last executing test programs: 4m18.75555284s ago: executing program 2 (id=37): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10) 4m17.267868165s ago: executing program 2 (id=41): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) socket$inet(0x2, 0x2, 0x0) pipe2(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000024c0)={0x90, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, r4, 0x3, 0x5}}}, 0x90) read$FUSE(r3, &(0x7f0000002400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setregid(r4, r5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8971, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, 0x0) 4m16.039588817s ago: executing program 2 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) socket$inet(0x2, 0x2, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r4, 0x0, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$FUSE_ENTRY(r5, &(0x7f00000024c0)={0x90, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5}}}, 0x90) read$FUSE(r3, &(0x7f0000002400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setregid(0x0, r6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8971, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, 0x0) 4m11.649240107s ago: executing program 2 (id=50): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x1, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) 4m10.34735754s ago: executing program 2 (id=54): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m7.478953468s ago: executing program 2 (id=57): socket$unix(0x1, 0x5, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xf9, 0x1, 0x0, @loopback, @private2, 0x8, 0x40, 0x1, 0x3}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x20000000) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0xffffffffffffffdc}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040005) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000200)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 'vlan0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x3, 0x141800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, &(0x7f0000000080)) syz_usb_connect(0x0, 0x34, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x85, 0xab, 0xe1, 0x8, 0xc45, 0x608f, 0xef7e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x12, 0x0, 0x1, 0x6a, 0xcf, 0x47, 0x1, [], [{{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x2}]}}]}}]}}]}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r7, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x34}}, 0x20) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000001080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "7e581ba68817"}}}}}}}, 0x0) 3m52.175943106s ago: executing program 32 (id=57): socket$unix(0x1, 0x5, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xf9, 0x1, 0x0, @loopback, @private2, 0x8, 0x40, 0x1, 0x3}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x20000000) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0xffffffffffffffdc}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040005) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000200)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 'vlan0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x3, 0x141800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, &(0x7f0000000080)) syz_usb_connect(0x0, 0x34, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x85, 0xab, 0xe1, 0x8, 0xc45, 0x608f, 0xef7e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x12, 0x0, 0x1, 0x6a, 0xcf, 0x47, 0x1, [], [{{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x2}]}}]}}]}}]}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r7, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x34}}, 0x20) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000001080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "7e581ba68817"}}}}}}}, 0x0) 3m46.114160361s ago: executing program 1 (id=95): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="1af027d7a9c12b851774295f06774b0bc808d894ce56365762c5e81622be35903895e073b4224d101c8bf283a444faae475c352919dde21cf4d31969fd7dc89270cba9e8", 0x44}, {&(0x7f0000002480)="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", 0x3b2}, {&(0x7f0000000440)="da", 0x1}], 0x3}}], 0x1, 0x4000000) 3m45.797602155s ago: executing program 1 (id=98): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c000180080010800400058004"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x0, {0x1, 0xf0, 0x2}, 0xfe}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, 0x0, 0x0, 0x700, 0x0) 3m42.794978861s ago: executing program 1 (id=105): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = dup(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f00000002c0), &(0x7f0000000300)=@udp, 0x2}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, &(0x7f00000044c0)={0x2020}, 0x2020) 3m39.420719474s ago: executing program 1 (id=110): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x38, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38060cfe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fb}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @generic={0xfe, 0x6, 0x9, 0x1, 0x4e}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}]}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 3m36.211148441s ago: executing program 1 (id=111): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 3m29.865469046s ago: executing program 1 (id=113): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000002440)=@delchain={0x1a98, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_rsvp6={{0xa}, {0x1a68, 0x2, [@TCA_RSVP_POLICE={0xc80, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0xe, 0x1, 0x1, 0x3, 0x2, 0x3, 0xa, 0x1, 0xfff, 0x7, 0x2, 0x1, 0x61592f89, 0x4, 0x1, 0x8, 0x7fffffff, 0x1ff, 0x30, 0x8, 0x5, 0x5975cb9b, 0x5, 0xfffffff7, 0xd78b, 0x0, 0x6, 0x75, 0x10001, 0x1, 0x21200000, 0x3, 0x33f0, 0xfffff239, 0x7, 0x1, 0xcbb1, 0x28, 0x1, 0x7c, 0x48, 0x85, 0x6, 0x9, 0x5, 0x9, 0x7, 0x9b, 0x6, 0x1, 0x10001, 0x9, 0x6, 0x5d8d, 0xf2, 0x83e, 0x5, 0xc, 0x7, 0x3, 0x9a, 0xeda5, 0x4, 0x3, 0x2327, 0x2, 0x19b, 0xffff0000, 0x7f, 0xe7c6, 0x7, 0x4, 0xe8, 0xfffffff8, 0x5, 0x6, 0x6, 0x99, 0x9, 0x1000, 0x10000, 0x6, 0x1, 0x4, 0x7f, 0x1000, 0xfffffffa, 0xc8a, 0x0, 0x0, 0x4, 0x3, 0x2, 0x80, 0x10000, 0xc, 0xa4c, 0x4, 0x49, 0x18b, 0x200, 0x5, 0xffffffff, 0x81, 0x6, 0x10000, 0x7, 0xffff7fff, 0x90, 0xfffff41d, 0x0, 0x0, 0x7, 0xb43, 0x401, 0xd5, 0x5, 0x2, 0x544, 0x3, 0x46f1, 0x3, 0x9, 0x5, 0x8000, 0xc840, 0x4, 0x9, 0xbb, 0x7, 0x9, 0x5, 0x8, 0x6, 0x450, 0x7f, 0x7ff, 0x3, 0x7, 0x81, 0x4, 0x4, 0x10000000, 0xeba, 0x1000000, 0x9, 0x91ec, 0x8, 0x8, 0x3, 0x271, 0x3, 0x5374, 0x8, 0x1, 0xb48, 0x7, 0x8, 0x7, 0x10, 0x7, 0x6, 0x4, 0xb6a, 0x5e43, 0x5, 0x1, 0x80, 0x6b, 0x7fff, 0x7, 0x7, 0xd, 0x80, 0x8, 0x1, 0x4, 0x3, 0xc, 0x4, 0x9, 0x0, 0x9, 0x5, 0x4, 0x2, 0xec, 0x1, 0x56c, 0x5, 0x9, 0x4, 0x3, 0x8, 0x4, 0x7, 0x8, 0x8, 0x3, 0xffffffff, 0x8, 0x8, 0xd, 0x80000000, 0xa, 0x5, 0x9, 0x80, 0x4, 0xb, 0x5, 0xfbdd, 0x7fffffff, 0x6, 0x2, 0x69, 0x7, 0xc9, 0x10001, 0x0, 0x80000001, 0x200, 0x7, 0x4, 0x4, 0xf74, 0x13d, 0x100, 0xffffffc0, 0x4, 0x3, 0x8000, 0xfffff801, 0x4, 0x9, 0x5, 0x5, 0x9, 0x4, 0x5, 0x5, 0x3, 0x8, 0x101, 0x40, 0xfffffffa, 0xff, 0x0, 0xb, 0x2, 0x10001, 0x9, 0xaa, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x22}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x7f, 0xfff, 0x3, {0x9, 0x1, 0x101, 0x3, 0x2, 0x4}, {0x2, 0x1, 0x3c, 0x29, 0x0, 0x2}, 0x3, 0x4, 0xffff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x2, 0xfffffff4, 0x7fff, 0x0, 0x1, 0x5, 0x7, 0x9, 0xd, 0xf, 0x400, 0x9, 0x6, 0x1, 0x80000000, 0x7, 0xb35, 0x5, 0x2, 0x1, 0xe, 0x2, 0x7, 0x1, 0x2, 0xf12ec46, 0xffff, 0x7, 0x5, 0x4, 0xffffff01, 0x1, 0x6, 0x7, 0x1, 0x4, 0x2726, 0xb71, 0x8, 0xde3, 0x8037, 0x8, 0x4, 0x2, 0x0, 0x36a7, 0x10000, 0x6, 0xa8, 0x5, 0x9, 0x70a4, 0x2, 0x6, 0x1, 0x100, 0x3, 0x5, 0x1, 0x1, 0x1, 0xe7, 0x0, 0x7, 0x78, 0x4, 0x5, 0x2, 0x9, 0x53ae, 0x80000001, 0xffff0f05, 0xe, 0x1, 0x3, 0xff, 0x4f, 0x0, 0x2, 0x401, 0x927, 0xc, 0xfffffff8, 0x6, 0xfffffff9, 0x9, 0x5, 0x65, 0x2, 0x3, 0x8000, 0x6, 0x3, 0xfffffffb, 0x4, 0x7, 0x6, 0x100, 0x7, 0x2, 0x3, 0x3, 0x4, 0x1000, 0x0, 0x7ba8, 0x5, 0x2, 0x6, 0x3, 0x9, 0x100, 0xfffffffa, 0x9b, 0x1, 0x4, 0x7, 0x4, 0x8, 0x8, 0x6, 0xd3, 0x9, 0x32cf, 0x3ff, 0x7af, 0x4, 0x40000, 0x5, 0x8c0, 0x6df9dd58, 0xffffff95, 0x1, 0x6, 0xad0a, 0x9, 0xf, 0x3, 0xfffffe01, 0xffffffaa, 0x2, 0xffffffff, 0x2, 0x100, 0x4, 0x3, 0x40, 0x10, 0x7f, 0x301b, 0x4, 0x0, 0x3b, 0x3, 0x8, 0x0, 0x8, 0x2d, 0x9, 0x80000001, 0x1, 0xfffffffb, 0xfffffffd, 0x1, 0xa, 0xfeb6, 0x800, 0xb74f, 0x4, 0x8001, 0x2f88, 0x9, 0x2, 0x0, 0x0, 0x8, 0xdc, 0x1000, 0x5, 0x6, 0x6, 0x5, 0xffffffff, 0x4, 0x7, 0x2, 0x7c9, 0x8, 0x4, 0xa0, 0x9, 0x9827, 0x4, 0x7, 0xa, 0x101, 0xb18c, 0x5, 0x8, 0x3, 0x1abe880, 0x0, 0x0, 0x0, 0xde1, 0x1ff80, 0x8, 0x5, 0x1000, 0x424c, 0x3, 0x9, 0x6, 0x80000000, 0x3, 0xfffff001, 0x3, 0x5, 0x3, 0x7f, 0x6, 0x1, 0x5b7f, 0x5, 0xfffffffa, 0x5, 0x140, 0xd2, 0x5, 0x6, 0x3, 0x3, 0x3, 0x0, 0x2, 0x7, 0x9b, 0x0, 0x200, 0x8, 0x2, 0x5, 0x8f7, 0xfffffffd, 0x0, 0x2, 0x8, 0x0, 0x5, 0x1, 0x0, 0x2, 0xfffffffd, 0xffffff01, 0xfffffffe]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x7, 0xd61, 0x0, 0x8000, 0x5, 0xe6f4, 0x9, 0x7, 0x1, 0xfffffeff, 0x9, 0x101, 0xfffffffd, 0x0, 0x7857, 0x7f, 0x5d9, 0x188e, 0x8001, 0x1ff, 0x53, 0x3, 0x72e31a9c, 0x7, 0x401, 0x7, 0x0, 0x6, 0x80000000, 0x6, 0x2, 0x80000001, 0x101, 0x4a88, 0x9, 0x382, 0x3ff, 0x4, 0xa, 0x5320, 0x8d4, 0x7, 0x3, 0xf, 0xe, 0x9, 0x100, 0x1, 0x80000001, 0x6, 0xdb, 0x1ff, 0x40, 0x200, 0x5, 0x4, 0x5, 0x10001, 0x2, 0x6, 0x3, 0xc223, 0xfffffffa, 0x1, 0x2, 0x3, 0x4, 0x2, 0xe, 0x5, 0x9, 0x6, 0x1, 0x3, 0xb, 0xe16, 0x7, 0x6, 0xe, 0x5, 0x5, 0x9, 0x400, 0xfffffffc, 0x2, 0x5, 0x4, 0x2, 0x0, 0xd, 0x3, 0x1, 0x2, 0x9, 0x2, 0x0, 0xe7e, 0x101, 0x7, 0x1, 0x57, 0x6, 0x24d6, 0x7, 0x80000000, 0x8c, 0x5, 0x3, 0x9, 0x2, 0x4ea, 0x9, 0x3ff, 0x3, 0x7, 0x3, 0x6, 0x6, 0x7, 0x401, 0x3, 0x1, 0x2, 0xfffffff7, 0x7ff, 0xc9, 0xfff, 0x3dd480, 0x3, 0x5, 0x2, 0x5, 0x1, 0x6, 0x1, 0x8, 0xfffffffc, 0x3, 0x9, 0x3, 0x5b, 0x8, 0x9, 0x9, 0x7fffffff, 0xb32, 0x7, 0x513, 0x2, 0x800, 0x9, 0x40, 0x9, 0x1, 0x2, 0x9, 0x8e, 0x1ff, 0x9, 0x6, 0x4ba7, 0x2, 0x5, 0x4, 0x9921, 0x6, 0x1000, 0xa860, 0x5, 0x4, 0x3, 0x1ff, 0xb567, 0x20f7, 0x8, 0x1e0624fa, 0x0, 0xb, 0x8, 0x1ff, 0x4, 0x3, 0x7f, 0x3, 0x5, 0x0, 0x54a3, 0x4, 0x10000, 0x1, 0x1, 0xfffffffb, 0x6, 0x3, 0x9, 0xfffffffc, 0x3, 0x7, 0x1, 0x9, 0x80000001, 0x4, 0x6, 0x68, 0x4, 0x7, 0x7, 0xfffffff1, 0x3, 0x3, 0x7, 0x4, 0x5, 0x8, 0x0, 0x7fffffff, 0x1, 0xf88, 0x6, 0x8, 0x8, 0x7, 0xfffffffd, 0x4, 0x1f9, 0x4, 0x8001, 0x9, 0x4, 0x10001, 0x8, 0x5ab, 0x6, 0x9, 0x5a31, 0x9, 0x7, 0xfffeffff, 0x81, 0x1fe000, 0x3ff, 0x53ae, 0x8, 0x1, 0x7f, 0x7, 0x7, 0x40, 0x8, 0x81, 0xffffffff, 0x4, 0x7, 0x1, 0x81]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xc, 0xd}}, @TCA_RSVP_POLICE={0x838, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xf, 0x8, 0x4, 0x9, 0x5, 0x8000, 0xfff, 0x9, 0x9, 0x80, 0xe, 0x1000, 0xc4, 0xcdd4, 0x1, 0x5, 0x81, 0xff, 0x9, 0x8, 0x129, 0x3, 0xf, 0x400, 0x4, 0x5, 0xb2, 0x0, 0x5, 0x1, 0x5, 0x0, 0x7, 0x6aa3, 0x9, 0x1, 0x9, 0x8, 0x32, 0x0, 0x6, 0x7f, 0x10001, 0x3, 0x3d, 0x89b, 0x0, 0x5df16282, 0x9, 0x4, 0x3, 0x9, 0x25, 0x6, 0x9, 0x101, 0xc33e, 0x8, 0x3, 0x2, 0x5, 0x2, 0x9, 0x8000, 0xdb, 0x2, 0x3, 0xb5f7, 0x9, 0xab, 0xd0bc, 0x6, 0xfffffff7, 0x4, 0x348, 0x6, 0x5, 0xee30, 0xfffffff6, 0x529b, 0x3ff, 0x4, 0x8, 0x6, 0x7, 0x2aa, 0x4, 0x6, 0x6, 0xf6c, 0x43, 0x5, 0x3, 0x2, 0x0, 0x6, 0x6, 0x9, 0x913, 0x4, 0x36, 0x9a, 0x40, 0x423, 0x5, 0xfffffffb, 0x4, 0x8, 0x7, 0x0, 0x53b, 0x8, 0x7f, 0x1, 0xff, 0x3ff, 0x5a5545b3, 0x907b, 0xd082, 0xfffffff7, 0x10, 0x1, 0x0, 0xd1, 0xd, 0x6, 0x2, 0xca5, 0x71, 0x5, 0x6, 0x101, 0xa6, 0x6, 0xfffffffd, 0x1000, 0xfffffffc, 0x7f, 0x7fffffff, 0x1, 0x3378000, 0xc, 0x1, 0x5, 0x1c0000, 0x4, 0x112, 0x76822645, 0xf, 0x7, 0x3, 0x97, 0x400, 0x7, 0x5, 0x2, 0x9, 0x8000, 0xfffffffd, 0xff, 0xb, 0xd, 0x6, 0x9, 0x5, 0x80000001, 0x8, 0x4d47, 0x1ff, 0x2, 0x6, 0x6, 0xad, 0x401, 0x8, 0x5, 0xd, 0x6, 0x1, 0x7fff, 0x7e5, 0x4, 0x8, 0x2, 0x6, 0x1ff, 0x1, 0x0, 0x8, 0x3, 0x200, 0x0, 0x800, 0x8, 0xdb0f, 0x6, 0x2, 0x2, 0x4, 0x100, 0x7, 0x2, 0x2, 0x89, 0x4dde000, 0x10000, 0x0, 0xfffff7ac, 0x5, 0x200, 0x4, 0x4, 0x7, 0x22, 0x400, 0x8, 0x7d, 0x9, 0x6, 0x3, 0x2947, 0x3, 0x1, 0x8, 0x81, 0x0, 0x6e5, 0x4, 0x1, 0xd4, 0x3, 0x0, 0x1, 0x4fb3b3f8, 0x6, 0x7b, 0x4, 0xa765, 0x6, 0x6, 0x1, 0x8a, 0x0, 0x1, 0x9, 0x2, 0x78634b23, 0x9, 0x7, 0x696, 0xad, 0x3, 0x0, 0x5, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x40000000000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x8d, 0xb, 0x101, 0xe, 0x5, 0x96c0, 0x2, 0x2, 0x8, 0x10001, 0x64, 0x1, 0x3, 0x6, 0x1, 0x9, 0x1000, 0x7, 0x0, 0xffffff19, 0x1, 0x1, 0x0, 0x5, 0x7ff, 0x3, 0x9, 0x0, 0xf, 0x7, 0x9, 0x2, 0x2, 0x2, 0x80000001, 0x380, 0x3, 0x0, 0x5, 0x1ff, 0x5, 0x20000000, 0x4, 0x3, 0x9, 0x4, 0xff, 0x1, 0xff, 0x12, 0x2, 0x1, 0x81, 0x9, 0x3, 0x0, 0x5, 0x3, 0x1000, 0x6, 0x10, 0x5, 0x2, 0x7559, 0x400, 0x7fff, 0xc11c, 0x6, 0x6, 0x97e8, 0x10, 0x8, 0x30, 0x1, 0x9, 0x1c, 0x1, 0x2f2086a8, 0xffffffff, 0x9b2, 0x8000, 0x0, 0x621f, 0x4, 0xfff, 0xfffffff7, 0x2, 0x6, 0x3, 0x8, 0x8, 0x9, 0x4, 0x8, 0x1, 0xfffffbff, 0x7fff, 0x0, 0x3, 0xa, 0x5, 0x10000, 0x0, 0x5, 0x7, 0x0, 0x80, 0x5, 0x8, 0x4, 0x9, 0x200, 0x3fb, 0x5f3f, 0xa3, 0x81, 0x1, 0xf1, 0x90, 0x7, 0x8, 0x6, 0x200, 0xffffffff, 0x8, 0xc50, 0x3ff, 0xa, 0x8001, 0xa9a, 0x1, 0x1, 0x8, 0xfff, 0xffffffff, 0xfffffffc, 0x3, 0x8, 0xbf, 0x7, 0x7, 0x8, 0xf, 0x69615f, 0x1, 0xc1, 0x2, 0xffff, 0xf, 0x44, 0x9, 0x1, 0xb, 0x6, 0x2, 0x88, 0x200, 0x10000, 0xc, 0x1, 0x5, 0xac, 0x10000, 0xfffffffd, 0x2, 0x8, 0x7, 0x9, 0x7f, 0xefc6, 0xf, 0x7, 0xc0, 0x100, 0xdff6, 0x5c9, 0x6, 0x7, 0x6, 0x8, 0x3, 0x2, 0x7, 0x2, 0x1, 0x200, 0xfffffffa, 0x4, 0x400, 0x10001, 0x4, 0x40, 0x5, 0x6, 0x3, 0x101, 0x2, 0xa5, 0x10001, 0x6, 0x9, 0x6, 0xe0e, 0x4, 0x50ba, 0xe9e, 0x48, 0x8, 0x4, 0x5461, 0x80000001, 0xff, 0x1ff000, 0xac, 0x2d, 0x7fff, 0xfffffffa, 0xffffffff, 0xfffff9c4, 0x2a, 0x800, 0x4, 0x4, 0x5, 0x5, 0x3, 0xffffffff, 0x3, 0x4, 0x4, 0x8, 0x1ff, 0x7, 0x8000, 0x1b, 0x7, 0x9, 0xffffffff, 0x9, 0x5, 0x7ff, 0xe63d, 0x0, 0x1e4, 0xe2b, 0x8, 0x3, 0x101, 0x5, 0x6, 0x1, 0x6, 0x0, 0xcc9, 0x200]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0x4}}, @TCA_RSVP_POLICE={0x2c, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe95}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x10, 0xa}}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}, @TCA_RSVP_ACT={0x554, 0x6, [@m_xt={0x278, 0x14, 0x0, 0x0, {{0x7}, {0x198, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0xa5, 0x6, {0x5a, 'filter\x00', 0xdd, 0x9, "421afb04bd4f34bb4e0101cf7be13218c075e2e816b8b5028e2ac0845cd5b6765fda9157c9b9c6708b28a22441978a5aa33ad2221adadfc645ee5c2b94f2d019fff47e45928e3ba56e8d197f0a930f6309faf88c9b90d4a6dc0297b299064163f43c5b6316afb619f36d483353cd23ea2ccb0d151d482c47fcb636"}}, @TCA_IPT_TARG={0xb5, 0x6, {0x2, 'raw\x00', 0x0, 