last executing test programs: 4m25.121040448s ago: executing program 1 (id=1422): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) r5 = syz_open_dev$vbi(&(0x7f00000024c0), 0x2, 0x2) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000002500)={0x9, 0x4, 0x800}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4m23.242756833s ago: executing program 1 (id=1426): rt_sigprocmask(0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_pidfd_open(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0xf0, 0x32, 0x1, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x4}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5040, 0x0) timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) 4m22.189522648s ago: executing program 1 (id=1428): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, r1, 0x5, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x488c0) 4m22.0556888s ago: executing program 1 (id=1430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000a00)={0xd44, {{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x3, [{{0x2, 0x4e23, @remote}}, {{0x2, 0x4e23, @private=0xa010100}}, {{0x2, 0x4e21, @multicast1}}]}, 0x210) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x94, 0x30, 0xb, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x7c, 0x1, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x40) 4m19.82393253s ago: executing program 1 (id=1438): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) writev(r1, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet(0x2b, 0x801, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) shutdown(r0, 0x1) unshare(0x6020400) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 4m18.40053095s ago: executing program 1 (id=1441): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) r3 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) lseek(r1, 0x4, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/247, 0xf7}], 0x1) 4m3.347755106s ago: executing program 32 (id=1441): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) r3 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) lseek(r1, 0x4, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/247, 0xf7}], 0x1) 3m0.419683607s ago: executing program 0 (id=1669): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc005}, 0x0) 3m0.2521228s ago: executing program 0 (id=1672): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000000c0603000000000001000000070000040900020073797a30000000000900020073797a32000000000900020073797a31000000000900020073797a32000000000500010007ddffff0800020073797a32000000000500010007000000"], 0x60}, 0x1, 0x0, 0x0, 0x24000041}, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) 3m0.110589802s ago: executing program 0 (id=1673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', 0x0}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000001c0)={0x9a, 0x206, 0x7, 0x7ff}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) unshare(0x68040200) 2m59.055663576s ago: executing program 0 (id=1679): ioperm(0x0, 0xf1, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)={0x1, 0xc8a3, 0x4, 0xf, 0x30000, 0xdb3}) r5 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746b", 0x4a, 0x11, 0x0, 0x0) 2m58.414720715s ago: executing program 0 (id=1681): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4004) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x2e8d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003, 0xab}, &(0x7f0000000300), 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x1, 0x8, 0x0, 0x0, @link_local}, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000800) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(0x0, r8) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'nicvf0\x00'}}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r9, 0x1, 0x78bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 2m56.939471855s ago: executing program 0 (id=1688): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x52, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "2d6cdae4e5a2e439a398174d9aa3517ccc216914d9458501bde9de4676fd83736a2d1a3ff9091b153f18a0b6cec3aa40ad2942f4e278c961282c7d81774993182bbf19a32cdc07fbcf44bb2fcda49e675e96aa275b1ba1c1657cbda31ccfb23f46e7f36195b4f5a8a87668e732d874c872b2b332bf212b4f86e668f41b1d6e607e1e719b6d3b336c57b8101d1939c6a93e5412e99409ebc33803180056b730ae2e3b39cf0ea107ef3ada48ea4e7ada0f236ba1b030651a3cf78329fcc7098e6d3e17c58bf58ccfb78cc776783df44068a691c9cf284f236b1e7b4edc9430ff66187273a4ffa43559280e1b14fb2f31c209da6874acc6ce1d"}}}, 0x102) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x40000002, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x8, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000000340)={0x5d, 0x0, 0x0, &(0x7f0000000280)=[0x2]}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) 2m41.403321588s ago: executing program 33 (id=1688): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x52, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "2d6cdae4e5a2e439a398174d9aa3517ccc216914d9458501bde9de4676fd83736a2d1a3ff9091b153f18a0b6cec3aa40ad2942f4e278c961282c7d81774993182bbf19a32cdc07fbcf44bb2fcda49e675e96aa275b1ba1c1657cbda31ccfb23f46e7f36195b4f5a8a87668e732d874c872b2b332bf212b4f86e668f41b1d6e607e1e719b6d3b336c57b8101d1939c6a93e5412e99409ebc33803180056b730ae2e3b39cf0ea107ef3ada48ea4e7ada0f236ba1b030651a3cf78329fcc7098e6d3e17c58bf58ccfb78cc776783df44068a691c9cf284f236b1e7b4edc9430ff66187273a4ffa43559280e1b14fb2f31c209da6874acc6ce1d"}}}, 0x102) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x40000002, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x8, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000000340)={0x5d, 0x0, 0x0, &(0x7f0000000280)=[0x2]}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) 21.055939742s ago: executing program 3 (id=2096): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) dup(r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000001040)={{0x5, 0x4, 0x3ff, 0x0, 'syz0\x00', 0x64a6}, 0x0, [0x3, 0x7, 0x2, 0x1, 0x6, 0x100, 0x9, 0x22, 0x10, 0x3ff, 0x8, 0x18, 0x4, 0x4, 0x0, 0x8000, 0x4, 0x8, 0x7, 0x5, 0x8, 0x200, 0x225a095e, 0x104, 0x0, 0x5, 0x341, 0x400, 0x100000001, 0x8, 0xd, 0x6, 0xffffffffffffff7e, 0x400100000001, 0x9, 0x0, 0x8000000000000000, 0x80000000200, 0x80000001, 0x8, 0xff, 0xffffffffffffff01, 0x3, 0x4, 0x4, 0x1, 0xbc8b, 0x6, 0x2, 0x5, 0x7, 0x8000000000000000, 0x8, 0x31f, 0xffffffffffffa334, 0x10001, 0xc1b, 0x545f, 0x4, 0x5, 0x3, 0x80000001, 0x4, 0x5, 0x7, 0x8, 0x4, 0x3, 0x2, 0x6, 0x1, 0x8001, 0x8000000000000001, 0x9c, 0xfffffffffffffff9, 0x3, 0x0, 0x6, 0x6, 0x48001, 0x6, 0x1, 0x9, 0x8, 0x10, 0xfffffffffffffe01, 0x3ff, 0x6, 0x0, 0x9, 0x1, 0xa4, 0x61, 0x1, 0x7, 0x2, 0x4, 0x4, 0x4, 0x9, 0x1, 0x1, 0xf, 0x2, 0x1, 0x1, 0x3, 0x8, 0x100, 0xf43, 0x2, 0x7fffffffffffffff, 0x7f, 0x6, 0x7f0a, 0x6, 0x1, 0xc, 0x6c, 0x6, 0x8000000000000000, 0xfffffffffffffffb, 0x4, 0x9dac, 0x100000000, 0xffffffffffffff18, 0x5, 0xbf2]}) syz_open_dev$sndctrl(&(0x7f0000000040), 0xfffffffffffffffc, 0x800) syz_open_dev$vim2m(0x0, 0xe6ba, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00y', @ANYRES16, @ANYBLOB="00082dbd7000fedbdf2546000000080001007063690011000200303030303a30303a31302e300000000008008e00020000000c008f00c6000000000000000c0090000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r7 = dup(r0) write$qrtrtun(r7, &(0x7f0000000140)="ec", 0x1) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000600), 0x80002, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000100)=0x6) 20.013150926s ago: executing program 3 (id=2099): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x1d0, 0x290, 0x290, 0x390, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xff, 'netdevsim0\x00', '\x00', {0xff}, {0xff}, 0xb8, 0x0, 0x40}, 0x0, 0x70, 0x428}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="81b035711ec5", 0xfc00, 0xe, [0xa, 0x27, 0x1b, 0x3d, 0x1e, 0xb, 0x2b, 0x0, 0x30, 0x1a, 0x23, 0x6, 0x31, 0x33, 0x36, 0x18], 0x2, 0x4, 0x9}}}, {{@ip={@local, @local, 0xff, 0xffffff00, 'netpci0\x00', 'wg1\x00', {}, {}, 0xc, 0x1, 0xa}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xff000000, 0xff000000, 'wg1\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x11e, 0x6, 0x4b}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xdc}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'ipvlan1\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x6c, 0x0, 0x41}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x3, 0xc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9b, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) syz_emit_ethernet(0x12, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffaaaaaa96aaaa81001f0088fb8cfc874dd0ead519b2cfdf35ca1fec9196615a1d48856f584d6bbe40d09c05e37d783c14d665f163e7a8f510d962b84a52f069c04fb0c2c9ae839f46230d0caa3c90ae8e527489ffdbd2fd6a3456353950922f812eefbd568efa019ce735f93f57860d4bd5f9a8940bdc2f1f6ecd49648e1bc26735d6a97e"], 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@deltaction={0x180, 0x31, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000003000000040001000500000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) mmap(&(0x7f0000121000/0x3000)=nil, 0x3000, 0x0, 0x8831, 0xffffffffffffffff, 0x16837000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 15.128646694s ago: executing program 2 (id=2101): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) tgkill(r1, r1, 0x2f) r4 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000200)=0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000340)=[0x0, 0x0], 0x2}) r6 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000000c0)) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4c841}, 0x8010) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000140)={r5, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000240)={r5, r7, 0x0, 0x401, 0xc4, 0x49, 0x169, 0x9, 0x10, 0x81, 0x6, 0xdc93}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) socket$nl_generic(0x10, 0x3, 0x10) 15.018430255s ago: executing program 4 (id=2102): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000005000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) kcmp(r0, r0, 0x2, r3, r1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000009c0), 0x183106, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0xffff, {"2c8b42d5bb6c7a3f461813a3c240739c"}, 0x80000000000, 0x2, 0x8000000000000001}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}}}, 0x118) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @local}}, 0xee55, 0x0, 0x400, 0x0, 0x32, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x8000000}}, 0x0, 0x0, 0x0, 0x7f, 0x8a}, 0x9c) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder-control\x00', 0x800, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000a00)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fd690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x9, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x1000000, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_pauseparam={0x12, 0x51a5, 0x80000000, 0x200}}) 13.968657179s ago: executing program 2 (id=2103): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000120001001000060000000000ac141400000000000000000000000000000000000000000014000d00e0000001000000c4a301dc76a492200000000000000000000000e210b89808cc97d56700"], 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioperm(0x376, 0x5, 0x10) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000000b40)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x0, 0x0, 0x34324258, 0x0, 0x0, [{}, {0x1}, {}, {0xfffffffe}]}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdd) 13.810101381s ago: executing program 3 (id=2104): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000480)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) 13.759875642s ago: executing program 4 (id=2106): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 13.599476824s ago: executing program 5 (id=2107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r3}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r4, 0x0, 0x2, 0x0, &(0x7f0000000940)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x3) syz_open_dev$vim2m(&(0x7f0000000240), 0xfffffffffffffff6, 0x2) 10.21534782s ago: executing program 6 (id=2108): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.547058989s ago: executing program 4 (id=2109): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) dup(r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000001040)={{0x5, 0x4, 0x3ff, 0x0, 'syz0\x00', 0x64a6}, 0x0, [0x3, 0x7, 0x2, 0x1, 0x6, 0x100, 0x9, 0x22, 0x10, 0x3ff, 0x8, 0x18, 0x4, 0x4, 0x0, 0x8000, 0x4, 0x8, 0x7, 0x5, 0x8, 0x200, 0x225a095e, 0x104, 0x0, 0x5, 0x341, 0x400, 0x100000001, 0x8, 0xd, 0x6, 0xffffffffffffff7e, 0x400100000001, 0x9, 0x0, 0x8000000000000000, 0x80000000200, 0x80000001, 0x8, 0xff, 0xffffffffffffff01, 0x3, 0x4, 0x4, 0x1, 0xbc8b, 0x6, 0x2, 0x5, 0x7, 0x8000000000000000, 0x8, 0x31f, 0xffffffffffffa334, 0x10001, 0xc1b, 0x545f, 0x4, 0x5, 0x3, 0x80000001, 0x4, 0x5, 0x7, 0x8, 0x4, 0x3, 0x2, 0x6, 0x1, 0x8001, 0x8000000000000001, 0x9c, 0xfffffffffffffff9, 0x3, 0x0, 0x6, 0x6, 0x48001, 0x6, 0x1, 0x9, 0x8, 0x10, 0xfffffffffffffe01, 0x3ff, 0x6, 0x0, 0x9, 0x1, 0xa4, 0x61, 0x1, 0x7, 0x2, 0x4, 0x4, 0x4, 0x9, 0x1, 0x1, 0xf, 0x2, 0x1, 0x1, 0x3, 0x8, 0x100, 0xf43, 0x2, 0x7fffffffffffffff, 0x7f, 0x6, 0x7f0a, 0x6, 0x1, 0xc, 0x6c, 0x6, 0x8000000000000000, 0xfffffffffffffffb, 0x4, 0x9dac, 0x100000000, 0xffffffffffffff18, 0x5, 0xbf2]}) syz_open_dev$sndctrl(&(0x7f0000000040), 0xfffffffffffffffc, 0x800) syz_open_dev$vim2m(0x0, 0xe6ba, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00y', @ANYRES16, @ANYBLOB="00082dbd7000fedbdf2546000000080001007063690011000200303030303a30303a31302e300000000008008e00020000000c008f00c6000000000000000c0090000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r7 = dup(r0) write$qrtrtun(r7, &(0x7f0000000140)="ec", 0x1) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000600), 0x80002, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000100)=0x6) 9.341953452s ago: executing program 5 (id=2110): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x8040) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @null, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) 9.337137982s ago: executing program 2 (id=2111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004801, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000300)={@hyper, 0x2}) 8.855407759s ago: executing program 6 (id=2112): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) prlimit64(r1, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4004) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_io_uring_setup(0x2e8d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003, 0xab}, &(0x7f0000000300), 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x1, 0x8, 0x0, 0x0, @link_local}, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000800) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(0x0, r9) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'nicvf0\x00'}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r10, 0x1, 0x78bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 8.838786089s ago: executing program 4 (id=2113): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) tgkill(r1, r1, 0x2f) r4 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000200)=0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000340)=[0x0, 0x0], 0x2}) r6 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000000c0)) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4c841}, 0x8010) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000140)={r5, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000240)={r5, r7, 0x0, 0x401, 0xc4, 0x49, 0x169, 0x9, 0x10, 0x81, 0x6, 0xdc93}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) socket$nl_generic(0x10, 0x3, 0x10) 8.812176329s ago: executing program 5 (id=2114): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x1d0, 0x290, 0x290, 0x390, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xff, 'netdevsim0\x00', '\x00', {0xff}, {0xff}, 0xb8, 0x0, 0x40}, 0x0, 0x70, 0x428}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="81b035711ec5", 0xfc00, 0xe, [0xa, 0x27, 0x1b, 0x3d, 0x1e, 0xb, 0x2b, 0x0, 0x30, 0x1a, 0x23, 0x6, 0x31, 0x33, 0x36, 0x18], 0x2, 0x4, 0x9}}}, {{@ip={@local, @local, 0xff, 0xffffff00, 'netpci0\x00', 'wg1\x00', {}, {}, 0xc, 0x1, 0xa}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xff000000, 0xff000000, 'wg1\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x11e, 0x6, 0x4b}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xdc}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'ipvlan1\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x6c, 0x0, 0x41}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x3, 0xc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9b, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) syz_emit_ethernet(0x12, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffaaaaaa96aaaa81001f0088fb8cfc874dd0ead519b2cfdf35ca1fec9196615a1d48856f584d6bbe40d09c05e37d783c14d665f163e7a8f510d962b84a52f069c04fb0c2c9ae839f46230d0caa3c90ae8e527489ffdbd2fd6a3456353950922f812eefbd568efa019ce735f93f57860d4bd5f9a8940bdc2f1f6ecd49648e1bc26735d6a97e"], 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a1"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@deltaction={0x180, 0x31, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000003000000040001000500000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) mmap(&(0x7f0000121000/0x3000)=nil, 