 0x7, 0x200, 0x40100004, 0x3, 0x0, 0xfffffffb, 0x2d2, 0x6, 0x6, 0x8, 0x3, 0x4, 0x4, 0x2, 0x32bb825b, 0x8, 0x5, 0x4, 0x6, 0x1, 0xac00000, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x6, 0xa28f, 0x0, 0x5, 0x80000000, 0x6, 0x0, 0xffffffff, 0x7f, 0x700, 0x5, 0x3, 0x100, 0x7e2, 0x1, 0xfffffe00, 0x9, 0x100, 0x0, 0x0, 0x4a, 0x5, 0x7, 0x5, 0x800, 0x5, 0x400, 0x5, 0x0, 0x1, 0x5d5, 0xffffffe1, 0x81, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x9, 0x10000, 0xffffffe0, 0x0, 0x5, 0x1ff, 0x7, 0x8, 0x800, 0x9, 0x8e, 0x80000001, 0x8, 0x9, 0x800, 0x1, 0x7, 0x10000, 0x5, 0x3, 0x8000]}, @TCA_TBF_PARMS={0x28}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) [ 349.490870][T11290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.611328][T11358] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 349.644568][T11290] hsr_slave_0: entered promiscuous mode [ 349.662643][T11290] hsr_slave_1: entered promiscuous mode [ 349.682560][T11290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.700096][T11290] Cannot create hsr debugfs directory [ 349.819227][ T5121] Bluetooth: hci7: command tx timeout [ 349.865648][T11290] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.956658][T11290] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.048844][T11290] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.132006][T11290] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.293124][T11290] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 350.304921][T11290] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 350.318433][T11290] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 350.335446][T11290] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 350.448086][T11290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.481553][T11290] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.500890][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.508062][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.520946][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.528122][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.613693][T11290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.668895][T11290] veth0_vlan: entered promiscuous mode [ 350.688626][T11290] veth1_vlan: entered promiscuous mode [ 350.731451][T11290] veth0_macvtap: entered promiscuous mode [ 350.743758][T11290] veth1_macvtap: entered promiscuous mode [ 350.762414][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.776726][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.787390][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.798525][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.812179][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.824449][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.834396][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.845003][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.855156][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.866975][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.876935][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.891483][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.901473][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.912359][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.924706][T11290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.948560][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.959774][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.970633][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.981265][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.991268][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.001893][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.011799][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.022642][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.036730][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.049368][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.059271][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.069750][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.080001][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.090960][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.103928][T11290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.123059][T11290] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.134348][T11290] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.144604][T11290] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.154902][T11290] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.244216][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.267313][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.300329][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.308788][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.899191][ T5121] Bluetooth: hci7: command tx timeout [ 353.979298][ T5121] Bluetooth: hci7: command tx timeout [ 356.060402][ T5121] Bluetooth: hci7: command tx timeout [ 360.619484][ T5118] Bluetooth: hci1: command 0x0406 tx timeout executing program 0: socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000100ff010000000000000000000000000001080008000204"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) executing program 2: syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000380)={0x0, {{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000002c0)=0x84) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x11, 0xd, 0x0, 0x0) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfce) executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x0, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x5450, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000100)={0x55}, 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x5450, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x5450, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = mq_open(&(0x7f0000000040)='@\xa5\x00', 0x40, 0x0, &(0x7f0000000080)={0x400, 0xb0f, 0x9}) ioctl$AUTOFS_IOC_READY(r2, 0x5450, 0x0) executing program 2: syslog(0x2, 0xffffffffffffffff, 0x1000000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) [ 377.628944][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000200)=""/214) executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x2) dup(0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000001080)={0x7fffffff, 0xe2d, 0x7ff, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012006763"], 0x28}}, 0x0) executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000000000", @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, 0x0, 0x0) [ 377.851347][T11383] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 377.876401][T11386] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x4000) executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) executing program 2: r0 = fanotify_init(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) close(r0) executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x0, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002080)={0x14}, 0x14}}, 0x20004840) executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x40045436, 0x0) [ 378.400454][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 378.428659][ T5118] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 378.438743][ T5118] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000000000", @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) [ 378.450563][ T5118] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 378.460277][ T5118] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 378.482789][ T5118] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 378.490467][ T5118] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETVERSION(r0, 0x5452, &(0x7f0000000040)) [ 378.599237][T11412] team0: Port device team_slave_0 removed [ 378.623119][T11416] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfce) executing program 4: pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) [ 378.788909][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x181c02, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, 0x0) executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) close(r0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f000000e400)={0x0, 