0x8, "eaf957fb465b9ddc7af57fc871ff419016145573fbd0667c6429d45636b8cd4137558d9b12838a79f7cf35ec8c56357b977a62335295519bef7e545f248334724a6a391a37a25c703813a33c6446e6d796bf39c0af370f8adb95d176543b097cd5fd3564a43023efe4b1b354d3aa910c7809bea658689aa4ca8f054202854963219ecf3901ff69d5927390"}}]}, {0xb9, 0x6, "c90b6c0ce2fdcb9d28485947c7f2aadc7072fd043eb5d6653bb45a7fe8c1c6a75f29adf71acb1113b9fff1f86d83f779d0fa0f2a6401843013f1b59715aaa819f80c8f44d8ad1672dc2bc0d46c2fd21a0b660885f429898a48e6cab5332aaa0d19568757d28ff1693a282b1cd99330800e3d7a44e3f8b5bcb07ba2e3abb170b6e0bf4ce3fd2d8987b7959a4bcdee7bc9d55df6b771511edbc1a4827b7b636b20faee53583765805c4c2be66b499dfb4232f626805e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0xfc, 0x5, 0x0, 0x0, {{0x8}, {0x4}, {0xd1, 0x6, "45d611590b899bcd5f809cfdc8406b095f9ef564b3815660af947a3bc274338a2d59e5f26635a72f95481e9fb5d5518a46175f3b51ec019991ac0910f5ac803d2581fea997eb4ebf68744f682890a3a2ba3ba7c5eeef4e7719436eb76067bbac10a86efa92321c7506da7339c02ded5c36bf64730ebbb24ad719b2bc8f697c8a4abe42c5b5c8207ad672c1ab1bf1e95815c5ee3d7d8f079aac5696337b5d9d271190c251814427ec1bcae34fe0ce5b6ecc21aeb4122922db3f32b672788a12bcc001737b3eb8ca6370ca78325a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x715a96b04967857, 0x3}}}}, @m_skbmod={0x164, 0x1b, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xc, 0x20000000, 0x6, 0x9}, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x96}]}, {0xcd, 0x6, "ce1479f34cfbffac730d1b89412695f9f62a883554492d7af0bfc57a2334d3d2dd9b05f1f17d111c18331493785dc6e063919e93f336c85ca27904c130d09f48e10be49e68605f2a6de8f0258e80070b3ff6b5869a8a8179f2c15d55342218589e298ed3d24eda1515fde57a2813524da3a4106d599153aa1c5e701d835fd4b306442c85a335e55534b05944e4473e1e495a41e79f387febd069a8680812e29a926f49e26db181ff1f92306a1149a4db4ab91e9150a87818be0499c3df8cdbd8c7ae002cab0ef581f7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x78, 0x16, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4, 0x3, 0x9, 0x9}}]}, {0x29, 0x6, "12ddf4f57a93285076c0538c19e52479fc7994836657d6c86625083f75fe267ac9208d5b29"}, {0xc}, {0xc, 0x8, {0x1, 0x7}}}}]}]}}]}, 0x1a98}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m13.711009093s ago: executing program 33 (id=113): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000002440)=@delchain={0x1a98, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_rsvp6={{0xa}, {0x1a68, 0x2, [@TCA_RSVP_POLICE={0xc80, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0xe, 0x1, 0x1, 0x3, 0x2, 0x3, 0xa, 0x1, 0xfff, 0x7, 0x2, 0x1, 0x61592f89, 0x4, 0x1, 0x8, 0x7fffffff, 0x1ff, 0x30, 0x8, 0x5, 0x5975cb9b, 0x5, 0xfffffff7, 0xd78b, 0x0, 0x6, 0x75, 0x10001, 0x1, 0x21200000, 0x3, 0x33f0, 0xfffff239, 0x7, 0x1, 0xcbb1, 0x28, 0x1, 0x7c, 0x48, 0x85, 0x6, 0x9, 0x5, 0x9, 0x7, 0x9b, 0x6, 0x1, 0x10001, 0x9, 0x6, 0x5d8d, 0xf2, 0x83e, 0x5, 0xc, 0x7, 0x3, 0x9a, 0xeda5, 0x4, 0x3, 0x2327, 0x2, 0x19b, 0xffff0000, 0x7f, 0xe7c6, 0x7, 0x4, 0xe8, 0xfffffff8, 0x5, 0x6, 0x6, 0x99, 0x9, 0x1000, 0x10000, 0x6, 0x1, 0x4, 0x7f, 0x1000, 0xfffffffa, 0xc8a, 0x0, 0x0, 0x4, 0x3, 0x2, 0x80, 0x10000, 0xc, 0xa4c, 0x4, 0x49, 0x18b, 0x200, 0x5, 0xffffffff, 0x81, 0x6, 0x10000, 0x7, 0xffff7fff, 0x90, 0xfffff41d, 0x0, 0x0, 0x7, 0xb43, 0x401, 0xd5, 0x5, 0x2, 0x544, 0x3, 0x46f1, 0x3, 0x9, 0x5, 0x8000, 0xc840, 0x4, 0x9, 0xbb, 0x7, 0x9, 0x5, 0x8, 0x6, 0x450, 0x7f, 0x7ff, 0x3, 0x7, 0x81, 0x4, 0x4, 0x10000000, 0xeba, 0x1000000, 0x9, 0x91ec, 0x8, 0x8, 0x3, 0x271, 0x3, 0x5374, 0x8, 0x1, 0xb48, 0x7, 0x8, 0x7, 0x10, 0x7, 0x6, 0x4, 0xb6a, 0x5e43, 0x5, 0x1, 0x80, 0x6b, 0x7fff, 0x7, 0x7, 0xd, 0x80, 0x8, 0x1, 0x4, 0x3, 0xc, 0x4, 0x9, 0x0, 0x9, 0x5, 0x4, 0x2, 0xec, 0x1, 0x56c, 0x5, 0x9, 0x4, 0x3, 0x8, 0x4, 0x7, 0x8, 0x8, 0x3, 0xffffffff, 0x8, 0x8, 0xd, 0x80000000, 0xa, 0x5, 0x9, 0x80, 0x4, 0xb, 0x5, 0xfbdd, 0x7fffffff, 0x6, 0x2, 0x69, 0x7, 0xc9, 0x10001, 0x0, 0x80000001, 0x200, 0x7, 0x4, 0x4, 0xf74, 0x13d, 0x100, 0xffffffc0, 0x4, 0x3, 0x8000, 0xfffff801, 0x4, 0x9, 0x5, 0x5, 0x9, 0x4, 0x5, 0x5, 0x3, 0x8, 0x101, 0x40, 0xfffffffa, 0xff, 0x0, 0xb, 0x2, 0x10001, 0x9, 0xaa, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x22}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x7f, 0xfff, 0x3, {0x9, 0x1, 0x101, 0x3, 0x2, 0x4}, {0x2, 0x1, 0x3c, 0x29, 0x0, 0x2}, 0x3, 0x4, 0xffff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x2, 0xfffffff4, 0x7fff, 0x0, 0x1, 0x5, 0x7, 0x9, 0xd, 0xf, 0x400, 0x9, 0x6, 0x1, 0x80000000, 0x7, 0xb35, 0x5, 0x2, 0x1, 0xe, 0x2, 0x7, 0x1, 0x2, 0xf12ec46, 0xffff, 0x7, 0x5, 0x4, 0xffffff01, 0x1, 0x6, 0x7, 0x1, 0x4, 0x2726, 0xb71, 0x8, 0xde3, 0x8037, 0x8, 0x4, 0x2, 0x0, 0x36a7, 0x10000, 0x6, 0xa8, 0x5, 0x9, 0x70a4, 0x2, 0x6, 0x1, 0x100, 0x3, 0x5, 0x1, 0x1, 0x1, 0xe7, 0x0, 0x7, 0x78, 0x4, 0x5, 0x2, 0x9, 0x53ae, 0x80000001, 0xffff0f05, 0xe, 0x1, 0x3, 0xff, 0x4f, 0x0, 0x2, 0x401, 0x927, 0xc, 0xfffffff8, 0x6, 0xfffffff9, 0x9, 0x5, 0x65, 0x2, 0x3, 0x8000, 0x6, 0x3, 0xfffffffb, 0x4, 0x7, 0x6, 0x100, 0x7, 0x2, 0x3, 0x3, 0x4, 0x1000, 0x0, 0x7ba8, 0x5, 0x2, 0x6, 0x3, 0x9, 0x100, 0xfffffffa, 0x9b, 0x1, 0x4, 0x7, 0x4, 0x8, 0x8, 0x6, 0xd3, 0x9, 0x32cf, 0x3ff, 0x7af, 0x4, 0x40000, 0x5, 0x8c0, 0x6df9dd58, 0xffffff95, 0x1, 0x6, 0xad0a, 0x9, 0xf, 0x3, 0xfffffe01, 0xffffffaa, 0x2, 0xffffffff, 0x2, 0x100, 0x4, 0x3, 0x40, 0x10, 0x7f, 0x301b, 0x4, 0x0, 0x3b, 0x3, 0x8, 0x0, 0x8, 0x2d, 0x9, 0x80000001, 0x1, 0xfffffffb, 0xfffffffd, 0x1, 0xa, 0xfeb6, 0x800, 0xb74f, 0x4, 0x8001, 0x2f88, 0x9, 0x2, 0x0, 0x0, 0x8, 0xdc, 0x1000, 0x5, 0x6, 0x6, 0x5, 0xffffffff, 0x4, 0x7, 0x2, 0x7c9, 0x8, 0x4, 0xa0, 0x9, 0x9827, 0x4, 0x7, 0xa, 0x101, 0xb18c, 0x5, 0x8, 0x3, 0x1abe880, 0x0, 0x0, 0x0, 0xde1, 0x1ff80, 0x8, 0x5, 0x1000, 0x424c, 0x3, 0x9, 0x6, 0x80000000, 0x3, 0xfffff001, 0x3, 0x5, 0x3, 0x7f, 0x6, 0x1, 0x5b7f, 0x5, 0xfffffffa, 0x5, 0x140, 0xd2, 0x5, 0x6, 0x3, 0x3, 0x3, 0x0, 0x2, 0x7, 0x9b, 0x0, 0x200, 0x8, 0x2, 0x5, 0x8f7, 0xfffffffd, 0x0, 0x2, 0x8, 0x0, 0x5, 0x1, 0x0, 0x2, 0xfffffffd, 0xffffff01, 0xfffffffe]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x7, 0xd61, 0x0, 0x8000, 0x5, 0xe6f4, 0x9, 0x7, 0x1, 0xfffffeff, 0x9, 0x101, 0xfffffffd, 0x0, 0x7857, 0x7f, 0x5d9, 0x188e, 0x8001, 0x1ff, 0x53, 0x3, 0x72e31a9c, 0x7, 0x401, 0x7, 0x0, 0x6, 0x80000000, 0x6, 0x2, 0x80000001, 0x101, 0x4a88, 0x9, 0x382, 0x3ff, 0x4, 0xa, 0x5320, 0x8d4, 0x7, 0x3, 0xf, 0xe, 0x9, 0x100, 0x1, 0x80000001, 0x6, 0xdb, 0x1ff, 0x40, 0x200, 0x5, 0x4, 0x5, 0x10001, 0x2, 0x6, 0x3, 0xc223, 0xfffffffa, 0x1, 0x2, 0x3, 0x4, 0x2, 0xe, 0x5, 0x9, 0x6, 0x1, 0x3, 0xb, 0xe16, 0x7, 0x6, 0xe, 0x5, 0x5, 0x9, 0x400, 0xfffffffc, 0x2, 0x5, 0x4, 0x2, 0x0, 0xd, 0x3, 0x1, 0x2, 0x9, 0x2, 0x0, 0xe7e, 0x101, 0x7, 0x1, 0x57, 0x6, 0x24d6, 0x7, 0x80000000, 0x8c, 0x5, 0x3, 0x9, 0x2, 0x4ea, 0x9, 0x3ff, 0x3, 0x7, 0x3, 0x6, 0x6, 0x7, 0x401, 0x3, 0x1, 0x2, 0xfffffff7, 0x7ff, 0xc9, 0xfff, 0x3dd480, 0x3, 0x5, 0x2, 0x5, 0x1, 0x6, 0x1, 0x8, 0xfffffffc, 0x3, 0x9, 0x3, 0x5b, 0x8, 0x9, 0x9, 0x7fffffff, 0xb32, 0x7, 0x513, 0x2, 0x800, 0x9, 0x40, 0x9, 0x1, 0x2, 0x9, 0x8e, 0x1ff, 0x9, 0x6, 0x4ba7, 0x2, 0x5, 0x4, 0x9921, 0x6, 0x1000, 0xa860, 0x5, 0x4, 0x3, 0x1ff, 0xb567, 0x20f7, 0x8, 0x1e0624fa, 0x0, 0xb, 0x8, 0x1ff, 0x4, 0x3, 0x7f, 0x3, 0x5, 0x0, 0x54a3, 0x4, 0x10000, 0x1, 0x1, 0xfffffffb, 0x6, 0x3, 0x9, 0xfffffffc, 0x3, 0x7, 0x1, 0x9, 0x80000001, 0x4, 0x6, 0x68, 0x4, 0x7, 0x7, 0xfffffff1, 0x3, 0x3, 0x7, 0x4, 0x5, 0x8, 0x0, 0x7fffffff, 0x1, 0xf88, 0x6, 0x8, 0x8, 0x7, 0xfffffffd, 0x4, 0x1f9, 0x4, 0x8001, 0x9, 0x4, 0x10001, 0x8, 0x5ab, 0x6, 0x9, 0x5a31, 0x9, 0x7, 0xfffeffff, 0x81, 0x1fe000, 0x3ff, 0x53ae, 0x8, 0x1, 0x7f, 0x7, 0x7, 0x40, 0x8, 0x81, 0xffffffff, 0x4, 0x7, 0x1, 0x81]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xc, 0xd}}, @TCA_RSVP_POLICE={0x838, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xf, 0x8, 0x4, 0x9, 0x5, 0x8000, 0xfff, 0x9, 0x9, 0x80, 0xe, 0x1000, 0xc4, 0xcdd4, 0x1, 0x5, 0x81, 0xff, 0x9, 0x8, 0x129, 0x3, 0xf, 0x400, 0x4, 0x5, 0xb2, 0x0, 0x5, 0x1, 0x5, 0x0, 0x7, 0x6aa3, 0x9, 0x1, 0x9, 0x8, 0x32, 0x0, 0x6, 0x7f, 0x10001, 0x3, 0x3d, 0x89b, 0x0, 0x5df16282, 0x9, 0x4, 0x3, 0x9, 0x25, 0x6, 0x9, 0x101, 0xc33e, 0x8, 0x3, 0x2, 0x5, 0x2, 0x9, 0x8000, 0xdb, 0x2, 0x3, 0xb5f7, 0x9, 0xab, 0xd0bc, 0x6, 0xfffffff7, 0x4, 0x348, 0x6, 0x5, 0xee30, 0xfffffff6, 0x529b, 0x3ff, 0x4, 0x8, 0x6, 0x7, 0x2aa, 0x4, 0x6, 0x6, 0xf6c, 0x43, 0x5, 0x3, 0x2, 0x0, 0x6, 0x6, 0x9, 0x913, 0x4, 0x36, 0x9a, 0x40, 0x423, 0x5, 0xfffffffb, 0x4, 0x8, 0x7, 0x0, 0x53b, 0x8, 0x7f, 0x1, 0xff, 0x3ff, 0x5a5545b3, 0x907b, 0xd082, 0xfffffff7, 0x10, 0x1, 0x0, 0xd1, 0xd, 0x6, 0x2, 0xca5, 0x71, 0x5, 0x6, 0x101, 0xa6, 0x6, 0xfffffffd, 0x1000, 0xfffffffc, 0x7f, 0x7fffffff, 0x1, 0x3378000, 0xc, 0x1, 0x5, 0x1c0000, 0x4, 0x112, 0x76822645, 0xf, 0x7, 0x3, 0x97, 0x400, 0x7, 0x5, 0x2, 0x9, 0x8000, 0xfffffffd, 0xff, 0xb, 0xd, 0x6, 0x9, 0x5, 0x80000001, 0x8, 0x4d47, 0x1ff, 0x2, 0x6, 0x6, 0xad, 0x401, 0x8, 0x5, 0xd, 0x6, 0x1, 0x7fff, 0x7e5, 0x4, 0x8, 0x2, 0x6, 0x1ff, 0x1, 0x0, 0x8, 0x3, 0x200, 0x0, 0x800, 0x8, 0xdb0f, 0x6, 0x2, 0x2, 0x4, 0x100, 0x7, 0x2, 0x2, 0x89, 0x4dde000, 0x10000, 0x0, 0xfffff7ac, 0x5, 0x200, 0x4, 0x4, 0x7, 0x22, 0x400, 0x8, 0x7d, 0x9, 0x6, 0x3, 0x2947, 0x3, 0x1, 0x8, 0x81, 0x0, 0x6e5, 0x4, 0x1, 0xd4, 0x3, 0x0, 0x1, 0x4fb3b3f8, 0x6, 0x7b, 0x4, 0xa765, 0x6, 0x6, 0x1, 0x8a, 0x0, 0x1, 0x9, 0x2, 0x78634b23, 0x9, 0x7, 0x696, 0xad, 0x3, 0x0, 0x5, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x40000000000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x8d, 0xb, 0x101, 0xe, 0x5, 0x96c0, 0x2, 0x2, 0x8, 0x10001, 0x64, 0x1, 0x3, 0x6, 0x1, 0x9, 0x1000, 0x7, 0x0, 0xffffff19, 0x1, 0x1, 0x0, 0x5, 0x7ff, 0x3, 0x9, 0x0, 0xf, 0x7, 0x9, 0x2, 0x2, 0x2, 0x80000001, 0x380, 0x3, 0x0, 0x5, 0x1ff, 0x5, 0x20000000, 0x4, 0x3, 0x9, 0x4, 0xff, 0x1, 0xff, 0x12, 0x2, 0x1, 0x81, 0x9, 0x3, 0x0, 0x5, 0x3, 0x1000, 0x6, 0x10, 0x5, 0x2, 0x7559, 0x400, 0x7fff, 0xc11c, 0x6, 0x6, 0x97e8, 0x10, 0x8, 0x30, 0x1, 0x9, 0x1c, 0x1, 0x2f2086a8, 0xffffffff, 0x9b2, 0x8000, 0x0, 0x621f, 0x4, 0xfff, 0xfffffff7, 0x2, 0x6, 0x3, 0x8, 0x8, 0x9, 0x4, 0x8, 0x1, 0xfffffbff, 0x7fff, 0x0, 0x3, 0xa, 0x5, 0x10000, 0x0, 0x5, 0x7, 0x0, 0x80, 0x5, 0x8, 0x4, 0x9, 0x200, 0x3fb, 0x5f3f, 0xa3, 0x81, 0x1, 0xf1, 0x90, 0x7, 0x8, 0x6, 0x200, 0xffffffff, 0x8, 0xc50, 0x3ff, 0xa, 0x8001, 0xa9a, 0x1, 0x1, 0x8, 0xfff, 0xffffffff, 0xfffffffc, 0x3, 0x8, 0xbf, 0x7, 0x7, 0x8, 0xf, 0x69615f, 0x1, 0xc1, 0x2, 0xffff, 0xf, 0x44, 0x9, 0x1, 0xb, 0x6, 0x2, 0x88, 0x200, 0x10000, 0xc, 0x1, 0x5, 0xac, 0x10000, 0xfffffffd, 0x2, 0x8, 0x7, 0x9, 0x7f, 0xefc6, 0xf, 0x7, 0xc0, 0x100, 0xdff6, 0x5c9, 0x6, 0x7, 0x6, 0x8, 0x3, 0x2, 0x7, 0x2, 0x1, 0x200, 0xfffffffa, 0x4, 0x400, 0x10001, 0x4, 0x40, 0x5, 0x6, 0x3, 0x101, 0x2, 0xa5, 0x10001, 0x6, 0x9, 0x6, 0xe0e, 0x4, 0x50ba, 0xe9e, 0x48, 0x8, 0x4, 0x5461, 0x80000001, 0xff, 0x1ff000, 0xac, 0x2d, 0x7fff, 0xfffffffa, 0xffffffff, 0xfffff9c4, 0x2a, 0x800, 0x4, 0x4, 0x5, 0x5, 0x3, 0xffffffff, 0x3, 0x4, 0x4, 0x8, 0x1ff, 0x7, 0x8000, 0x1b, 0x7, 0x9, 0xffffffff, 0x9, 0x5, 0x7ff, 0xe63d, 0x0, 0x1e4, 0xe2b, 0x8, 0x3, 0x101, 0x5, 0x6, 0x1, 0x6, 0x0, 0xcc9, 0x200]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0x4}}, @TCA_RSVP_POLICE={0x2c, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe95}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x10, 0xa}}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}, @TCA_RSVP_ACT={0x554, 0x6, [@m_xt={0x278, 0x14, 0x0, 0x0, {{0x7}, {0x198, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0xa5, 0x6, {0x5a, 'filter\x00', 0xdd, 0x9, "421afb04bd4f34bb4e0101cf7be13218c075e2e816b8b5028e2ac0845cd5b6765fda9157c9b9c6708b28a22441978a5aa33ad2221adadfc645ee5c2b94f2d019fff47e45928e3ba56e8d197f0a930f6309faf88c9b90d4a6dc0297b299064163f43c5b6316afb619f36d483353cd23ea2ccb0d151d482c47fcb636"}}, @TCA_IPT_TARG={0xb5, 0x6, {0x2, 'raw\x00', 0x0, 0x8, "eaf957fb465b9ddc7af57fc871ff419016145573fbd0667c6429d45636b8cd4137558d9b12838a79f7cf35ec8c56357b977a62335295519bef7e545f248334724a6a391a37a25c703813a33c6446e6d796bf39c0af370f8adb95d176543b097cd5fd3564a43023efe4b1b354d3aa910c7809bea658689aa4ca8f054202854963219ecf3901ff69d5927390"}}]}, {0xb9, 0x6, "c90b6c0ce2fdcb9d28485947c7f2aadc7072fd043eb5d6653bb45a7fe8c1c6a75f29adf71acb1113b9fff1f86d83f779d0fa0f2a6401843013f1b59715aaa819f80c8f44d8ad1672dc2bc0d46c2fd21a0b660885f429898a48e6cab5332aaa0d19568757d28ff1693a282b1cd99330800e3d7a44e3f8b5bcb07ba2e3abb170b6e0bf4ce3fd2d8987b7959a4bcdee7bc9d55df6b771511edbc1a4827b7b636b20faee53583765805c4c2be66b499dfb4232f626805e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0xfc, 0x5, 0x0, 0x0, {{0x8}, {0x4}, {0xd1, 0x6, "45d611590b899bcd5f809cfdc8406b095f9ef564b3815660af947a3bc274338a2d59e5f26635a72f95481e9fb5d5518a46175f3b51ec019991ac0910f5ac803d2581fea997eb4ebf68744f682890a3a2ba3ba7c5eeef4e7719436eb76067bbac10a86efa92321c7506da7339c02ded5c36bf64730ebbb24ad719b2bc8f697c8a4abe42c5b5c8207ad672c1ab1bf1e95815c5ee3d7d8f079aac5696337b5d9d271190c251814427ec1bcae34fe0ce5b6ecc21aeb4122922db3f32b672788a12bcc001737b3eb8ca6370ca78325a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x715a96b04967857, 0x3}}}}, @m_skbmod={0x164, 0x1b, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xc, 0x20000000, 0x6, 0x9}, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x96}]}, {0xcd, 0x6, "ce1479f34cfbffac730d1b89412695f9f62a883554492d7af0bfc57a2334d3d2dd9b05f1f17d111c18331493785dc6e063919e93f336c85ca27904c130d09f48e10be49e68605f2a6de8f0258e80070b3ff6b5869a8a8179f2c15d55342218589e298ed3d24eda1515fde57a2813524da3a4106d599153aa1c5e701d835fd4b306442c85a335e55534b05944e4473e1e495a41e79f387febd069a8680812e29a926f49e26db181ff1f92306a1149a4db4ab91e9150a87818be0499c3df8cdbd8c7ae002cab0ef581f7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x78, 0x16, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4, 0x3, 0x9, 0x9}}]}, {0x29, 0x6, "12ddf4f57a93285076c0538c19e52479fc7994836657d6c86625083f75fe267ac9208d5b29"}, {0xc}, {0xc, 0x8, {0x1, 0x7}}}}]}]}}]}, 0x1a98}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m24.519240636s ago: executing program 4 (id=358): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}}, 0x0) 1m24.239938679s ago: executing program 4 (id=360): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x9, 0x2, 0x1, 0x2a8, 0xfffffff8, 0x8}, &(0x7f00000000c0)=0x20) 1m24.136285534s ago: executing program 4 (id=362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94) 1m24.059465873s ago: executing program 4 (id=363): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m19.492169186s ago: executing program 4 (id=367): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mprotect(&(0x7f000065a000/0x3000)=nil, 0x3000, 0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x16) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_setup(0x6756, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001}, &(0x7f0000000c00), &(0x7f0000000040)) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}}, 0x0) 1m18.472475437s ago: executing program 4 (id=370): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x114, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xe8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x48800}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x400c090}, 