last executing test programs: 23.602653792s ago: executing program 1 (id=380): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x184}}, 0x4048851) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, 0x0}, 0x94) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x34343452, 0x5, 0x8, [{0x6, 0x10}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x1, 0x7}}) 21.645455293s ago: executing program 1 (id=383): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0xdc, 0x18, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x104}, 0x1, 0x0, 0x0, 0x8040}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000580)=0x6dc1, 0x4) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999", 0x5b}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)="e529dfc436f54338d1ded460ab1dc87ee94ffccb223eea241071d186e6dad7af6eaee9a174899903e8efa954af8644bfd488600a3c4890c503193660dcf799a821644139af49bb15bcc5e2541243878c7c72d83c37caafadec1fb3489f44dce4d26a1b4f630f0b8f3f0dafbad04d96b88dffa493afebf10efd55ffc4a45b473efa365083760dc89ebf96ce47050e6e057a9f71e52104ad90f4b41f9496315d9ed8608f9161611010089d14590ea1657713d0887a45b35fbed0cc35aa1f83ada3c63dfb9f3ad0195adf3321c973", 0xcd}, {&(0x7f0000000bc0)="3f63f26d63818ce5966b1c349f1722f09bc2981c862ee6bad218bd7439c8f2a2e9ccba0cd8adee2130a181c96b89017ce2b27e424a3cc21c105dc3eedb82f0d13bd3f94b122a377b230d16b7a05ae88d4240acd7f04d52a8a2710dd6b718fd1f3460df2ab8443427f69e8045f7133c09", 0x70}, {0x0}], 0x6}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 21.364161429s ago: executing program 1 (id=385): syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x5a) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4000000000000001, 0x1c0062) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x41fec472531ebcab, 0xde) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000480)={0x1, 0x2, 0x1000, 0x28, &(0x7f0000000280)="51b7c9fbbbac2401b9c7c2db29f558c64d07f629b7142740adb9a7e4acd9481898d940119db4f0c4", 0x6c, 0x0, &(0x7f0000000400)="7bd844e8f704b8d3ca7d767a06c9a647a039070a6e9bec59feddcf105970c620cc3cc5c16fe29a5db94b855c7ddc283e95fa96ae03a32c8e806af5f2d98c3f65c07de70d5663530fe567d0b5ae5a9a5ada99e0566ab0b1e23bcacc852d9d45b5e67d3c80a48af5b0f67c2146"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() prlimit64(r1, 0xc, &(0x7f0000000180)={0x2, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) rt_sigaction(0x34, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000003c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 18.930181205s ago: executing program 1 (id=389): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0xff7f}}, 0x20}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000280)='1', 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) 17.970996405s ago: executing program 2 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) 15.650366583s ago: executing program 2 (id=395): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x3d}, 0x10040007, 0x1}, 0x20) connect$inet(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x24, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14, 0x0, 0x1, [@generic]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 15.507653122s ago: executing program 3 (id=396): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0xdc, 0x18, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x104}, 0x1, 0x0, 0x0, 0x8040}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000580)=0x6dc1, 0x4) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999", 0x5b}, {&(0x7f0000000a80)="74153c756d", 0x5}, {&(0x7f0000000ac0)="e529dfc436f54338d1ded460ab1dc87ee94ffccb223eea241071d186e6dad7af6eaee9a174899903e8efa954af8644bfd488600a3c4890c503193660dcf799a821644139af49bb15bcc5e2541243878c7c72d83c37caafadec1fb3489f44dce4d26a1b4f630f0b8f3f0dafbad04d96b88dffa493afebf10efd55ffc4a45b473efa365083760dc89ebf96ce47050e6e057a9f71e52104ad90f4b41f9496315d9ed8608f9161611010089d14590ea1657713d0887a45b35fbed0cc35aa1f83ada3c63dfb9f3ad0195adf3321c973", 0xcd}, {&(0x7f0000000bc0)="3f63f26d63818ce5966b1c349f1722f09bc2981c862ee6bad218bd7439c8f2a2e9ccba0cd8adee2130a181c96b89017ce2b27e424a3cc21c105dc3eedb82f0d13bd3f94b122a377b230d16b7a05ae88d4240acd7f04d52a8a2710dd6b718fd1f3460df2ab8443427f69e8045f7133c09", 0x70}, {0x0}], 0x6}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14.02731824s ago: executing program 0 (id=397): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x1, 0x12) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000034c0)) 12.95606962s ago: executing program 0 (id=399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 12.685176706s ago: executing program 3 (id=400): syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x5a) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4000000000000001, 0x1c0062) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x41fec472531ebcab, 0xde) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000480)={0x1, 0x2, 0x1000, 0x28, &(0x7f0000000280)="51b7c9fbbbac2401b9c7c2db29f558c64d07f629b7142740adb9a7e4acd9481898d940119db4f0c4", 0x6c, 0x0, &(0x7f0000000400)="7bd844e8f704b8d3ca7d767a06c9a647a039070a6e9bec59feddcf105970c620cc3cc5c16fe29a5db94b855c7ddc283e95fa96ae03a32c8e806af5f2d98c3f65c07de70d5663530fe567d0b5ae5a9a5ada99e0566ab0b1e23bcacc852d9d45b5e67d3c80a48af5b0f67c2146"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() prlimit64(r1, 0xc, &(0x7f0000000180)={0x2, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) rt_sigaction(0x34, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000003c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 11.520493336s ago: executing program 2 (id=402): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14247524860608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000800}, 0x4000042) 11.51306241s ago: executing program 0 (id=403): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)=@echo=0xffffffcd) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x5f4f, &(0x7f00000003c0)={0x0, 0x804, 0x2, 0x1000000}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) 9.956192696s ago: executing program 3 (id=404): socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x4, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 7.861231226s ago: executing program 4 (id=405): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 7.819612498s ago: executing program 0 (id=406): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000000001716567196a30bbf60535427d4c1d87c8fb5fe5791adcef01393a907b99ea56df88bd929589e64e34ebdb3514060018a0ff3d8c0160c427c215f9f78460b59eb75c08f119b97295c5a554fe2d91bd3d63d76c6f1fc6060df92b34b3df2cd56253c1a9c0c3000ddf92c6658a0a6f2403b405d647ef9851bd62f89d3c7c93e8282ec4a0923705dc499e32da757f6b32be97d72d2b6d3d8a2c03d", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000dd00007b8af8ff00000000b7080000000000ff7b8af0ff00000000bfa1c700000000000007010000f8ffffffbfb000000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0xe24, 0x9, @loopback, 0x3}, 0x1c, 0x0}, 0x4048003) r5 = socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000cc0)) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) 7.628944973s ago: executing program 4 (id=407): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 7.518068885s ago: executing program 1 (id=408): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$kcm(0x10, 0x2, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 7.517196846s ago: executing program 3 (id=409): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x1, 0x12) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000034c0)) 6.717402736s ago: executing program 0 (id=410): getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000400)=0xe) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x100004, 0x220104, 0xb, 0x51, 0xffffffffffffffff, 0x8}, 0x50) ppoll(&(0x7f00000002c0)=[{r5, 0x10a}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x1]}, 0x8) 6.716182988s ago: executing program 2 (id=411): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000900), 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 6.715449031s ago: executing program 4 (id=412): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000afa100000000000007010000f8ffffffbffbf7d5c100000007040000f0ffffffb702000008000000182300", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f00000002c0)=@random={'user.', '\'^\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f0000000400), 