last executing test programs: 22.666102086s ago: executing program 2 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = io_uring_setup(0x513d, &(0x7f0000000180)={0x0, 0x49d3, 0x4, 0x3, 0x1a7, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f00000007c0)={0x7, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000500)=""/2, 0x2}], &(0x7f0000000800)=[0xfffffffffffffffb, 0x9, 0x4, 0x0, 0xffffffffffffff7f]}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x1d0, 0x1d0, 0xffffffff, 0x0, 0x0, 0x4e4, 0x4e4, 0xffffffff, 0x4e4, 0x4e4, 0x5, &(0x7f0000000900), {[{{@uncond, 0x0, 0x90, 0xc4, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @broadcast, @icmp_id=0x67, @gre_key=0xe72f}}}}, {{@uncond, 0x0, 0xb0, 0x10c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="93c4e9272298", 0x5a18, 0xb, [0x17, 0x1b, 0x1, 0x6, 0x2f, 0x13, 0x17, 0x13, 0x30, 0x11, 0x1, 0x32, 0x2a, 0x3f, 0x29, 0x20], 0x1, 0x0, 0x6}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xff, 0xff000000, 'pim6reg\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5c, 0x0, 0x20}, 0x0, 0x204, 0x238, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xffffff00, 0xff], 0x4d5, 0x34ff, 0x8, 0x1, 0x10, 0x14}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private2, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 0x4d4, 0x3500, 0x3c, 0x1, 0x5, 0x6}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, [0xffffffff, 0xff, 0xff], @ipv6=@empty, [0xff000000, 0xffffff00], 0x4d6, 0x3503, 0x2f, 0x1, 0xf, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xffff00], 0x4d6, 0x3502, 0x8, 0x1, 0x2, 0xc}], 0x4}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffff00, 0xff], 0xfffffff5, 0x6}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x12, @multicast1, @multicast1, @icmp_id=0x64, @icmp_id=0x68}}}}, {{@ip={@local, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'pimreg\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x8}, 0x0, 0x94, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x5}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv4=@rand_addr=0x64010100, @ipv6=@remote, @port=0x4e20, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5d4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x404, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000140)={0xf0f045}) ppoll(&(0x7f0000000080)=[{r8, 0x2046}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="180003000200000000000000f800000065600900f0ffffff8520000003000000185200001000000000000000000000009500000000000095000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 19.971959124s ago: executing program 2 (id=467): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) write$snapshot(r0, 0x0, 0x1f) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x1}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0'}, 0xb) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010300800000000000000c000000"], 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='romfs\x00', 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140002001400010600"], 0x14}}, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000180)='ntfs3\x00', 0x8, 0x0) 16.255683874s ago: executing program 3 (id=477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = io_uring_setup(0x513d, &(0x7f0000000180)={0x0, 0x49d3, 0x4, 0x3, 0x1a7, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f00000007c0)={0x7, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000500)=""/2, 0x2}], &(0x7f0000000800)=[0xfffffffffffffffb, 0x9, 0x4, 0x0, 0xffffffffffffff7f]}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x1d0, 0x1d0, 0xffffffff, 0x0, 0x0, 0x4e4, 0x4e4, 0xffffffff, 0x4e4, 0x4e4, 0x5, &(0x7f0000000900), {[{{@uncond, 0x0, 0x90, 0xc4, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @broadcast, @icmp_id=0x67, @gre_key=0xe72f}}}}, {{@uncond, 0x0, 0xb0, 0x10c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="93c4e9272298", 0x5a18, 0xb, [0x17, 0x1b, 0x1, 0x6, 0x2f, 0x13, 0x17, 0x13, 0x30, 0x11, 0x1, 0x32, 0x2a, 0x3f, 0x29, 0x20], 0x1, 0x0, 0x6}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xff, 0xff000000, 'pim6reg\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5c, 0x0, 0x20}, 0x0, 0x204, 0x238, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xffffff00, 0xff], 0x4d5, 0x34ff, 0x8, 0x1, 0x10, 0x14}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private2, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 0x4d4, 0x3500, 0x3c, 0x1, 0x5, 0x6}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, [0xffffffff, 0xff, 0xff], @ipv6=@empty, [0xff000000, 0xffffff00], 0x4d6, 0x3503, 0x2f, 0x1, 0xf, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xffff00], 0x4d6, 0x3502, 0x8, 0x1, 0x2, 0xc}], 0x4}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffff00, 0xff], 0xfffffff5, 0x6}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x12, @multicast1, @multicast1, @icmp_id=0x64, @icmp_id=0x68}}}}, {{@ip={@local, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'pimreg\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x8}, 0x0, 0x94, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x5}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv4=@rand_addr=0x64010100, @ipv6=@remote, @port=0x4e20, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5d4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x404, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000140)={0xf0f045}) ppoll(&(0x7f0000000080)=[{r8, 0x2046}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="180003000200000000000000f800000065600900f0ffffff8520000003000000185200001000000000000000000000009500000000000095000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 15.88081015s ago: executing program 2 (id=480): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000009, 0x114}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x28) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r5, 0x0, 0x3, 0x1}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000000)=0x4000) 14.47810749s ago: executing program 0 (id=483): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) 12.587088876s ago: executing program 3 (id=487): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) socket(0x2c, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x104, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xf0, 0x1, [@m_ct={0x98, 0xb, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x1ff}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e676ce1a91d1ed1211b456a99b6294c7"}]}, {0x4a, 0x6, "63571f949496b26900c4e5ccf38b213c50acfaf282bc366a8fede9c7695af61557ec9f83f05c5d37cd6e6651ece8339ddaf06b373c6a8fc26d7f6e54098c2af235987c9847f2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x54, 0x201b, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1}}}]}, {0xf, 0x6, "d8378a6ad864825bb979f5"}, {0xc}, {0xc}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x804}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f071, 0x19}) pipe2(0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x483, &(0x7f0000000200)={0x20000000000084, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x1, 'dh\x00', 0x20}, 0x2c) 12.182587361s ago: executing program 2 (id=489): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.275486174s ago: executing program 3 (id=491): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x5, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000300)={0x3, 0x7, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000bc0)={0x2, 0x0, [{0x8000000, 0x7b, &(0x7f00000001c0)=""/123}, {0x0, 0x3, &(0x7f0000000800)=""/3}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000001880), 0x40101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r8 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) ioctl$BLKROSET(r8, 0x125d, &(0x7f0000000000)=0x4) ioctl$BLKRRPART(r8, 0x125f, 0x0) 10.255843738s ago: executing program 0 (id=495): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x53) bpf$PROG_LOAD(0x5, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0xc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 8.841482438s ago: executing program 0 (id=498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = io_uring_setup(0x513d, &(0x7f0000000180)={0x0, 0x49d3, 0x4, 0x3, 0x1a7, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f00000007c0)={0x7, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000500)=""/2, 0x2}], &(0x7f0000000800)=[0xfffffffffffffffb, 0x9, 0x4, 0x0, 0xffffffffffffff7f]}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x1d0, 0x1d0, 0xffffffff, 0x0, 0x0, 0x4e4, 0x4e4, 0xffffffff, 0x4e4, 0x4e4, 0x5, &(0x7f0000000900), {[{{@uncond, 0x0, 0x90, 0xc4, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @broadcast, @icmp_id=0x67, @gre_key=0xe72f}}}}, {{@uncond, 0x0, 0xb0, 0x10c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="93c4e9272298", 0x5a18, 0xb, [0x17, 0x1b, 0x1, 0x6, 0x2f, 0x13, 0x17, 0x13, 0x30, 0x11, 0x1, 0x32, 0x2a, 0x3f, 0x29, 0x20], 0x1, 0x0, 0x6}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xff, 0xff000000, 'pim6reg\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5c, 0x0, 0x20}, 0x0, 0x204, 0x238, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xffffff00, 0xff], 0x4d5, 0x34ff, 0x8, 0x1, 0x10, 0x14}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private2, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 0x4d4, 0x3500, 0x3c, 0x1, 0x5, 0x6}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, [0xffffffff, 0xff, 0xff], @ipv6=@empty, [0xff000000, 0xffffff00], 0x4d6, 0x3503, 0x2f, 0x1, 0xf, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xffff00], 0x4d6, 0x3502, 0x8, 0x1, 0x2, 0xc}], 0x4}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffff00, 0xff], 0xfffffff5, 0x6}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x12, @multicast1, @multicast1, @icmp_id=0x64, @icmp_id=0x68}}}}, {{@ip={@local, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'pimreg\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x8}, 0x0, 0x94, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x5}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv4=@rand_addr=0x64010100, @ipv6=@remote, @port=0x4e20, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5d4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x404, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000140)={0xf0f045}) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x91, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="180003000200000000000000f800000065600900f0ffffff8520000003000000185200001000000000000000000000009500000000000095000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 8.762115419s ago: executing program 2 (id=499): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000009, 0x114}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x28) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r5, 0x0, 0x3, 0x1}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000000)=0x4000) 6.622535098s ago: executing program 4 (id=500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = io_uring_setup(0x513d, &(0x7f0000000180)={0x0, 0x49d3, 0x4, 0x3, 0x1a7, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f00000007c0)={0x7, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000500)=""/2, 0x2}], &(0x7f0000000800)=[0xfffffffffffffffb, 0x9, 0x4, 0x0, 0xffffffffffffff7f]}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x1d0, 0x1d0, 0xffffffff, 0x0, 0x0, 0x4e4, 0x4e4, 0xffffffff, 0x4e4, 0x4e4, 0x5, &(0x7f0000000900), {[{{@uncond, 0x0, 0x90, 0xc4, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @broadcast, @icmp_id=0x67, @gre_key=0xe72f}}}}, {{@uncond, 0x0, 0xb0, 0x10c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="93c4e9272298", 0x5a18, 0xb, [0x17, 0x1b, 0x1, 0x6, 0x2f, 0x13, 0x17, 0x13, 0x30, 0x11, 0x1, 0x32, 0x2a, 0x3f, 0x29, 0x20], 0x1, 0x0, 0x6}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xff, 0xff000000, 'pim6reg\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5c, 0x0, 0x20}, 0x0, 0x204, 0x238, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xffffff00, 0xff], 0x4d5, 0x34ff, 0x8, 0x1, 0x10, 0x14}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private2, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 0x4d4, 0x3500, 0x3c, 0x1, 0x5, 0x6}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, [0xffffffff, 0xff, 0xff], @ipv6=@empty, [0xff000000, 0xffffff00], 0x4d6, 0x3503, 0x2f, 0x1, 0xf, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xffff00], 0x4d6, 0x3502, 0x8, 0x1, 0x2, 0xc}], 0x4}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffff00, 0xff], 0xfffffff5, 0x6}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x12, @multicast1, @multicast1, @icmp_id=0x64, @icmp_id=0x68}}}}, {{@ip={@local, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'pimreg\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x8}, 0x0, 0x94, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x5}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv4=@rand_addr=0x64010100, @ipv6=@remote, @port=0x4e20, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5d4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x404, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000140)={0xf0f045}) ppoll(&(0x7f0000000080)=[{r8, 0x2046}], 0x1, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x91, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6.51120319s ago: executing program 3 (id=501): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) socket(0x2c, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x104, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xf0, 0x1, [@m_ct={0x98, 0xb, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x1ff}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e676ce1a91d1ed1211b456a99b6294c7"}]}, {0x4a, 0x6, "63571f949496b26900c4e5ccf38b213c50acfaf282bc366a8fede9c7695af61557ec9f83f05c5d37cd6e6651ece8339ddaf06b373c6a8fc26d7f6e54098c2af235987c9847f2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x54, 0x201b, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1}}}]}, {0xf, 0x6, "d8378a6ad864825bb979f5"}, {0xc}, {0xc}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x804}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f071, 0x19}) pipe2(0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000000200)={0x20000000000084, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x1, 'dh\x00', 