0x40810) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1m2.081533669s ago: executing program 34 (id=370): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x114, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xe8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x48800}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x400c090}, 0x40810) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 7.551271491s ago: executing program 0 (id=486): r0 = syz_clone(0x18081200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x485, 0x0, 0x2}]}) io_uring_setup(0x1d4e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900"/143], 0x0, 0x96}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r7, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x29, 0x0}}, 0x10) r8 = dup2(r5, r5) faccessat2(r8, &(0x7f0000000880)='\x00', 0x1, 0x1100) io_submit(0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) 7.339778064s ago: executing program 3 (id=488): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x45ce, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=r0], 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0xf, &(0x7f0000000080)=ANY=[], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r5 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) openat$cgroup_ro(r6, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) signalfd(r4, 0x0, 0x0) 5.98797308s ago: executing program 0 (id=489): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x9, 0x2, 0x1, 0x2a8, 0xfffffff8, 0x8}, &(0x7f00000000c0)=0x20) 5.75942995s ago: executing program 6 (id=129): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000002440)=@delchain={0x24, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.679478859s ago: executing program 0 (id=490): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a0001"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 5.52545784s ago: executing program 7 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 4.500739371s ago: executing program 6 (id=491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getresuid(0x0, 0x0, &(0x7f00000002c0)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a00", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) 4.44786476s ago: executing program 0 (id=492): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ppoll(&(0x7f0000000080), 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 4.235606008s ago: executing program 0 (id=493): sendto$packet(0xffffffffffffffff, &(0x7f0000000540)="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", 0x704, 0x808, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.805993364s ago: executing program 3 (id=494): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000300000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94) 2.131986872s ago: executing program 3 (id=495): prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) 1.963191063s ago: executing program 3 (id=496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) 1.921575273s ago: executing program 3 (id=497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d000100000000090400000303"], 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0x7b, 0x1}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x573, &(0x7f0000000600)={{0x12, 0x1, 0x151, 0x2c, 0x8f, 0x13, 0xff, 0x8086, 0x1155, 0x8f6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x561, 0x4, 0x0, 0x0, 0xd0, 0x8, [{{0x9, 0x4, 0xfb, 0x1, 0x3, 0xe, 0x1, 0x0, 0x0, [@uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x81, 0x3, 'F'}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0xe, 0x8}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x81, 0x2, 0x1, 0xf, "9e"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1b, 0x2, 0x1, 0x4, "e9a6", 'l'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7fff, 0x3, 0xa, "3698a3fbd8e3e0c3"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x4, 0x8, 0x3, "c1"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x8, 0x5}]}], [{{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x0, 0xfb, 0x2, [@generic={0xf0, 0x0, "eed0e73408244d33b926aabe3a9e07b9b6625afc0a9f05367b621b38beb882ca221bf0d79259a887a68cfe1ed9093a7619848a29346357cb171c6f34b56941666215ffb78725b6864a8c6fbe16ca1f651c0ac7101d6ccc1b3be1b9a903cf15379ef4b475992f2634779a16782994b8949c438e9bdeae6981f854e9429ad84ee17aa8c3a1a5c5bb915791cc144e64cc07febb78112621326cfab96bcbba50aaea264a595c3646a1f13bf63b85509250a8121ad562abf064f4d6b761660566af25c144dfaeb982ad97cea216aa38566ab9fb0681f29087a1e963b959668120723c97097212012872639c01024f9a83"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x0, 0x10, 0x2, 0x1e, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x6}, @generic={0x50, 0x4, "c942bfa94b8ac313a2d519421a75eb0f0f2f3b52de7db750dccd2d294ad33cc0ce14a4e1dd2676b61ab5a133c7b01f7b23466baf241f11e0c295db90f14b8f815bdba5d1c22b627b3803c1b99575"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xc, 0xc, 0x6, [@generic={0xa1, 0x30, "77fd43546fadf8b8fcecbea7d31918280ad37618033b4686c7c23899c015c104ca7892d9e99e873ff89c84852a6da252bd488f02b9e485d87b6659b30020eafce61afdc3c0a09ced864edcf18918c43247da5c684e2af09685205bb99c6c2bd048480c6e4d555f578e7b248d747e4e096b9601ba4b3b2a401191374485025d038ddf39d9a44b26e71069ad052be7ed70d8c6c2c36742738095391baef5c0a4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x29}]}}]}}, {{0x9, 0x4, 0xde, 0x1e, 0xa, 0x3b, 0x36, 0xa2, 0x0, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "e3cb6935"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x97e1, 0x5, 0x95}, {0x6, 0x24, 0x1a, 0x100, 0x30}, [@mbim={0xc, 0x24, 0x1b, 0x200, 0x10, 0x8, 0x10, 0xfff, 0xfd}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x8, 0x6a}]}, @hid_hid={0x9, 0x21, 0xfff7, 0x4, 0x1, {0x22, 0xce0}}], [{{0x9, 0x5, 0xf, 0x4, 0x10, 0x8, 0xc, 0x4, [@generic={0x26, 0x0, "9e1394ad1338503aefe256a15a8da8210ccd999ebff5677a2df12615f26854056bd19c68"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x1, 0x9, 0x9, [@generic={0x9, 0x31, "7df2a83a442059"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x1, 0xd2, 0x3}}, {{0x9, 0x5, 0x0, 0x10, 0x440, 0x4, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xc}, @generic={0x11, 0x11, "2c59b174efc38822a259d9528eb782"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x3, 0xe0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x2, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0xf, 0x3, 0x6a, [@generic={0x2, 0xf}]}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0x7, 0x2, 0x40}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x40, 0xff, 0xc}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xd8, 0xf, 0xe}}]}}, {{0x9, 0x4, 0x5f, 0x7, 0x4, 0x28, 0xc4, 0x6d, 0x1, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "e008"}, {0x5, 0x24, 0x0, 0xb4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4858, 0x3ff, 0x5}, {0x6, 0x24, 0x1a, 0xd3cd, 0x24}}, @generic={0x51, 0xe, "472749c4a6f74ee234d198fab7c4c4f23c14d43d4d83533677d3cbf0382066546a3968e2c5676107c40961a02213c7275a6eca8b994c65562c8180a987ccb5e3f817ed51a384459b540ac239755e08"}], [{{0x9, 0x5, 0x2, 0xc, 0x10, 0x5, 0x0, 0x8, [@generic={0x47, 0xb, "23e19eac7c4a3489cb3a731a90624b8e73bfdf856cfa40117f273f1b4be4488824c720c7bf176255f4932433828090b6b2b36bec9924ebe61b935375f6b2622041c4c6d566"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1c, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x0, 0x7, 0xb, [@generic={0x2, 0x5}]}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0x7, 0x5, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x2}]}}, {{0x9, 0x5, 0x180, 0x10, 0x10, 0x2e, 0x9, 0x1d}}]}}, {{0x9, 0x4, 0x13, 0x10, 0x2, 0xff, 0xff, 0xff, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x3250, 0x1}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0xf9, "865a66de3f"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x3, 0xf8, 0x7b, 0x9d, 0x17}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0x3, 0x8, "d605"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x1ff, 0x5, 0x81, 0x2, 0xf7, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x301, 0x2, 0x1, 0x3}]}, @generic={0xbd, 0x8, "4d85a62b0df506678507e76eeb9d5d39171a41265b5ea567db43b60a80e20a5b449d9c1e536431f04b5e69d6394def46e726cb2caa8be862077836544c6af1c10335a2897189d89c73dcb4589db8f889feb02a39564380805557a3337981cad621806a6dbd458111ff5738e69e7e2fa16a1ef84e6496517a6e082329b9ed18c5d0ed216bcbc0cdf6ebab41528b2aee90415de034e2e65f49b09b15e5a01a8c587643ff1dd43a6e3fcbabbe95258c702a66944b4e7c58407fbec825"}], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x3, 0x0, 0x6}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x4, 0x7f, 0x6}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xf4, 0x7, 0x3, 0xff, 0x8}, 0x13d, &(0x7f0000000480)={0x5, 0xf, 0x13d, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc2, 0x10, 0x6, 0x0, 0x8}, @generic={0xe2, 0x10, 0xa, "436272693905675f34e340f4784183e2e9c7313fc77d2055db8845f7046c40b36d29535c3f4b5afed9f7ab757118cd0ace013ce47035afb79c704991d74dfff2b1fe41fcad98f34f80412f66f495f3df82c906323322c1bee7719e082b76cbd68432a6f0ab19166b0512e846118967c7fdc69957c6a30688b1a27bbefd13cec3c8545c38919761963fbea05176047ceef672f2c3e86c72312f2da4613e50d0af4d89f59b6581d5617d6ee67f6bc4e67571c89ee12ec0bb4ec42c22dbadd2513c308fe6b7a53125566fd1dcebc8a12cf5100ffb463567c5a435b1756e472674"}, @generic={0x3a, 0x10, 0x4, "b747f92b85fdaab309dac01450da4cbe8517018059ea763c19376c5cbca2fef4bfbace4ad570b23bbcac9ed501f8ade30d53729fceb2a4"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x8, 0x7b9}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42a}}, {0x2d, &(0x7f0000000180)=@string={0x2d, 0x3, "574850bc6bb5bb1d096d59f437e1b75fab4297fc1dde64144a125f2e498857ffb86b91f0a1462efb0b1f9e"}}]}) 1.317704732s ago: executing program 7 (id=498): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x9, 0x2, 0x1, 0x2a8, 0xfffffff8, 0x8}, &(0x7f00000000c0)=0x20) 1.076204075s ago: executing program 7 (id=499): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 1.074628746s ago: executing program 6 (id=500): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000002440)=@delchain={0x34, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_rsvp6={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.011537261s ago: executing program 0 (id=501): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x6000) stat(0x0, 0x0) mmap(&(0x7f0000898000/0x2000)=nil, 0x2000, 0x3, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8088e3ad132bc192, 0x4002011, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x808, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r0, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0, 0x0) 577.766417ms ago: executing program 3 (id=502): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) 410.865992ms ago: executing program 6 (id=503): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x1]}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x1}}, 0x18) sendmsg$kcm(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {&(0x7f0000000100)="c1f76f2923", 0x5}], 0x2}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000007060103000000ed1b5ca5c504cc000000000000000008050001000700000005"], 0x24}, 0x1, 0x0, 0x0, 0x64040851}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 0s ago: executing program 7 (id=504): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000300000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. [ 89.156459][ T5781] cgroup: Unknown subsys name 'net' [ 89.397716][ T5781] cgroup: Unknown subsys name 'cpuset' [ 89.453015][ T5781] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.370538][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.995867][ T1237] cfg80211: failed to load regulatory.db [ 93.844410][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.845643][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.847579][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.852168][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.875835][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.879225][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.882544][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.885600][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.900913][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.928285][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.930422][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.934863][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.938280][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.981791][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.998163][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.998906][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.001973][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.032245][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.036698][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.037407][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.051977][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.072738][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.076531][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.103421][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.113530][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.944212][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 95.037474][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 95.049057][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 95.196116][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 95.235828][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 95.397269][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.398323][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.398489][ T5799] bridge_slave_0: entered allmulticast mode [ 95.400466][ T5799] bridge_slave_0: entered promiscuous mode [ 95.486824][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.486929][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.487297][ T5799] bridge_slave_1: entered allmulticast mode [ 95.489093][ T5799] bridge_slave_1: entered promiscuous mode [ 95.586107][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.586222][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.586355][ T5794] bridge_slave_0: entered allmulticast mode [ 95.588129][ T5794] bridge_slave_0: entered promiscuous mode [ 95.621352][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.621477][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.621856][ T5793] bridge_slave_0: entered allmulticast mode [ 95.644199][ T5793] bridge_slave_0: entered promiscuous mode [ 95.674853][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.674972][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.675106][ T5794] bridge_slave_1: entered allmulticast mode [ 95.676998][ T5794] bridge_slave_1: entered