0x3000, 0x0, 0x8831, 0xffffffffffffffff, 0x16837000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 8.0675072s ago: executing program 5 (id=2115): r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x7, 0x420042) ioctl$I2C_SLAVE(r0, 0x703, 0x206) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x150}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004074}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r3, &(0x7f00000005c0)=""/102392, 0x18ff8) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/prev\x00') read$ptp(r4, 0x0, 0x0) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) socket$inet6(0xa, 0x80001, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 7.847614933s ago: executing program 4 (id=2116): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000120001001000060000000000ac141400000000000000000000000000000000000000000014000d00e0000001000000c4a301dc76a492200000000000000000000000e210b89808cc97d56700"], 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioperm(0x376, 0x5, 0x10) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000000b40)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x0, 0x0, 0x34324258, 0x0, 0x0, [{}, {0x1}, {}, {0xfffffffe}]}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdd) 2.975265829s ago: executing program 6 (id=2117): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000005000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) kcmp(r0, r0, 0x2, r3, r1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000009c0), 0x183106, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0xffff, {"2c8b42d5bb6c7a3f461813a3c240739c"}, 0x80000000000, 0x2, 0x8000000000000001}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}}}, 0x118) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @local}}, 0xee55, 0x0, 0x400, 0x0, 0x32, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x8000000}}, 0x0, 0x0, 0x0, 0x7f, 0x8a}, 0x9c) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder-control\x00', 0x800, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000a00)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fd690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x9, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x1000000, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_pauseparam={0x12, 0x51a5, 0x80000000, 0x200}}) 2.88231071s ago: executing program 3 (id=2118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) truncate(0x0, 0xf000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, 0x0, 0x4000800) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000001c0)={0x2, &(0x7f00000002c0)=[{0x2, 0x0, 0xff}, {0x6, 0x8, 0x8, 0x8}]}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) 2.8820372s ago: executing program 2 (id=2119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1.881134824s ago: executing program 6 (id=2120): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x3}, 0x18) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.858125944s ago: executing program 3 (id=2121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r3}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r4, 0x0, 0x2, 0x0, &(0x7f0000000940)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x3) syz_open_dev$vim2m(&(0x7f0000000240), 0xfffffffffffffff6, 0x2) 1.763611536s ago: executing program 4 (id=2122): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.763300156s ago: executing program 2 (id=2123): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) dup(r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000001040)={{0x5, 0x4, 0x3ff, 0x0, 'syz0\x00', 0x64a6}, 0x0, [0x3, 0x7, 0x2, 0x1, 0x6, 0x100, 0x9, 0x22, 0x10, 0x3ff, 0x8, 0x18, 0x4, 0x4, 0x0, 0x8000, 0x4, 0x8, 0x7, 0x5, 0x8, 0x200, 0x225a095e, 0x104, 0x0, 0x5, 0x341, 0x400, 0x100000001, 0x8, 0xd, 0x6, 0xffffffffffffff7e, 0x400100000001, 0x9, 0x0, 0x8000000000000000, 0x80000000200, 0x80000001, 0x8, 0xff, 0xffffffffffffff01, 0x3, 0x4, 0x4, 0x1, 0xbc8b, 0x6, 0x2, 0x5, 0x7, 0x8000000000000000, 0x8, 0x31f, 0xffffffffffffa334, 0x10001, 0xc1b, 0x545f, 0x4, 0x5, 0x3, 0x80000001, 0x4, 0x5, 0x7, 0x8, 0x4, 0x3, 0x2, 0x6, 0x1, 0x8001, 0x8000000000000001, 0x9c, 0xfffffffffffffff9, 0x3, 0x0, 0x6, 0x6, 0x48001, 0x6, 0x1, 0x9, 0x8, 0x10, 0xfffffffffffffe01, 0x3ff, 0x6, 0x0, 0x9, 0x1, 0xa4, 0x61, 0x1, 0x7, 0x2, 0x4, 0x4, 0x4, 0x9, 0x1, 0x1, 0xf, 0x2, 0x1, 0x1, 0x3, 0x8, 0x100, 0xf43, 0x2, 0x7fffffffffffffff, 0x7f, 0x6, 0x7f0a, 0x6, 0x1, 0xc, 0x6c, 0x6, 0x8000000000000000, 0xfffffffffffffffb, 0x4, 0x9dac, 0x100000000, 0xffffffffffffff18, 0x5, 0xbf2]}) syz_open_dev$sndctrl(&(0x7f0000000040), 0xfffffffffffffffc, 0x800) syz_open_dev$vim2m(0x0, 0xe6ba, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00y', @ANYRES16, @ANYBLOB="00082dbd7000fedbdf2546000000080001007063690011000200303030303a30303a31302e300000000008008e00020000000c008f00c6000000000000000c0090000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r7 = dup(r0) write$qrtrtun(r7, &(0x7f0000000140)="ec", 0x1) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000600), 0x80002, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000100)=0x6) 1.747673466s ago: executing program 6 (id=2124): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x8040) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @null, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) 1.578392248s ago: executing program 5 (id=2125): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x1d0, 0x290, 0x290, 0x390, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xff, 'netdevsim0\x00', '\x00', {0xff}, {0xff}, 0xb8, 0x0, 0x40}, 0x0, 0x70, 0x428}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="81b035711ec5", 0xfc00, 0xe, [0xa, 0x27, 0x1b, 0x3d, 0x1e, 0xb, 0x2b, 0x0, 0x30, 0x1a, 0x23, 0x6, 0x31, 0x33, 0x36, 0x18], 0x2, 0x4, 0x9}}}, {{@ip={@local, @local, 0xff, 0xffffff00, 'netpci0\x00', 'wg1\x00', {}, {}, 0xc, 0x1, 0xa}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xff000000, 0xff000000, 'wg1\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x11e, 0x6, 0x4b}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xdc}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'ipvlan1\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x6c, 0x0, 0x41}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x3, 0xc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9b, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) syz_emit_ethernet(0x12, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffaaaaaa96aaaa81001f0088fb8cfc874dd0ead519b2cfdf35ca1fec9196615a1d48856f584d6bbe40d09c05e37d783c14d665f163e7a8f510d962b84a52f069c04fb0c2c9ae839f46230d0caa3c90ae8e527489ffdbd2fd6a3456353950922f812eefbd568efa019ce735f93f57860d4bd5f9a8940bdc2f1f6ecd49648e1bc26735d6a97e"], 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a1"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@deltaction={0x180, 0x31, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000003000000040001000500000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) mmap(&(0x7f0000121000/0x3000)=nil, 0x3000, 0x0, 0x8831, 0xffffffffffffffff, 0x16837000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 505.521873ms ago: executing program 3 (id=2126): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) tgkill(r1, r1, 0x2f) r4 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000200)=0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000340)=[0x0, 0x0], 0x2}) r6 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000000c0)) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4c841}, 0x8010) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000140)={r5, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000240)={r5, r7, 0x0, 0x401, 0xc4, 0x49, 0x169, 0x9, 0x10, 0x81, 0x6, 0xdc93}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) socket$nl_generic(0x10, 0x3, 0x10) 469.905893ms ago: executing program 2 (id=2127): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 419.709174ms ago: executing program 5 (id=2128): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x2, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800700000000000000000000000000000000000000000001d7aab1d96e9e7acd9987447a95f2aee6b3f6f4fde6a7644518f05434b32fdd348f0969631bee8b771b826e18aa54ff731d76a41dae473a4989d83605b7a28003f0fe082c4a5df047b424f5a2d453bd01cc5070572be7fa0e0bc3a506545643dabc0bb449fd20b48af613eb20373678614f41af35911158788c9c84ecc6916265fcf485a3aa65ad17a48"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='rpcgss_svc_seqno_bad\x00', r1}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_init_net_socket$ax25(0x3, 0x5, 0x6) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, 0x0, 0x0) connect$bt_rfcomm(r3, 0x0, 0x0) shutdown(r2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000180)={0x1f, @any, 0x4}, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000000c0), 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = accept(r6, 0x0, &(0x7f0000000240)) connect$pppl2tp(r8, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x2, 0x2, 0x3}}, 0x2e) 0s ago: executing program 6 (id=2129): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) prlimit64(r1, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4004) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_io_uring_setup(0x2e8d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003, 0xab}, &(0x7f0000000300), 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x1, 0x8, 0x0, 0x0, @link_local}, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000800) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(0x0, r9) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'nicvf0\x00'}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r10, 0x1, 0x78bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): ered blocking state [ 58.219856][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.236247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.245167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.254474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.263979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.272984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.282049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.291008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.300246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.309052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.317665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.327240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.335909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.344595][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.351697][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.374065][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.381892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.394326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.410102][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.428106][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.443067][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.460668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.469937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.478828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.486273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.495337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.504354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.513196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.521673][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.528747][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.536511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.548462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.580674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.591656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.608460][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.615537][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.624155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.632942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.643202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.647369][ T4215] Bluetooth: hci1: command 0x041b tx timeout [ 58.655449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.664237][ T4215] Bluetooth: hci0: command 0x041b tx timeout [ 58.671419][ T4215] Bluetooth: hci3: command 0x041b tx timeout [ 58.689888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.699248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.707082][ T4215] Bluetooth: hci4: command 0x041b tx timeout [ 58.709387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.713438][ T4215] Bluetooth: hci2: command 0x041b tx timeout [ 58.722646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.738479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.747594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.755558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.763476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.772488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.794241][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.804673][ T4176] device veth0_vlan entered promiscuous mode [ 58.813848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.822577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.831247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.839449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.849395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.863585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.872471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.881144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.891466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.900052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.909101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.923010][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.934498][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.954067][ T4176] device veth1_vlan entered promiscuous mode [ 58.963420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.973341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.983092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.991768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.000383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.055571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.071889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.083060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.092586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.115611][ T4168] device veth0_vlan entered promiscuous mode [ 59.131176][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.141305][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.150660][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.175490][ T4168] device veth1_vlan entered promiscuous mode [ 59.197353][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.205751][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.222937][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.234122][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.243769][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.269090][ T4176] device veth0_macvtap entered promiscuous mode [ 59.305778][ T4176] device veth1_macvtap entered promiscuous mode [ 59.316177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.324643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.333544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.342458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.350630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.358377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.365777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.389213][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.399453][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.417099][ T4168] device veth0_macvtap entered promiscuous mode [ 59.433188][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.445469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.455726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.466353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.478354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.487012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.495587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.504631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.525281][ T4168] device veth1_macvtap entered promiscuous mode [ 59.536462][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.546141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.563380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.574232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.587741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.596571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.608328][ T4175] device veth0_vlan entered promiscuous mode [ 59.619215][ T4176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.629322][ T4176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.638297][ T4176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.647411][ T4176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.663767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.672718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.690913][ T4175] device veth1_vlan entered promiscuous mode [ 