0x2) write(0xffffffffffffffff, &(0x7f0000000140)="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", 0x148) socket$inet6_udp(0xa, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000002280)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) 5.316804911s ago: executing program 3 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mknod(&(0x7f0000000480)='./bus\x00', 0x10, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) tkill(r3, 0x12) tkill(r3, 0x12) ptrace(0x4207, 0xffffffffffffffff) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = mq_open(&(0x7f0000000000)='upperdir', 0x1, 0x6, &(0x7f0000000040)={0x480000000, 0x3, 0x1, 0x8}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) r5 = dup(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) read$FUSE(r5, &(0x7f0000002280)={0x2020}, 0x3f5ee81f3caeaa48) getpeername$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18050900000000fe000000004b64ffec850000007d0000000400000007", @ANYRES16=r4], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x101091, 0x0) 4.965065128s ago: executing program 1 (id=414): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x2000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) inotify_init() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x40084) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 3.456381002s ago: executing program 3 (id=415): syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0xfffe, 0x0, @mcast2}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000580)={0x9, {{0xa, 0x4e24, 0x2, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x250, 0x4000, &(0x7f0000000180)=@caif=@rfm={0x25, 0x107ff, "6798c48f000000ec00"}, 0x80) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0}) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, &(0x7f00000001c0)=[0xd], &(0x7f0000000480)=[0x0], &(0x7f0000000040)}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f00000003c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x32}, 0x28) syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) 3.31923602s ago: executing program 2 (id=416): syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0xfffe, 0x0, @mcast2}}}}}}, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000580)={0x9, {{0xa, 0x4e24, 0x2, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x172, 0x4000, &(0x7f0000000180)=@caif=@rfm={0x25, 0x107ff, "6798c48f000000ec00"}, 0x80) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0}) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, &(0x7f00000001c0)=[0xd], &(0x7f0000000480)=[0x0], &(0x7f0000000040)}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000003c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x32}, 0x28) syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) 3.29008628s ago: executing program 4 (id=417): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x10, 0x0, 0x0, 0x920, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xe, 0xbf, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240), 0x0, 0x10, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, &(0x7f00000026c0), 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r5, 0x0, &(0x7f00008e2000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x3fff, 0x2, &(0x7f0000000100)="00b2", 0x4}) 1.491518484s ago: executing program 4 (id=418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, r5, 0x0, 0x13, &(0x7f0000000340)='\x8e[@$[//^]&*%---\'-)\x00'}, 0x30) 300.669323ms ago: executing program 0 (id=419): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x3d}, 0x10040007, 0x1}, 0x20) connect$inet(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x24, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14, 0x0, 0x1, [@generic]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 298.435881ms ago: executing program 4 (id=420): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r2 = fanotify_init(0x81, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="840100001000130400000000fbdbdf250a0101dd000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x184}}, 0x4048851) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffff8c, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000002f00010000000000fcdbdf", @ANYBLOB="c0c5ea6dfc3dfb457a1c320e9a13172af3ca5e7c771c4013a48c76c2c168edf24b2f33cb534f1ae1e2f85267cb487966f7b2888e60b348754a8ead8e89fa59f031747fc2eb53a2656f5a9845cfc98b95"], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x34343452, 0x5, 0x8, [{0x6, 0x10}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x1, 0x7}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) 0s ago: executing program 2 (id=421): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000000001716567196a30bbf60535427d4c1d87c8fb5fe5791adcef01393a907b99ea56df88bd929589e64e34ebdb3514060018a0ff3d8c0160c427c215f9f78460b59eb75c08f119b97295c5a554fe2d91bd3d63d76c6f1fc6060df92b34b3df2cd56253c1a9c0c3000ddf92c6658a0a6f2403b405d647ef9851bd62f89d3c7c93e8282ec4a0923705dc499e32da757f6b32be97d72d2b6d3d8a2c03d", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000dd00007b8af8ff00000000b7080000000000ff7b8af0ff00000000bfa1c700000000000007010000f8ffffffbfb000000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0xe24, 0x9, @loopback, 0x3}, 0x1c, 0x0}, 0x4048003) r5 = socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000cc0)) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. [ 83.934120][ T5811] cgroup: Unknown subsys name 'net' [ 84.061715][ T5811] cgroup: Unknown subsys name 'cpuset' [ 84.070536][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.779370][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.578867][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.586574][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.599260][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.607238][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.616588][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.625735][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.627160][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.633967][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.647740][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.649577][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.656047][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.663305][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.677492][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.685650][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.696591][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.738905][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.746997][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.757535][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.759691][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.771894][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.772903][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.788867][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.796798][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.807327][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.817042][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.355784][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 90.481781][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 90.682776][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 90.719908][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.727442][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.735558][ T5829] bridge_slave_0: entered allmulticast mode [ 90.744453][ T5829] bridge_slave_0: entered promiscuous mode [ 90.792590][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.805292][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.813044][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.820291][ T5829] bridge_slave_1: entered allmulticast mode [ 90.827632][ T5829] bridge_slave_1: entered promiscuous mode [ 90.849829][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 90.939101][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.946300][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.954150][ T5827] bridge_slave_0: entered allmulticast mode [ 90.961694][ T5827] bridge_slave_0: entered promiscuous mode [ 90.983936][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.024802][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.032214][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.039530][ T5827] bridge_slave_1: entered allmulticast mode [ 91.046968][ T5827] bridge_slave_1: entered promiscuous mode [ 91.083516][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.162261][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.209053][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.226162][ T5829] team0: Port device team_slave_0 added [ 91.232435][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.240452][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.247637][ T5830] bridge_slave_0: entered allmulticast mode [ 91.255284][ T5830] bridge_slave_0: entered promiscuous mode [ 91.306464][ T5829] team0: Port device team_slave_1 added [ 91.312572][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.319971][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.327124][ T5830] bridge_slave_1: entered allmulticast mode [ 91.335187][ T5830] bridge_slave_1: entered promiscuous mode [ 91.403914][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.411330][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.419156][ T5840] bridge_slave_0: entered allmulticast mode [ 91.426388][ T5840] bridge_slave_0: entered promiscuous mode [ 91.436206][ T5827] team0: Port device team_slave_0 added [ 91.442394][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.449665][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.456824][ T5839] bridge_slave_0: entered allmulticast mode [ 91.464741][ T5839] bridge_slave_0: entered promiscuous mode [ 91.501158][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.508479][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.515872][ T5840] bridge_slave_1: entered allmulticast mode [ 91.523427][ T5840] bridge_slave_1: entered promiscuous mode [ 91.532913][ T5827] team0: Port device team_slave_1 added [ 91.550534][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.557701][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.565038][ T5839] bridge_slave_1: entered allmulticast mode [ 91.572940][ T5839] bridge_slave_1: entered promiscuous mode [ 91.580922][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.588348][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.614329][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.629670][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.677042][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.684204][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.710347][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.718815][ T5145] Bluetooth: hci0: command tx timeout [ 91.734306][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.756035][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.763089][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.788615][ T5838] Bluetooth: hci2: command tx timeout [ 91.789531][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.794581][ T5145] Bluetooth: hci1: command tx timeout [ 91.807661][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.818152][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.844735][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.868467][ T5145] Bluetooth: hci3: command tx timeout [ 91.874108][ T5145] Bluetooth: hci4: command tx timeout [ 91.901364][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.923535][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.954557][ T43] cfg80211: failed to load regulatory.db [ 91.969114][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.996541][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.023866][ T5829] hsr_slave_0: entered promiscuous mode [ 92.030563][ T5829] hsr_slave_1: entered promiscuous mode [ 92.056514][ T5830] team0: Port device team_slave_0 added [ 92.111875][ T5830] team0: Port device team_slave_1 added [ 92.143562][ T5840] team0: Port device team_slave_0 added [ 92.151807][ T5839] team0: Port device team_slave_0 added [ 92.184455][ T5827] hsr_slave_0: entered promiscuous mode [ 92.191139][ T5827] hsr_slave_1: entered promiscuous mode [ 92.198340][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 92.204198][ T5827] Cannot create hsr debugfs directory [ 92.212007][ T5840] team0: Port device team_slave_1 added [ 92.220214][ T5839] team0: Port device team_slave_1 added [ 92.294140][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.301345][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.327515][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.371999][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.379195][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.405125][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.417459][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.424570][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.450673][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.483510][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.490668][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.516679][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.528856][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.535828][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.562026][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.602288][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.609513][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.636207][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.842330][ T5830] hsr_slave_0: entered promiscuous mode [ 92.849906][ T5830] hsr_slave_1: entered promiscuous mode [ 92.856066][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 92.861919][ T5830] Cannot create hsr debugfs directory [ 92.873048][ T5839] hsr_slave_0: entered promiscuous mode [ 92.879533][ T5839] hsr_slave_1: entered promiscuous mode [ 92.885847][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 92.891753][ T5839] Cannot create hsr debugfs directory [ 92.911338][ T5840] hsr_slave_0: entered promiscuous mode [ 92.917753][ T5840] hsr_slave_1: entered promiscuous mode [ 92.924621][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 92.930484][ T5840] Cannot create hsr debugfs directory [ 93.194558][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.252608][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.290382][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.332009][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.452078][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.462911][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.476775][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.503549][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.609060][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.622025][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.637325][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.649561][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.757231][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.788994][ T5145] Bluetooth: hci0: command tx timeout [ 93.826856][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.837607][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.849882][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.864675][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.868261][ T5145] Bluetooth: hci1: command tx timeout [ 93.872919][ T5838] Bluetooth: hci2: command tx timeout [ 93.886068][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.943373][ T3074] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.950894][ T3074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.960263][ T5838] Bluetooth: hci4: command tx timeout [ 93.965717][ T5145] Bluetooth: hci3: command tx timeout [ 94.021933][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.029144][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.040140][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.055052][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.065465][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.083596][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.143920][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.208885][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.231454][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.249724][ T3074] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.256887][ T3074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.333319][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.343351][ T3074] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.350628][ T3074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.404215][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.411465][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.445158][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.452442][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.565592][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.651892][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.679794][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.703951][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.722352][ T3074] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.729609][ T3074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.787114][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.794393][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.855961][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.908782][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.916017][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.994122][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.013211][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.020553][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.133380][ T5829] veth0_vlan: entered promiscuous mode [ 95.187099][ T5829] veth1_vlan: entered promiscuous mode [ 95.219020][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.346095][ T5829] veth0_macvtap: entered promiscuous mode [ 95.373603][ T5827] veth0_vlan: entered promiscuous mode [ 95.394058][ T5829] veth1_macvtap: entered promiscuous mode [ 95.421461][ T5827] veth1_vlan: entered promiscuous mode [ 95.504911][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.564803][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.658495][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.673274][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.706591][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.732334][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.744078][ T5827] veth0_macvtap: entered promiscuous mode [ 95.761957][ T5922] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.795294][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.805880][ T5827] veth1_macvtap: entered promiscuous mode [ 95.872183][ T5145] Bluetooth: hci0: command tx timeout [ 95.952099][ T5145] Bluetooth: hci2: command tx timeout [ 95.952112][ T5838] Bluetooth: hci1: command tx timeout [ 95.957121][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.982710][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.988238][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.031197][ T5145] Bluetooth: hci4: command tx timeout [ 96.036668][ T5145] Bluetooth: hci3: command tx timeout [ 96.057660][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.071217][ T5830] veth0_vlan: entered promiscuous mode [ 96.081681][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.088193][ T5839] veth0_vlan: entered promiscuous mode [ 96.095484][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.123462][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.160880][ T5922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.170328][ T5922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.186616][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.209433][ T5839] veth1_vlan: entered promiscuous mode [ 96.226832][ T5830] veth1_vlan: entered promiscuous mode [ 96.235115][ T5922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.255049][ T5840] veth0_vlan: entered promiscuous mode [ 96.325346][ T5840] veth1_vlan: entered promiscuous mode [ 96.595719][ T5840] veth0_macvtap: entered promiscuous mode [ 96.607352][ T5840] veth1_macvtap: entered promiscuous mode [ 96.627448][ T5839] veth0_macvtap: entered promiscuous mode [ 96.659022][ T5839] veth1_macvtap: entered promiscuous mode [ 96.723723][ T5944] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 97.242895][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.254448][ T5922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.277982][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.287599][ T5922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.304183][ T5830] veth0_macvtap: entered promiscuous mode [ 97.328934][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.343057][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.405773][ T5830] veth1_macvtap: entered promiscuous mode [ 97.418772][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.451238][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.463114][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.480578][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.522607][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.550754][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.735544][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.758271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.766629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.778028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 97.786279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 97.882234][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.949561][ T5145] Bluetooth: hci0: command tx timeout [ 98.034671][ T5838] Bluetooth: hci2: command tx timeout [ 98.040656][ T5145] Bluetooth: hci1: command tx timeout [ 98.085273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.108222][ T5145] Bluetooth: hci4: command tx timeout [ 98.130201][ T5145] Bluetooth: hci3: command tx timeout [ 98.187655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.290059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.392478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.428946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.699687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.072936][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.083484][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.095700][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.176293][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.252288][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.290315][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.348774][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.474790][ T5958] netlink: 'syz.0.8': attribute type 2 has an invalid length. [ 99.964144][ T5958] 9: entered promiscuous mode [ 100.125003][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.157149][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.720622][ T5965] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.811791][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.836713][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.960397][ T5964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.965177][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.011810][ T5964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.621138][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.637306][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.663953][ T5897] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.806440][ T5964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.830730][ T5964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.850047][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 101.856564][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.877175][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.887080][ T5897] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 101.906072][ T5897] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 101.930673][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 101.953007][ T5897] usb 2-1: Product: syz [ 101.960014][ T5897] usb 2-1: Manufacturer: syz [ 101.965007][ T5897] usb 2-1: SerialNumber: syz [ 101.999154][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.022777][ T5897] usb 2-1: config 0 descriptor?? [ 102.056625][ T5969] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.117280][ T5979] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 102.180336][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 102.225660][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.240796][ T5979] team0: Port device bridge1 added [ 102.257671][ T10] usb 5-1: config 0 descriptor?? [ 102.265395][ T10] cp210x 5-1:0.0: cp210x converter detected [ 102.502601][ T5925] usb 2-1: USB disconnect, device number 2 [ 102.608783][ T5987] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4'. [ 102.849836][ T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 102.880533][ T10] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 102.880566][ T10] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 102.921500][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 103.064112][ T5990] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.505144][ T5999] netlink: 'syz.3.15': attribute type 10 has an invalid length. [ 104.557628][ T5999] team0: Device ipvlan1 failed to register rx_handler [ 104.835356][ T5911] usb 5-1: USB disconnect, device number 2 [ 104.890947][ T5911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 104.924068][ T6001] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 104.961670][ T5911] cp210x 5-1:0.0: device disconnected [ 106.331428][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.349840][ T6010] netlink: 'syz.3.17': attribute type 2 has an invalid length. [ 106.809308][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 106.826912][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.766630][ T6010] 9: entered promiscuous mode [ 107.769446][ T9] usb 1-1: config 0 descriptor?? [ 107.784099][ T9] cp210x 1-1:0.0: cp210x converter detected [ 108.279745][ T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 109.018558][ T9] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 109.022735][ T9] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 109.027098][ T6034] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.24'. [ 109.313620][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 109.534921][ T5925] usb 1-1: USB disconnect, device number 2 [ 109.550911][ T5925] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 109.551565][ T5925] cp210x 1-1:0.0: device disconnected [ 109.889990][ T5904] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.008471][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 111.041088][ T5904] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 111.106856][ T5904] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 111.106976][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 111.107056][ T5904] usb 5-1: Product: syz [ 111.107100][ T5904] usb 5-1: Manufacturer: syz [ 111.107176][ T5904] usb 5-1: SerialNumber: syz [ 111.175019][ T5904] usb 5-1: config 0 descriptor?? [ 111.179738][ T6037] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.377184][ T797] usb 5-1: USB disconnect, device number 3 [ 112.518207][ T5925] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.789610][ T6056] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 112.814490][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 112.846520][ T5925] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 113.655214][ T5925] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 113.688373][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 113.728038][ T5925] usb 1-1: Product: syz [ 113.732271][ T5925] usb 1-1: Manufacturer: syz [ 113.782219][ T5925] usb 1-1: config 0 descriptor?? [ 113.799816][ T5925] usb 1-1: can't set config #0, error -71 [ 113.837191][ T6065] xt_hashlimit: max too large, truncated to 1048576 [ 113.873322][ T6065] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 113.882767][ T5925] usb 1-1: USB disconnect, device number 3 [ 114.047244][ T6066] netlink: 'syz.2.32': attribute type 2 has an invalid length. [ 114.124497][ T6066] 9: entered promiscuous mode [ 114.478934][ T6063] evm: overlay not supported [ 114.908495][ T5925] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.037958][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.130516][ T6077] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.38'. [ 115.139855][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 115.141828][ T5925] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 115.598663][ T5925] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 115.607770][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 115.607926][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 115.644901][ T5925] usb 2-1: Product: syz [ 115.667367][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.681892][ T5925] usb 2-1: Manufacturer: syz [ 115.686398][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.686532][ T5925] usb 2-1: SerialNumber: syz [ 115.702873][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.728694][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.747189][ T10] usb 1-1: Product: syz [ 115.766251][ T10] usb 1-1: Manufacturer: syz [ 115.778037][ T10] usb 1-1: SerialNumber: syz [ 115.791297][ T5925] usb 2-1: config 0 descriptor?? [ 115.797180][ T6069] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.087651][ T10] usb 1-1: 0:2 : does not exist [ 116.111303][ T10] usb 1-1: unit 6 not found! [ 116.209391][ T6081] overlayfs: failed to resolve './file1/file0': -2 [ 116.378425][ T10] usb 1-1: USB disconnect, device number 4 [ 116.827904][ T939] usb 2-1: USB disconnect, device number 3 [ 116.976436][ T6085] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.40'. [ 117.447647][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.665133][ T5904] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.919101][ T5904] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 118.928245][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.947636][ T5904] usb 5-1: config 0 descriptor?? [ 118.957769][ T5904] cp210x 5-1:0.0: cp210x converter detected [ 120.015558][ T5904] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 120.037475][ T5904] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 120.051048][ T5904] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 120.062850][ T5904] usb 5-1: cp210x converter now attached to ttyUSB0 [ 120.105369][ T6111] netlink: 'syz.1.46': attribute type 1 has an invalid length. [ 120.131687][ T6098] mkiss: ax0: crc mode is auto. [ 121.593765][ T797] usb 5-1: USB disconnect, device number 4 [ 121.605462][ T797] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 121.777726][ T797] cp210x 5-1:0.0: device disconnected [ 122.054609][ T6127] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.49'. [ 123.198454][ T6139] xt_hashlimit: max too large, truncated to 1048576 [ 123.212092][ T6139] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 124.534666][ T6150] netlink: 'syz.1.55': attribute type 10 has an invalid length. [ 124.562897][ T6150] team0: Device ipvlan1 failed to register rx_handler [ 124.708214][ T5864] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.137896][ T6153] netlink: 'syz.2.56': attribute type 2 has an invalid length. [ 125.368052][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 125.488058][ T5864] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.498266][ T5864] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.520415][ T5864] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.538417][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.592743][ T5864] usb 1-1: Product: syz [ 125.600502][ T5864] usb 1-1: Manufacturer: syz [ 125.605143][ T5864] usb 1-1: SerialNumber: syz [ 125.962854][ T5864] usb 1-1: 0:2 : does not exist [ 125.969495][ T5864] usb 1-1: unit 6 not found! [ 126.062374][ T6162] netlink: 40 bytes leftover after parsing attributes in process `syz.3.57'. [ 127.283471][ T5864] usb 1-1: USB disconnect, device number 5 [ 127.500448][ T6170] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.61'. [ 127.536435][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.578498][ T6172] netlink: 'syz.3.60': attribute type 1 has an invalid length. [ 130.263294][ T6196] xt_hashlimit: max too large, truncated to 1048576 [ 130.278803][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 130.307626][ T6196] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 130.482324][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.504663][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.518196][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.527347][ T10] usb 3-1: Product: syz [ 130.532740][ T10] usb 3-1: Manufacturer: syz [ 130.539367][ T10] usb 3-1: SerialNumber: syz [ 131.166392][ T6206] netlink: 'syz.1.71': attribute type 29 has an invalid length. [ 131.174467][ T6206] netlink: 'syz.1.71': attribute type 3 has an invalid length. [ 131.182721][ T6206] netlink: 76 bytes leftover after parsing attributes in process `syz.1.71'. [ 