0x20}, 0x2c) 6.290529722s ago: executing program 0 (id=502): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(0x0, 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) chdir(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001140)={0x0, 0x0}, 0x0) setresuid(r1, r1, r1) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r2, &(0x7f0000006840)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000380), 0x40060, &(0x7f0000000500)={[{@nofavordynmods}], [{@fowner_gt={'fowner>', r1}}]}) finit_module(0xffffffffffffffff, &(0x7f0000000040)='@\'6\x00', 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.698810205s ago: executing program 0 (id=504): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 4.379960719s ago: executing program 1 (id=505): lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x3000000, [{0x1, 0x9}, {0x2, 0xffffffc0}]}, 0x18, 0x0) open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x300, 0x2) 4.350510109s ago: executing program 4 (id=506): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x1298e5e86f629d52}, 0x14) ioperm(0x0, 0x9, 0x5) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000040)={0x0}) 4.145995002s ago: executing program 3 (id=507): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x16, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) openat(r1, 0x0, 0x810400, 0x1a2) r3 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={0x0, 0x7f}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) munmap(&(0x7f0000445000/0x1000)=nil, 0x1000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x7ffffffd, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000080)) 3.938735825s ago: executing program 1 (id=508): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x53) bpf$PROG_LOAD(0x5, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0xc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 3.732701698s ago: executing program 1 (id=509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a30"], 0x2c}}, 0x0) 3.697709408s ago: executing program 4 (id=510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 3.310802264s ago: executing program 1 (id=511): socket$kcm(0x10, 0x2, 0x0) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d"], 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40002ff, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4001) mount$9p_virtio(0x0, 0x0, 0x0, 0xc0ed0000, 0x0) 3.074099307s ago: executing program 4 (id=512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = io_uring_setup(0x513d, &(0x7f0000000180)={0x0, 0x49d3, 0x4, 0x3, 0x1a7, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f00000007c0)={0x7, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000500)=""/2, 0x2}], &(0x7f0000000800)=[0xfffffffffffffffb, 0x9, 0x4, 0x0, 0xffffffffffffff7f]}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x1d0, 0x1d0, 0xffffffff, 0x0, 0x0, 0x4e4, 0x4e4, 0xffffffff, 0x4e4, 0x4e4, 0x5, &(0x7f0000000900), {[{{@uncond, 0x0, 0x90, 0xc4, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @broadcast, @icmp_id=0x67, @gre_key=0xe72f}}}}, {{@uncond, 0x0, 0xb0, 0x10c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="93c4e9272298", 0x5a18, 0xb, [0x17, 0x1b, 0x1, 0x6, 0x2f, 0x13, 0x17, 0x13, 0x30, 0x11, 0x1, 0x32, 0x2a, 0x3f, 0x29, 0x20], 0x1, 0x0, 0x6}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xff, 0xff000000, 'pim6reg\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5c, 0x0, 0x20}, 0x0, 0x204, 0x238, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xffffff00, 0xff], 0x4d5, 0x34ff, 0x8, 0x1, 0x10, 0x14}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private2, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 0x4d4, 0x3500, 0x3c, 0x1, 0x5, 0x6}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, [0xffffffff, 0xff, 0xff], @ipv6=@empty, [0xff000000, 0xffffff00], 0x4d6, 0x3503, 0x2f, 0x1, 0xf, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xffff00], 0x4d6, 0x3502, 0x8, 0x1, 0x2, 0xc}], 0x4}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffff00, 0xff], 0xfffffff5, 0x6}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x12, @multicast1, @multicast1, @icmp_id=0x64, @icmp_id=0x68}}}}, {{@ip={@local, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'pimreg\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x8}, 0x0, 0x94, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x5}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv4=@rand_addr=0x64010100, @ipv6=@remote, @port=0x4e20, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5d4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x404, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000140)={0xf0f045}) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x91, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="180003000200000000000000f800000065600900f0ffffff8520000003000000185200001000000000000000000000009500000000000095000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.928040629s ago: executing program 2 (id=513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = io_uring_setup(0x513d, &(0x7f0000000180)={0x0, 0x49d3, 0x4, 0x3, 0x1a7, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f00000007c0)={0x7, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000500)=""/2, 0x2}], &(0x7f0000000800)=[0xfffffffffffffffb, 0x9, 0x4, 0x0, 0xffffffffffffff7f]}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x1d0, 0x1d0, 0xffffffff, 0x0, 0x0, 0x4e4, 0x4e4, 0xffffffff, 0x4e4, 0x4e4, 0x5, &(0x7f0000000900), {[{{@uncond, 0x0, 0x90, 0xc4, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @broadcast, @icmp_id=0x67, @gre_key=0xe72f}}}}, {{@uncond, 0x0, 0xb0, 0x10c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="93c4e9272298", 0x5a18, 0xb, [0x17, 0x1b, 0x1, 0x6, 0x2f, 0x13, 0x17, 0x13, 0x30, 0x11, 0x1, 0x32, 0x2a, 0x3f, 0x29, 0x20], 0x1, 0x0, 0x6}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xff, 0xff000000, 'pim6reg\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5c, 0x0, 0x20}, 0x0, 0x204, 0x238, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xffffff00, 0xff], 0x4d5, 0x34ff, 0x8, 0x1, 0x10, 0x14}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private2, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 0x4d4, 0x3500, 0x3c, 0x1, 0x5, 0x6}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, [0xffffffff, 0xff, 0xff], @ipv6=@empty, [0xff000000, 0xffffff00], 0x4d6, 0x3503, 0x2f, 0x1, 0xf, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xffff00], 0x4d6, 0x3502, 0x8, 0x1, 0x2, 0xc}], 0x4}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffff00, 0xff], 0xfffffff5, 0x6}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x12, @multicast1, @multicast1, @icmp_id=0x64, @icmp_id=0x68}}}}, {{@ip={@local, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'pimreg\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x8}, 0x0, 0x94, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x5}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv4=@rand_addr=0x64010100, @ipv6=@remote, @port=0x4e20, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5d4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x404, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000140)={0xf0f045}) ppoll(&(0x7f0000000080)=[{r8, 0x2046}], 0x1, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x91, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.738779236s ago: executing program 0 (id=514): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$qat_adf_ctl(0xffffff9c, 0x0, 0x2102, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x300) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x140, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) timer_create(0x5, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, 0x0, 0x80c0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x20, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 1.693594676s ago: executing program 1 (id=515): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)={@map, r0, 0x32, 0x18, 0x4, @void, @value=r1}, 0x20) openat$bsg(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000080071000040", @ANYRESOCT]) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) 1.691433366s ago: executing program 4 (id=516): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="9e8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6(0xa, 0xa, 0x400000) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e1e, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@empty, @private=0xa010101, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x100101, 0x0, 0x801}, 0x3c) lseek(0xffffffffffffffff, 0x3e, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x9c) 604.684221ms ago: executing program 4 (id=517): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) socket(0x2c, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x104, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xf0, 0x1, [@m_ct={0x98, 0xb, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x1ff}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e676ce1a91d1ed1211b456a99b6294c7"}]}, {0x4a, 0x6, "63571f949496b26900c4e5ccf38b213c50acfaf282bc366a8fede9c7695af61557ec9f83f05c5d37cd6e6651ece8339ddaf06b373c6a8fc26d7f6e54098c2af235987c9847f2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x54, 0x201b, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1}}}]}, {0xf, 0x6, "d8378a6ad864825bb979f5"}, {0xc}, {0xc}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x804}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f071, 0x19}) pipe2(0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000000200)={0x20000000000084, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x1, 'dh\x00', 0x20}, 0x2c) 514.649373ms ago: executing program 3 (id=518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = io_uring_setup(0x513d, &(0x7f0000000180)={0x0, 0x49d3, 0x4, 0x3, 0x1a7, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f00000007c0)={0x7, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000500)=""/2, 0x2}], &(0x7f0000000800)=[0xfffffffffffffffb, 0x9, 0x4, 0x0, 0xffffffffffffff7f]}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x1d0, 0x1d0, 0xffffffff, 0x0, 0x0, 0x4e4, 0x4e4, 0xffffffff, 0x4e4, 0x4e4, 0x5, &(0x7f0000000900), {[{{@uncond, 0x0, 0x90, 0xc4, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @broadcast, @icmp_id=0x67, @gre_key=0xe72f}}}}, {{@uncond, 0x0, 0xb0, 0x10c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="93c4e9272298", 0x5a18, 0xb, [0x17, 0x1b, 0x1, 0x6, 0x2f, 0x13, 0x17, 0x13, 0x30, 0x11, 0x1, 0x32, 0x2a, 0x3f, 0x29, 0x20], 0x1, 0x0, 0x6}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xff, 0xff000000, 'pim6reg\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5c, 0x0, 0x20}, 0x0, 0x204, 0x238, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xffffff00, 0xff], 0x4d5, 0x34ff, 0x8, 0x1, 0x10, 0x14}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private2, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 0x4d4, 0x3500, 0x3c, 0x1, 0x5, 0x6}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, [0xffffffff, 0xff, 0xff], @ipv6=@empty, [0xff000000, 0xffffff00], 0x4d6, 0x3503, 0x2f, 0x1, 0xf, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xffff00], 0x4d6, 0x3502, 0x8, 0x1, 0x2, 0xc}], 0x4}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffff00, 0xff], 0xfffffff5, 0x6}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x12, @multicast1, @multicast1, @icmp_id=0x64, @icmp_id=0x68}}}}, {{@ip={@local, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'pimreg\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x8}, 0x0, 0x94, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x5}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv4=@rand_addr=0x64010100, @ipv6=@remote, @port=0x4e20, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5d4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x404, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000140)={0xf0f045}) ppoll(&(0x7f0000000080)=[{r8, 0x2046}], 0x1, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x91, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 0s ago: executing program 1 (id=519): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x53) bpf$PROG_LOAD(0x5, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0xc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [ 81.330087][ T4239] cgroup: Unknown subsys name 'net' [ 81.494162][ T4239] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.099055][ T4239] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 84.687211][ T4261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.695737][ T4263] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.695985][ T4261] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.705780][ T4263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.716055][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.718944][ T4263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.727086][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.733478][ T4263] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.741588][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.749041][ T4263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.755090][ T4266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.762485][ T4263] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.773098][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.776725][ T4263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.785598][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.793478][ T4263] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.806592][ T4263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.815469][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.823713][ T4263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.832015][ T4263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.834469][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.840736][ T4263] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.848561][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.855465][ T4263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.861855][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.870846][ T4260] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.879162][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.884161][ T4260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.893468][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.905685][ T4260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.335523][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 85.411217][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 85.525117][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 85.613696][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 85.658197][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.665734][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.675637][ T4250] device bridge_slave_0 entered promiscuous mode [ 85.700647][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.708548][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.716930][ T4251] device bridge_slave_0 entered promiscuous mode [ 85.730206][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.737611][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.746470][ T4250] device bridge_slave_1 entered promiscuous mode [ 85.768140][ T4262] chnl_net:caif_netlink_parms(): no params data found [ 85.777740][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.785594][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.793577][ T4251] device bridge_slave_1 entered promiscuous mode [ 85.831679][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.874849][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.932228][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.941698][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.949341][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.958272][ T4253] device bridge_slave_0 entered promiscuous mode [ 85.990128][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.007241][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.015059][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.023590][ T4253] device bridge_slave_1 entered promiscuous mode [ 86.044865][ T4250] team0: Port device team_slave_0 added [ 86.051211][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.058666][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.066884][ T4249] device bridge_slave_0 entered promiscuous mode [ 86.105912][ T4250] team0: Port device team_slave_1 added [ 86.111998][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.119444][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.128055][ T4249] device bridge_slave_1 entered promiscuous mode [ 86.146353][ T4251] team0: Port device team_slave_0 added [ 86.154597][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.165642][ T4251] team0: Port device team_slave_1 added [ 86.221334][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.249094][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.256302][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.283660][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.297184][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.304458][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.330881][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.347024][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.356797][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.363986][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.372421][ T4262] device bridge_slave_0 entered promiscuous mode [ 86.412740][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.432101][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.439597][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.448367][ T4262] device bridge_slave_1 entered promiscuous mode [ 86.458414][ T4253] team0: Port device team_slave_0 added [ 86.465810][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.472994][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.500105][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.544969][ T4253] team0: Port device team_slave_1 added [ 86.552317][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.559900][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.587077][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.612315][ T4250] device hsr_slave_0 entered promiscuous mode [ 86.619884][ T4250] device hsr_slave_1 entered promiscuous mode [ 86.629687][ T4249] team0: Port device team_slave_0 added [ 86.673146][ T4249] team0: Port device team_slave_1 added [ 86.681125][ T4262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.693328][ T4262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.712135][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.719434][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.746063][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.787313][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.794863][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.822425][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.878323][ T4251] device hsr_slave_0 entered promiscuous mode [ 86.885779][ T4251] device hsr_slave_1 entered promiscuous mode [ 86.892500][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.900562][ T4251] Cannot create hsr debugfs directory [ 86.915253][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 86.919454][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.939058][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.971474][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.984936][ T4260] Bluetooth: hci2: command 0x0409 tx timeout [ 86.984947][ T4268] Bluetooth: hci1: command 0x0409 tx timeout [ 86.985116][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 86.991313][ T4260] Bluetooth: hci4: command 0x0409 tx timeout [ 87.018714][ T4262] team0: Port device team_slave_0 added [ 87.034097][ T4262] team0: Port device team_slave_1 added [ 87.055715][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.062991][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.091848][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.267038][ T4253] device hsr_slave_0 entered promiscuous mode [ 87.284839][ T4253] device hsr_slave_1 entered promiscuous mode [ 87.305007][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.313078][ T4253] Cannot create hsr debugfs directory [ 87.326351][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.334284][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.363042][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.419522][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.427116][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.454626][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.547196][ T4249] device hsr_slave_0 entered promiscuous mode [ 87.554748][ T4249] device hsr_slave_1 entered promiscuous mode [ 87.561755][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.569761][ T4249] Cannot create hsr debugfs directory [ 87.659294][ T4262] device hsr_slave_0 entered promiscuous mode [ 87.667753][ T4262] device hsr_slave_1 entered promiscuous mode [ 87.677152][ T4262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.686153][ T4262] Cannot create hsr debugfs directory [ 87.916629][ T4250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.928649][ T4250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.938969][ T4250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.949047][ T4250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.030963][ T4251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.047922][ T4251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.067469][ T4251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.089621][ T4251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.136535][ T4253] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.172253][ T4253] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.182241][ T4253] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.193189][ T4253] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.260448][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.271119][ T4262] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.282256][ T4262] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.314980][ T4262] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.326856][ T4262] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.372548][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.383700][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.398085][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.433034][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.443416][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.457817][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.465370][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.478093][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.487385][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.512663][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.522225][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.530039][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.552747][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.567080][ T4249] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.579654][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.608975][ T4249] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.621447][ T4249] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.632627][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.642359][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.651976][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.662640][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.671875][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.695817][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.715716][ T4249] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.727158][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.736327][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.744635][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.752646][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.762140][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.771149][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.778549][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.787036][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.798561][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.808111][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.827874][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.837654][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.846932][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.854223][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.872219][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.881556][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.901139][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.911594][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.937040][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.948851][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.979418][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.988142][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 88.993063][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.007119][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.017545][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.028340][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.063321][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.070305][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 89.070349][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 89.070397][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 89.076025][ T4260] Bluetooth: hci4: command 0x041b tx timeout [ 89.099612][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.113493][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.130705][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.143494][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.178203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.196454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.212464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.224101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.233769][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.242112][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.261820][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.293670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.310517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.322860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.338914][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.346234][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.359204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.368730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.378021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.389805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.428743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.442652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.457690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.479473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.488923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.511950][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.530832][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.552475][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.593077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.604307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.616190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.625531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.641362][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.651593][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.677820][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.717143][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.747336][ T4262] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.782125][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.809049][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.830765][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.838759][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.890681][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.907197][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.925531][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.941964][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.952277][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.960502][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.975352][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.989569][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.999877][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.041540][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.057818][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.074304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.090616][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.102088][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.118800][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.130137][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.166357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.177449][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.187653][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.197668][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.205152][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.213959][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.223056][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.232447][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.239821][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.248585][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.259861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.269217][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.283935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.299667][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.317920][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.326398][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.344151][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.357026][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.389247][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.401646][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.410407][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.420005][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.466195][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.479271][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.489375][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.499416][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.536727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.557281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.572609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.583591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.633726][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.670840][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.700369][ T4251] device veth0_vlan entered promiscuous mode [ 90.717121][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.735320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.770474][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.781383][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.803630][ T4253] device veth0_vlan entered promiscuous mode [ 90.812858][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.829345][ T4251] device veth1_vlan entered promiscuous mode [ 90.840189][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.849747][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.858537][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.870255][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.881465][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.893458][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.902599][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.922029][ T4253] device veth1_vlan entered promiscuous mode [ 91.008968][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.020101][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.032015][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.049463][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.060509][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.075451][ T4260] Bluetooth: hci0: command 0x040f tx timeout [ 91.084072][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.098491][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.108368][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.119396][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.144686][ T4260] Bluetooth: hci4: command 0x040f tx timeout [ 91.146120][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 91.151434][ T4260] Bluetooth: hci2: command 0x040f tx timeout [ 91.158499][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 91.171101][ T4251] device veth0_macvtap entered promiscuous mode [ 91.185963][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.208008][ T4251] device veth1_macvtap entered promiscuous mode [ 91.228729][ T4250] device veth0_vlan entered promiscuous mode [ 91.251997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.261934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.278257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.297280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.310208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.321442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.339660][ T4253] device veth0_macvtap entered promiscuous mode [ 91.371381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.380090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.391329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.401495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.411756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.444574][ T4253] device veth1_macvtap entered promiscuous mode [ 91.455087][ T4250] device veth1_vlan entered promiscuous mode [ 91.483476][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.495181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.503545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.516225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.524992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.532523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.540457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.550914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.560141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.569532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.579082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.587379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.602963][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.613475][ T4262] device veth0_vlan entered promiscuous mode [ 91.633103][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.644603][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.657054][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.665424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.676842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.698616][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.707691][ T4262] device veth1_vlan entered promiscuous mode [ 91.730710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.741534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.758017][ T4251] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.767576][ T4251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.777829][ T4251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.787412][ T4251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.839504][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.851255][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.868230][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.895926][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.905487][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.916667][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.926346][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.935348][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.944046][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.959635][ T4250] device veth0_macvtap entered promiscuous mode [ 91.984668][ T4262] device veth0_macvtap entered promiscuous mode [ 91.994191][ T4253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.012818][ T4253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.021837][ T4253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.032691][ T4253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.044700][ T7] cfg80211: failed to load regulatory.db [ 92.070093][ T4250] device veth1_macvtap entered promiscuous mode [ 92.080151][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.089410][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.098146][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.107674][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.116936][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.168166][ T4262] device veth1_macvtap entered promiscuous mode [ 92.175868][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.188803][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.195824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.206081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.216169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.225024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.233324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.241918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.281754][ T4249] device veth0_vlan entered promiscuous mode [ 92.311692][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.312450][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.320469][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.338129][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.352904][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.363810][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.376191][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.393948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.411297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.420666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.433821][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.446098][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.457858][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.470103][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.480337][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.492669][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.508489][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.520171][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.531303][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.542012][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.552563][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.563749][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.609175][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.627935][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.638010][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.647089][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.657657][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.669052][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.679920][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.692707][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.703085][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.713770][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.726688][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.750184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.767544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.779014][ T4249] device veth1_vlan entered promiscuous mode [ 92.790331][ T4250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.802441][ T4250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.811673][ T4250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.821268][ T4250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.840468][ T4262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.871161][ T4262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.881027][ T4262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.890668][ T4262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.901678][ T4339] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.922649][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.948184][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.963673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.038949][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.050120][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.064072][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.147438][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 93.224491][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 93.230906][ T4254] Bluetooth: hci1: command 0x0419 tx timeout [ 93.238048][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 93.244117][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 93.726945][ T4339] lo speed is unknown, defaulting to 1000 [ 93.734664][ T4339] lo speed is unknown, defaulting to 1000 [ 93.742700][ T4339] lo speed is unknown, defaulting to 1000 [ 93.753593][ T4339] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.768275][ T4339] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 93.794836][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.830978][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.842548][ T4249] device veth0_macvtap entered promiscuous mode [ 93.894204][ T4249] device veth1_macvtap entered promiscuous mode [ 93.931039][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.944060][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.960882][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.974218][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.008332][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.019633][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.031122][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.041855][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.053770][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.093600][ T4339] lo speed is unknown, defaulting to 1000 [ 94.103861][ T4339] lo speed is unknown, defaulting to 1000 [ 