59.729471][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.747607][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.759942][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.777628][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.791113][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.802713][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.811433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.820206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.828780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.837821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.846427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.855908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.864717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.873582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.892409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.901141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.928228][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.937494][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.946210][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.955426][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.969560][ T4170] device veth0_vlan entered promiscuous mode [ 59.976315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.984567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.045052][ T4170] device veth1_vlan entered promiscuous mode [ 60.055354][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.063990][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.073248][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.082008][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.091112][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.106392][ T4175] device veth0_macvtap entered promiscuous mode [ 60.121231][ T4167] device veth0_vlan entered promiscuous mode [ 60.146530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.155329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.164118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.174813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.182897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.199012][ T4175] device veth1_macvtap entered promiscuous mode [ 60.263696][ T4167] device veth1_vlan entered promiscuous mode [ 60.271246][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.284382][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.291856][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.308001][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.318380][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.330166][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.341656][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.354413][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.360007][ T4170] device veth0_macvtap entered promiscuous mode [ 60.368867][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.384254][ T4170] device veth1_macvtap entered promiscuous mode [ 60.397359][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.405408][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.414403][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.422380][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.434292][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.443371][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.451227][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.460221][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.469292][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.477448][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.506054][ T4167] device veth0_macvtap entered promiscuous mode [ 60.525072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.534626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.543712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.563985][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.569928][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.583290][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.586538][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.593894][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.611594][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.623129][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.660076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.668128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.677218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.687381][ T4167] device veth1_macvtap entered promiscuous mode [ 60.698872][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.710136][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.720437][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.731989][ T4215] Bluetooth: hci4: command 0x040f tx timeout [ 60.739867][ T4215] Bluetooth: hci3: command 0x040f tx timeout [ 60.744582][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.745971][ T4215] Bluetooth: hci0: command 0x040f tx timeout [ 60.756182][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.762724][ T4215] Bluetooth: hci1: command 0x040f tx timeout [ 60.778278][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.790616][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.806791][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.819270][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.830303][ T4215] Bluetooth: hci2: command 0x040f tx timeout [ 60.832814][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.847284][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.857281][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.868018][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.880615][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.890970][ T4175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.900262][ T4175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.909460][ T4175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.918819][ T4175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.931959][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.937346][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.943120][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.953650][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.966488][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.980456][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.989327][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.998252][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.009282][ T4170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.018453][ T4170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.027343][ T4170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.036042][ T4170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.130412][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.163395][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.175785][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.186955][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.197299][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.209015][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.219025][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.229840][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.241179][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.264981][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.276578][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.307052][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.317978][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.328297][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.341176][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.352577][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.363773][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.376269][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.463070][ T4233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.491460][ T4233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.540018][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.548871][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.553770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.574457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.583952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.600014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.752558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.825120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.021831][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.323136][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.449674][ T4167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.465985][ T4167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.485917][ T4167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.503658][ T4167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.518675][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.527349][ T4213] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.602057][ T4264] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.624341][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.698191][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.723220][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.766897][ T4213] usb 4-1: Using ep0 maxpacket: 16 [ 62.788034][ T4233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.796091][ T4233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.808013][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 62.826890][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 62.832983][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.840897][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 62.861596][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 62.893131][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 62.910078][ T4213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.936869][ T4213] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.977074][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.990203][ T4213] usb 4-1: config 0 interface 0 has no altsetting 0 [ 63.045836][ T4213] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 63.097320][ T4277] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 63.104192][ T4277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.114758][ T4277] vhci_hcd vhci_hcd.0: Device attached [ 63.133849][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.189368][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.205902][ T4213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.394049][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.497561][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.516198][ T4213] usb 4-1: config 0 descriptor?? [ 63.664653][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.681774][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.697346][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.708774][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 64.007888][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 64.017677][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 64.037743][ T4213] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 64.072160][ T4285] sctp: failed to load transform for md5: -2 [ 64.097275][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 64.106207][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 64.146280][ T4278] vhci_hcd: connection closed [ 64.149723][ T4294] vhci_hcd: stop threads [ 64.380887][ T4294] vhci_hcd: release socket [ 64.456987][ T4259] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 64.531514][ T4294] vhci_hcd: disconnect device [ 68.527141][ T4302] usb 4-1: USB disconnect, device number 2 [ 69.607060][ T4259] vhci_hcd: vhci_device speed not set [ 69.908113][ T4343] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.983073][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.004387][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.033777][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.065533][ T4343] device bridge_slave_0 left promiscuous mode [ 70.097991][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.161522][ T4343] device bridge_slave_1 left promiscuous mode [ 70.184998][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.238096][ T4343] bond0: (slave bond_slave_0): Releasing backup interface [ 70.292552][ T4343] bond0: (slave bond_slave_1): Releasing backup interface [ 70.439174][ T4343] team0: Port device team_slave_0 removed [ 70.552454][ T4343] team0: Port device team_slave_1 removed [ 70.572026][ T4343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.587045][ T4343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.615362][ T4343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.645272][ T4343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.198685][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.205236][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.449646][ T4343] syz.2.16 (4343) used greatest stack depth: 20032 bytes left [ 71.587973][ T4377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 72.314033][ T4390] netlink: 'syz.3.30': attribute type 10 has an invalid length. [ 72.391144][ T4391] tmpfs: Unknown parameter 'quota' [ 72.516418][ T4375] syz.1.23 uses obsolete (PF_INET,SOCK_PACKET) [ 72.542922][ T4375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 72.563022][ T4390] team0: Device ipvlan1 failed to register rx_handler [ 72.855814][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 74.876380][ T4434] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 75.004554][ T4439] device bond1 entered promiscuous mode [ 75.031683][ T4439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.428695][ T4462] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.489936][ T4470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'. [ 76.737039][ T4475] ksmbd: Unknown IPC event: 6, ignore. [ 81.410015][ T7] cfg80211: failed to load regulatory.db [ 83.160655][ T4531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.69'. [ 83.170653][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 84.536251][ T4546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'. [ 86.607377][ T4570] device bond1 entered promiscuous mode [ 86.613457][ T4581] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 86.614366][ T4570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.702392][ T4589] netlink: 56 bytes leftover after parsing attributes in process `syz.4.83'. [ 86.757186][ T4589] process 'syz.4.83' launched './file1' with NULL argv: empty string added [ 88.646923][ T4218] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.058883][ T4218] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 89.101596][ T4218] usb 3-1: config 0 interface 0 has no altsetting 0 [ 90.817200][ T4615] tipc: Started in network mode [ 90.822198][ T4615] tipc: Node identity 4, cluster identity 4711 [ 90.828600][ T4615] tipc: Node number set to 4 [ 91.620043][ T4218] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 91.655214][ T4218] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 91.721183][ T4218] usb 3-1: Product: syz [ 92.540268][ T4218] usb 3-1: config 0 descriptor?? [ 92.568221][ T4218] usb 3-1: can't set config #0, error -71 [ 92.624658][ T4218] usb 3-1: USB disconnect, device number 2 [ 93.102639][ T4649] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 93.299812][ T4655] netlink: 56 bytes leftover after parsing attributes in process `syz.0.96'. [ 93.805367][ T4629] overlayfs: missing 'lowerdir' [ 94.512306][ T4669] xt_l2tp: missing protocol rule (udp|l2tpip) [ 94.841514][ T4681] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.017947][ T4699] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.858001][ T4719] capability: warning: `syz.0.113' uses 32-bit capabilities (legacy support in use) [ 99.389282][ T4732] overlayfs: missing 'lowerdir' [ 99.994115][ T4734] xt_l2tp: missing protocol rule (udp|l2tpip) [ 100.143387][ T4739] Zero length message leads to an empty skb [ 101.519314][ T4738] IPv6: Can't replace route, no match found [ 102.152565][ T4747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 103.292993][ T4758] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.340098][ T4760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 104.057713][ T1108] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.356922][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 104.667772][ T1108] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 104.690225][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.737380][ T1108] usb 3-1: Product: syz [ 104.753480][ T1108] usb 3-1: Manufacturer: syz [ 104.773206][ T1108] usb 3-1: SerialNumber: syz [ 104.832638][ T1108] usb 3-1: config 0 descriptor?? [ 104.944601][ T1108] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 104.953794][ T1108] usb 3-1: setting power ON [ 104.959791][ T1108] dvb-usb: bulk message failed: -22 (2/0) [ 105.017485][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.049979][ T1108] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 105.060968][ T1108] usb 3-1: media controller created [ 105.157732][ T4765] dvb-usb: bulk message failed: -22 (3/0) [ 105.163700][ T4765] usb 3-1: gpio_write failed. [ 105.168570][ T4765] dvb-usb: bulk message failed: -22 (41/0) [ 105.237525][ T4772] overlayfs: missing 'lowerdir' [ 105.260276][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.282661][ T1108] usb 3-1: selecting invalid altsetting 6 [ 105.289038][ T1108] usb 3-1: digital interface selection failed (-22) [ 105.295705][ T1108] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 105.357188][ T1108] usb 3-1: setting power OFF [ 105.362879][ T1108] dvb-usb: bulk message failed: -22 (2/0) [ 105.378727][ T1108] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 105.388704][ T1108] (NULL device *): no alternate interface [ 105.927337][ T4185] Bluetooth: hci4: link tx timeout [ 105.938489][ T4185] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 107.258785][ T1108] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 107.338326][ T1108] usb 3-1: USB disconnect, device number 3 [ 107.338500][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 108.747063][ T4246] Bluetooth: hci4: command 0x0406 tx timeout [ 109.033914][ T4806] overlayfs: missing 'lowerdir' [ 111.652336][ T4852] xt_l2tp: missing protocol rule (udp|l2tpip) [ 111.939050][ T4856] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 113.097802][ T4866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 113.249739][ T4868] tipc: Started in network mode [ 113.254744][ T4868] tipc: Node identity 4, cluster identity 4711 [ 113.261018][ T4868] tipc: Node number set to 4 [ 113.934246][ T4883] xt_l2tp: missing protocol rule (udp|l2tpip) [ 114.763524][ T4185] Bluetooth: hci4: link tx timeout [ 114.770174][ T4185] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.469656][ T4900] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[4900] [ 118.295888][ T4915] xt_l2tp: missing protocol rule (udp|l2tpip) [ 118.444695][ T4925] ======================================================= [ 118.444695][ T4925] WARNING: The mand mount option has been deprecated and [ 118.444695][ T4925] and is ignored by this kernel. Remove the mand [ 118.444695][ T4925] option from the mount to silence this warning. [ 118.444695][ T4925] ======================================================= [ 118.479569][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.492490][ T4921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.173'. [ 118.523240][ T4925] ODEBUG: Out of memory. ODEBUG disabled [ 122.160954][ T4952] xt_l2tp: missing protocol rule (udp|l2tpip) [ 122.563348][ T4960] tipc: Started in network mode [ 122.568370][ T4960] tipc: Node identity 4, cluster identity 4711 [ 122.574601][ T4960] tipc: Node number set to 4 [ 123.587511][ T4968] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 123.602162][ T4970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.190'. [ 123.666534][ T4970] device bridge_slave_1 left promiscuous mode [ 123.699896][ T4970] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.729129][ T4970] device bridge_slave_0 left promiscuous mode [ 123.735431][ T4970] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.866977][ T4259] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 126.316352][ T4984] xt_l2tp: missing protocol rule (udp|l2tpip) [ 126.357692][ T4989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.196'. [ 126.377092][ T4259] usb 1-1: config 1 interface 0 has no altsetting 0 [ 127.316570][ T4259] usb 1-1: string descriptor 0 read error: -71 [ 127.356838][ T4259] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 127.502732][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.617375][ T4259] usb 1-1: can't set config #1, error -71 [ 127.631151][ T4259] usb 1-1: USB disconnect, device number 2 [ 129.265315][ T5024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'. [ 129.778111][ T5034] netlink: 56 bytes leftover after parsing attributes in process `syz.3.208'. [ 132.296680][ C1] sched: RT throttling activated [ 132.580019][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.586317][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.005873][ T4215] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.045341][ T5068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.828507][ T4215] usb 5-1: Using ep0 maxpacket: 16 [ 134.654489][ T4215] usb 5-1: device descriptor read/all, error -71 [ 134.750526][ T5080] xt_l2tp: missing protocol rule (udp|l2tpip) [ 135.344988][ T5084] netlink: 56 bytes leftover after parsing attributes in process `syz.3.222'. [ 135.898578][ T5092] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 136.180850][ T5099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.226'. [ 136.895204][ T5110] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.713173][ T5119] xt_l2tp: missing protocol rule (udp|l2tpip) [ 138.922012][ T5131] netlink: 56 bytes leftover after parsing attributes in process `syz.3.235'. [ 139.724340][ T5144] overlayfs: failed to resolve './file1': -2 [ 142.215937][ T5162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.351567][ T5174] kAFS: No cell specified [ 145.229839][ T5189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 146.000830][ T5199] netlink: 'syz.3.258': attribute type 10 has an invalid length. [ 146.020884][ T5199] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.053477][ T5199] bond0: (slave team0): Enslaving as an active interface with an up link [ 146.082674][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 147.326233][ T4185] Bluetooth: hci4: link tx timeout [ 147.331549][ T4185] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 147.339969][ T4185] Bluetooth: hci4: link tx timeout [ 147.345095][ T4185] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.144632][ T5227] device bond2 entered promiscuous mode [ 148.150486][ T5227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.179559][ T5234] ptrace attach of "./syz-executor exec"[4175] was attempted by "./syz-executor exec"[5234] [ 148.481777][ T5247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 148.635597][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 149.545448][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 150.645386][ T5274] device bond2 entered promiscuous mode [ 150.645544][ T5274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.731176][ T5278] overlayfs: failed to resolve './file1': -2 [ 152.083517][ T5289] kAFS: No cell specified [ 152.950000][ T5295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.288'. [ 157.699917][ T5328] device bond0 entered promiscuous mode [ 157.705531][ T5328] device bond_slave_0 entered promiscuous mode [ 157.712937][ T5328] device bond_slave_1 entered promiscuous mode [ 158.410730][ T5346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.300'. [ 159.366789][ T4246] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 160.077676][ T5360] netlink: 'syz.3.304': attribute type 2 has an invalid length. [ 160.085729][ T5360] netlink: 51 bytes leftover after parsing attributes in process `syz.3.304'. [ 160.992599][ T5364] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 161.172184][ T4246] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 161.181731][ T4246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.196370][ T4246] usb 3-1: config 0 descriptor?? [ 161.555687][ T5387] xt_hashlimit: max too large, truncated to 1048576 [ 163.098228][ T4246] pegasus 3-1:0.0: can't reset MAC [ 163.103754][ T4246] pegasus: probe of 3-1:0.0 failed with error -5 [ 163.219766][ T4246] usb 3-1: USB disconnect, device number 4 [ 163.429495][ T5419] device bond3 entered promiscuous mode [ 163.435345][ T5419] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.010900][ T5467] kAFS: No cell specified [ 167.668751][ T5495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.031118][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 170.209346][ T5522] device bridge_slave_1 left promiscuous mode [ 170.223185][ T5522] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.414336][ T5529] kAFS: No cell specified [ 171.321144][ T5522] device bridge_slave_0 left promiscuous mode [ 171.354707][ T5522] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.826386][ T5546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.960350][ T5560] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 173.864606][ T5571] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.128395][ T5571] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.445696][ T5571] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.722344][ T5571] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.848951][ T5605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.626998][ T4574] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 180.876852][ T4574] usb 2-1: Using ep0 maxpacket: 8 [ 180.886899][ T4302] Bluetooth: hci1: command 0x0406 tx timeout [ 180.900919][ T4302] Bluetooth: hci0: command 0x0406 tx timeout [ 181.029328][ T4302] Bluetooth: hci3: command 0x0406 tx timeout [ 181.035520][ T4302] Bluetooth: hci2: command 0x0406 tx timeout [ 181.322955][ T5633] overlayfs: failed to resolve './file1': -2 [ 181.546924][ T4574] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 182.223322][ T4574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.380389][ T4574] usb 2-1: Product: syz [ 182.400231][ T4574] usb 2-1: Manufacturer: syz [ 182.405440][ T4574] usb 2-1: SerialNumber: syz [ 183.396227][ T4574] usb 2-1: config 0 descriptor?? [ 183.485285][ T4574] usb 2-1: can't set config #0, error -71 [ 183.578611][ T4574] usb 2-1: USB disconnect, device number 2 [ 184.836044][ T5654] lo speed is unknown, defaulting to 1000 [ 184.846720][ T5654] lo speed is unknown, defaulting to 1000 [ 184.875636][ T5654] lo speed is unknown, defaulting to 1000 [ 184.958060][ T5654] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 185.000307][ T5654] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 185.360718][ T5654] lo speed is unknown, defaulting to 1000 [ 185.420308][ T5654] lo speed is unknown, defaulting to 1000 [ 185.447950][ T5654] lo speed is unknown, defaulting to 1000 [ 185.454282][ T5654] lo speed is unknown, defaulting to 1000 [ 185.601011][ T5654] lo speed is unknown, defaulting to 1000 [ 189.451067][ T5699] overlayfs: failed to resolve './file1': -2 [ 192.348705][ T5717] device bond4 entered promiscuous mode [ 192.354477][ T5717] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.016228][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.022621][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.679756][ T5754] netlink: 'syz.0.409': attribute type 10 has an invalid length. [ 197.195483][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.198635][ T5754] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 197.257913][ T5754] syz.0.409 (5754) used greatest stack depth: 19424 bytes left [ 198.040552][ T5756] overlayfs: missing 'lowerdir' [ 199.538125][ T5788] netlink: 'syz.0.420': attribute type 29 has an invalid length. [ 199.572129][ T5788] netlink: 'syz.0.420': attribute type 29 has an invalid length. [ 199.612321][ T5789] netlink: 'syz.0.420': attribute type 29 has an invalid length. [ 202.179963][ T5809] overlayfs: missing 'lowerdir' [ 204.548801][ T5840] ptrace attach of "./syz-executor exec"[4167] was attempted by "./syz-executor exec"[5840] [ 204.584886][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'. [ 205.999657][ T5857] overlayfs: missing 'lowerdir' [ 207.521162][ T5879] usb usb8: usbfs: process 5879 (syz.2.446) did not claim interface 0 before use [ 207.539216][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 207.548515][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 208.087275][ T5646] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 208.647412][ T5646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32770, setting to 1024 [ 208.668987][ T5646] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.759634][ T5646] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.784983][ T5646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.832404][ T5646] usb 5-1: config 0 descriptor?? [ 209.053765][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'. [ 209.331787][ T5646] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 209.380923][ T5646] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 209.678295][ T4259] usb 5-1: USB disconnect, device number 4 [ 209.870730][ T5904] overlayfs: failed to resolve './file1': -2 [ 211.469431][ T4174] Bluetooth: hci4: link tx timeout [ 211.479851][ T4174] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.500871][ T4174] Bluetooth: hci4: link tx timeout [ 211.545130][ T4174] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.635775][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 215.415283][ T5955] overlayfs: failed to resolve './file1': -2 [ 216.414678][ T5963] kAFS: No cell specified [ 219.466275][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.481'. [ 219.795970][ T6000] kAFS: No cell specified [ 221.313970][ T6022] netlink: 48 bytes leftover after parsing attributes in process `syz.1.491'. [ 221.323163][ T6022] netlink: 32 bytes leftover after parsing attributes in process `syz.1.491'. [ 221.808320][ T6030] kAFS: No cell specified [ 226.788581][ T6055] sctp: failed to load transform for md5: -2 [ 227.288211][ T6080] xt_ipcomp: unknown flags F7 [ 227.577565][ T6080] IPVS: length: 78 != 8 [ 227.999757][ T6092] kAFS: No cell specified [ 228.246776][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 228.318646][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 228.419152][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.507'. [ 228.429412][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 230.000675][ T6103] device vlan0 entered promiscuous mode [ 231.008250][ T6040] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 232.987142][ T6139] overlayfs: upper fs does not support file handles, falling back to index=off. [ 233.190193][ T6140] kAFS: No cell specified [ 235.051602][ T6123] xt_ipcomp: unknown flags F7 [ 235.078896][ T6123] IPVS: length: 78 != 8 [ 235.086762][ T4214] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 235.412339][ T6167] autofs4:pid:6167:autofs_fill_super: called with bogus options [ 235.588230][ T4214] usb 4-1: Using ep0 maxpacket: 8 [ 236.258685][ T6170] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 236.266354][ T6170] netlink: 56 bytes leftover after parsing attributes in process `syz.4.530'. [ 236.358072][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 236.478004][ T4214] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 236.647119][ T4214] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 236.834937][ T6179] ptrace attach of "./syz-executor exec"[4168] was attempted by "./syz-executor exec"[6179] [ 236.850525][ T4214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.883207][ T4214] usb 4-1: Product: syz [ 236.902739][ T4214] usb 4-1: Manufacturer: syz [ 236.948220][ T4214] usb 4-1: SerialNumber: syz [ 236.987101][ T4214] usb 4-1: config 0 descriptor?? [ 237.525575][ T4214] usb 4-1: USB disconnect, device number 3 [ 239.437424][ T6207] autofs4:pid:6207:autofs_fill_super: called with bogus options [ 240.230873][ T4246] Bluetooth: hci4: command 0x0405 tx timeout [ 240.492716][ T6211] smc: net device bond0 applied user defined pnetid SYZ2 [ 240.500453][ T6211] smc: net device bond0 erased user defined pnetid SYZ2 [ 240.624078][ T6217] ptrace attach of "./syz-executor exec"[4168] was attempted by "./syz-executor exec"[6217] [ 240.681285][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 240.724133][ T6221] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.733766][ T6221] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.742519][ T6221] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.751217][ T6221] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.775931][ T6221] device vxlan0 entered promiscuous mode [ 241.459577][ T6238] tipc: Started in network mode [ 241.464644][ T6238] tipc: Node identity 4, cluster identity 4711 [ 241.471540][ T6238] tipc: Node number set to 4 [ 244.537854][ T6257] autofs4:pid:6257:autofs_fill_super: called with bogus options [ 246.240472][ T6270] ptrace attach of "./syz-executor exec"[4176] was attempted by "./syz-executor exec"[6270] [ 247.290260][ T6293] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 247.396736][ T4214] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 250.656587][ T6311] xt_socket: unknown flags 0x50 [ 251.808618][ T4290] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 251.825688][ T6321] kAFS: No cell specified [ 251.907055][ T4214] usb 2-1: device descriptor read/all, error -71 [ 252.147676][ T6323] ptrace attach of "./syz-executor exec"[4176] was attempted by "./syz-executor exec"[6323] [ 253.287239][ T6347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.512882][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.519259][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.763406][ T6374] kAFS: No cell specified [ 257.557534][ T6386] ptrace attach of "./syz-executor exec"[4175] was attempted by "./syz-executor exec"[6386] [ 258.477598][ T6409] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.523299][ T6418] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 260.315617][ T6429] ptrace attach of "./syz-executor exec"[4176] was attempted by "./syz-executor exec"[6429] [ 260.471588][ T6416] kvm: pic: single mode not supported [ 260.563721][ T6434] xt_socket: unknown flags 0x50 [ 261.133336][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 261.427780][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 262.076758][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 262.159383][ T6460] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.906769][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=99.db [ 