promiscuous mode [ 95.711537][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.711664][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.711797][ T5793] bridge_slave_1: entered allmulticast mode [ 95.734379][ T5793] bridge_slave_1: entered promiscuous mode [ 95.739754][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.812529][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.900209][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.900409][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.900935][ T5803] bridge_slave_0: entered allmulticast mode [ 95.906891][ T5803] bridge_slave_0: entered promiscuous mode [ 95.957367][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.957476][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.957605][ T5800] bridge_slave_0: entered allmulticast mode [ 95.959397][ T5800] bridge_slave_0: entered promiscuous mode [ 95.991782][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.992027][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.992387][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.992563][ T5803] bridge_slave_1: entered allmulticast mode [ 95.996017][ T5805] Bluetooth: hci2: command tx timeout [ 96.004859][ T5803] bridge_slave_1: entered promiscuous mode [ 96.027823][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.055756][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.055892][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.056080][ T5800] bridge_slave_1: entered allmulticast mode [ 96.058225][ T5800] bridge_slave_1: entered promiscuous mode [ 96.072471][ T5805] Bluetooth: hci1: command tx timeout [ 96.072879][ T5805] Bluetooth: hci0: command tx timeout [ 96.106142][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.108680][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.110826][ T5799] team0: Port device team_slave_0 added [ 96.152508][ T5796] Bluetooth: hci3: command tx timeout [ 96.211211][ T5799] team0: Port device team_slave_1 added [ 96.232350][ T5796] Bluetooth: hci4: command tx timeout [ 96.234083][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.292696][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.295532][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.297601][ T5794] team0: Port device team_slave_0 added [ 96.300201][ T5793] team0: Port device team_slave_0 added [ 96.352020][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.378842][ T5794] team0: Port device team_slave_1 added [ 96.380848][ T5793] team0: Port device team_slave_1 added [ 96.381835][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.381846][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.381866][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.499226][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.499240][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.499263][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.549038][ T5803] team0: Port device team_slave_0 added [ 96.605595][ T5800] team0: Port device team_slave_0 added [ 96.607995][ T5803] team0: Port device team_slave_1 added [ 96.608728][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.608739][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.608760][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.609964][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.609979][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.610007][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.714178][ T5800] team0: Port device team_slave_1 added [ 96.733029][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.733042][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.733062][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.734151][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.734162][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.734182][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.879214][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.879232][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.879259][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.474086][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.474100][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.474121][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.475976][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.475988][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.476008][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.498164][ T5799] hsr_slave_0: entered promiscuous mode [ 97.512726][ T5799] hsr_slave_1: entered promiscuous mode [ 97.536001][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.536052][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.536128][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.710895][ T5794] hsr_slave_0: entered promiscuous mode [ 97.711985][ T5794] hsr_slave_1: entered promiscuous mode [ 97.724150][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 97.724239][ T5794] Cannot create hsr debugfs directory [ 97.757235][ T5793] hsr_slave_0: entered promiscuous mode [ 97.758228][ T5793] hsr_slave_1: entered promiscuous mode [ 97.758916][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 97.758934][ T5793] Cannot create hsr debugfs directory [ 97.884842][ T5803] hsr_slave_0: entered promiscuous mode [ 97.886027][ T5803] hsr_slave_1: entered promiscuous mode [ 97.886736][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 97.886754][ T5803] Cannot create hsr debugfs directory [ 97.937909][ T5800] hsr_slave_0: entered promiscuous mode [ 97.938868][ T5800] hsr_slave_1: entered promiscuous mode [ 97.939530][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 97.939548][ T5800] Cannot create hsr debugfs directory [ 98.072506][ T5796] Bluetooth: hci2: command tx timeout [ 98.152469][ T5796] Bluetooth: hci0: command tx timeout [ 98.152505][ T5796] Bluetooth: hci1: command tx timeout [ 98.232418][ T5805] Bluetooth: hci3: command tx timeout [ 98.323229][ T5805] Bluetooth: hci4: command tx timeout [ 98.894378][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.931811][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.967361][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.020760][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.111033][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.168906][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.208467][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.264174][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.391519][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.422804][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.452350][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.507103][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.637447][ T5803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.674543][ T5803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.718038][ T5803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.776863][ T5803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.919457][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.957038][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.006368][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.006679][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.060982][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.150035][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.152509][ T5805] Bluetooth: hci2: command tx timeout [ 100.208204][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.223979][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.224137][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.234502][ T5805] Bluetooth: hci1: command tx timeout [ 100.234537][ T5805] Bluetooth: hci0: command tx timeout [ 100.280160][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.280303][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.313666][ T5796] Bluetooth: hci3: command tx timeout [ 100.363293][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.385962][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.392589][ T5796] Bluetooth: hci4: command tx timeout [ 100.415282][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.415375][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.457411][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.457640][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.519597][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.558958][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.571304][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.571481][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.625747][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.625926][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.718060][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.740078][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.786042][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.786144][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.850274][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.850409][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.914551][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.975618][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.975761][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.028811][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.028981][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.146996][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.365490][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.466771][ T5799] veth0_vlan: entered promiscuous mode [ 101.542134][ T5799] veth1_vlan: entered promiscuous mode [ 101.623816][ T5794] veth0_vlan: entered promiscuous mode [ 101.672107][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.691109][ T5794] veth1_vlan: entered promiscuous mode [ 101.778697][ T5799] veth0_macvtap: entered promiscuous mode [ 101.800150][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.834945][ T5799] veth1_macvtap: entered promiscuous mode [ 101.914379][ T5794] veth0_macvtap: entered promiscuous mode [ 101.956107][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.957763][ T5794] veth1_macvtap: entered promiscuous mode [ 101.961782][ T5793] veth0_vlan: entered promiscuous mode [ 101.988278][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.008374][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.058108][ T5793] veth1_vlan: entered promiscuous mode [ 102.093348][ T3536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.097042][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.100820][ T3536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.133956][ T3536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.140088][ T3536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.173184][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.232407][ T5796] Bluetooth: hci2: command tx timeout [ 102.255490][ T3536] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.260108][ T3536] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.281239][ T3536] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.312574][ T5805] Bluetooth: hci1: command tx timeout [ 102.312631][ T5796] Bluetooth: hci0: command tx timeout [ 102.355122][ T3536] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.392448][ T5796] Bluetooth: hci3: command tx timeout [ 102.482941][ T5796] Bluetooth: hci4: command tx timeout [ 102.560916][ T5793] veth0_macvtap: entered promiscuous mode [ 102.588806][ T5800] veth0_vlan: entered promiscuous mode [ 102.640454][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.640481][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.661023][ T5793] veth1_macvtap: entered promiscuous mode [ 102.734411][ T5800] veth1_vlan: entered promiscuous mode [ 102.776061][ T5803] veth0_vlan: entered promiscuous mode [ 102.782449][ T1285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.782470][ T1285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.817639][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.861850][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.870706][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.870729][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.912151][ T5803] veth1_vlan: entered promiscuous mode [ 102.942453][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.942926][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.942946][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.947543][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.005897][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.022833][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.106538][ T5800] veth0_macvtap: entered promiscuous mode [ 103.198980][ T5800] veth1_macvtap: entered promiscuous mode [ 103.357845][ T5803] veth0_macvtap: entered promiscuous mode [ 103.463687][ T5803] veth1_macvtap: entered promiscuous mode [ 103.481601][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.481624][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.506151][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.578741][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.690729][ T150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.698395][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.708756][ T150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.745000][ T150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.745867][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.745886][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.801862][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.911154][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.935663][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.102319][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 104.111283][ T10] usb 1-1: config 4 has an invalid interface number: 9 but max is 0 [ 104.111314][ T10] usb 1-1: config 4 has no interface number 0 [ 104.111348][ T10] usb 1-1: config 4 interface 9 has no altsetting 0 [ 104.116321][ T10] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 104.116353][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.116375][ T10] usb 1-1: Product: syz [ 104.116391][ T10] usb 1-1: Manufacturer: syz [ 104.116407][ T10] usb 1-1: SerialNumber: syz [ 104.289241][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.292371][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.060751][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.092420][ T3536] usb 1-1: Failed to submit usb control message: -71 [ 105.092461][ T3536] usb 1-1: unable to send the bmi data to the device: -71 [ 105.092481][ T3536] usb 1-1: unable to get target info from device [ 105.092509][ T3536] usb 1-1: could not get target info (-71) [ 105.092544][ T3536] usb 1-1: could not probe fw (-71) [ 105.095669][ T10] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 