94.127515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.153152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.170180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.213315][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.226583][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.237040][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.248081][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.265967][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.277441][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.288059][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.298857][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.311505][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.320220][ T4339] lo speed is unknown, defaulting to 1000 [ 94.338447][ T4249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.349164][ T4249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.365133][ T4249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.374860][ T4249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.393064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.421338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.453351][ T4339] lo speed is unknown, defaulting to 1000 [ 94.460427][ T4339] lo speed is unknown, defaulting to 1000 [ 94.543692][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.599618][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.680000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.721305][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.752302][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.770057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.794280][ T4347] block device autoloading is deprecated and will be removed. [ 94.815944][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.838953][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.896957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.921422][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.948403][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.977816][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.999641][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.049338][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.109359][ T4345] lo speed is unknown, defaulting to 1000 [ 95.148577][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.181428][ T4351] lo speed is unknown, defaulting to 1000 [ 95.208551][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.233314][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.320817][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.541153][ T4360] vivid-007: disconnect [ 95.656647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.664679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.684582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.944567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.215582][ T4358] vivid-007: reconnect [ 96.514949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 97.266422][ T4364] Bluetooth: MGMT ver 1.22 [ 97.304761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.313152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.565204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.414532][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.396852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.406015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.744481][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 99.772702][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.795703][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFC, skipping [ 99.807337][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.844006][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 99.883501][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.912699][ T7] usb 2-1: Product: syz [ 99.920007][ T7] usb 2-1: Manufacturer: syz [ 99.926507][ T7] usb 2-1: SerialNumber: syz [ 99.952808][ T7] usb 2-1: config 0 descriptor?? [ 100.052886][ T4426] netlink: 'syz.4.20': attribute type 3 has an invalid length. [ 100.218540][ T7] usb 2-1: USB disconnect, device number 2 [ 100.358305][ T4429] overlayfs: failed to resolve './file0': -2 [ 100.490117][ T4433] siw: device registration error -23 [ 101.344145][ T4456] random: crng reseeded on system resumption [ 102.488802][ T4466] block nbd0: shutting down sockets [ 102.753296][ T4474] overlayfs: failed to resolve './file0': -2 [ 104.385420][ T4497] random: crng reseeded on system resumption [ 105.578464][ T4510] overlayfs: failed to resolve './file0': -2 [ 106.684721][ T4518] binder: 4511:4518 ioctl c0046209 0 returned -22 [ 106.804477][ T4305] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.917290][ T4514] tty tty24: ldisc open failed (-12), clearing slot 23 [ 106.954446][ T4305] usb 5-1: device descriptor read/64, error -71 [ 107.054439][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.224525][ T4305] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.246998][ T7] usb 2-1: config index 0 descriptor too short (expected 12592, got 96) [ 107.290687][ T7] usb 2-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 107.321381][ T7] usb 2-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 107.356902][ T7] usb 2-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 107.408729][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.424580][ T4305] usb 5-1: device descriptor read/64, error -71 [ 107.449146][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.491897][ T7] usb 2-1: Product: syz [ 107.524289][ T7] usb 2-1: Manufacturer: syz [ 107.557486][ T4305] usb usb5-port1: attempt power cycle [ 109.461404][ T4305] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.623724][ T4305] usb 5-1: device descriptor read/8, error -71 [ 110.387232][ T7] usb 2-1: USB disconnect, device number 3 [ 113.186891][ T4543] netlink: 'syz.4.54': attribute type 10 has an invalid length. [ 113.195026][ T4543] netlink: 40 bytes leftover after parsing attributes in process `syz.4.54'. [ 113.879688][ T48] Bluetooth: hci2: unexpected event 0x03 length: 13 > 11 [ 114.136358][ T4543] team0: Port device geneve0 added [ 114.398501][ T4572] overlayfs: failed to resolve './file1': -2 [ 114.524424][ T4311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.894519][ T4311] usb 3-1: device descriptor read/64, error -71 [ 115.066139][ T4577] loop6: detected capacity change from 0 to 524287999 [ 115.078172][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 115.087854][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.656755][ T4575] sched: RT throttling activated [ 115.705688][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 115.715166][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.243408][ T4320] loop: Write error at byte offset 1, length 1024. [ 116.261240][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 116.270766][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.287361][ T4320] loop: Write error at byte offset 1310721, length 1024. [ 116.294791][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 35 prio class 1 [ 116.294833][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 35 prio class 1 [ 116.347380][ T4543] syz.4.54 (4543) used greatest stack depth: 19648 bytes left [ 116.395543][ T4311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.458015][ C1] I/O error, dev loop6, sector 2560 op 0x1:(WRITE) flags 0xc800 phys_seg 21 prio class 1 [ 116.468166][ C1] I/O error, dev loop6, sector 2560 op 0x1:(WRITE) flags 0xc800 phys_seg 21 prio class 1 [ 116.478811][ T4320] loop: Write error at byte offset 2621441, length 1024. [ 116.486155][ T4320] loop: Write error at byte offset 3932161, length 1024. [ 116.493928][ C1] I/O error, dev loop6, sector 5120 op 0x1:(WRITE) flags 0xc800 phys_seg 21 prio class 1 [ 116.504757][ C1] I/O error, dev loop6, sector 5120 op 0x1:(WRITE) flags 0xc800 phys_seg 21 prio class 1 [ 116.515346][ C0] I/O error, dev loop6, sector 7680 op 0x1:(WRITE) flags 0xc800 phys_seg 20 prio class 1 [ 116.534454][ T4320] loop: Write error at byte offset 5242881, length 1024. [ 116.555885][ T4320] loop: Write error at byte offset 6553601, length 1024. [ 116.582897][ T4320] loop: Write error at byte offset 7864321, length 1024. [ 116.599699][ T4320] loop: Write error at byte offset 9175041, length 1024. [ 116.609100][ T4320] loop: Write error at byte offset 10485761, length 1024. [ 116.626585][ T4311] usb 3-1: device descriptor read/64, error -71 [ 116.633332][ T4320] loop: Write error at byte offset 11796481, length 1024. [ 116.650721][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.664563][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.683014][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.694719][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.703826][ T4577] ldm_validate_partition_table(): Disk read failed. [ 116.721515][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.734213][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.742831][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.753967][ T4577] Dev loop6: unable to read RDB block 0 [ 116.783088][ T4311] usb usb3-port1: attempt power cycle [ 116.851061][ T4577] loop6: unable to read partition table [ 116.857471][ T4577] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 117.228719][ T4311] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.424580][ T4599] Zero length message leads to an empty skb [ 117.454746][ T4311] usb 3-1: device not accepting address 4, error -71 [ 117.824555][ T48] Bluetooth: hci3: unexpected cc 0x0809 length: 68 > 4 [ 118.395578][ T4603] capability: warning: `syz.1.74' uses deprecated v2 capabilities in a way that may be insecure [ 118.845642][ T4619] overlayfs: failed to resolve './file1': -2 [ 119.494456][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.541268][ T4635] befs: (nullb0): No write support. Marking filesystem read-only [ 119.577230][ T4635] befs: (nullb0): invalid magic header [ 119.674464][ T22] usb 5-1: device descriptor read/64, error -71 [ 119.964531][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 120.134422][ T22] usb 5-1: device descriptor read/64, error -71 [ 120.284636][ T22] usb usb5-port1: attempt power cycle [ 120.405459][ T4643] netlink: 'syz.1.87': attribute type 10 has an invalid length. [ 120.451085][ T4643] netlink: 40 bytes leftover after parsing attributes in process `syz.1.87'. [ 120.495643][ T4643] device virt_wifi0 entered promiscuous mode [ 120.538406][ T4643] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 120.694665][ T22] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 120.751951][ T22] usb 5-1: device descriptor read/8, error -71 [ 121.044590][ T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 121.085821][ T22] usb 5-1: device descriptor read/8, error -71 [ 121.214707][ T22] usb usb5-port1: unable to enumerate USB device [ 121.542218][ T4668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 122.325086][ T4682] syz.2.100[4682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.325167][ T4682] syz.2.100[4682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.428971][ T4681] random: crng reseeded on system resumption [ 123.173815][ T4307] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.417776][ T4307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.455548][ T4307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.522131][ T4307] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.559795][ T4307] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.584412][ T4307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.641812][ T4307] usb 1-1: config 0 descriptor?? [ 124.077211][ T4307] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x6 [ 124.104123][ T4307] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 124.473355][ T4307] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 124.660504][ T4706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 124.713351][ T4307] usb 1-1: USB disconnect, device number 2 [ 124.826148][ T48] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 124.837465][ T48] Bluetooth: hci3: Injecting HCI hardware error event [ 124.846619][ T4254] Bluetooth: hci3: hardware error 0x00 [ 125.504962][ T4725] syz.2.113[4725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.505038][ T4725] syz.2.113[4725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.974809][ T4725] random: crng reseeded on system resumption [ 126.661653][ T4714] fido_id[4714]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 126.724659][ T4308] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 126.884663][ T4308] usb 5-1: device descriptor read/64, error -71 [ 126.904498][ T4254] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 127.149035][ T4739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.120'. [ 127.164447][ T4308] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 127.334455][ T4308] usb 5-1: device descriptor read/64, error -71 [ 127.454746][ T4308] usb usb5-port1: attempt power cycle [ 128.065445][ T4308] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 128.095126][ T4308] usb 5-1: device descriptor read/8, error -71 [ 129.185525][ T4759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.125'. [ 129.658952][ T4306] Process accounting resumed [ 129.814427][ T4308] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 130.064460][ T4308] usb 5-1: device not accepting address 13, error -71 [ 130.095513][ T4308] usb usb5-port1: unable to enumerate USB device [ 130.619855][ T4774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.740685][ T4774] bond0: (slave rose0): Enslaving as an active interface with an up link [ 130.752327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 131.121831][ T4791] ALSA: mixer_oss: invalid OSS volume 'MONIT' [ 132.604529][ T4308] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 132.794479][ T4308] usb 5-1: device descriptor read/64, error -71 [ 132.992118][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.998816][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.084541][ T4308] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 133.244465][ T4308] usb 5-1: device descriptor read/64, error -71 [ 133.376590][ T4308] usb usb5-port1: attempt power cycle [ 133.472551][ T4830] lo speed is unknown, defaulting to 1000 [ 133.812314][ T4308] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 133.860387][ T4308] usb 