0x0, &(0x7f000000e3c0)={&(0x7f000000e2c0)={0x14}, 0x14}}, 0x0) [ 379.024538][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.031161][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 executing program 3: r0 = syz_io_uring_setup(0x6ccd, &(0x7f0000001840)={0x0, 0x52b7}, &(0x7f00000018c0), &(0x7f0000001900)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001980), 0x0) executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(0xffffffffffffffff) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) [ 379.134809][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 3: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB='\b'], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000010401010000000000000000000000000a0002"], 0x20}}, 0x0) [ 379.253697][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 4: r0 = eventfd2(0x0, 0x0) ioctl$FIBMAP(r0, 0x5421, &(0x7f00000000c0)) [ 379.389242][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f00000001c0)) executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/18, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) [ 379.624123][ T5118] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 379.637732][ T5118] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 379.646111][ T5118] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 379.664457][ T5118] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) [ 379.672967][ T5118] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 379.681055][ T5118] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 379.761591][T11443] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. executing program 4: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000140)={'sit0\x00', 0x0}) [ 379.884086][T11414] chnl_net:caif_netlink_parms(): no params data found [ 379.919101][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x218}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000004c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) fchown(r0, 0x0, 0x0) [ 379.947338][ T51] bridge_slave_1: left allmulticast mode [ 379.969170][ T51] bridge_slave_1: left promiscuous mode [ 379.974993][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.023021][ T51] bridge_slave_0: left allmulticast mode [ 380.028748][ T51] bridge_slave_0: left promiscuous mode [ 380.049489][ T51] bridge0: port 1(bridge_slave_0) entered disabled state executing program 3: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfce) executing program 4: pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(0xffffffffffffffff) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) [ 380.551571][ T5118] Bluetooth: hci8: command tx timeout [ 380.642446][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.654917][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.667165][ T51] bond0 (unregistering): Released all slaves [ 380.963530][T11414] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.978303][T11414] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.986155][T11414] bridge_slave_0: entered allmulticast mode [ 380.995486][T11414] bridge_slave_0: entered promiscuous mode [ 381.028780][T11414] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.040919][T11414] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.048209][T11414] bridge_slave_1: entered allmulticast mode [ 381.056555][T11414] bridge_slave_1: entered promiscuous mode [ 381.113258][ T51] hsr_slave_0: left promiscuous mode [ 381.127441][ T51] hsr_slave_1: left promiscuous mode [ 381.138720][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.148855][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.157352][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.165153][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.201068][ T51] veth1_macvtap: left promiscuous mode [ 381.206688][ T51] veth0_macvtap: left promiscuous mode [ 381.212588][ T51] veth1_vlan: left promiscuous mode [ 381.217888][ T51] veth0_vlan: left promiscuous mode [ 381.732871][ T51] team0 (unregistering): Port device team_slave_1 removed [ 381.739406][ T5118] Bluetooth: hci7: command tx timeout [ 381.795653][ T51] team0 (unregistering): Port device team_slave_0 removed [ 382.257238][T11414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.275346][T11414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.399816][T11414] team0: Port device team_slave_0 added [ 382.416176][T11414] team0: Port device team_slave_1 added [ 382.505852][T11414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.516176][T11414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.543984][T11414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.559939][T11414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.570628][T11414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.597100][T11414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.622741][ T5118] Bluetooth: hci8: command tx timeout [ 382.625754][T11444] chnl_net:caif_netlink_parms(): no params data found [ 382.841588][T11414] hsr_slave_0: entered promiscuous mode [ 382.858638][T11414] hsr_slave_1: entered promiscuous mode [ 382.878515][T11414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.898300][T11414] Cannot create hsr debugfs directory [ 383.098631][T11444] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.107748][T11444] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.115314][T11444] bridge_slave_0: entered allmulticast mode [ 383.122817][T11444] bridge_slave_0: entered promiscuous mode [ 383.145469][T11444] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.156524][T11444] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.164207][T11444] bridge_slave_1: entered allmulticast mode [ 383.171885][T11444] bridge_slave_1: entered promiscuous mode [ 383.258130][T11444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.318209][T11444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.385596][T11444] team0: Port device team_slave_0 added [ 383.402247][T11444] team0: Port device team_slave_1 added [ 383.472234][T11414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.604054][T11414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.629081][T11444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.636148][T11444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.678499][T11444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.748602][T11414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.782031][T11444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.798919][T11444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.819375][ T5118] Bluetooth: hci7: command tx timeout [ 383.838785][T11444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.985135][T11414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.043457][T11444] hsr_slave_0: entered promiscuous mode [ 384.059662][T11444] hsr_slave_1: entered promiscuous mode [ 384.066113][T11444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.074416][T11444] Cannot create hsr debugfs directory [ 384.433697][T11414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.448605][T11414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.490157][T11414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.521187][T11414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.699522][ T5118] Bluetooth: hci8: command tx timeout [ 384.933503][T11414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.966580][T11414] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.988873][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.996116][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.021038][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.028228][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.247455][T11444] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.271212][T11444] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.305534][T11414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.313206][T11444] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.354595][T11444] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.465650][T11414] veth0_vlan: entered promiscuous mode [ 385.497933][T11414] veth1_vlan: entered promiscuous