262.915828][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.931680][ T7] usb 4-1: config 0 descriptor?? [ 263.072945][ T7] pwc: Logitech ViewPort AV 100 webcam detected. [ 263.172634][ T6468] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 264.137384][ T7] pwc: send_video_command error -71 [ 264.144157][ T7] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 264.305211][ T6474] ptrace attach of "./syz-executor exec"[4175] was attempted by "./syz-executor exec"[6474] [ 264.318332][ T7] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 264.355569][ T7] usb 4-1: USB disconnect, device number 4 [ 264.990032][ T6481] xt_socket: unknown flags 0x50 [ 265.929820][ T6491] overlayfs: missing 'lowerdir' [ 265.948384][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.629'. [ 266.351835][ T6499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.502457][ T6519] xt_l2tp: missing protocol rule (udp|l2tpip) [ 268.660548][ T6525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.638'. [ 268.920145][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 269.812981][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.642'. [ 270.663179][ T6553] xt_l2tp: missing protocol rule (udp|l2tpip) [ 272.377036][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 273.469065][ T6597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.434750][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.661'. [ 274.551627][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 274.560509][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'. [ 275.216798][ T4185] Bluetooth: hci4: link tx timeout [ 275.222087][ T4185] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 275.231919][ T4185] Bluetooth: hci4: link tx timeout [ 275.237497][ T4185] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 276.017981][ T6629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.618275][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.671'. [ 277.627331][ T6642] tipc: Started in network mode [ 277.632376][ T6642] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 277.642513][ T6642] tipc: Enabling of bearer rejected, failed to enable media [ 278.245827][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 279.053696][ T6658] device bond5 entered promiscuous mode [ 279.059518][ T6658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 279.068282][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 279.077950][ T6666] device bridge_slave_1 left promiscuous mode [ 279.084445][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.321367][ T6666] device bridge_slave_0 left promiscuous mode [ 279.346868][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.496836][ T4290] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 279.788406][ T6645] xt_ipcomp: unknown flags F7 [ 279.838336][ T6645] IPVS: length: 78 != 8 [ 279.906951][ T4290] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.936549][ T4290] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 280.237521][ T6686] tipc: Cannot configure node identity twice [ 280.634892][ T4290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.737785][ T4290] usb 3-1: config 0 descriptor?? [ 280.809752][ T4290] pwc: Askey VC010 type 2 USB webcam detected. [ 280.894414][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'. [ 281.022266][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 281.094858][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 281.767132][ T4290] pwc: recv_control_msg error -32 req 02 val 2b00 [ 281.859088][ T6718] netlink: 268 bytes leftover after parsing attributes in process `syz.0.692'. [ 282.136836][ T4290] pwc: recv_control_msg error -32 req 02 val 2700 [ 282.650569][ T4290] pwc: recv_control_msg error -32 req 02 val 2c00 [ 282.747107][ T4290] pwc: recv_control_msg error -32 req 04 val 1000 [ 283.111139][ T4290] pwc: recv_control_msg error -32 req 04 val 1400 [ 283.156859][ T4290] pwc: recv_control_msg error -32 req 02 val 2000 [ 284.377171][ T4290] pwc: recv_control_msg error -32 req 02 val 2100 [ 284.456784][ T4290] pwc: recv_control_msg error -71 req 04 val 1500 [ 284.496872][ T4290] pwc: recv_control_msg error -71 req 02 val 2500 [ 284.534687][ T4290] pwc: recv_control_msg error -71 req 02 val 2400 [ 284.596853][ T4290] pwc: recv_control_msg error -71 req 02 val 2600 [ 284.626721][ T4290] pwc: recv_control_msg error -71 req 02 val 2900 [ 284.702375][ T4290] pwc: recv_control_msg error -71 req 02 val 2800 [ 284.830818][ T4290] pwc: recv_control_msg error -71 req 04 val 1100 [ 285.006538][ T4290] pwc: recv_control_msg error -71 req 04 val 1200 [ 285.029667][ T4290] pwc: Registered as video103. [ 285.043839][ T4290] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 285.073535][ T4290] usb 3-1: USB disconnect, device number 5 [ 285.111586][ T6760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.965311][ T6808] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.814631][ T4214] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 293.990260][ T6860] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 294.096928][ T4214] usb 2-1: Using ep0 maxpacket: 32 [ 294.617064][ T4214] usb 2-1: unable to get BOS descriptor or descriptor too short [ 294.707074][ T4214] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 294.746850][ T4214] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.836157][ T4214] usb 2-1: config 1 interface 0 has no altsetting 0 [ 294.896956][ T4214] usb 2-1: string descriptor 0 read error: -22 [ 294.903217][ T4214] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 294.981652][ T4214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.028326][ T6847] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 296.174534][ T4214] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 296.307233][ T4214] usb 2-1: USB disconnect, device number 5 [ 296.341969][ T4214] usblp0: removed [ 297.656860][ T6040] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 297.715045][ T6891] xt_l2tp: missing protocol rule (udp|l2tpip) [ 297.988214][ T6898] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 298.026970][ T6040] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.835627][ T6040] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 298.886105][ T6040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.941132][ T6040] usb 3-1: config 0 descriptor?? [ 299.049177][ T6040] pwc: Askey VC010 type 2 USB webcam detected. [ 299.527146][ T6040] pwc: recv_control_msg error -32 req 02 val 2b00 [ 299.601583][ T6040] pwc: recv_control_msg error -32 req 02 val 2700 [ 299.666778][ T6040] pwc: recv_control_msg error -32 req 02 val 2c00 [ 300.626743][ T6040] pwc: recv_control_msg error -32 req 04 val 1000 [ 300.666798][ T6040] pwc: recv_control_msg error -32 req 04 val 1300 [ 300.706801][ T6040] pwc: recv_control_msg error -32 req 04 val 1400 [ 300.921820][ T6040] pwc: recv_control_msg error -71 req 02 val 2000 [ 301.016851][ T6040] pwc: recv_control_msg error -71 req 02 val 2100 [ 301.037053][ T6040] pwc: recv_control_msg error -71 req 04 val 1500 [ 301.057050][ T6040] pwc: recv_control_msg error -71 req 02 val 2500 [ 301.077003][ T6040] pwc: recv_control_msg error -71 req 02 val 2400 [ 301.116735][ T6040] pwc: recv_control_msg error -71 req 02 val 2600 [ 301.137019][ T6040] pwc: recv_control_msg error -71 req 02 val 2900 [ 301.156958][ T6040] pwc: recv_control_msg error -71 req 02 val 2800 [ 301.186972][ T6040] pwc: recv_control_msg error -71 req 04 val 1100 [ 301.217102][ T6040] pwc: recv_control_msg error -71 req 04 val 1200 [ 301.292739][ T6040] pwc: Registered as video103. [ 301.327062][ T6040] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 301.405961][ T6040] usb 3-1: USB disconnect, device number 6 [ 303.966548][ T6944] sg_write: data in/out 2387/14 bytes for SCSI command 0x8-- guessing data in; [ 303.966548][ T6944] program syz.0.761 not setting count and/or reply_len properly [ 308.923918][ T6977] overlayfs: missing 'lowerdir' [ 314.706985][ T7041] overlayfs: missing 'lowerdir' [ 315.984245][ T7042] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 317.184238][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.194467][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.489167][ T7098] overlayfs: failed to resolve './file1': -2 [ 326.293614][ T7138] overlayfs: missing 'lowerdir' [ 327.115142][ T7149] kAFS: No cell specified [ 330.024436][ T7189] overlayfs: missing 'lowerdir' [ 331.302969][ T7198] kAFS: No cell specified [ 336.082729][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888061748c00: rx timeout, send abort [ 336.093348][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888061748c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 336.265324][ T7248] kAFS: No cell specified [ 336.954267][ T7251] xt_ipcomp: unknown flags F7 [ 337.039196][ T7251] IPVS: length: 78 != 8 [ 338.755348][ T7273] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[7273] [ 340.064277][ T4185] Bluetooth: hci4: link tx timeout [ 340.069853][ T4185] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 340.078285][ T4185] Bluetooth: hci4: link tx timeout [ 340.084213][ T4185] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 341.027166][ T7304] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.042516][ T7308] xt_ipcomp: unknown flags F7 [ 343.691572][ T7308] IPVS: length: 78 != 8 [ 343.800919][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 343.929196][ T7330] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[7330] [ 344.994073][ T7341] overlayfs: missing 'lowerdir' [ 345.150825][ T7343] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.600279][ T7358] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 349.734140][ T7378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.463550][ T7392] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 352.336370][ T7395] overlayfs: missing 'lowerdir' [ 352.401419][ T7381] xt_ipcomp: unknown flags F7 [ 352.408632][ T7381] IPVS: length: 78 != 8 [ 354.767069][ T7438] ptrace attach of "./syz-executor exec"[4175] was attempted by "./syz-executor exec"[7438] [ 358.979364][ T7468] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 361.776435][ T7500] ptrace attach of "./syz-executor exec"[4168] was attempted by "./syz-executor exec"[7500] [ 363.663155][ T7518] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 366.424870][ T7529] xt_ipcomp: unknown flags F7 [ 366.431582][ T7529] IPVS: length: 78 != 8 [ 368.322842][ T7565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.358772][ T7574] ptrace attach of "./syz-executor exec"[4167] was attempted by ""[7574] [ 371.630977][ T7606] xt_socket: unknown flags 0x50 [ 371.945912][ T7610] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.214421][ T7602] xt_ipcomp: unknown flags F7 [ 372.229594][ T7602] IPVS: length: 78 != 8 [ 373.199833][ T7615] delete_channel: no stack [ 375.330281][ T7648] xt_CT: You must specify a L4 protocol and not use inversions on it [ 375.540108][ T7653] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 376.846931][ T7656] xt_ipcomp: unknown flags F7 [ 376.869078][ T7656] IPVS: length: 78 != 8 [ 377.496671][ T7675] overlayfs: missing 'lowerdir' [ 377.984011][ T7688] xt_socket: unknown flags 0x50 [ 378.413439][ T7693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.630456][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.636762][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.106742][ T7717] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 382.099436][ T7722] xt_ipcomp: unknown flags F7 [ 382.105885][ T7722] IPVS: length: 78 != 8 [ 382.124458][ T7743] tmpfs: Unknown parameter 'noswap' [ 382.840371][ T7757] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 383.336979][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 383.380826][ T7771] xt_socket: unknown flags 0x50 [ 383.552385][ T7775] lo speed is unknown, defaulting to 1000 [ 383.586623][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 383.706789][ T7] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 383.718129][ T7] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 383.785154][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 383.933660][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 383.974365][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 384.166884][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 384.525905][ T7] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 384.561843][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.596507][ T7] usb 2-1: config 0 descriptor?? [ 384.902928][ T7] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 385.102560][ T4218] usb 2-1: USB disconnect, device number 6 [ 385.134993][ T4218] usblp0: removed [ 385.641130][ T7786] xt_ipcomp: unknown flags F7 [ 385.701141][ T7794] IPVS: length: 78 != 8 [ 385.936303][ T7798] kAFS: No cell specified [ 386.584444][ T7799] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 390.541905][ T7850] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 392.098191][ T7836] IPVS: length: 78 != 8 [ 393.072525][ T7861] delete_channel: no stack [ 394.792917][ T7890] ptrace attach of "./syz-executor exec"[4167] was attempted by "./syz-executor exec"[7890] [ 396.867095][ T7897] IPVS: length: 78 != 8 [ 397.754107][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'. [ 397.764811][ T7922] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1059'. [ 397.928631][ T7923] xt_CT: You must specify a L4 protocol and not use inversions on it [ 399.204986][ T7929] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[7929] [ 401.508298][ T7950] sg_write: data in/out 2387/14 bytes for SCSI command 0x8-- guessing data in; [ 401.508298][ T7950] program syz.0.1066 not setting count and/or reply_len properly [ 403.670366][ T7962] lo speed is unknown, defaulting to 1000 [ 403.696794][ T7962] lo speed is unknown, defaulting to 1000 [ 403.713586][ T7962] lo speed is unknown, defaulting to 1000 [ 403.792895][ T7962] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 403.867053][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 403.901057][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 403.925183][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 404.057819][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 404.108596][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 404.179626][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 404.242150][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 404.284783][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 404.326556][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 404.379082][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 404.387304][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 404.407607][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 404.415347][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 404.478141][ T7962] lo speed is unknown, defaulting to 1000 [ 404.485427][ T7973] ptrace attach of "./syz-executor exec"[4175] was attempted by "./syz-executor exec"[7973] [ 404.536526][ T4185] Bluetooth: hci4: link tx timeout [ 404.541933][ T4185] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 404.549785][ T4185] Bluetooth: hci4: link tx timeout [ 404.554898][ T4185] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 404.563101][ T7962] lo speed is unknown, defaulting to 1000 [ 404.640601][ T7962] lo speed is unknown, defaulting to 1000 [ 404.789838][ T7962] lo speed is unknown, defaulting to 1000 [ 404.891087][ T7962] lo speed is unknown, defaulting to 1000 [ 406.862261][ T7986] sg_write: data in/out 2387/14 bytes for SCSI command 0x8-- guessing data in; [ 406.862261][ T7986] program syz.4.1078 not setting count and/or reply_len properly [ 408.832223][ T8008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 410.645539][ T26] audit: type=1326 audit(2000000284.786:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.2.1091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32b99c3969 code=0x0 [ 411.906601][ T8039] sg_write: data in/out 2387/14 bytes for SCSI command 0x8-- guessing data in; [ 411.906601][ T8039] program syz.1.1092 not setting count and/or reply_len properly [ 416.925299][ T8077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 422.354852][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1119'. [ 423.069901][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 425.994553][ T8172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.347461][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'. [ 427.382734][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'. [ 428.535686][ T8210] loop2: detected capacity change from 0 to 7 [ 428.563621][ T7059] Dev loop2: unable to read RDB block 7 [ 428.574028][ T7059] loop2: unable to read partition table [ 428.581430][ T7059] loop2: partition table beyond EOD, truncated [ 428.702283][ T8210] Dev loop2: unable to read RDB block 7 [ 428.716754][ T8210] loop2: unable to read partition table [ 428.742111][ T8210] loop2: partition table beyond EOD, truncated [ 428.757381][ T8210] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 430.407132][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1150'. [ 430.893801][ T8243] overlayfs: failed to resolve './file0': -2 [ 431.063440][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1154'. [ 435.318666][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 435.813171][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 436.665038][ T8295] capability: warning: `syz.2.1169' uses deprecated v2 capabilities in a way that may be insecure [ 439.768652][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.774979][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.978101][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 444.763135][ T8372] autofs4:pid:8372:autofs_fill_super: called with bogus options [ 444.770150][ T6040] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 444.814220][ T8371] sg_write: data in/out 2387/14 bytes for SCSI command 0x8-- guessing data in; [ 444.814220][ T8371] program syz.1.1189 not setting count and/or reply_len properly [ 444.840366][ T6040] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 444.918344][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'. [ 445.023643][ T8356] xt_ipcomp: unknown flags F7 [ 445.068049][ T8356] IPVS: length: 78 != 8 [ 445.086845][ T5646] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 446.066693][ T5646] usb 4-1: Using ep0 maxpacket: 32 [ 446.767712][ T5646] usb 4-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 446.829881][ T5646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.957508][ T5646] usb 4-1: Product: syz [ 447.048932][ T5646] usb 4-1: Manufacturer: syz [ 447.072486][ T5646] usb 4-1: SerialNumber: syz [ 447.080769][ T8410] autofs4:pid:8410:autofs_fill_super: called with bogus options [ 447.168851][ T5646] usb 4-1: config 0 descriptor?? [ 447.238905][ T5646] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 447.444943][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1202'. [ 447.456727][ T5646] gspca_sunplus: reg_w_riv err -71 [ 447.461927][ T5646] sunplus: probe of 4-1:0.0 failed with error -71 [ 447.506784][ T5646] usb 4-1: USB disconnect, device number 5 [ 448.536705][ T8427] xt_ipcomp: unknown flags F7 [ 448.549695][ T8427] IPVS: length: 78 != 8 [ 448.904008][ T8434] sg_write: data in/out 2387/14 bytes for SCSI command 0x8-- guessing data in; [ 448.904008][ T8434] program syz.4.1207 not setting count and/or reply_len properly [ 449.125112][ T8440] device syzkaller1 entered promiscuous mode [ 450.016037][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'. [ 452.294991][ T8477] sg_write: data in/out 2387/14 bytes for SCSI command 0x8-- guessing data in; [ 452.294991][ T8477] program syz.3.1220 not setting count and/or reply_len properly [ 452.315525][ T8470] xt_ipcomp: unknown flags F7 [ 452.332855][ T8470] IPVS: length: 78 != 8 [ 456.542083][ T8510] xt_ipcomp: unknown flags F7 [ 456.560668][ T8510] IPVS: length: 78 != 8 [ 457.663925][ T8524] Bluetooth: hci0: unsupported parameter 39401 [ 457.712200][ T8524] Bluetooth: hci0: invalid len left 4, exp >= 133 [ 458.350002][ T8520] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 458.539879][ T8532] sg_write: data in/out 2387/14 bytes for SCSI command 0x8-- guessing data in; [ 458.539879][ T8532] program syz.3.1237 not setting count and/or reply_len properly [ 460.131514][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 460.631658][ T8554] xt_ipcomp: unknown flags F7 [ 460.644769][ T8554] IPVS: length: 78 != 8 [ 460.656751][ T6040] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 460.774497][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 460.796612][ T4574] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 460.820041][ T8572] device bridge_slave_1 left promiscuous mode [ 460.835851][ T8572] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.856126][ T8572] device bridge_slave_0 left promiscuous mode [ 460.862950][ T8572] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.906787][ T4574] usb 1-1: Using ep0 maxpacket: 16 [ 462.046966][ T4574] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.087547][ T6040] usb 5-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 462.111139][ T4574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 462.179864][ T6040] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.356835][ T6040] usb 5-1: Product: syz [ 462.380862][ T4574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 462.413977][ T6040] usb 5-1: Manufacturer: syz [ 462.468117][ T6040] usb 5-1: SerialNumber: syz [ 462.522003][ T4574] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 462.647683][ T6040] usb 5-1: config 0 descriptor?? [ 462.661735][ T4574] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 462.688651][ T6040] gspca_main: kinect-2.14.0 probing 045e:02bf [ 462.775498][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1257'. [ 462.798227][ T4574] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 462.841193][ T4574] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 462.855359][ T4574] usb 1-1: Manufacturer: syz [ 462.863208][ T4574] usb 1-1: config 0 descriptor?? [ 463.111168][ T8601] sch_fq: defrate 2048 ignored. [ 463.460875][ T5646] usb 5-1: USB disconnect, device number 7 [ 463.896609][ T4574] rc_core: IR keymap rc-hauppauge not found [ 463.902545][ T4574] Registered IR keymap rc-empty [ 463.914879][ T4574] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.954276][ T4574] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.987999][ T4574] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 464.002026][ T4574] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 464.041714][ T4574] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 464.051492][ T8612] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 464.067469][ T8612] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 464.082165][ T4574] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 464.115980][ T8609] xt_ipcomp: unknown flags F7 [ 464.120835][ T4574] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 464.131982][ T8609] IPVS: length: 78 != 8 [ 464.156718][ T4574] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 464.190352][ T4574] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 464.388659][ T4574] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 464.478457][ T4574] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 464.674951][ T4574] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 465.123225][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1265'. [ 465.192709][ T4574] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 465.226722][ T4574] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 465.261579][ T4574] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 465.449000][ T4574] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 465.467175][ T4574] usb 1-1: USB disconnect, device number 3 [ 466.252190][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1270'. [ 466.512067][ T8658] overlayfs: failed to resolve './file1': -2 [ 468.648284][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1280'. [ 469.162384][ T4185] Bluetooth: hci4: link tx timeout [ 469.167779][ T4185] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 469.175788][ T4185] Bluetooth: hci4: link tx timeout [ 469.181159][ T4185] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 471.018152][ T8706] delete_channel: no stack [ 473.182149][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1294'. [ 473.431208][ T8743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 474.405375][ T8755] overlayfs: failed to resolve './file0': -2 [ 475.206713][ T8768] lo speed is unknown, defaulting to 1000 [ 475.221532][ T8768] lo speed is unknown, defaulting to 1000 [ 477.641664][ T26] audit: type=1326 audit(2000000351.786:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8786 comm="syz.1.1309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff401a54969 code=0x0 [ 477.755920][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 479.082539][ T8804] overlayfs: failed to resolve './file0': -2 [ 479.286994][ T8802] delete_channel: no stack [ 481.670632][ T8850] overlayfs: failed to resolve './file0': -2 [ 482.594064][ T8852] delete_channel: no stack [ 483.962846][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 484.093950][ T8894] overlayfs: failed to resolve './file0': -2 [ 485.872838][ T8910] delete_channel: no stack [ 487.076654][ T8936] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 487.095855][ T8936] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1349'. [ 487.099389][ T8937] overlayfs: failed to resolve './file0': -2 [ 487.460013][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1352'. [ 489.995707][ T8964] delete_channel: no stack [ 490.920692][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1366'. [ 495.297752][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1380'. [ 496.390149][ T9057] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 497.971043][ T9064] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 499.512547][ T26] audit: type=1326 audit(2000000373.646:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.3.1392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4cde3b969 code=0x0 [ 499.739205][ T9082] loop2: detected capacity change from 0 to 7 [ 500.371106][ T4175] Dev loop2: unable to read RDB block 7 [ 500.382570][ T4175] loop2: unable to read partition table [ 500.503394][ T4175] loop2: partition table beyond EOD, truncated [ 500.519316][ T9082] Dev loop2: unable to read RDB block 7 [ 500.525161][ T9082] loop2: unable to read partition table [ 500.531369][ T9082] loop2: partition table beyond EOD, truncated [ 500.546629][ T9082] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 501.210259][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.231656][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.431215][ T9101] sch_fq: defrate 2048 ignored. [ 503.516820][ T26] audit: type=1326 audit(2000000377.666:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.4.1409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa720710969 code=0x0 [ 508.695678][ T26] audit: type=1326 audit(2000000382.836:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9185 comm="syz.2.1423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32b99c3969 code=0x0 [ 512.874588][ T9233] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 512.961469][ T9233] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1435'. [ 514.716626][ T26] audit: type=1326 audit(2000000388.856:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.1.1441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff401a54969 code=0x0 [ 526.392033][ T9349] xt_CT: You must specify a L4 protocol and not use inversions on it [ 530.315762][ T9376] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 530.336797][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 530.396160][ T9376] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1477'. [ 530.510270][ T9384] lo speed is unknown, defaulting to 1000 [ 530.538426][ T9384] lo speed is unknown, defaulting to 1000 [ 530.916808][ T13] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 530.972551][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.020925][ T13] usb 4-1: Product: syz [ 531.025135][ T13] usb 4-1: Manufacturer: syz [ 531.044995][ T13] usb 4-1: SerialNumber: syz [ 531.076744][ T13] usb 4-1: config 0 descriptor?? [ 531.090010][ T9384] chnl_net:caif_netlink_parms(): no params data found [ 531.121731][ T13] gspca_main: kinect-2.14.0 probing 045e:02bf [ 531.412808][ T9384] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.445736][ T9384] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.505435][ T9384] device bridge_slave_0 entered promiscuous mode [ 531.534373][ T9375] sch_fq: defrate 2048 ignored. [ 531.557086][ T4216] usb 4-1: USB disconnect, device number 6 [ 531.591813][ T741] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.632265][ T9384] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.639567][ T9384] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.661300][ T9384] device bridge_slave_1 entered promiscuous mode [ 531.694555][ T741] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.824165][ T741] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.865257][ T9384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.907702][ T9384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.956253][ T741] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.417714][ T4216] Bluetooth: hci5: command 0x0409 tx timeout [ 532.502017][ T9385] Bluetooth: hci4: link tx timeout [ 532.507659][ T9385] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 532.515448][ T9385] Bluetooth: hci4: link tx timeout [ 532.521693][ T9385] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 532.683507][ T9384] team0: Port device team_slave_0 added [ 532.985169][ T9384] team0: Port device team_slave_1 added [ 533.242737][ T9435] sg_write: data in/out 2387/14 bytes for SCSI command 0x8-- guessing data in; [ 533.242737][ T9435] program syz.4.1489 not setting count and/or reply_len properly [ 533.478085][ T9384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.485066][ T9384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.593059][ T9384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.628704][ T9384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.635675][ T9384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.718181][ T9384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.875805][ T9384] device hsr_slave_0 entered promiscuous mode [ 534.265734][ T9384] device hsr_slave_1 entered promiscuous mode [ 534.474607][ T9384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.496669][ T5646] Bluetooth: hci5: command 0x041b tx timeout [ 534.523303][ T9384] Cannot create hsr debugfs directory [ 534.613438][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'. [ 534.647325][ T9431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 534.816742][ T5646] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 534.892084][ T741] tipc: Left network mode [ 535.846748][ T5646] usb 5-1: Using ep0 maxpacket: 8 [ 535.976825][ T5646] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 535.985896][ T5646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.131217][ T5646] pvrusb2: Hardware description: Terratec Grabster AV400 [ 536.139656][ T5646] pvrusb2: ********** [ 536.146922][ T5646] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 536.192295][ T5646] pvrusb2: Important functionality might not be entirely working. [ 536.238811][ T5646] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 536.317059][ T5646] pvrusb2: ********** [ 536.460620][ T2421] pvrusb2: Invalid write control endpoint [ 537.068434][ T9489] xt_CT: You must specify a L4 protocol and not use inversions on it [ 537.143341][ T9447] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1496'. [ 537.202085][ T4178] Bluetooth: hci5: command 0x040f tx timeout [ 537.237988][ T5646] usb 5-1: USB disconnect, device number 8 [ 537.280730][ T9384] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 537.320842][ T9384] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 537.365073][ T2421] pvrusb2: Invalid write control endpoint [ 537.387730][ T9384] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 537.400945][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 537.451049][ T9384] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 537.482124][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 537.526681][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 537.643188][ T2421] pvrusb2: Device being rendered inoperable [ 537.702153][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 537.738917][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 537.771511][ T2421] pvrusb2: Attached sub-driver cx25840 [ 538.144573][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 538.514603][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 539.592391][ T9384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.672743][ T6322] Bluetooth: hci5: command 0x0419 tx timeout [ 539.713838][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 539.722555][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 539.746120][ T9384] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.038196][ T9384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 541.073359][ T9384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.208400][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 541.442317][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.462517][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.469694][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.158685][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 542.168832][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 542.179019][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.186181][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.194386][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 542.252990][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 542.262024][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 542.272253][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 542.281112][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 542.290545][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 542.304630][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 542.348579][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 542.357453][ T9547] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 542.380726][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 542.406184][ T9548] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1516'. [ 542.425044][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 542.441321][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 