5-1: device descriptor read/8, error -71 [ 134.164490][ T4308] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 134.323007][ T4308] usb 5-1: device descriptor read/8, error -71 [ 134.373302][ T4853] syz.2.145[4853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.373378][ T4853] syz.2.145[4853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.385833][ T4853] random: crng reseeded on system resumption [ 134.540225][ T4308] usb usb5-port1: unable to enumerate USB device [ 135.323287][ T27] audit: type=1326 audit(1749006679.069:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.1.148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb2198e969 code=0x0 [ 136.648321][ T4897] syz.3.157[4897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.648398][ T4897] syz.3.157[4897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.660789][ T4897] random: crng reseeded on system resumption [ 137.854527][ T4311] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.014502][ T4311] usb 2-1: device descriptor read/64, error -71 [ 138.294428][ T4311] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 138.361780][ T4935] netlink: 'syz.4.165': attribute type 13 has an invalid length. [ 138.414553][ T4935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.165'. [ 138.456652][ T4311] usb 2-1: device descriptor read/64, error -71 [ 138.584631][ T4311] usb usb2-port1: attempt power cycle [ 139.004534][ T4311] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.236340][ T4311] usb 2-1: device descriptor read/8, error -71 [ 139.517743][ T4311] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 139.577410][ T4311] usb 2-1: device descriptor read/8, error -71 [ 139.705466][ T4311] usb usb2-port1: unable to enumerate USB device [ 140.841341][ T4966] syz.4.172[4966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.841416][ T4966] syz.4.172[4966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.854303][ T4966] random: crng reseeded on system resumption [ 143.954294][ T4988] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.975426][ T4988] bridge0: port 3(macvlan2) entered blocking state [ 143.982255][ T4988] bridge0: port 3(macvlan2) entered disabled state [ 144.021784][ T4988] device macvlan2 entered promiscuous mode [ 144.060747][ T4988] bridge0: port 3(macvlan2) entered blocking state [ 144.067922][ T4988] bridge0: port 3(macvlan2) entered forwarding state [ 144.334445][ T4308] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 144.595529][ T5010] syz.1.185[5010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.595636][ T5010] syz.1.185[5010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.609769][ T5010] random: crng reseeded on system resumption [ 145.455896][ T4308] usb 5-1: Using ep0 maxpacket: 32 [ 145.466076][ T4308] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 145.515836][ T5014] usb usb3: usbfs: interface 0 claimed by hub while 'syz.1.189' sets config #256 [ 145.530622][ T4308] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.582424][ T4308] usb 5-1: config 0 has no interfaces? [ 145.599600][ T4308] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 145.633190][ T4308] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 145.659938][ T4308] usb 5-1: Product: syz [ 145.671563][ T4308] usb 5-1: Manufacturer: syz [ 145.685271][ T4308] usb 5-1: SerialNumber: syz [ 145.699874][ T4308] usb 5-1: config 0 descriptor?? [ 146.018126][ T27] audit: type=1326 audit(1749006689.769:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.3.192" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f50d718e969 code=0x0 [ 146.069680][ T4254] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 146.816873][ T5038] ======================================================= [ 146.816873][ T5038] WARNING: The mand mount option has been deprecated and [ 146.816873][ T5038] and is ignored by this kernel. Remove the mand [ 146.816873][ T5038] option from the mount to silence this warning. [ 146.816873][ T5038] ======================================================= [ 146.858735][ T5038] 9pnet_virtio: no channels available for device syz [ 147.482237][ T5051] syz.1.199[5051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.482341][ T5051] syz.1.199[5051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.495389][ T5051] random: crng reseeded on system resumption [ 148.473233][ T4252] usb 5-1: USB disconnect, device number 18 [ 150.374465][ T4308] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 150.397881][ T5084] overlayfs: missing 'lowerdir' [ 150.576099][ T4308] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.587172][ T4308] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.596730][ T4308] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 150.606514][ T4308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.745990][ T4308] usb 1-1: config 0 descriptor?? [ 150.844234][ T5089] syz.2.212[5089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.844519][ T5089] syz.2.212[5089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.858344][ T5089] random: crng reseeded on system resumption [ 152.058283][ T5076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.074463][ T4306] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 152.124773][ T5076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.193037][ T126] usb 1-1: USB disconnect, device number 3 [ 152.233858][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 152.280026][ T4306] usb 5-1: Using ep0 maxpacket: 32 [ 152.303536][ T4306] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 152.337464][ T4306] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.359803][ T4306] usb 5-1: config 0 has no interfaces? [ 152.413443][ T4306] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 152.423908][ T4306] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 152.473112][ T4306] usb 5-1: Product: syz [ 152.489786][ T4306] usb 5-1: Manufacturer: syz [ 152.507098][ T4306] usb 5-1: SerialNumber: syz [ 152.531569][ T4306] usb 5-1: config 0 descriptor?? [ 153.105538][ T27] audit: type=1326 audit(1749006696.859:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.0.220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff57918e969 code=0x0 [ 154.819673][ T4252] usb 5-1: USB disconnect, device number 19 [ 155.049387][ T5136] overlayfs: missing 'lowerdir' [ 155.249060][ T5137] syz.4.224[5137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.249139][ T5137] syz.4.224[5137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.262184][ T5137] random: crng reseeded on system resumption [ 155.964820][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 156.166518][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.192028][ T22] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 156.222966][ T22] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 156.265897][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.299710][ T22] usb 1-1: config 0 descriptor?? [ 156.520760][ T5144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.547790][ T5144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.581885][ T4306] usb 1-1: USB disconnect, device number 4 [ 157.325529][ T5174] overlayfs: missing 'lowerdir' [ 158.113431][ T5185] syz.2.242[5185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.113516][ T5185] syz.2.242[5185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.126861][ T5185] random: crng reseeded on system resumption [ 158.520140][ T5195] overlayfs: missing 'lowerdir' [ 158.940028][ T5204] overlayfs: missing 'lowerdir' [ 158.954401][ T4252] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 159.193535][ T4252] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.212453][ T4252] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 159.237993][ T4252] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 159.284381][ T4252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.327110][ T4252] usb 5-1: config 0 descriptor?? [ 159.543107][ T5200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.582773][ T5200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.636953][ T4252] usb 5-1: USB disconnect, device number 20 [ 161.231889][ T27] audit: type=1326 audit(1749006704.979:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4d98e969 code=0x7ffc0000 [ 161.456780][ T27] audit: type=1326 audit(1749006704.979:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4d98e969 code=0x7ffc0000 [ 161.480525][ T5241] syz.0.260[5241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.480603][ T5241] syz.0.260[5241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.493320][ T5241] random: crng reseeded on system resumption [ 161.725669][ T27] audit: type=1326 audit(1749006705.029:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b4d98e969 code=0x7ffc0000 [ 161.748168][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.774214][ T27] audit: type=1326 audit(1749006705.029:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4d98e969 code=0x7ffc0000 [ 161.847881][ T27] audit: type=1326 audit(1749006705.029:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4d98e969 code=0x7ffc0000 [ 162.134236][ T27] audit: type=1326 audit(1749006705.029:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f8b4d98e969 code=0x7ffc0000 [ 162.233079][ T27] audit: type=1326 audit(1749006705.029:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4d98e969 code=0x7ffc0000 [ 162.288496][ T5251] overlayfs: missing 'lowerdir' [ 162.395314][ T27] audit: type=1326 audit(1749006705.029:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4d98e969 code=0x7ffc0000 [ 162.418406][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.501475][ T27] audit: type=1326 audit(1749006705.029:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f8b4d98e969 code=0x7ffc0000 [ 162.640488][ T27] audit: type=1326 audit(1749006705.029:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4d98e969 code=0x7ffc0000 [ 162.783972][ T4254] block nbd4: Receive control failed (result -32) [ 162.804030][ T5261] block nbd4: shutting down sockets [ 162.976204][ T5267] mkiss: ax0: crc mode is auto. [ 163.274465][ T4252] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 166.395826][ T5277] 9pnet_virtio: no channels available for device syz [ 166.494695][ T4300] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 167.225574][ T5279] syz.2.276[5279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.225652][ T5279] syz.2.276[5279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.238428][ T5279] random: crng reseeded on system resumption [ 167.484603][ T4300] usb 4-1: Using ep0 maxpacket: 32 [ 167.500831][ T4300] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.512182][ T4300] usb 4-1: config 0 has no interfaces? [ 167.531736][ T4300] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 167.561043][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.618803][ T4300] usb 4-1: Product: syz [ 167.635329][ T4300] usb 4-1: Manufacturer: syz [ 167.666274][ T4300] usb 4-1: SerialNumber: syz [ 167.742643][ T4300] usb 4-1: config 0 descriptor?? [ 167.897290][ T5291] overlayfs: missing 'lowerdir' [ 167.992830][ T4300] usb 4-1: USB disconnect, device number 2 [ 170.024537][ T4254] Bluetooth: hci4: command 0x0405 tx timeout [ 170.134204][ T5304] tipc: Enabling of bearer rejected, failed to enable media [ 170.916352][ T5315] syz.0.288[5315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.916432][ T5315] syz.0.288[5315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.928869][ T5315] random: crng reseeded on system resumption [ 171.149825][ T4308] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 171.338394][ T4308] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.338442][ T4308] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 171.338478][ T4308] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 171.338505][ T4308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.340745][ T4308] usb 5-1: config 0 descriptor?? [ 171.368955][ T5322] syz.0.289 uses obsolete (PF_INET,SOCK_PACKET) [ 171.560275][ T5306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.568243][ T5306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.576379][ T4308] usb 5-1: USB disconnect, device number 21 [ 176.618745][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 176.823097][ T52] block nbd0: Attempted send on invalid socket [ 176.830042][ T52] blk_print_req_error: 47 callbacks suppressed [ 176.830053][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 176.847667][ T5370] SQUASHFS error: Failed to read block 0x0: -5 [ 176.855109][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.885675][ T5370] unable to read squashfs_super_block [ 176.918431][ T22] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 176.984589][ T22] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 177.026825][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.119484][ T22] usb 4-1: config 0 descriptor?? [ 177.350230][ T5363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.374598][ T4300] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 177.384763][ T5363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.401232][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 177.426754][ T22] usb 4-1: USB disconnect, device number 3 [ 177.472695][ T5386] netlink: 'syz.1.300': attribute type 5 has an invalid length. [ 177.582437][ T5386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.300'. [ 177.604430][ T4300] usb 3-1: Using ep0 maxpacket: 8 [ 177.650167][ T4300] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 177.698456][ T4300] usb 3-1: config 0 has no interface number 0 [ 178.074747][ T4300] usb 3-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 178.303784][ T4300] usb 3-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 178.382976][ T4300] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.641773][ T4300] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 178.663491][ T5386] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 178.672650][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.681059][ T4300] usb 3-1: Product: syz [ 179.025025][ T5403] loop6: detected capacity change from 0 to 524287999 [ 179.034098][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 179.043346][ C0] buffer_io_error: 7 