131.416867][ T10] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 131.548523][ T10] cdc_ncm 3-1:1.0: bind() failure [ 131.743845][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 131.771942][ T6208] overlayfs: failed to resolve './file1/file0': -2 [ 131.861500][ T10] cdc_ncm 3-1:1.1: bind() failure [ 131.997505][ T10] usb 3-1: USB disconnect, device number 2 [ 133.108820][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.125538][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.556952][ T6214] kvm: pic: non byte read [ 133.561573][ T6214] kvm: pic: non byte read [ 133.565902][ T6214] kvm: pic: non byte read [ 133.570314][ T6214] kvm: pic: non byte read [ 133.576067][ T6214] kvm: pic: non byte read [ 133.580764][ T6214] kvm: pic: non byte read [ 133.595069][ T6214] kvm: pic: non byte read [ 133.683585][ T6219] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 135.330851][ T6234] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.76'. [ 135.424196][ T6235] netlink: 40 bytes leftover after parsing attributes in process `syz.3.78'. [ 136.120586][ T6237] netlink: 'syz.2.77': attribute type 10 has an invalid length. [ 136.149683][ T6237] team0: Device ipvlan1 failed to register rx_handler [ 136.762456][ T6243] netlink: 'syz.0.79': attribute type 10 has an invalid length. [ 136.789784][ T6243] team0: Device ipvlan1 failed to register rx_handler [ 137.590656][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 137.601697][ T6250] Zero length message leads to an empty skb [ 138.363119][ T6256] xt_hashlimit: max too large, truncated to 1048576 [ 138.372596][ T6256] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 138.967946][ T797] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 140.039218][ T797] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 140.193819][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.225611][ T6273] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.89'. [ 140.250431][ T797] usb 3-1: config 0 descriptor?? [ 140.280083][ T797] cp210x 3-1:0.0: cp210x converter detected [ 140.737004][ T797] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 141.063395][ T797] usb 3-1: cp210x converter now attached to ttyUSB0 [ 141.303531][ T10] usb 3-1: USB disconnect, device number 3 [ 141.313974][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 141.344867][ T10] cp210x 3-1:0.0: device disconnected [ 141.732453][ T6281] netlink: 'syz.1.92': attribute type 29 has an invalid length. [ 141.740995][ T6281] netlink: 'syz.1.92': attribute type 3 has an invalid length. [ 141.750261][ T6281] netlink: 76 bytes leftover after parsing attributes in process `syz.1.92'. [ 142.319788][ T6284] netlink: 'syz.0.93': attribute type 10 has an invalid length. [ 142.357642][ T6284] team0: Device ipvlan1 failed to register rx_handler [ 144.675891][ T6302] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 145.895432][ T6303] netlink: 'syz.2.98': attribute type 2 has an invalid length. [ 148.428064][ T5145] Bluetooth: Wrong link type (-22) [ 148.457942][ T5904] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.627862][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 148.743229][ T6336] netlink: 'syz.0.106': attribute type 29 has an invalid length. [ 148.751329][ T6336] netlink: 'syz.0.106': attribute type 3 has an invalid length. [ 148.759157][ T6336] netlink: 76 bytes leftover after parsing attributes in process `syz.0.106'. [ 149.644233][ T6341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.108'. [ 151.055660][ T6349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.109'. [ 152.138092][ T5864] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 152.318701][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 152.949681][ T5864] usb 4-1: config 0 interface 0 altsetting 124 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 153.013846][ T5864] usb 4-1: config 0 interface 0 altsetting 124 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.968680][ T5864] usb 4-1: config 0 interface 0 has no altsetting 0 [ 153.975654][ T5864] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 153.997021][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.049177][ T5864] usb 4-1: config 0 descriptor?? [ 154.157227][ T5904] usb 2-1: device descriptor read/all, error -71 [ 155.207335][ T5864] usbhid 4-1:0.0: can't add hid device: -71 [ 155.218398][ T5864] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 155.231777][ T5864] usb 4-1: USB disconnect, device number 2 [ 157.079533][ T6382] netlink: 'syz.3.120': attribute type 10 has an invalid length. [ 157.092469][ T6382] team0: Device ipvlan1 failed to register rx_handler [ 158.002049][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 158.272092][ T5864] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 158.638424][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 158.687113][ T5864] usb 3-1: config 0 interface 0 altsetting 124 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 158.892201][ T5864] usb 3-1: config 0 interface 0 altsetting 124 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.655369][ T5864] usb 3-1: config 0 interface 0 has no altsetting 0 [ 159.688707][ T5864] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 159.738729][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.755524][ T5864] usb 3-1: config 0 descriptor?? [ 159.977969][ T6409] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 160.072776][ T6411] tipc: Started in network mode [ 160.097899][ T6411] tipc: Node identity 8a303673f577, cluster identity 4711 [ 160.105457][ T6411] tipc: Enabled bearer , priority 0 [ 160.171977][ T6411] syzkaller0: entered promiscuous mode [ 160.177512][ T6411] syzkaller0: entered allmulticast mode [ 160.210404][ T5864] usbhid 3-1:0.0: can't add hid device: -71 [ 160.247937][ T5864] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 160.325171][ T5864] usb 3-1: USB disconnect, device number 4 [ 160.390584][ T6411] tipc: Resetting bearer [ 160.488890][ T6410] tipc: Resetting bearer [ 160.530242][ T6410] tipc: Disabling bearer [ 161.861400][ T6422] netlink: 'syz.1.131': attribute type 2 has an invalid length. [ 162.226764][ T6423] netlink: 'syz.2.132': attribute type 29 has an invalid length. [ 162.242141][ T6423] netlink: 'syz.2.132': attribute type 3 has an invalid length. [ 162.272579][ T6422] 9: entered promiscuous mode [ 162.277960][ T6423] netlink: 76 bytes leftover after parsing attributes in process `syz.2.132'. [ 162.751985][ T6433] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 166.164769][ T6455] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.140'. [ 167.263505][ T5904] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 167.751771][ T6472] netlink: 40 bytes leftover after parsing attributes in process `syz.0.143'. [ 168.461824][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 168.473916][ T5904] usb 2-1: config 0 interface 0 altsetting 124 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 168.498646][ T5904] usb 2-1: config 0 interface 0 altsetting 124 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.517946][ T5904] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.556248][ T5904] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 168.602514][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.680382][ T5904] usb 2-1: config 0 descriptor?? [ 169.746431][ T5904] usbhid 2-1:0.0: can't add hid device: -71 [ 169.752832][ T5904] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 169.767879][ T5904] usb 2-1: USB disconnect, device number 6 [ 171.618360][ T6506] team0: No ports can be present during mode change [ 171.698994][ T6506] netlink: 'syz.1.150': attribute type 10 has an invalid length. [ 171.752644][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 171.769668][ T6506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.830665][ T6506] team0: Port device bond0 added [ 174.493361][ T6510] team0 (unregistering): Port device team_slave_0 removed [ 174.504990][ T6510] team0 (unregistering): Port device team_slave_1 removed [ 174.516839][ T6510] team0 (unregistering): Port device bond0 removed [ 175.997195][ T6550] netlink: 'syz.0.159': attribute type 10 has an invalid length. [ 176.025757][ T6550] team0: Device ipvlan1 failed to register rx_handler [ 176.502403][ T6544] mkiss: ax0: crc mode is auto. [ 176.602830][ T6555] netlink: 'syz.1.158': attribute type 29 