542.557499][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 542.581358][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 542.715226][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 542.733144][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 542.795842][ T9384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.075712][ T9581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 544.481460][ T9585] overlayfs: missing 'lowerdir' [ 544.644890][ T741] device hsr_slave_0 left promiscuous mode [ 544.672477][ T741] device hsr_slave_1 left promiscuous mode [ 545.222041][ T741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.274004][ T741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.465776][ T741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.484816][ T741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.627970][ T741] device veth1_macvtap left promiscuous mode [ 545.670690][ T741] device veth0_macvtap left promiscuous mode [ 547.482290][ T741] device veth1_vlan left promiscuous mode [ 547.488298][ T741] device veth0_vlan left promiscuous mode [ 548.340432][ T9603] delete_channel: no stack [ 548.840067][ T741] team0 (unregistering): Port device team_slave_1 removed [ 548.914365][ T741] team0 (unregistering): Port device team_slave_0 removed [ 548.966257][ T741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.024023][ T741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.060892][ T9625] xt_CT: You must specify a L4 protocol and not use inversions on it [ 549.310189][ T741] bond0 (unregistering): Released all slaves [ 549.467599][ T4218] lo speed is unknown, defaulting to 1000 [ 549.599841][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 549.633701][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 549.642699][ T9627] xt_CT: You must specify a L4 protocol and not use inversions on it [ 549.947916][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 549.956445][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 550.059975][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 550.087501][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 550.123655][ T9384] device veth0_vlan entered promiscuous mode [ 550.309931][ T9384] device veth1_vlan entered promiscuous mode [ 550.821070][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 550.839184][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 551.577590][ T9384] device veth0_macvtap entered promiscuous mode [ 551.623139][ T9384] device veth1_macvtap entered promiscuous mode [ 551.693544][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 551.707274][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 551.745495][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 551.792789][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 551.838906][ T9384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.875908][ T9384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.917546][ T9384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.960746][ T9384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.991990][ T9384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.026647][ T9384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.121855][ T9384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.175785][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 552.397213][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 552.525565][ T9384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.557042][ T9384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.587200][ T9384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.626555][ T9384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.647316][ T9384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.668727][ T9384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.708566][ T9384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.739434][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 552.759239][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 552.919389][ T9384] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.928999][ T9384] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.940102][ T9384] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.949505][ T9384] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.360423][ T4258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.439962][ T4258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.500812][ T5836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.517061][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 553.522583][ T5836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.595538][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 554.381783][ T9684] overlayfs: missing 'lowerdir' [ 555.026835][ T4574] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 556.128741][ T4574] usb 5-1: device descriptor read/64, error -71 [ 556.512321][ T4574] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 557.106602][ T4574] usb 5-1: device descriptor read/64, error -71 [ 557.257546][ T4574] usb usb5-port1: attempt power cycle [ 559.040172][ T9744] xt_CT: You must specify a L4 protocol and not use inversions on it [ 562.653175][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.666892][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.537838][ T9843] overlayfs: missing 'lowerdir' [ 564.555001][ T6322] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 565.084650][ T9831] xt_CT: You must specify a L4 protocol and not use inversions on it [ 565.118953][ T6322] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 565.127056][ T6322] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 565.138666][ T6322] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 565.477119][ T6322] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 565.484593][ T6322] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 565.551773][ T6322] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 565.916823][ T6322] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 565.987809][ T6322] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 566.024904][ T6322] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 566.519856][ T6322] usb 4-1: string descriptor 0 read error: -22 [ 566.528735][ T6322] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 566.567710][ T6322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.640737][ T6322] adutux 4-1:168.0: interrupt endpoints not found [ 566.889763][ T4178] usb 4-1: USB disconnect, device number 7 [ 569.473811][ T9930] xt_CT: You must specify a L4 protocol and not use inversions on it [ 573.921866][ T9985] overlayfs: missing 'workdir' [ 574.411158][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1610'. [ 575.722038][T10012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 576.449420][T10022] kAFS: No cell specified [ 577.133439][T10039] overlayfs: missing 'workdir' [ 577.731722][T10064] mkiss: ax0: crc mode is auto. [ 581.957464][T10087] kAFS: No cell specified [ 581.992513][T10089] overlayfs: missing 'workdir' [ 586.247702][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1643'. [ 586.998874][T10160] kAFS: No cell specified [ 587.249154][T10165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 588.866656][ T9385] Bluetooth: hci0: hardware error 0xde [ 589.048470][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1656'. [ 589.674877][T10217] mkiss: ax0: crc mode is auto. [ 589.675136][T10197] mmap: syz.4.1654 (10197) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 590.458516][T10244] binder: 10243:10244 ioctl 4018620d 0 returned -22 [ 592.203025][ T4218] Bluetooth: hci5: command 0x0405 tx timeout [ 592.488265][T10283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1670'. [ 592.578408][T10284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 593.327898][T10301] mkiss: ax0: crc mode is auto. [ 593.333128][T10299] lo speed is unknown, defaulting to 1000 [ 594.352851][T10328] mkiss: ax0: crc mode is auto. [ 596.016879][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 596.649909][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 596.934001][T10369] mkiss: ax0: crc mode is auto. [ 596.949358][ T4185] Bluetooth: hci4: link tx timeout [ 596.955101][ T4185] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 597.007455][ T4185] Bluetooth: hci4: link tx timeout [ 597.012674][ T4185] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 597.096717][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 597.437295][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 597.610346][ T7] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 597.628889][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.653435][ T7] usb 6-1: Product: syz [ 597.661816][ T7] usb 6-1: Manufacturer: syz [ 597.669346][ T7] usb 6-1: SerialNumber: syz [ 597.689947][ T7] r8152-cfgselector 6-1: config 0 descriptor?? [ 598.181652][T10394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 598.246962][ T7] r8152-cfgselector 6-1: Unknown version 0x0000 [ 598.274494][ T7] r8152-cfgselector 6-1: bad CDC descriptors [ 598.443367][ T7] r8152-cfgselector 6-1: Unknown version 0x0000 [ 598.594945][ T7] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 600.230094][T10421] mkiss: ax0: crc mode is auto. [ 613.789786][T10519] sg_write: data in/out 2387/14 bytes for SCSI command 0x8-- guessing data in; [ 613.789786][T10519] program syz.2.1729 not setting count and/or reply_len properly [ 615.149860][T10502] lo speed is unknown, defaulting to 1000 [ 615.366570][ T4218] Bluetooth: hci1: command 0x0409 tx timeout [ 616.065936][T10557] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 616.499900][T10557] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1738'. [ 617.450979][ T4216] Bluetooth: hci1: command 0x041b tx timeout [ 617.566450][T10502] chnl_net:caif_netlink_parms(): no params data found [ 617.699316][ T9689] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.407916][ T9689] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.392998][ T9689] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.616590][ T9689] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.642509][ T4178] Bluetooth: hci1: command 0x040f tx timeout [ 619.894694][T10502] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.923828][T10502] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.939153][T10502] device bridge_slave_0 entered promiscuous mode [ 619.984482][T10502] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.998579][T10502] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.118598][T10502] device bridge_slave_1 entered promiscuous mode [ 620.410789][ T9689] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.496559][ T9689] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.523501][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1750'. [ 620.556178][T10502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.593919][T10502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.758970][ T9689] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.981647][T10643] sg_write: data in/out 2387/14 bytes for SCSI command 0x8-- guessing data in; [ 620.981647][T10643] program syz.5.1753 not setting count and/or reply_len properly [ 621.183889][ T9689] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.735562][ T6040] Bluetooth: hci1: command 0x0419 tx timeout [ 622.081372][T10502] team0: Port device team_slave_0 added [ 622.332005][T10502] team0: Port device team_slave_1 added [ 622.709522][T10502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.756792][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.898436][T10502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.933898][T10502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.971134][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.055630][T10502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.167837][ T9689] tipc: Left network mode [ 623.959253][T10502] device hsr_slave_0 entered promiscuous mode [ 624.008230][T10502] device hsr_slave_1 entered promiscuous mode [ 624.026328][T10502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.041513][T10502] Cannot create hsr debugfs directory [ 624.049719][T10689] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1764'. [ 624.090863][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.098860][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.849501][T10713] sg_write: data in/out 2387/14 bytes for SCSI command 0x8-- guessing data in; [ 624.849501][T10713] program syz.2.1765 not setting count and/or reply_len properly [ 625.176842][T10502] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 625.221727][T10502] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 625.283328][T10502] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 625.353507][T10502] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 625.449933][T10701] xt_ipcomp: unknown flags F7 [ 625.472718][ T9689] device hsr_slave_0 left promiscuous mode [ 625.489551][ T9689] device hsr_slave_1 left promiscuous mode [ 625.512843][T10719] IPVS: length: 78 != 8 [ 625.524028][ T9689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.546560][ T9689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.580121][ T9689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.596609][ T9689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.636090][ T9689] device veth1_macvtap left promiscuous mode [ 625.656600][ T9689] device veth0_macvtap left promiscuous mode [ 625.689078][ T9689] device veth1_vlan left promiscuous mode [ 625.706177][ T9689] device veth0_vlan left promiscuous mode [ 626.627267][ T9689] team0 (unregistering): Port device team_slave_1 removed [ 626.728764][ T9689] team0 (unregistering): Port device team_slave_0 removed [ 626.878921][ T9689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.897709][ T9689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.123923][ T9689] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 628.740200][T10756] delete_channel: no stack [ 629.056793][ T9689] bond0 (unregistering): Released all slaves [ 629.123789][ T6040] lo speed is unknown, defaulting to 1000 [ 629.407884][T10502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.448036][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 629.479712][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 629.531517][T10502] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.610256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 629.663996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 629.736965][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.744216][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.838277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 630.012785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 630.086939][T10422] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 630.696445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 630.707375][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.714464][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.730573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 630.747326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 630.794629][T10502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 631.948273][T10502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.138151][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 632.260653][T10422] usb 3-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 632.279088][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 632.296550][T10422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.314965][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 632.323294][T10422] usb 3-1: Product: syz [ 632.337175][T10422] usb 3-1: Manufacturer: syz [ 632.352565][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 632.362183][T10422] usb 3-1: SerialNumber: syz [ 632.378377][T10422] usb 3-1: config 0 descriptor?? [ 632.394554][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 632.444168][T10422] gspca_main: kinect-2.14.0 probing 045e:02bf [ 632.461279][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.507936][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 632.576796][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 632.859717][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 632.899027][T10072] usb 3-1: USB disconnect, device number 7 [ 633.104361][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 636.261882][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 636.476804][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 637.157288][T10853] overlayfs: failed to resolve './file1': -2 [ 637.567563][T10502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.727620][ T6322] Bluetooth: hci1: command 0x0407 tx timeout [ 639.695040][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 639.731690][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 639.842155][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 639.857400][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 639.884983][T10502] device veth0_vlan entered promiscuous mode [ 639.908059][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 639.940235][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 639.995134][T10502] device veth1_vlan entered promiscuous mode [ 640.046932][T10894] netlink: 'syz.5.1804': attribute type 4 has an invalid length. [ 640.754194][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 