105.193203][ T10] usb 1-1: USB disconnect, device number 2 [ 105.223278][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.483387][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 106.998079][ T1356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.998103][ T1356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.064308][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.064333][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.262364][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.262386][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.710391][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.710414][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.342552][ T5967] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.515766][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.515817][ T5967] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 113.515842][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.558876][ T5967] usb 2-1: config 0 descriptor?? [ 114.074686][ T5967] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 114.185785][ T5959] process 'syz.1.18' launched '/dev/fd/3' with NULL argv: empty string added [ 114.349650][ T5983] fuse: Unknown parameter 'user_i00000000000000000000' [ 115.611312][ T5967] lenovo 0003:17EF:6047.0001: Failed to switch F7/9/11 mode: -71 [ 115.615506][ T5967] lenovo 0003:17EF:6047.0001: Failed to switch middle button: -71 [ 115.616095][ T5967] lenovo 0003:17EF:6047.0001: Fn-lock setting failed: -71 [ 115.639748][ T5967] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 115.717918][ T5967] usb 2-1: USB disconnect, device number 2 [ 116.291535][ T5998] ======================================================= [ 116.291535][ T5998] WARNING: The mand mount option has been deprecated and [ 116.291535][ T5998] and is ignored by this kernel. Remove the mand [ 116.291535][ T5998] option from the mount to silence this warning. [ 116.291535][ T5998] ======================================================= [ 116.310779][ T5998] evm: overlay not supported [ 116.599191][ T6001] fido_id[6001]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 116.682541][ T5996] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 117.814576][ T6007] overlayfs: missing 'lowerdir' [ 120.917148][ T6021] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 122.599921][ T6030] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.097227][ T1237] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 123.215953][ T6028] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 123.345586][ T1237] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.345644][ T1237] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.379536][ T1237] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 123.379567][ T1237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 123.379589][ T1237] usb 1-1: Product: syz [ 123.379605][ T1237] usb 1-1: Manufacturer: syz [ 123.379620][ T1237] usb 1-1: SerialNumber: syz [ 124.318754][ T1237] usb 1-1: config 0 descriptor?? [ 124.386333][ T1237] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 124.386427][ T1237] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 124.386964][ T1237] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 124.666691][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.667376][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.084970][ T5876] usb 1-1: USB disconnect, device number 3 [ 127.861257][ T6066] overlayfs: missing 'lowerdir' [ 128.136269][ T6065] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 131.528076][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'. [ 133.876475][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.876598][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.599691][ T5876] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 136.594239][ T6124] Zero length message leads to an empty skb [ 137.533759][ T6127] overlayfs: missing 'lowerdir' [ 137.951434][ T6126] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 138.175234][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.175292][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.180924][ T5876] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 138.180956][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 138.180978][ T5876] usb 4-1: Product: syz [ 138.180994][ T5876] usb 4-1: Manufacturer: syz [ 138.181009][ T5876] usb 4-1: SerialNumber: syz [ 139.151695][ T5876] usb 4-1: config 0 descriptor?? [ 139.207582][ T6135] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.307312][ T5876] usb 4-1: can't set config #0, error -71 [ 141.351819][ T5876] usb 4-1: USB disconnect, device number 2 [ 142.882256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 142.969483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 143.113035][ T5876] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 143.292272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.321954][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 144.832197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.832245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.832282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.832451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.832489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.832526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.832562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 148.396116][ T5876] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.401985][ T5876] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 148.402015][ T5876] usb 3-1: chopping to 0 config(s) [ 148.402047][ T5876] usb 3-1: can't read configurations, error -32 [ 148.562345][ T5876] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 148.702336][ T5876] usb 3-1: device descriptor read/64, error -32 [ 148.822480][ T5876] usb usb3-port1: attempt power cycle [ 149.772582][ T5876] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 149.792640][ T5876] usb 3-1: device descriptor read/8, error -32 [ 150.857525][ T5876] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.859042][ T6198] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 150.872964][ T5876] usb 3-1: device descriptor read/8, error -32 [ 150.997321][ T5876] usb usb3-port1: unable to enumerate USB device [ 153.918726][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 156.641931][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.658753][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.660280][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.661628][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.663340][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.088906][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 158.283726][ T6240] syz.3.92 uses obsolete (PF_INET,SOCK_PACKET) [ 158.547125][ T5879] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 158.724416][ T5805] Bluetooth: hci5: command tx timeout [ 159.473537][ T5879] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.797327][ T5805] Bluetooth: hci5: command tx timeout [ 160.991727][ T6254] fido_id[6254]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 162.991757][ T5805] Bluetooth: hci5: command tx timeout [ 165.130418][ T5805] Bluetooth: hci5: command tx timeout [ 165.755404][ T6229] chnl_net:caif_netlink_parms(): no params data found [ 167.200722][ T6229] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.218425][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.218742][ T6229] bridge_slave_0: entered allmulticast mode [ 168.221863][ T6229] bridge_slave_0: entered promiscuous mode [ 168.226338][ T6229] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.226557][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.226759][ T6229] bridge_slave_1: entered allmulticast mode [ 168.229481][ T6229] bridge_slave_1: entered promiscuous mode [ 170.376173][ T6229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.402773][ T6229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.634048][ T6229] team0: Port device team_slave_0 added [ 175.422956][ T6229] team0: Port device team_slave_1 added [ 175.679016][ T6312] netlink: 52 bytes leftover after parsing attributes in process `syz.0.112'. [ 176.044174][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.073377][ T6312] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.449648][ T6324] netlink: 88 bytes leftover after parsing attributes in process `syz.3.115'. [ 183.482909][ T6229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.482928][ T6229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.482959][ T6229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.513264][ T6229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.513283][ T6229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.513323][ T6229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.951123][ T6229] hsr_slave_0: entered promiscuous mode [ 184.952617][ T6229] hsr_slave_1: entered promiscuous mode [ 184.953545][ T6229] debugfs: 'hsr0' already exists in 'hsr' [ 184.953569][ T6229] Cannot create hsr debugfs directory [ 186.212694][ T6346] netlink: 52 bytes leftover after parsing attributes in process `syz.0.121'. [ 186.213403][ T6347] netlink: 52 bytes leftover after parsing attributes in process `syz.4.123'. [ 186.214907][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.215287][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.851052][ T6362] netlink: 88 bytes leftover after parsing attributes in process `syz.0.126'. [ 192.459588][ T6229] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 193.536812][ T6229] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 193.665829][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.670016][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.672193][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.673382][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.701274][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.736823][ T6229] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 193.842152][ T6229] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.919178][ T5796] Bluetooth: hci0: command tx timeout [ 197.161000][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.161096][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.159682][ T5796] Bluetooth: hci0: command tx timeout [ 199.615847][ T6435] overlayfs: failed to resolve './file0': -2 [ 201.883409][ T5796] Bluetooth: hci0: command tx timeout [ 204.609860][ T5796] Bluetooth: hci0: command tx timeout [ 206.345862][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.781982][ T6469] netlink: 88 bytes leftover after parsing attributes in process `syz.4.155'. [ 210.665999][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.886822][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.011196][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.213505][ T6229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.288365][ T6229] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.326268][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.326491][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.367159][ T6375] chnl_net:caif_netlink_parms(): no params data found [ 215.471218][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.471391][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.907489][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.907582][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.907774][ T6375] bridge_slave_0: entered allmulticast mode [ 216.922899][ T6375] bridge_slave_0: entered promiscuous mode [ 217.113433][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.113567][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.114203][ T6375] bridge_slave_1: entered allmulticast mode [ 217.163864][ T6375] bridge_slave_1: entered promiscuous mode [ 217.384773][ T6535] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.172'. [ 217.594201][ T6375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.624275][ T6375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.625227][ T13] bridge_slave_1: left allmulticast mode [ 217.630018][ T13] bridge_slave_1: left promiscuous mode [ 217.651762][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.873119][ T13] bridge_slave_0: left allmulticast mode [ 217.873150][ T13] bridge_slave_0: left promiscuous mode [ 217.873397][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.937778][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.944552][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.954991][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.967620][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.968547][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.183138][ T5113] Bluetooth: hci1: command tx timeout [ 221.024285][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 221.024339][ T5113] Bluetooth: hci2: command 0x0406 tx timeout [ 221.160720][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.224880][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.258576][ T13] bond0 (unregistering): Released all slaves [ 222.909366][ T5796] Bluetooth: hci1: command tx timeout [ 224.760358][ T6375] team0: Port device team_slave_0 added [ 224.814581][ T6375] team0: Port device team_slave_1 added [ 225.083783][ T5796] Bluetooth: hci1: command tx timeout [ 226.641983][ T38] audit: type=1804 audit(1771868611.991:2): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.196" name="/newroot/58/file0" dev="tmpfs" ino=315 res=1 errno=0 [ 226.822720][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.822734][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.822755][ T6375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.082852][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.082866][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.082887][ T6375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.307341][ T5796] Bluetooth: hci1: command tx timeout [ 228.407982][ T13] hsr_slave_0: left promiscuous mode [ 228.451109][ T13] hsr_slave_1: left promiscuous mode [ 228.452551][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.452633][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.509241][ T6623] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 228.636818][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.636851][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.739529][ T13] veth1_macvtap: left promiscuous mode [ 228.739827][ T13] veth0_macvtap: left promiscuous mode [ 228.740126][ T13] veth1_vlan: left promiscuous mode [ 228.740418][ T13] veth0_vlan: left promiscuous mode [ 229.958082][ T5876] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 230.034127][ T13] team0 (unregistering): Port device team_slave_1 removed [ 230.081409][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'. [ 