has an invalid length. [ 176.645496][ T6555] netlink: 'syz.1.158': attribute type 3 has an invalid length. [ 176.653603][ T6555] netlink: 76 bytes leftover after parsing attributes in process `syz.1.158'. [ 177.382009][ T6566] netlink: 'syz.4.161': attribute type 10 has an invalid length. [ 177.415879][ T6566] team0: Device ipvlan1 failed to register rx_handler [ 179.021967][ T6586] netlink: 'syz.0.165': attribute type 2 has an invalid length. [ 181.619066][ T6595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.502322][ T6613] netlink: 'syz.4.171': attribute type 10 has an invalid length. [ 183.615685][ T6613] team0: Device ipvlan1 failed to register rx_handler [ 189.461645][ T6666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.181'. [ 190.141476][ T5925] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 190.652552][ T6674] tipc: Started in network mode [ 190.667973][ T5925] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.678194][ T6674] tipc: Node identity ee0c94ff02db, cluster identity 4711 [ 190.700572][ T6674] tipc: Enabled bearer , priority 0 [ 190.713000][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.727639][ T6674] syzkaller0: entered promiscuous mode [ 191.232889][ T6674] syzkaller0: entered allmulticast mode [ 191.325392][ T6674] tipc: Resetting bearer [ 191.370962][ T5925] usb 5-1: config 0 descriptor?? [ 191.401074][ T6673] tipc: Resetting bearer [ 191.404281][ T5925] cp210x 5-1:0.0: cp210x converter detected [ 191.648621][ T6673] tipc: Disabling bearer [ 191.816050][ T5925] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 192.135352][ T5925] usb 5-1: cp210x converter now attached to ttyUSB0 [ 192.497109][ T5904] usb 5-1: USB disconnect, device number 5 [ 192.546129][ T5904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 192.591108][ T5904] cp210x 5-1:0.0: device disconnected [ 193.740511][ T6714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.189'. [ 194.449745][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.456498][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.307916][ T6755] overlayfs: failed to resolve './file1/file0': -2 [ 201.239142][ T6758] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 201.276611][ T6758] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 201.297673][ T6758] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 201.307667][ T6758] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 202.114809][ T6776] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 204.857937][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 205.001122][ T6808] team0: No ports can be present during mode change [ 205.047949][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 205.087330][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 205.169511][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 205.178921][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 205.187165][ T9] usb 5-1: Product: syz [ 205.199486][ T9] usb 5-1: Manufacturer: syz [ 205.216039][ T9] usb 5-1: SerialNumber: syz [ 205.249936][ T9] usb 5-1: config 0 descriptor?? [ 205.279453][ T6804] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 205.980080][ T9] usb 5-1: USB disconnect, device number 6 [ 207.788849][ T6843] debugfs: 'ttyS3' already exists in 'caif_serial' [ 209.732118][ T6834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.035184][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 212.638276][ T6861] team0: No ports can be present during mode change [ 214.170781][ T6867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.908360][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 216.915478][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 216.928004][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 216.928450][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 217.437861][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 218.459902][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 218.533968][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.554544][ T9] usb 3-1: config 0 descriptor?? [ 218.577005][ T9] cp210x 3-1:0.0: cp210x converter detected [ 218.592444][ T6927] mkiss: ax0: crc mode is auto. [ 219.129397][ T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 219.446171][ T9] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -32 [ 219.454037][ T9] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 220.085292][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 220.096250][ T9] usb 3-1: USB disconnect, device number 5 [ 220.126095][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 220.318359][ T9] cp210x 3-1:0.0: device disconnected [ 220.334978][ T6939] team0: No ports can be present during mode change [ 223.546133][ T6948] delete_channel: no stack [ 223.776954][ T6971] netlink: 'syz.4.248': attribute type 10 has an invalid length. [ 224.287619][ T6971] team0: Device ipvlan1 failed to register rx_handler [ 225.353475][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.250'. [ 225.596418][ T6985] team0: No ports can be present during mode change [ 226.469020][ T6989] netlink: 'syz.4.250': attribute type 10 has an invalid length. [ 226.486560][ T6989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.509539][ T6989] team0: Port device bond0 added [ 226.556137][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 227.289045][ T6985] team0 (unregistering): Port device team_slave_0 removed [ 227.545015][ T797] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 228.124485][ T6985] team0 (unregistering): Port device team_slave_1 removed [ 228.249719][ T797] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.274459][ T797] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.285061][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.303545][ T797] usb 1-1: Product: syz [ 228.326373][ T797] usb 1-1: Manufacturer: syz [ 228.334507][ T797] usb 1-1: SerialNumber: syz [ 228.353960][ T6985] team0 (unregistering): Port device bond0 removed [ 228.438310][ T6998] team0: No ports can be present during mode change [ 228.981784][ T797] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 228.983626][ T797] cdc_ncm 1-1:1.0: bind() failure [ 229.044875][ T797] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 229.044931][ T797] cdc_ncm 1-1:1.1: bind() failure [ 229.382348][ T797] usb 1-1: USB disconnect, device number 6 [ 231.305358][ T7045] netlink: 'syz.1.261': attribute type 2 has an invalid length. [ 232.287870][ T5897] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 232.501074][ T5897] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 232.646807][ T5897] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 233.549159][ T5897] usb 3-1: config 150 has no interface number 0 [ 233.563949][ T5897] usb 3-1: config 150 interface 204 has no altsetting 0 [ 234.273419][ T5897] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 234.452679][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.478522][ T5897] usb 3-1: Product: syz [ 234.496571][ T5897] usb 3-1: Manufacturer: syz [ 234.526754][ T5897] usb 3-1: SerialNumber: syz [ 234.897638][ T5897] xr_serial 3-1:150.204: skipping garbage [ 234.926252][ T5897] xr_serial 3-1:150.204: xr_serial converter detected [ 235.131690][ T5897] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 235.896266][ T5897] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 236.039162][ T5897] usb 3-1: USB disconnect, device number 6 [ 236.065099][ T5897] xr_serial 3-1:150.204: device disconnected [ 237.313407][ T7085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.488886][ T5897] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 237.693882][ T5897] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 237.693918][ T5897] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 237.693941][ T5897] usb 3-1: config 150 has no interface number 0 [ 237.693989][ T5897] usb 3-1: config 150 interface 204 has no altsetting 0 [ 237.696887][ T5897] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 237.696922][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.696943][ T5897] usb 3-1: Product: syz [ 237.696960][ T5897] usb 3-1: Manufacturer: syz [ 237.696976][ T5897] usb 3-1: SerialNumber: syz [ 237.969881][ T5897] xr_serial 3-1:150.204: skipping garbage [ 237.969944][ T5897] xr_serial 3-1:150.204: xr_serial converter detected [ 237.974664][ T5897] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 