callbacks suppressed [ 179.043360][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.980621][ T5386] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 179.989708][ T4300] usb 3-1: Manufacturer: syz [ 179.994475][ T4300] usb 3-1: SerialNumber: syz [ 180.001454][ T4300] usb 3-1: config 0 descriptor?? [ 180.273794][ T5386] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 180.280251][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 180.291645][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.308507][ T5386] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 180.317441][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 180.326769][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.335120][ T5394] lo_write_bvec: 10 callbacks suppressed [ 180.335131][ T5394] loop: Write error at byte offset 1, length 1024. [ 180.369583][ T5386] device geneve2 entered promiscuous mode [ 180.420707][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 180.430193][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.440973][ T4300] usb 3-1: can't set config #0, error -71 [ 180.463328][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 180.464010][ T4300] usb 3-1: USB disconnect, device number 6 [ 180.473641][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 180.489950][ T5394] loop: Write error at byte offset 730113, length 4096. [ 180.524037][ T5394] loop: Write error at byte offset 1946625, length 4096. [ 180.569414][ T5394] loop: Write error at byte offset 3257345, length 4096. [ 180.594606][ C0] I/O error, dev loop6, sector 1426 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 1 [ 180.604750][ C0] I/O error, dev loop6, sector 1426 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 1 [ 180.615939][ C0] I/O error, dev loop6, sector 3802 op 0x1:(WRITE) flags 0xc800 phys_seg 117 prio class 1 [ 180.626761][ T5394] loop: Write error at byte offset 4428801, length 4096. [ 180.634028][ T5394] loop: Write error at byte offset 4510721, length 4096. [ 180.683310][ T5394] loop: Write error at byte offset 5821441, length 4096. [ 180.705736][ T5394] loop: Write error at byte offset 7132161, length 4096. [ 180.734699][ T5394] loop: Write error at byte offset 8442881, length 4096. [ 180.782647][ T5394] loop: Write error at byte offset 9753601, length 4096. [ 180.803737][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.812510][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.833426][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.842356][ T5403] ldm_validate_partition_table(): Disk read failed. [ 180.994764][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.038923][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.096151][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.154975][ T5403] Dev loop6: unable to read RDB block 0 [ 181.172665][ T5403] loop6: unable to read partition table [ 181.178707][ T5403] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 181.654410][ T4252] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 181.834576][ T4252] usb 4-1: Using ep0 maxpacket: 32 [ 181.841764][ T4252] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 181.860824][ T4252] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.891889][ T4252] usb 4-1: config 0 interface 0 has no altsetting 0 [ 181.928260][ T4252] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 181.935961][ T5431] overlayfs: missing 'workdir' [ 181.960129][ T4252] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 181.973320][ T4252] usb 4-1: Product: syz [ 181.983201][ T4252] usb 4-1: Manufacturer: syz [ 181.992283][ T4252] usb 4-1: SerialNumber: syz [ 182.071741][ T4252] usb 4-1: config 0 descriptor?? [ 182.102973][ T4252] ldusb 4-1:0.0: Interrupt in endpoint not found [ 182.228780][ T4300] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 182.433540][ T4300] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.467656][ T4300] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.499130][ T4300] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 182.539513][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.587867][ T4300] usb 5-1: config 0 descriptor?? [ 182.840352][ T5433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.883330][ T5433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.970659][ T4300] usb 5-1: USB disconnect, device number 22 [ 183.345700][ T5460] syz.0.332[5460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.345778][ T5460] syz.0.332[5460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.358090][ T5460] random: crng reseeded on system resumption [ 183.579969][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 183.714505][ T5467] 9p: Unknown Cache mode readahead [ 183.841742][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 183.876715][ T7] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 184.182258][ T7] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 184.234483][ T7] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 184.265825][ T7] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 184.273630][ T5471] overlayfs: missing 'lowerdir' [ 184.286313][ T7] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 184.300850][ T7] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 184.325126][ T7] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 184.342769][ T7] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 184.364389][ T7] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 184.402860][ T7] usb 2-1: string descriptor 0 read error: -22 [ 184.427434][ T7] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 184.457738][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.579498][ T22] usb 4-1: USB disconnect, device number 4 [ 184.583336][ T7] adutux 2-1:168.0: interrupt endpoints not found [ 184.834950][ T4300] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 185.286848][ T7] usb 2-1: USB disconnect, device number 9 [ 185.504471][ T4300] usb 1-1: Using ep0 maxpacket: 32 [ 185.514773][ T4300] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 185.565677][ T4300] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 185.596755][ T4300] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 185.616827][ T4300] usb 1-1: Product: syz [ 185.621068][ T4300] usb 1-1: Manufacturer: syz [ 185.640255][ T4300] usb 1-1: SerialNumber: syz [ 185.653492][ T4300] usb 1-1: config 0 descriptor?? [ 185.665483][ T5479] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 185.684141][ T4300] hub 1-1:0.0: bad descriptor, ignoring hub [ 185.693389][ T4300] hub: probe of 1-1:0.0 failed with error -5 [ 186.020510][ T5497] syz.4.343[5497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.020586][ T5497] syz.4.343[5497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.033240][ T5497] random: crng reseeded on system resumption [ 186.684419][ T5479] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 186.706078][ T5479] usb 1-1: device reset changed ep0 maxpacket size! [ 186.729372][ T7] usb 1-1: USB disconnect, device number 5 [ 186.914418][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.934614][ T22] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 187.104418][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 187.114163][ T7] usb 1-1: New USB device found, idVendor=0b05, idProduct=18f0, bcdDevice=99.2f [ 187.146269][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.156439][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.174398][ T22] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 187.183875][ T22] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 187.193131][ T7] usb 1-1: Product: syz [ 187.193152][ T7] usb 1-1: Manufacturer: syz [ 187.203963][ T7] usb 1-1: SerialNumber: syz [ 187.230768][ T7] usb 1-1: config 0 descriptor?? [ 187.300819][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.344867][ T22] usb 5-1: config 0 descriptor?? [ 187.488881][ T22] usb 1-1: USB disconnect, device number 6 [ 187.558351][ T5507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.575200][ T5507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.744568][ T126] usb 5-1: USB disconnect, device number 23 [ 188.594513][ T126] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 188.639371][ T5519] siw: device registration error -23 [ 188.884821][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 188.892498][ T126] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 188.920024][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.964458][ T126] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 189.021018][ T126] usb 1-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 189.084566][ T126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.104020][ T126] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 189.184896][ T126] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 189.193875][ T126] usb 1-1: Product: syz [ 189.239278][ T126] usb 1-1: Manufacturer: syz [ 189.243966][ T126] usb 1-1: SerialNumber: syz [ 189.285359][ T126] usb 1-1: config 0 descriptor?? [ 189.302388][ T126] ldusb 1-1:0.0: Interrupt in endpoint not found [ 191.434703][ T126] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 191.495509][ T7] usb 1-1: USB disconnect, device number 7 [ 193.026364][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.040189][ T126] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.071025][ T126] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 193.084564][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.095412][ T126] usb 2-1: config 0 descriptor?? [ 193.222108][ T5568] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 193.260988][ T5568] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 193.351402][ T126] usb 2-1: USB disconnect, device number 10 [ 193.673947][ T5580] siw: device registration error -23 [ 194.431599][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.438640][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.613587][ T5579] tipc: Started in network mode [ 194.630111][ T5579] tipc: Node identity 4, cluster identity 4711 [ 194.671977][ T5579] tipc: Node number set to 4 [ 195.152433][ T5597] can0: slcan on ptm1. [ 195.160722][ T5593] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 195.199358][ T5597] program syz.0.374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.141293][ T5596] can0 (unregistered): slcan off ptm1. [ 198.374508][ T5640] siw: device registration error -23 [ 199.634461][ T4306] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 199.826019][ T4306] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.029901][ T4306] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.039406][ T4306] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 200.049295][ T4306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.067547][ T4306] usb 5-1: config 0 descriptor?? [ 200.509553][ T5650] siw: device registration error -23 [ 200.518993][ T4306] usb 5-1: USB disconnect, device number 24 [ 201.461528][ T5675] siw: device registration error -23 [ 203.504499][ T5688] siw: device registration error -23 [ 206.874395][ T128] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 207.089466][ T128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.116024][ T128] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 207.221647][ T128] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 207.434095][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.195359][ T5730] siw: device registration error -23 [ 209.000741][ T128] usb 5-1: config 0 descriptor?? [ 209.221762][ T126] usb 5-1: USB disconnect, device number 25 [ 211.464422][ T5734] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 211.471954][ T4254] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.864879][ T4254] Bluetooth: hci2: command 0x0406 tx timeout [ 211.871098][ T4254] Bluetooth: hci1: command 0x0406 tx timeout [ 212.262966][ T5734] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 212.270174][ T5734] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 212.284560][ T5734] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.294765][ T5734] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 212.301386][ T5734] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 212.417918][ T5765] siw: device registration error -23 [ 212.594038][ T5734] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.652049][ T5734] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 212.710329][ T5734] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 212.770995][ T5734] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 212.811034][ T5734] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 212.856217][ T5734] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 213.544491][ T4254] Bluetooth: hci0: command 0x0406 tx timeout [ 213.900757][ T128] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 214.344711][ T4254] Bluetooth: hci1: command 0x0c1a tx timeout [ 215.357223][ T4254] Bluetooth: hci2: command 0x0c1a tx timeout [ 215.364505][ T4254] Bluetooth: hci4: command 0x0c1a tx timeout [ 215.769839][ T4254] Bluetooth: hci0: command 0x0406 tx timeout [ 215.793809][ T128] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.852759][ T128] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 215.891969][ T128] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 216.024428][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.059619][ T128] usb 4-1: config 0 descriptor?? [ 216.320656][ T126] usb 4-1: USB disconnect, device number 5 [ 216.428696][ T4254] Bluetooth: hci1: command 0x0406 tx timeout [ 217.384528][ T4254] Bluetooth: hci4: command 0x0406 tx timeout [ 217.392505][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 217.642448][ T5808] netdevsim netdevsim1: Direct firmware load for . [ 217.642448][ T5808] failed with error -2 [ 217.694420][ T5808] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 217.694420][ T5808] [ 220.534377][ T126] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 222.047576][ T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.098659][ T126] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.142247][ T126] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 222.184418][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.235167][ T126] usb 4-1: config 0 descriptor?? [ 222.461729][ T126] usb 4-1: USB disconnect, device