230.097772][ T13] team0 (unregistering): Port device team_slave_0 removed [ 230.154489][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.154528][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.156468][ T5876] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 230.156489][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 230.156503][ T5876] usb 5-1: Product: syz [ 230.156514][ T5876] usb 5-1: Manufacturer: syz [ 230.156524][ T5876] usb 5-1: SerialNumber: syz [ 230.205779][ T6653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.211'. [ 230.238906][ T5876] usb 5-1: config 0 descriptor?? [ 230.296101][ T5876] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 230.296192][ T5876] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 230.296725][ T5876] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 230.564034][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.586055][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.683155][ T6652] bond1 (unregistering): Released all slaves [ 230.819338][ T5876] usb 5-1: USB disconnect, device number 2 [ 231.059559][ T6375] hsr_slave_0: entered promiscuous mode [ 231.061011][ T6375] hsr_slave_1: entered promiscuous mode [ 231.064334][ T6375] debugfs: 'hsr0' already exists in 'hsr' [ 231.064362][ T6375] Cannot create hsr debugfs directory [ 232.235699][ T6537] chnl_net:caif_netlink_parms(): no params data found [ 232.329138][ T6699] netlink: 88 bytes leftover after parsing attributes in process `syz.0.219'. [ 234.477789][ T6375] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 235.110939][ T6375] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 235.176756][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'. [ 235.460587][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.460718][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.460966][ T6537] bridge_slave_0: entered allmulticast mode [ 235.484760][ T6537] bridge_slave_0: entered promiscuous mode [ 235.616087][ T6713] bond1 (unregistering): Released all slaves [ 235.712286][ T6375] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 235.771046][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.771256][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.771504][ T6537] bridge_slave_1: entered allmulticast mode [ 235.800672][ T6537] bridge_slave_1: entered promiscuous mode [ 235.816500][ T6375] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 236.134599][ T6537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.201385][ T5971] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 236.366818][ T6725] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 236.373633][ T6537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.406720][ T5971] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.406788][ T5971] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.441760][ T5971] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 236.441794][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 236.441816][ T5971] usb 5-1: Product: syz [ 236.441832][ T5971] usb 5-1: Manufacturer: syz [ 236.441848][ T5971] usb 5-1: SerialNumber: syz [ 236.499659][ T5971] usb 5-1: config 0 descriptor?? [ 236.540051][ T5971] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 236.540142][ T5971] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 236.540745][ T5971] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 236.585908][ T6725] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 236.615397][ T6537] team0: Port device team_slave_0 added [ 236.783742][ T6735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.784177][ T6735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.848682][ T6537] team0: Port device team_slave_1 added [ 237.001331][ T5876] usb 5-1: USB disconnect, device number 3 [ 237.301981][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.302000][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.302028][ T6537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.350469][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.350487][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.350517][ T6537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.892804][ T6537] hsr_slave_0: entered promiscuous mode [ 237.894329][ T6537] hsr_slave_1: entered promiscuous mode [ 237.901538][ T6537] debugfs: 'hsr0' already exists in 'hsr' [ 237.901570][ T6537] Cannot create hsr debugfs directory [ 239.600998][ T1237] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 239.632756][ T6771] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.642440][ T6771] bond1: (slave bond2): Enslaving as an active interface with an up link [ 239.698345][ T6768] vlan2: entered promiscuous mode [ 239.698369][ T6768] bond1: entered promiscuous mode [ 239.698383][ T6768] bond2: entered promiscuous mode [ 239.699995][ T6768] bond1: (slave vlan2): Opening slave failed [ 239.737851][ T6773] cgroup: fork rejected by pids controller in /syz0 [ 239.779568][ T1237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.779605][ T1237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.779645][ T1237] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 239.779670][ T1237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.799057][ T1237] usb 4-1: config 0 descriptor?? [ 240.280500][ T1237] hid-led 0003:1D34:000A.0003: unknown main item tag 0x0 [ 240.280539][ T1237] hid-led 0003:1D34:000A.0003: unknown main item tag 0x0 [ 240.280568][ T1237] hid-led 0003:1D34:000A.0003: unknown main item tag 0x0 [ 240.589770][ T6375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.594723][ T13] bridge_slave_1: left allmulticast mode [ 240.594749][ T13] bridge_slave_1: left promiscuous mode [ 240.594982][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.658835][ T1237] hid-led 0003:1D34:000A.0003: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 240.714476][ T13] bridge_slave_0: left allmulticast mode [ 240.714506][ T13] bridge_slave_0: left promiscuous mode [ 240.714753][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.789802][ T1237] hid-led 0003:1D34:000A.0003: Dream Cheeky Webmail Notifier initialized [ 240.791750][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.792360][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.429119][ T37] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 241.611704][ T37] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.611745][ T37] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 241.637011][ T37] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.637047][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.637069][ T37] usb 5-1: Product: syz [ 241.637084][ T37] usb 5-1: Manufacturer: syz [ 241.637100][ T37] usb 5-1: SerialNumber: syz [ 241.938845][ T7220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.987426][ T7220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.022202][ T37] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 242.047300][ T37] usb 5-1: USB disconnect, device number 4 [ 242.146506][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.233674][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.278032][ T13] bond0 (unregistering): Released all slaves [ 242.573030][ T37] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 242.746178][ T1237] usb 4-1: USB disconnect, device number 3 [ 242.764161][ T37] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 242.764194][ T37] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 242.764244][ T37] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.764269][ T37] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 242.764298][ T37] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.764327][ T37] usb 5-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.764372][ T37] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 242.764397][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.863518][ T13] hsr_slave_0: left promiscuous mode [ 242.907279][ T13] hsr_slave_1: left promiscuous mode [ 242.923141][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.952779][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.086176][ T37] usb 5-1: usb_control_msg returned -32 [ 243.086226][ T37] usbtmc 5-1:16.0: can't read capabilities [ 243.262804][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 244.843199][ T13] team0 (unregistering): Port device team_slave_1 removed [ 244.885148][ T13] team0 (unregistering): Port device team_slave_0 removed [ 245.249812][ T7233] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 245.461659][ T7234] bond1 (unregistering): Released all slaves [ 245.854295][ T7251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.251'. [ 245.903106][ T6375] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.010298][ T7255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.251'. [ 246.036299][ T37] usb 5-1: USB disconnect, device number 5 [ 246.127343][ T7251] bond1 (unregistering): Released all slaves [ 247.563569][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.563791][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.588867][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.589779][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.991111][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.258'. [ 249.196986][ T7275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.218987][ T7275] bond1: (slave bond2): Enslaving as an active interface with an up link [ 249.253797][ T7278] vlan2: entered promiscuous mode [ 249.253822][ T7278] bond1: entered promiscuous mode [ 249.253836][ T7278] bond2: entered promiscuous mode [ 249.276192][ T7278] bond1: (slave vlan2): Opening slave failed [ 250.848545][ T1237] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 251.015614][ T1237] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.015660][ T1237] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 251.065087][ T1237] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.065122][ T1237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.065144][ T1237] usb 4-1: Product: syz [ 251.065160][ T1237] usb 4-1: Manufacturer: syz [ 251.065175][ T1237] usb 4-1: SerialNumber: syz [ 251.121458][ T7289] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 251.340073][ T7287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.340656][ T7287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.374529][ T1237] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 251.402501][ T1237] usb 4-1: USB disconnect, device number 4 [ 251.486503][ T6537] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 251.872739][ T6537] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 251.905879][ T1237] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 251.957248][ T6537] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.070008][ T1237] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 252.070041][ T1237] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 252.070094][ T1237] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.070120][ T1237] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 252.070150][ T1237] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.070179][ T1237] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.070225][ T1237] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.070250][ T1237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.449985][ T1237] usb 4-1: usb_control_msg returned -32 [ 252.450037][ T1237] usbtmc 4-1:16.0: can't read capabilities [ 252.519060][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.632518][ T6537] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 253.386482][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.818713][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.948377][ T5989] usb 4-1: USB disconnect, device number 5 [ 257.113583][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.117651][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.138462][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.159058][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.159870][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 259.390295][ T5796] Bluetooth: hci5: command tx timeout [ 260.793855][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.603466][ T5796] Bluetooth: hci5: command tx timeout [ 261.753721][ T7376] siw: device registration error -23 [ 261.772593][ T7376] netlink: 14 bytes leftover after parsing attributes in process `syz.4.277'. [ 261.977012][ T7376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.052121][ T7376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.087154][ T7376] bond0 (unregistering): Released all slaves [ 262.224527][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.224607][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.922740][ T13] bridge_slave_1: left allmulticast mode [ 262.922767][ T13] bridge_slave_1: left promiscuous mode [ 262.922970][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.924361][ T38] audit: type=1804 audit(1771868645.937:3): pid=7395 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.282" name="/newroot/71/file0" dev="tmpfs" ino=393 res=1 errno=0 [ 263.019184][ T13] bridge_slave_0: left allmulticast mode [ 263.019214][ T13] bridge_slave_0: left promiscuous mode [ 263.019488][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.345295][ T5796] Bluetooth: hci5: command tx timeout [ 265.259601][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.334176][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.362296][ T13] bond0 (unregistering): Released all slaves [ 267.888937][ T6537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.515573][ T5796] Bluetooth: hci5: command tx timeout [ 268.981139][ T7344] chnl_net:caif_netlink_parms(): no params data found [ 269.186800][ T6537] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.085296][ T38] audit: type=1804 audit(1771868653.560:4): pid=7471 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.294" name="file0" dev="tmpfs" ino=551 res=1 errno=0 [ 271.354882][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.355179][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.636982][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.645770][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.019821][ T13] hsr_slave_0: left promiscuous mode [ 273.088078][ T13] hsr_slave_1: left promiscuous mode [ 273.089163][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.089190][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.140278][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.140323][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.282894][ T13] veth1_macvtap: left promiscuous mode [ 273.282970][ T13] veth0_macvtap: left promiscuous mode [ 273.283134][ T13] veth1_vlan: left promiscuous mode [ 273.283252][ T13] veth0_vlan: left promiscuous mode [ 277.909874][ T13] team0 (unregistering): Port device team_slave_1 removed [ 277.973140][ T13] team0 (unregistering): Port device team_slave_0 removed [ 278.207671][ T7344] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.207774][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.207962][ T7344] bridge_slave_0: entered allmulticast mode [ 278.210204][ T7344] bridge_slave_0: entered promiscuous mode [ 278.269178][ T7344] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.269317][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.269563][ T7344] bridge_slave_1: entered allmulticast mode [ 278.291658][ T7344] bridge_slave_1: entered promiscuous mode [ 281.216259][ T7344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.274312][ T7344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.660261][ T7536] overlayfs: failed to resolve './file0': -2 [ 282.467516][ T7344] team0: Port device team_slave_0 added [ 282.497692][ T7344] team0: Port device team_slave_1 added [ 282.744194][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.746711][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.747860][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.931564][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.931583][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.931614][ T7344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.036665][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.044840][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.054914][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.054932][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.054962][ T7344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.134678][ T38] audit: type=1804 audit(1771868664.823:5): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.313" name="/newroot/81/file0" dev="tmpfs" ino=442 res=1 errno=0 [ 284.642911][ T7344] hsr_slave_0: entered promiscuous mode [ 284.643941][ T7344] hsr_slave_1: entered promiscuous mode [ 284.674499][ T7344] debugfs: 'hsr0' already exists in 'hsr' [ 284.674533][ T7344] Cannot create hsr debugfs directory [ 285.384399][ T5796] Bluetooth: hci0: command tx timeout [ 285.740313][ T7591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.319'. [ 286.985240][ T7585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.991361][ T7585] bond0: (slave bond3): Enslaving as an active interface with an up link [ 287.007271][ T5796] Bluetooth: hci4: command 0x0406 tx timeout [ 287.086374][ T7588] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 287.118700][ T7591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.602023][ T5805] Bluetooth: hci0: command tx timeout [ 288.428595][ T7613] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 288.607686][ T38] audit: type=1804 audit(1771868669.967:6): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.329" name="/newroot/87/file0" dev="tmpfs" ino=477 res=1 errno=0 [ 296.532086][ T7692] netlink: 'syz.4.349': attribute type 1 has an invalid length. [ 297.661631][ T7703] fuse: Bad value for 'fd' [ 298.756231][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.349'. [ 298.758413][ T7693] 8021q: adding VLAN 0 to HW filter on device bond5 [ 298.760826][ T7693] bond4: (slave bond5): Enslaving as an active interface with an up link [ 299.045071][ T7692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.083720][ T7544] chnl_net:caif_netlink_parms(): no params data found [ 300.859222][ T7726] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 301.197340][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.197500][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.197759][ T7544] bridge_slave_0: entered allmulticast mode [ 301.201629][ T7544] bridge_slave_0: entered promiscuous mode [ 301.237129][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.237279][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.237543][ T7544] bridge_slave_1: entered allmulticast mode [ 301.240417][ T7544] bridge_slave_1: entered promiscuous mode [ 301.367772][ T13] bridge_slave_1: left allmulticast mode [ 301.367803][ T13] bridge_slave_1: left promiscuous mode [ 301.368046][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.740796][ T13] bridge_slave_0: left allmulticast mode [ 301.740830][ T13] bridge_slave_0: left promiscuous mode [ 301.741129][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.917764][ T7749] overlayfs: failed to clone upperpath [ 302.776779][ T13] bridge_slave_1: left allmulticast mode [ 302.776811][ T13] bridge_slave_1: left promiscuous mode [ 302.777070][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.957950][ T13] bridge_slave_0: left allmulticast mode [ 302.957983][ T13] bridge_slave_0: left promiscuous mode [ 302.958254][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.311876][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.370453][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.399161][ T13] bond0 (unregistering): Released all slaves [ 306.770877][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.824218][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.862089][ T13] bond0 (unregistering): Released all slaves [ 307.121327][ T7544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.161090][ T7544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.291736][ T7544] team0: Port device team_slave_0 added [ 307.299633][ T7344] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 307.384972][ T7544] team0: Port device team_slave_1 added [ 307.385661][ T7344] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.532961][ T7344] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 308.615380][ T7344] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 308.661536][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.661556][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.661586][ T7544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.774599][ T7788] fuse: Bad value for 'fd' [ 309.812235][ T7787] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.815834][ T7787] bond1: (slave bond2): Enslaving as an active interface with an up link [ 309.961619][ T7789] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 309.962905][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.962920][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.962951][ T7544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.838316][ T7816] fuse: Bad value for 'fd' [ 315.027910][ T13] hsr_slave_0: left promiscuous mode [ 315.079645][ T13] hsr_slave_1: left promiscuous mode [ 315.082871][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.384163][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.838919][ T13] hsr_slave_0: left promiscuous mode [ 320.903086][ T13] hsr_slave_1: left promiscuous mode [ 320.904438][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.947753][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.252122][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.263401][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.264735][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.268278][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.269298][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.522393][ T5796] Bluetooth: hci1: command tx timeout [ 323.752020][ T5805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.766386][ T5805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.782098][ T5805] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.783378][ T5805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.784377][ T5805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 323.907807][ T13] team0 (unregistering): Port device team_slave_1 removed [ 323.950488][ T13] team0 (unregistering): Port device team_slave_0 removed [ 324.677709][ T13] team0 (unregistering): Port device team_slave_1 removed [ 324.730933][ T13] team0 (unregistering): Port device team_slave_0 removed [ 325.116880][ T7544] hsr_slave_0: entered promiscuous mode [ 325.132355][ T7544] hsr_slave_1: entered promiscuous mode [ 325.140146][ T7544] debugfs: 'hsr0' already exists in 'hsr' [ 325.140175][ T7544] Cannot create hsr debugfs directory [ 325.766337][ T5796] Bluetooth: hci1: command tx timeout [ 326.066095][ T5796] Bluetooth: hci6: command tx timeout [ 328.322815][ T5796] Bluetooth: hci6: command tx timeout [ 328.550221][ T5796] Bluetooth: hci1: command tx timeout [ 328.552784][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.552854][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.860420][ T7900] syz.3.394 (7900) used greatest stack depth: 18760 bytes left [ 330.203277][ T7848] chnl_net:caif_netlink_parms(): no params data found [ 330.535354][ T5796] Bluetooth: hci6: command tx timeout [ 330.599786][ T7863] chnl_net:caif_netlink_parms(): no params data found [ 330.706778][ T5796] Bluetooth: hci1: command tx timeout [ 331.562671][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.562810][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.563029][ T7848] bridge_slave_0: entered allmulticast mode [ 331.565856][ T7848] bridge_slave_0: entered promiscuous mode [ 331.568925][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.569050][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.569240][ T7848] bridge_slave_1: entered allmulticast mode [ 331.572001][ T7848] bridge_slave_1: entered promiscuous mode [ 332.006294][ T7848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.073416][ T7848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.141818][ T7863] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.142026][ T7863] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.142235][ T7863] bridge_slave_0: entered allmulticast mode [ 332.171590][ T7863] bridge_slave_0: entered promiscuous mode [ 332.345297][ T7863] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.345398][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.345621][ T7863] bridge_slave_1: entered allmulticast mode [ 332.373910][ T7863] bridge_slave_1: entered promiscuous mode [ 332.381289][ T7848] team0: Port device team_slave_0 added [ 332.677697][ T7848] team0: Port device team_slave_1 added [ 332.758924][ T5796] Bluetooth: hci6: command tx timeout [ 333.269898][ T7863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.316562][ T7863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.317504][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.317520][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.317549][ T7848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.446277][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.446291][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.446312][ T7848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.717407][ T7544] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 334.832463][ T7863] team0: Port device team_slave_0 added [ 335.154752][ T7544] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 335.232153][ T7863] team0: Port device team_slave_1 added [ 335.236408][ T7544] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 336.471798][ T7544] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 336.843791][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.843808][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.843831][ T7863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.610620][ T7848] hsr_slave_0: entered promiscuous mode [ 337.612051][ T7848] hsr_slave_1: entered promiscuous mode [ 337.624620][ T7848] debugfs: 'hsr0' already exists in 'hsr' [ 337.624649][ T7848] Cannot create hsr debugfs directory [ 337.709944][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.709963][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.709994][ T7863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.767532][ T8022] fuse: Bad value for 'fd' [ 340.221306][ T8029] netlink: 48 bytes leftover after parsing attributes in process `syz.3.416'. [ 340.321851][ T8031] fuse: Bad value for 'fd' [ 340.690863][ T8029] netlink: 48 bytes leftover after parsing attributes in process `syz.3.416'. [ 341.411310][ T7863] hsr_slave_0: entered promiscuous mode [ 341.412683][ T7863] hsr_slave_1: entered promiscuous mode [ 341.413616][ T7863] debugfs: 'hsr0' already exists in 'hsr' [ 341.413641][ T7863] Cannot create hsr debugfs directory [ 342.697085][ T13] bridge_slave_1: left allmulticast mode [ 342.697117][ T13] bridge_slave_1: left promiscuous mode [ 342.697392][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.800083][ T13] bridge_slave_0: left allmulticast mode [ 342.800114][ T13] bridge_slave_0: left promiscuous mode [ 342.800449][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.418334][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.503924][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.590798][ T13] bond0 (unregistering): Released all slaves [ 343.878863][ T8068] netlink: 48 bytes leftover after parsing attributes in process `syz.0.425'. [ 343.930053][ T8068] netlink: 48 bytes leftover after parsing attributes in process `syz.0.425'. [ 344.561539][ T8075] overlayfs: failed to clone upperpath [ 345.944427][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.948217][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.957751][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.958955][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.960178][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.189584][ T8086] overlayfs: failed to clone upperpath [ 347.265495][ T8088] overlayfs: failed to clone upperpath [ 347.693843][ T13] hsr_slave_0: left promiscuous mode [ 348.042265][ T13] hsr_slave_1: left promiscuous mode [ 348.044534][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.079792][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.153623][ T5805] Bluetooth: hci4: command tx timeout [ 350.377138][ T5805] Bluetooth: hci4: command tx timeout [ 350.381378][ T13] team0 (unregistering): Port device team_slave_1 removed [ 350.487366][ T13] team0 (unregistering): Port device team_slave_0 removed [ 354.784076][ T5805] Bluetooth: hci4: command tx timeout [ 355.628859][ T8119] netlink: 'syz.3.436': attribute type 1 has an invalid length. [ 355.708117][ T8120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.710137][ T8120] bond3: (slave bond4): making interface the new active one [ 355.710915][ T8120] bond3: (slave bond4): Enslaving as an active interface with an up link [ 357.017610][ T5805] Bluetooth: hci4: command tx timeout [ 357.098757][ T8083] chnl_net:caif_netlink_parms(): no params data found [ 357.193892][ T7848] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 357.517647][ T7848] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 358.550514][ T7848] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 358.634596][ T7848] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 359.597111][ T8083] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.597359][ T8083] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.597580][ T8083] bridge_slave_0: entered allmulticast mode [ 359.601062][ T8083] bridge_slave_0: entered promiscuous mode [ 359.842991][ T8083] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.843138][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.843405][ T8083] bridge_slave_1: entered allmulticast mode [ 359.846498][ T8083] bridge_slave_1: entered promiscuous mode [ 359.962532][ T7863] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 360.178423][ T8083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.178506][ T7863] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 360.235657][ T8083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.242052][ T7863] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 360.425262][ T7863] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 360.592957][ T8083] team0: Port device team_slave_0 added [ 360.610965][ T8083] team0: Port device team_slave_1 added [ 360.984701][ T8083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.984721][ T8083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.984750][ T8083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.058059][ T8083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.058078][ T8083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.058109][ T8083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.502717][ T8083] hsr_slave_0: entered promiscuous mode [ 361.504163][ T8083] hsr_slave_1: entered promiscuous mode [ 361.505152][ T8083] debugfs: 'hsr0' already exists in 'hsr' [ 361.505178][ T8083] Cannot create hsr debugfs directory [ 361.582733][ T3574] bridge_slave_1: left allmulticast mode [ 361.582764][ T3574] bridge_slave_1: left promiscuous mode [ 361.583008][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.723660][ T3574] bridge_slave_0: left allmulticast mode [ 361.723692][ T3574] bridge_slave_0: left promiscuous mode [ 361.723968][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.805538][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.895948][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.971785][ T3574] bond0 (unregistering): Released all slaves [ 365.579126][ T3574] hsr_slave_0: left promiscuous mode [ 365.618347][ T8213] overlayfs: failed to clone upperpath [ 365.721929][ T3574] hsr_slave_1: left promiscuous mode [ 365.725331][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.773357][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.542107][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 366.606895][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 367.264035][ T8228] overlayfs: failed to clone upperpath [ 368.137937][ T7848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.428149][ T38] audit: type=1804 audit(1771868744.622:7): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.466" name="file0" dev="tmpfs" ino=879 res=1 errno=0 [ 368.458256][ T8243] netlink: 48 bytes leftover after parsing attributes in process `syz.3.467'. [ 368.459207][ T8243] netlink: 48 bytes leftover after parsing attributes in process `syz.3.467'. [ 368.464084][ T7848] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.528560][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.528721][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.773000][ T7863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.811284][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.815512][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.984465][ T8258] netlink: 144 bytes leftover after parsing attributes in process `syz.0.471'. [ 369.317133][ T8267] overlayfs: failed to clone upperpath [ 370.402263][ T7863] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.445865][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.446018][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.502878][ T1356] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.526112][ T1356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.666930][ T8277] fuse: Bad value for 'fd' [ 372.633770][ T8083] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 372.727838][ T8083] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 372.780154][ T8083] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 372.831196][ T8083] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 373.014862][ T7848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.158324][ T7863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.448686][ T8083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.506333][ T8083] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.541683][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.541837][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.683290][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.683439][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.332497][ T7848] veth0_vlan: entered promiscuous mode [ 374.382403][ T7848] veth1_vlan: entered promiscuous mode [ 374.496325][ T7863] veth0_vlan: entered promiscuous mode [ 374.558022][ T7863] veth1_vlan: entered promiscuous mode [ 374.604238][ T7848] veth0_macvtap: entered promiscuous mode [ 374.688421][ T7848] veth1_macvtap: entered promiscuous mode [ 374.789132][ T7863] veth0_macvtap: entered promiscuous mode [ 374.841096][ T7863] veth1_macvtap: entered promiscuous mode [ 374.872954][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.919226][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.949431][ T8083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.968688][ T143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.972021][ T143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.974659][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.003504][ T143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.054007][ T143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.074739][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.144596][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.173299][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.224452][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.274896][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.042482][ T8367] netlink: 52 bytes leftover after parsing attributes in process `syz.3.483'. [ 376.061237][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.066919][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.940077][ T8376] fuse: Bad value for 'fd' [ 378.054507][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.054530][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.265709][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.265735][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.372491][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.372514][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.623982][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.624003][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.653796][ T8083] veth0_vlan: entered promiscuous mode [ 379.760679][ T8083] veth1_vlan: entered promiscuous mode [ 379.967655][ T8083] veth0_macvtap: entered promiscuous mode [ 380.003926][ T8083] veth1_macvtap: entered promiscuous mode [ 380.935265][ T8083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.955234][ T8083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.112557][ T1356] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.128141][ T1442] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.185816][ T1442] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.218674][ T1442] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.424582][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.491'. [ 382.797202][ T8405] bond1 (unregistering): Released all slaves [ 382.836137][ T8416] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 382.836163][ T8416] ref_ctr increment failed for inode: 0x39e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888037b75940 [ 382.836340][ T38] audit: type=1804 audit(1771868758.101:8): pid=8416 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.493" name="file0" dev="tmpfs" ino=926 res=1 errno=0 [ 383.208152][ T8408] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 383.208192][ T8408] ref_ctr decrement failed for inode: 0x39e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888037b75940 [ 383.208259][ T8408] uprobe: syz.0.493:8408 failed to unregister, leaking uprobe [ 383.439564][ T8410] vlan2: entered promiscuous mode [ 383.439588][ T8410] erspan0: entered promiscuous mode [ 384.720092][ T6039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.720115][ T6039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.794247][ T38] audit: type=1804 audit(1771868759.915:9): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.499" name="/newroot/2/file0" dev="tmpfs" ino=28 res=1 errno=0 [ 384.991980][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.992002][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.279794][ T143] ODEBUG: Out of memory. ODEBUG disabled [ 385.936682][ C1] ------------[ cut here ]------------ [ 385.936699][ C1] 1 [ 385.936714][ C1] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#1: ktimers/1/29 [ 385.936766][ C1] Modules linked in: [ 385.936803][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 385.936830][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.936848][ C1] RIP: 0010:stub_timer+0xa/0x20 [ 385.936871][ C1] Code: 0f 94 c0 5b 41 5e e9 55 ed 74 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 385.936890][ C1] RSP: 0018:ffffc90000a3fa38 EFLAGS: 00010246 [ 385.936910][ C1] RAX: ffffffff81b095e9 RBX: 0000000080000000 RCX: ffff88801d2bbc80 [ 385.936928][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 385.936942][ C1] RBP: ffffc90000a3fb30 R08: 0000000000000000 R09: 0000000000000100 [ 385.936957][ C1] R10: dffffc0000000000 R11: ffffffff81b095e0 R12: 0000000000000001 [ 385.936973][ C1] R13: 0000000100001b36 R14: 1ffff92000147f4c R15: ffff88803a610458 [ 385.936989][ C1] FS: 0000000000000000(0000) GS:ffff888126443000(0000) knlGS:0000000000000000 [ 385.937007][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.937022][ C1] CR2: 00007f8ca79a9d40 CR3: 000000003d018000 CR4: 00000000003526f0 [ 385.937042][ C1] Call Trace: [ 385.937056][ C1] [ 385.937066][ C1] call_timer_fn+0x192/0x640 [ 385.937093][ C1] ? __pfx_stub_timer+0x10/0x10 [ 385.937113][ C1] ? call_timer_fn+0xd4/0x640 [ 385.937135][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 385.937156][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 385.937201][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.937232][ C1] ? __pfx_stub_timer+0x10/0x10 [ 385.937256][ C1] __run_timer_base+0x6a3/0x9f0 [ 385.937310][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 385.937371][ C1] run_timer_softirq+0xb7/0x170 [ 385.937421][ C1] handle_softirqs+0x1de/0x6f0 [ 385.937489][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 385.937526][ C1] run_ktimerd+0x69/0x100 [ 385.937563][ C1] smpboot_thread_fn+0x541/0xa50 [ 385.937607][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 385.937657][ C1] kthread+0x388/0x470 [ 385.937683][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 385.937717][ C1] ? __pfx_kthread+0x10/0x10 [ 385.937743][ C1] ret_from_fork+0x51e/0xb90 [ 385.937781][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 385.937813][ C1] ? __switch_to+0xc7d/0x1450 [ 385.937847][ C1] ? __pfx_kthread+0x10/0x10 [ 385.937874][ C1] ret_from_fork_asm+0x1a/0x30 [ 385.937916][ C1] [ 385.937933][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 385.937949][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 385.937974][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.937987][ C1] Call Trace: [ 385.937996][ C1] [ 385.938005][ C1] vpanic+0x56c/0xa60 [ 385.938041][ C1] ? __pfx__printk+0x10/0x10 [ 385.938067][ C1] ? __pfx_vpanic+0x10/0x10 [ 385.938100][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 385.938132][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 385.938174][ C1] panic+0xc5/0xd0 [ 385.938208][ C1] ? __pfx_panic+0x10/0x10 [ 385.938254][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 385.938284][ C1] __warn+0x315/0x4f0 [ 385.938317][ C1] ? stub_timer+0xa/0x20 [ 385.938340][ C1] ? stub_timer+0xa/0x20 [ 385.938369][ C1] __report_bug+0x29a/0x540 [ 385.938408][ C1] ? stub_timer+0xa/0x20 [ 385.938430][ C1] ? __pfx___report_bug+0x10/0x10 [ 385.938457][ C1] ? rcu_is_watching+0x15/0xb0 [ 385.938490][ C1] ? stub_timer+0xc/0x20 [ 385.938509][ C1] ? stub_timer+0xa/0x20 [ 385.938537][ C1] ? stub_timer+0xa/0x20 [ 385.938557][ C1] report_bug+0x16a/0x220 [ 385.938587][ C1] ? stub_timer+0xa/0x20 [ 385.938605][ C1] ? stub_timer+0xc/0x20 [ 385.938625][ C1] handle_bug+0x98/0x200 [ 385.938661][ C1] exc_invalid_op+0x1a/0x50 [ 385.938696][ C1] asm_exc_invalid_op+0x1a/0x20 [ 385.938720][ C1] RIP: 0010:stub_timer+0xa/0x20 [ 385.938740][ C1] Code: 0f 94 c0 5b 41 5e e9 55 ed 74 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 385.938759][ C1] RSP: 0018:ffffc90000a3fa38 EFLAGS: 00010246 [ 385.938779][ C1] RAX: ffffffff81b095e9 RBX: 0000000080000000 RCX: ffff88801d2bbc80 [ 385.938796][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 385.938810][ C1] RBP: ffffc90000a3fb30 R08: 0000000000000000 R09: 0000000000000100 [ 385.938825][ C1] R10: dffffc0000000000 R11: ffffffff81b095e0 R12: 0000000000000001 [ 385.938841][ C1] R13: 0000000100001b36 R14: 1ffff92000147f4c R15: ffff88803a610458 [ 385.938864][ C1] ? __pfx_stub_timer+0x10/0x10 [ 385.938887][ C1] ? stub_timer+0x9/0x20 [ 385.938915][ C1] ? stub_timer+0x9/0x20 [ 385.938933][ C1] call_timer_fn+0x192/0x640 [ 385.938956][ C1] ? __pfx_stub_timer+0x10/0x10 [ 385.938975][ C1] ? call_timer_fn+0xd4/0x640 [ 385.938997][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 385.939017][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 385.939062][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.939091][ C1] ? __pfx_stub_timer+0x10/0x10 [ 385.939115][ C1] __run_timer_base+0x6a3/0x9f0 [ 385.939167][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 385.939222][ C1] run_timer_softirq+0xb7/0x170 [ 385.939258][ C1] handle_softirqs+0x1de/0x6f0 [ 385.939302][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 385.939337][ C1] run_ktimerd+0x69/0x100 [ 385.939380][ C1] smpboot_thread_fn+0x541/0xa50 [ 385.939418][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 385.939465][ C1] kthread+0x388/0x470 [ 385.939490][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 385.939525][ C1] ? __pfx_kthread+0x10/0x10 [ 385.939551][ C1] ret_from_fork+0x51e/0xb90 [ 385.939588][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 385.939620][ C1] ? __switch_to+0xc7d/0x1450 [ 385.939654][ C1] ? __pfx_kthread+0x10/0x10 [ 385.939680][ C1] ret_from_fork_asm+0x1a/0x30 [ 385.939722][ C1] [ 385.940325][ C1] Kernel Offset: disabled