640.807561][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 640.984743][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 641.119189][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 641.294893][T10502] device veth0_macvtap entered promiscuous mode [ 641.341016][T10502] device veth1_macvtap entered promiscuous mode [ 641.359146][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.371096][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.381245][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.413001][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.496661][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.532355][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.843643][T10502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.891190][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 641.905879][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 641.957838][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 641.987666][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 642.105737][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.146845][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.229547][T10920] overlayfs: failed to resolve './file1': -2 [ 642.498516][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.596554][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.646113][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.657308][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.670680][T10502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.685216][T10502] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.694446][T10502] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.704231][T10502] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.715209][T10502] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.931348][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 642.977617][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 644.258046][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.272438][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.299861][ T741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 644.339302][ T5257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.372387][ T5257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.396150][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 645.326785][T10933] xt_ipcomp: unknown flags F7 [ 645.333649][T10933] IPVS: length: 78 != 8 [ 648.199453][T10992] overlayfs: failed to resolve './file1': -2 [ 649.825780][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1825'. [ 649.944172][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1825'. [ 651.848823][T11019] IPVS: length: 78 != 8 [ 651.948737][T11044] overlayfs: failed to resolve './file1': -2 [ 652.384467][T11056] xt_socket: unknown flags 0x50 [ 656.145618][T11097] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1845'. [ 657.417885][T11120] overlayfs: failed to resolve './file1': -2 [ 658.491928][T11133] ceph: No mds server is up or the cluster is laggy [ 659.066212][ T6322] libceph: connect (1)[c::]:6789 error -101 [ 659.073288][ T6322] libceph: mon0 (1)[c::]:6789 connect error [ 659.309060][T11138] delete_channel: no stack [ 659.361533][ T6322] libceph: connect (1)[c::]:6789 error -101 [ 659.792532][T11151] mkiss: ax0: crc mode is auto. [ 660.631803][ T6322] libceph: mon0 (1)[c::]:6789 connect error [ 661.630233][T11158] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1858'. [ 662.677088][T11187] overlayfs: failed to resolve './file1': -2 [ 663.255058][ T9385] Bluetooth: hci4: link tx timeout [ 663.260255][ T9385] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 663.267953][ T9385] Bluetooth: hci4: link tx timeout [ 663.273065][ T9385] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 666.305899][T11239] mkiss: ax0: crc mode is auto. [ 667.280805][T11243] overlayfs: failed to resolve './file1': -2 [ 669.466013][T11263] Process accounting resumed [ 671.614246][T11276] delete_channel: no stack [ 671.717104][T11289] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 671.816093][T11289] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1886'. [ 672.258950][T11304] overlayfs: failed to resolve './file1': -2 [ 676.448442][T11341] xt_socket: unknown flags 0x50 [ 677.154374][T11343] befs: (nbd2): No write support. Marking filesystem read-only [ 677.167019][ T263] block nbd2: Attempted send on invalid socket [ 677.173828][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 677.187307][T11343] befs: (nbd2): unable to read superblock [ 677.271756][T11354] overlayfs: failed to resolve './file1': -2 [ 677.929138][T11350] delete_channel: no stack [ 678.438150][T11366] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 678.446263][T11366] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 678.456174][T11366] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 678.464169][T11366] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 681.441771][T11408] xt_socket: unknown flags 0x50 [ 682.892071][T11420] overlayfs: failed to resolve './file1': -2 [ 683.556217][T11417] delete_channel: no stack [ 684.672283][T11440] sg_write: data in/out 2387/14 bytes for SCSI command 0x8-- guessing data in; [ 684.672283][T11440] program syz.4.1919 not setting count and/or reply_len properly [ 685.816829][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.823160][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.962322][T11459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 687.822654][T11465] overlayfs: failed to resolve './file1': -2 [ 688.312375][T11468] delete_channel: no stack [ 689.970215][T11506] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 690.974740][T11515] xt_CT: You must specify a L4 protocol and not use inversions on it [ 693.482457][T11545] overlayfs: failed to resolve './file1': -2 [ 694.031220][T11542] delete_channel: no stack [ 695.708500][T11574] bridge0: port 3(syz_tun) entered blocking state [ 695.715429][T11574] bridge0: port 3(syz_tun) entered disabled state [ 695.939985][T11582] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 696.117311][T11574] device syz_tun entered promiscuous mode [ 696.700850][T11574] bridge0: port 3(syz_tun) entered blocking state [ 696.707943][T11574] bridge0: port 3(syz_tun) entered forwarding state [ 697.144743][T11591] sg_write: data in/out 2387/14 bytes for SCSI command 0x8-- guessing data in; [ 697.144743][T11591] program syz.4.1954 not setting count and/or reply_len properly [ 699.644457][T11605] overlayfs: failed to resolve './file1': -2 [ 700.739323][T11611] delete_channel: no stack [ 705.656199][T11664] overlayfs: failed to resolve './file1': -2 [ 706.464963][T11673] xt_socket: unknown flags 0x50 [ 706.633908][T11677] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1974'. [ 710.635200][T11712] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 710.818325][T11712] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1982'. [ 710.942007][T11726] overlayfs: failed to resolve './file1': -2 [ 711.405144][ T9385] Bluetooth: hci1: link tx timeout [ 711.410681][ T9385] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 713.835955][ T4214] Bluetooth: hci1: command 0x0406 tx timeout [ 714.206703][T11757] xt_socket: unknown flags 0x50 [ 716.505262][T11789] overlayfs: failed to resolve './file1': -2 [ 720.821896][T11831] mkiss: ax0: crc mode is auto. [ 722.470605][T11861] overlayfs: failed to resolve './file1': -2 [ 723.817832][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2018'. [ 723.931623][T11875] device ipvlan2 entered promiscuous mode [ 723.950852][T11875] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 725.962506][T11916] xt_socket: unknown flags 0x50 [ 728.884729][T11938] overlayfs: failed to resolve './file1': -2 [ 729.345920][T11954] mkiss: ax0: crc mode is auto. [ 730.652631][ T4185] Bluetooth: hci4: link tx timeout [ 730.657938][ T4185] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 730.665621][ T4185] Bluetooth: hci4: link tx timeout [ 730.670933][ T4185] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 731.673948][T11986] overlayfs: missing 'lowerdir' [ 732.479139][T11997] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 733.139940][T12000] overlayfs: failed to resolve './file1': -2 [ 733.160290][T11997] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2043'. [ 733.458892][T12006] mkiss: ax0: crc mode is auto. [ 733.541108][T12010] device batadv1 entered promiscuous mode [ 735.092533][T12038] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 739.164573][T12065] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 739.220274][ T150] block nbd2: Attempted send on invalid socket [ 739.226906][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 739.240640][T12067] SQUASHFS error: Failed to read block 0x0: -5 [ 739.250928][T12065] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2058'. [ 739.297091][T12067] unable to read squashfs_super_block [ 740.257983][T12074] mkiss: ax0: crc mode is auto. [ 740.931691][T12089] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 745.286045][T12124] mkiss: ax0: crc mode is auto. [ 747.350934][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.389923][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.208372][T12171] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 751.001444][T12179] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 751.015193][T12179] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 755.887925][T12216] sg_write: data in/out 2387/14 bytes for SCSI command 0x8-- guessing data in; [ 755.887925][T12216] program syz.4.2097 not setting count and/or reply_len properly [ 758.216685][T12226] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 762.426840][T12232] mkiss: ax0: crc mode is auto. [ 763.085418][ T6322] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 763.908621][ T6322] usb 4-1: Using ep0 maxpacket: 8 [ 764.607699][ T6322] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 764.690960][T12271] ubi31: attaching mtd0 [ 764.701276][T12271] ubi31: scanning is finished [ 764.706176][T12271] ubi31: empty MTD device detected [ 764.743106][ T6322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.826630][ T6322] usb 4-1: Product: syz [ 764.830981][ T6322] usb 4-1: Manufacturer: syz [ 764.857008][ T6322] usb 4-1: SerialNumber: syz [ 764.864675][ T6322] usb 4-1: config 0 descriptor?? [ 765.136884][ T6322] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 767.377746][T12275] mkiss: ax0: crc mode is auto. [ 769.726750][ T6322] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 769.779853][ T6322] usb 4-1: USB disconnect, device number 8 [ 769.942513][T12280] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 770.668685][ T4217] Bluetooth: hci5: command 0x0406 tx timeout [ 770.872811][T12271] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 877.776390][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 877.783574][ C0] (detected by 0, t=10502 jiffies, g=44813, q=77) [ 877.790109][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295024921-4295014419), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 877.803485][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g44813 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 877.814689][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 877.824677][ C0] rcu: RCU grace-period kthread stack dump: [ 877.830666][ C0] task:rcu_preempt state:R running task stack:28128 pid: 15 ppid: 2 flags:0x00004000 [ 877.841996][ C0] Call Trace: [ 877.845278][ C0] [ 877.848223][ C0] __schedule+0x11b8/0x43b0 [ 877.852790][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 877.858193][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 877.864103][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 877.870044][ C0] ? _raw_spin_unlock+0x40/0x40 [ 877.875008][ C0] ? rcu_is_watching+0x11/0xa0 [ 877.879794][ C0] ? release_firmware_map_entry+0x190/0x190 [ 877.885724][ C0] schedule+0x11b/0x1e0 [ 877.889907][ C0] schedule_timeout+0x15c/0x280 [ 877.894779][ C0] ? console_conditional_schedule+0x40/0x40 [ 877.900693][ C0] ? update_process_times+0x200/0x200 [ 877.906082][ C0] ? prepare_to_swait_event+0x331/0x350 [ 877.911650][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 877.916519][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 877.921738][ C0] ? rcu_gp_init+0xd58/0x10e0 [ 877.926446][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 877.931226][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 877.936440][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 877.941658][ C0] rcu_gp_kthread+0x98/0x350 [ 877.946258][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 877.951378][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 877.957287][ C0] ? __kthread_parkme+0x157/0x1b0 [ 877.962358][ C0] kthread+0x436/0x520 [ 877.966433][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 877.971554][ C0] ? kthread_blkcg+0xd0/0xd0 [ 877.976153][ C0] ret_from_fork+0x1f/0x30 [ 877.980593][ C0] [ 877.983619][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 877.989955][ C0] NMI backtrace for cpu 0 [ 877.994298][ C0] CPU: 0 PID: 12317 Comm: syz.6.2129 Not tainted 5.15.181-syzkaller #0 [ 878.002549][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 878.012607][ C0] Call Trace: [ 878.015893][ C0] [ 878.018741][ C0] dump_stack_lvl+0x168/0x230 [ 878.023433][ C0] ? show_regs_print_info+0x20/0x20 [ 878.028667][ C0] ? load_image+0x3b0/0x3b0 [ 878.033186][ C0] ? irq_work_queue+0xbf/0x140 [ 878.037969][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 878.042921][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 878.049084][ C0] ? _printk+0xcc/0x110 [ 878.053247][ C0] ? cpu_online+0x1d/0x30 [ 878.057591][ C0] ? load_image+0x3b0/0x3b0 [ 878.062107][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 878.068207][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 878.074200][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 878.080370][ C0] print_other_cpu_stall+0x10c8/0x1220 [ 878.085851][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 878.090795][ C0] ? bpf_trace_run1+0x1d7/0x2d0 [ 878.095658][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 878.100951][ C0] ? bpf_put_raw_tracepoint+0x60/0x60 [ 878.106341][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 878.111498][ C0] rcu_sched_clock_irq+0x831/0x1110 [ 878.116718][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 878.121587][ C0] ? account_process_tick+0x227/0x3a0 [ 878.126974][ C0] update_process_times+0x193/0x200 [ 878.132189][ C0] tick_sched_timer+0x37d/0x560 [ 878.137055][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 878.142287][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 878.147858][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 878.152982][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 878.159071][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 878.164051][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 878.170048][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 878.175714][ C0] [ 878.178672][ C0] [ 878.181609][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 878.187763][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 878.193852][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 10 ef f0 0b 48 89 de 5b e9 87 a9 44 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d a4 b1 8a 7e 65 8b 15 a5 b1 8a 7e 81 e2 00 [ 878.213493][ C0] RSP: 0018:ffffc9000330faf0 EFLAGS: 00000286 [ 878.219574][ C0] RAX: ffffffff812b9ae9 RBX: ffff88802b85d4c0 RCX: 0000000000080000 [ 878.227559][ C0] RDX: ffffc9000f94f000 RSI: 000000000007ffff RDI: ffff88802b85d4c0 [ 878.236161][ C0] RBP: ffffc9000330fcf0 R08: dffffc0000000000 R09: ffffed100570b771 [ 878.244142][ C0] R10: ffffed100570b771 R11: 1ffff1100570b770 R12: 0000000000000000 [ 878.252223][ C0] R13: 0000000000000000 R14: ffff88802b85d4c0 R15: dffffc0000000000 [ 878.260223][ C0] ? fpregs_mark_activate+0x9/0x80 [ 878.265365][ C0] fpregs_activate+0xe/0x1a0 [ 878.269985][ C0] fpregs_mark_activate+0x23/0x80 [ 878.275022][ C0] fpu__restore_sig+0x780/0xf50 [ 878.279899][ C0] ? copy_fpstate_to_sigframe+0xb90/0xb90 [ 878.285645][ C0] ? __might_fault+0xb3/0x110 [ 878.290337][ C0] ? _copy_from_user+0x111/0x170 [ 878.295297][ C0] __ia32_sys_rt_sigreturn+0x649/0x790 [ 878.300778][ C0] ? load_gs_index+0x120/0x120 [ 878.305579][ C0] ? lock_chain_count+0x20/0x20 [ 878.310442][ C0] ? vtime_user_exit+0x2dc/0x400 [ 878.315393][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 878.320611][ C0] do_syscall_64+0x4c/0xa0 [ 878.325046][ C0] ? clear_bhb_loop+0x15/0x70 [ 878.329734][ C0] ? clear_bhb_loop+0x15/0x70 [ 878.334851][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 878.340794][ C0] RIP: 0033:0x7f1309992830 [ 878.345223][ C0] Code: 10 83 e0 01 83 e2 01 88 15 c2 5e e9 00 88 05 bf 5e e9 00 c3 50 48 8d 35 89 12 1c 00 48 8d 3d 8f 12 1c 00 31 c0 e8 30 f7 ff ff <53> 89 fb 48 83 ec 10 64 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 [ 878.364845][ C0] RSP: 002b:00007f13077859b8 EFLAGS: 00000283 [ 878.370938][ C0] RAX: 0000000000000000 RBX: 00007f1307786024 RCX: 0000000000000000 [ 878.378916][ C0] RDX: 00007f13077859c0 RSI: 00007f1307785af0 RDI: 000000000000000b [ 878.386901][ C0] RBP: 000000000000000b R08: 000000000000000f R09: 0000000000000000 [ 878.394885][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 878.402864][ C0] R13: 00007f1307785fc0 R14: 00007f1309cf9080 R15: 0000000000000000 [ 878.410864][ C0]