number 6 [ 222.696819][ T5850] device ip6tnl1 entered promiscuous mode [ 224.931045][ T5855] syz.2.440[5855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.931510][ T5855] syz.2.440[5855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.082336][ T5855] random: crng reseeded on system resumption [ 226.368342][ T5870] netlink: 'syz.1.448': attribute type 13 has an invalid length. [ 227.445252][ T5876] siw: device registration error -23 [ 229.115356][ T5870] bridge0: port 3(macvlan2) entered disabled state [ 229.122755][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.131000][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.740531][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.406997][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.905844][ T128] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 233.095937][ T128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.121539][ T128] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.137096][ T128] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 233.154544][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.182723][ T128] usb 5-1: config 0 descriptor?? [ 233.444229][ T4300] usb 5-1: USB disconnect, device number 26 [ 233.589098][ T5904] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 233.589098][ T5904] program syz.3.457 not setting count and/or reply_len properly [ 234.469326][ T5870] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.482942][ T5870] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.496023][ T5870] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.516233][ T5870] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.072655][ T5870] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 235.083112][ T5870] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 235.093531][ T5870] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 235.103238][ T5870] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 235.152846][ T5888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.453'. [ 235.212133][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.221240][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.779334][ T5926] syz.4.463[5926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.779745][ T5926] syz.4.463[5926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.799288][ T5926] random: crng reseeded on system resumption [ 237.326953][ T5933] 9pnet_virtio: no channels available for device syz [ 238.874588][ T5942] siw: device registration error -23 [ 240.056738][ T5947] random: crng reseeded on system resumption [ 240.700084][ T4300] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 240.906231][ T4300] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.962868][ T4300] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.055288][ T4300] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 241.114968][ T4300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.185477][ T4300] usb 1-1: config 0 descriptor?? [ 241.489157][ T7] usb 1-1: USB disconnect, device number 8 [ 241.730239][ T5959] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 241.737346][ T5959] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 241.787689][ T5959] vhci_hcd vhci_hcd.0: Device attached [ 242.064434][ T4306] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 242.599279][ T5975] syz.0.475[5975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.599565][ T5975] syz.0.475[5975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.622439][ T5975] random: crng reseeded on system resumption [ 243.599841][ T5962] vhci_hcd: connection reset by peer [ 243.636691][ T9] vhci_hcd: stop threads [ 243.646309][ T9] vhci_hcd: release socket [ 243.661207][ T9] vhci_hcd: disconnect device [ 244.122128][ T5983] siw: device registration error -23 [ 246.871334][ T6013] siw: device registration error -23 [ 247.227450][ T4306] vhci_hcd: vhci_device speed not set [ 247.758485][ T6024] syz.3.487[6024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.758597][ T6024] syz.3.487[6024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.772105][ T6024] random: crng reseeded on system resumption [ 249.070059][ T6037] Trying to write to read-only block-device nullb0 [ 249.972049][ T6050] siw: device registration error -23 [ 252.095030][ T6064] netlink: 'syz.1.497': attribute type 1 has an invalid length. [ 252.195530][ T6064] tmpfs: Unknown parameter 'grpquota' [ 253.345298][ T6027] Trying to write to read-only block-device nullb0 [ 253.808073][ T6083] siw: device registration error -23 [ 254.815447][ T6085] syz.3.501[6085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.815557][ T6085] syz.3.501[6085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.828742][ T6085] random: crng reseeded on system resumption [ 255.724589][ T4311] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 255.866860][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.874023][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.980532][ T4311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.044637][ T4311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 256.097587][ T4311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 256.168181][ T4311] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 256.209249][ T4311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.257277][ T6090] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.300682][ T4311] hub 1-1:1.0: bad descriptor, ignoring hub [ 256.321789][ T4311] hub: probe of 1-1:1.0 failed with error -5 [ 256.368353][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'. [ 256.369401][ T4311] cdc_wdm 1-1:1.0: skipping garbage [ 256.450626][ T4311] cdc_wdm 1-1:1.0: skipping garbage [ 256.515049][ T4311] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 256.533086][ T4311] cdc_wdm 1-1:1.0: Unknown control protocol [ 256.641758][ T4311] usb 1-1: USB disconnect, device number 9 [ 257.066609][ T6109] mmap: syz.3.507 (6109) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 257.353060][ T6118] siw: device registration error -23 [ 259.074515][ T6121] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 259.091127][ T6129] siw: device registration error -23 [ 259.134663][ T6121] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 259.186180][ T6121] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 259.253748][ T6121] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 259.301672][ T6121] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 259.355501][ T6121] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 259.363663][ T6121] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.376903][ T6121] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 259.383468][ T6121] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 259.407649][ T6121] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 259.430515][ T6121] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 259.578793][ T6121] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 259.945725][ T6123] [ 259.948587][ T6123] ====================================================== [ 259.958139][ T6123] WARNING: possible circular locking dependency detected [ 259.973262][ T6123] 6.1.140-syzkaller #0 Not tainted [ 259.980902][ T6123] ------------------------------------------------------ [ 259.985228][ T6139] syz.4.517[6139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.990129][ T6123] syz.0.514/6123 is trying to acquire lock: [ 259.990148][ T6123] ffff88805337daf0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10 [ 260.024827][ T6123] [ 260.024827][ T6123] but task is already holding lock: [ 260.032826][ T6123] ffff88807d1ccc58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 260.044635][ T6123] [ 260.044635][ T6123] which lock already depends on the new lock. [ 260.044635][ T6123] [ 260.058820][ T6123] [ 260.058820][ T6123] the existing dependency chain (in reverse order) is: [ 260.073692][ T6123] [ 260.073692][ T6123] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 260.084380][ T6123] down_read_killable+0x4c/0x340 [ 260.092218][ T6123] mmap_read_lock_killable+0x1d/0x60 [ 260.099502][ T6123] lock_mm_and_find_vma+0x2b1/0x2f0 [ 260.106950][ T6123] do_user_addr_fault+0x2db/0xb10 [ 260.113672][ T6123] exc_page_fault+0x60/0x100 [ 260.120082][ T6123] asm_exc_page_fault+0x22/0x30 [ 260.127500][ T6123] fault_in_readable+0x13e/0x1f0 [ 260.134386][ T6123] fault_in_iov_iter_readable+0xbb/0x2e0 [ 260.141997][ T6123] generic_perform_write+0x1d2/0x560 [ 260.148358][ T6123] __generic_file_write_iter+0x172/0x430 [ 260.155335][ T6123] generic_file_write_iter+0xab/0x2e0 [ 260.162446][ T6123] vfs_write+0x44c/0x960 [ 260.169609][ T6123] ksys_write+0x143/0x240 [ 260.175835][ T6123] do_syscall_64+0x4c/0xa0 [ 260.182124][ T6123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.189299][ T6123] [ 260.189299][ T6123] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 260.199339][ T6123] __lock_acquire+0x2cf8/0x7c50 [ 260.204915][ T6123] lock_acquire+0x1b4/0x490 [ 260.213865][ T6123] down_write+0x36/0x60 [ 260.218648][ T6123] process_measurement+0x33c/0x1a10 [ 260.224957][ T6123] ima_file_mmap+0x104/0x150 [ 260.230102][ T6123] __se_sys_remap_file_pages+0x53e/0x770 [ 260.244054][ T6123] do_syscall_64+0x4c/0xa0 [ 260.249716][ T6123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.256521][ T6123] [ 260.256521][ T6123] other info that might help us debug this: [ 260.256521][ T6123] [ 260.267121][ T6123] Possible unsafe locking scenario: [ 260.267121][ T6123] [ 260.275300][ T6123] CPU0 CPU1 [ 260.280984][ T6123] ---- ---- [ 260.286621][ T6123] lock(&mm->mmap_lock); [ 260.291180][ T6123] lock(&sb->s_type->i_mutex_key#12); [ 260.299496][ T6123] lock(&mm->mmap_lock); [ 260.308729][ T6123] lock(&sb->s_type->i_mutex_key#12); [ 260.314585][ T6123] [ 260.314585][ T6123] *** DEADLOCK *** [ 260.314585][ T6123] [ 260.323136][ T6123] 1 lock held by syz.0.514/6123: [ 260.328358][ T6123] #0: ffff88807d1ccc58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 260.339913][ T6123] [ 260.339913][ T6123] stack backtrace: [ 260.346283][ T6123] CPU: 1 PID: 6123 Comm: syz.0.514 Not tainted 6.1.140-syzkaller #0 [ 260.355017][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.366404][ T6123] Call Trace: [ 260.370061][ T6123] [ 260.373197][ T6123] dump_stack_lvl+0x168/0x22e [ 260.378617][ T6123] ? load_image+0x3b0/0x3b0 [ 260.384390][ T6123] ? show_regs_print_info+0x12/0x12 [ 260.391726][ T6123] ? print_circular_bug+0x12b/0x1a0 [ 260.397953][ T6123] check_noncircular+0x274/0x310 [ 260.404099][ T6123] ? add_chain_block+0x940/0x940 [ 260.410589][ T6123] ? lockdep_lock+0xdc/0x1e0 [ 260.416019][ T6123] ? _find_first_zero_bit+0xcf/0x100 [ 260.422458][ T6123] __lock_acquire+0x2cf8/0x7c50 [ 260.427716][ T6123] ? ima_match_policy+0x104/0x2100 [ 260.433396][ T6123] ? verify_lock_unused+0x140/0x140 [ 260.438807][ T6123] ? ima_match_policy+0x207a/0x2100 [ 260.445020][ T6123] ? __schedule+0x10b7/0x40d0 [ 260.450697][ T6123] lock_acquire+0x1b4/0x490 [ 260.457207][ T6123] ? process_measurement+0x33c/0x1a10 [ 260.464114][ T6123] ? __might_sleep+0xd0/0xd0 [ 260.469636][ T6123] ? __schedule+0x10f1/0x40d0 [ 260.475633][ T6123] ? read_lock_is_recursive+0x10/0x10 [ 260.484055][ T6123] ? ima_get_action+0x71/0xa0 [ 260.489346][ T6123] down_write+0x36/0x60 [ 260.494004][ T6123] ? process_measurement+0x33c/0x1a10 [ 260.500701][ T6123] process_measurement+0x33c/0x1a10 [ 260.508353][ T6123] ? ima_file_mmap+0x150/0x150 [ 260.514215][ T6123] ? aa_file_perm+0x117/0xec0 [ 260.519753][ T6123] ? mtree_load+0xeb/0xa40 [ 260.525324][ T6123] ? mtree_load+0x90a/0xa40 [ 260.531267][ T6123] ? aa_get_current_label+0x110/0x1d0 [ 260.537671][ T6123] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 260.545451][ T6123] ima_file_mmap+0x104/0x150 [ 260.551651][ T6123] ? ima_file_free+0x3e0/0x3e0 [ 260.557055][ T6123] ? common_file_perm+0x171/0x1c0 [ 260.562297][ T6123] ? bpf_lsm_mmap_file+0x5/0x10 [ 260.567883][ T6123] ? security_mmap_file+0x11b/0x180 [ 260.573339][ T6123] __se_sys_remap_file_pages+0x53e/0x770 [ 260.579367][ T6123] ? __se_sys_futex+0x14a/0x440 [ 260.584712][ T6123] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 260.591115][ T6123] ? lock_chain_count+0x20/0x20 [ 260.597861][ T6123] ? lockdep_hardirqs_on+0x94/0x140 [ 260.604259][ T6123] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 260.611395][ T6123] do_syscall_64+0x4c/0xa0 [ 260.616415][ T6123] ? clear_bhb_loop+0x60/0xb0 [ 260.622203][ T6123] ? clear_bhb_loop+0x60/0xb0 [ 260.627433][ T6123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.634433][ T6123] RIP: 0033:0x7ff57918e969 [ 260.639325][ T6123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.661761][ T6123] RSP: 002b:00007ff579f15038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 260.672912][ T6123] RAX: ffffffffffffffda RBX: 00007ff5793b5fa0 RCX: 00007ff57918e969 [ 260.685085][ T6123] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 260.694540][ T6123] RBP: 00007ff579210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 260.704256][ T6123] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 260.714004][ T6123] R13: 0000000000000000 R14: 00007ff5793b5fa0 R15: 00007ffcc9333138 [ 260.724645][ T6123] [ 260.736118][ T6138] siw: device registration error -23 [ 260.856878][ T6139] syz.4.517[6139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.857589][ T6142] random: crng reseeded on system resumption [ 260.943834][ T6142] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 260.953512][ T6142] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 260.969090][ T6142] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 261.064435][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 261.180393][ T6142] PM: hibernation: Basic memory bitmaps created [ 261.304424][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 261.384387][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 261.464424][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 261.565166][ T6139] PM: hibernation: Basic memory bitmaps freed [ 263.144545][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 263.394446][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 263.464444][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 263.544508][ T48] Bluetooth: hci4: command 0x0406 tx timeout