mode [ 385.605780][T11414] veth0_macvtap: entered promiscuous mode [ 385.637481][T11414] veth1_macvtap: entered promiscuous mode [ 385.661908][T11444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.692864][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.705044][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.716238][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.738906][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.753935][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.764938][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.776202][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.788722][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.799151][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.811436][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.824274][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.837588][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.852476][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.865382][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.877927][T11414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.903489][ T5118] Bluetooth: hci7: command tx timeout [ 385.924961][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.950312][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.969052][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.989168][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.009203][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.029062][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.038921][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.066276][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.076959][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.088295][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.098537][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.109614][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.119811][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.130680][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.144186][T11414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.168795][T11444] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.194736][T11414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.216344][T11414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.219226][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 386.239258][T11414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.248009][T11414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.333055][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.340349][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.362806][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.370040][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.627436][ T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.669763][ T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.689835][T11444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.779487][ T5121] Bluetooth: hci8: command tx timeout [ 386.783676][ T5170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.802568][ T5170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.893095][T11444] veth0_vlan: entered promiscuous mode [ 386.942946][T11444] veth1_vlan: entered promiscuous mode [ 387.051239][T11444] veth0_macvtap: entered promiscuous mode [ 387.077568][T11444] veth1_macvtap: entered promiscuous mode [ 387.101469][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.112900][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.122835][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.133374][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.143691][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.155317][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.165746][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.180491][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.192972][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.203743][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.214064][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.224926][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.235151][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.246400][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.285255][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.296635][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.311090][T11444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.323147][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.334175][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.347066][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.357893][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.368914][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.382733][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.393189][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.407601][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.418858][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.439057][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.459066][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.479114][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.503272][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.514917][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.527619][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.538401][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.551197][T11444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.572356][T11444] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.582002][T11444] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.598237][T11444] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.607385][T11444] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.815796][ T2783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.846433][ T2783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.901211][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.923583][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.979763][ T5121] Bluetooth: hci7: command tx timeout [ 399.508872][ T30] INFO: task syz-executor.1:9667 blocked for more than 143 seconds. [ 399.518333][ T30] Not tainted 6.9.0-syzkaller-12255-g0b32d436c015 #0 [ 399.527487][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.549073][ T30] task:syz-executor.1 state:D stack:26592 pid:9667 tgid:9667 ppid:9447 flags:0x20004006 2024/05/25 11:58:26 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 399.576471][ T30] Call Trace: [ 399.579999][ T30] [ 399.582978][ T30] __schedule+0x17e8/0x4a20 [ 399.587556][ T30] ? __pfx___schedule+0x10/0x10 [ 399.649104][ T30] ? __pfx_lock_release+0x10/0x10 [ 399.654236][ T30] ? schedule+0x90/0x320 [ 399.658537][ T30] schedule+0x14b/0x320 [ 399.684921][ T30] schedule_timeout+0xb0/0x310 [ 399.694357][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 399.709186][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 399.715265][ T30] ? wait_for_completion+0x2fe/0x620 [ 399.742190][ T30] ? wait_for_completion+0x2fe/0x620 [ 399.747569][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.767674][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 399.774997][ T30] ? wait_for_completion+0x2fe/0x620 [ 399.785924][ T30] wait_for_completion+0x355/0x620 [ 399.799224][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 399.804929][ T30] ? __init_swait_queue_head+0xae/0x150 [ 399.819497][ T30] __vhost_worker_flush+0x1e6/0x280 [ 399.824757][ T30] ? __pfx___vhost_worker_flush+0x10/0x10 [ 399.840774][ T30] ? __pfx_vhost_flush_work+0x10/0x10 [ 399.846248][ T30] ? __mutex_unlock_slowpath+0x21d/0x750 [ 399.859354][ T30] vhost_dev_flush+0xc9/0x150 [ 399.864093][ T30] ? __pfx_vhost_dev_flush+0x10/0x10 [ 399.886523][ T30] ? vhost_vsock_dev_release+0x18b/0x410 [ 399.892448][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 399.897713][ T30] vhost_vsock_dev_release+0x225/0x410 [ 399.918669][ T30] ? evm_file_release+0x140/0x1d0 [ 399.926132][ T30] ? __pfx_vhost_vsock_dev_release+0x10/0x10 [ 399.932506][ T30] __fput+0x406/0x8b0 [ 399.936543][ T30] __ia32_sys_close+0x7f/0x110 [ 399.9490