237.974737][ T5897] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 237.987888][ T5897] usb 3-1: USB disconnect, device number 7 [ 237.989996][ T5897] xr_serial 3-1:150.204: device disconnected [ 240.763453][ T7127] nvme_fabrics: missing parameter 'transport=%s' [ 240.790253][ T7127] nvme_fabrics: missing parameter 'nqn=%s' [ 241.107636][ T7138] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.280'. [ 244.022328][ T7165] overlayfs: failed to resolve './file1/file0': -2 [ 244.213147][ T7168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.285'. [ 244.264088][ T7168] team0: No ports can be present during mode change [ 244.328210][ T7168] netlink: 'syz.0.285': attribute type 10 has an invalid length. [ 244.514455][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 244.530306][ T7168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.368987][ T7168] team0: Port device bond0 added [ 245.628905][ T7179] netlink: 'syz.4.287': attribute type 10 has an invalid length. [ 246.894394][ T7171] team0 (unregistering): Port device team_slave_0 removed [ 247.135582][ T7171] team0 (unregistering): Port device team_slave_1 removed [ 247.174038][ T7171] team0 (unregistering): Port device bridge1 removed [ 247.208513][ T7171] team0 (unregistering): Port device bond0 removed [ 249.491876][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 249.690124][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 249.742181][ T5897] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 249.758401][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 250.513648][ T9] usb 2-1: config 220 has no interface number 2 [ 250.522390][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 250.535668][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 250.542631][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 250.549587][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 250.790241][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 250.806428][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.814856][ T9] usb 2-1: Product: syz [ 250.821581][ T9] usb 2-1: Manufacturer: syz [ 250.827104][ T9] usb 2-1: SerialNumber: syz [ 250.832810][ T5897] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 250.849314][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.903098][ T5897] usb 5-1: config 0 descriptor?? [ 251.393626][ T5897] cp210x 5-1:0.0: cp210x converter detected [ 251.493947][ T9] usb 2-1: selecting invalid altsetting 0 [ 251.975988][ T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 251.983762][ T5897] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 252.034189][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 252.124142][ T9] usb 2-1: selecting invalid altsetting 0 [ 252.151368][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 252.204975][ T9] usb 2-1: USB disconnect, device number 7 [ 252.218012][ T5897] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -32 [ 252.240988][ T5897] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 252.292350][ T5897] usb 5-1: cp210x converter now attached to ttyUSB0 [ 252.352242][ T5897] usb 5-1: USB disconnect, device number 7 [ 252.408186][ T5897] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 252.478546][ T5897] cp210x 5-1:0.0: device disconnected [ 254.080368][ T7251] netlink: 'syz.3.304': attribute type 10 has an invalid length. [ 254.110310][ T7251] team0: Device ipvlan1 failed to register rx_handler [ 254.656197][ T7268] netlink: 'syz.4.305': attribute type 1 has an invalid length. [ 255.804956][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.811921][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.429864][ T7284] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.308'. [ 256.470733][ T7270] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 258.092669][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 258.268740][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 258.940839][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 262.128550][ T5883] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 263.339168][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 263.432972][ T10] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 263.440899][ T5883] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 263.453804][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.471490][ T10] usb 1-1: chopping to 0 config(s) [ 263.476703][ T10] usb 1-1: can't read configurations, error -32 [ 263.493372][ T5883] usb 4-1: config 0 descriptor?? [ 263.507540][ T5883] cp210x 4-1:0.0: cp210x converter detected [ 263.637963][ T5883] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 263.645484][ T5883] cp210x 4-1:0.0: querying part number failed [ 263.651814][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 263.731363][ T5883] usb 4-1: cp210x converter now attached to ttyUSB0 [ 263.806358][ T7351] netlink: 'syz.4.323': attribute type 1 has an invalid length. [ 263.942098][ T5883] usb 4-1: USB disconnect, device number 3 [ 264.058130][ T7357] netlink: 'syz.0.326': attribute type 2 has an invalid length. [ 264.448710][ T5883] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 264.473953][ T5883] cp210x 4-1:0.0: device disconnected [ 264.933214][ T7356] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 265.738060][ T7370] overlayfs: failed to resolve './file1/file0': -2 [ 266.808091][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 267.120327][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 267.130992][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 267.919387][ T10] usb 5-1: config 220 has no interface number 2 [ 267.925784][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 267.939107][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 267.945931][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 268.095846][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 268.111281][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 268.127449][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.136135][ T10] usb 5-1: Product: syz [ 268.140638][ T10] usb 5-1: Manufacturer: syz [ 268.145371][ T10] usb 5-1: SerialNumber: syz [ 268.206518][ T7400] tipc: Started in network mode [ 268.223604][ T7400] tipc: Node identity 080211000001, cluster identity 4711 [ 268.249176][ T7354] delete_channel: no stack [ 268.258069][ T7400] tipc: Enabled bearer , priority 0 [ 268.306733][ T7402] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 268.352364][ T7402] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 268.403043][ T7400] tipc: Resetting bearer [ 268.411436][ T10] usb 5-1: selecting invalid altsetting 0 [ 268.426217][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 268.464931][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 268.515443][ T10] usb 5-1: selecting invalid altsetting 0 [ 268.538292][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 268.740638][ T10] usb 5-1: USB disconnect, device number 8 [ 269.519067][ T939] tipc: Node number set to 134418688 [ 271.317883][ T5883] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 271.595422][ T5883] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 271.633013][ T5883] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 271.694356][ T5883] usb 4-1: config 150 has no interface number 0 [ 271.717120][ T5883] usb 4-1: config 150 interface 204 has no altsetting 0 [ 272.015689][ T5883] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 272.691837][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.008776][ T5883] usb 4-1: Product: syz [ 273.119701][ T5883] usb 4-1: Manufacturer: syz [ 273.390254][ T5883] usb 4-1: SerialNumber: syz [ 273.699672][ T5883] xr_serial 4-1:150.204: skipping garbage [ 273.735710][ T7446] tipc: Enabled bearer , priority 0 [ 273.739970][ T5883] xr_serial 4-1:150.204: xr_serial converter detected [ 273.802963][ T5883] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 273.837873][ T5883] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 273.849633][ T7448] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 273.888196][ T7448] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 273.935506][ T5883] usb 4-1: USB disconnect, device number 4 [ 273.970326][ T5883] xr_serial 4-1:150.204: device disconnected [ 274.874406][ T5904] tipc: Node number set to 3973551359 [ 275.622933][ T7445] tipc: Resetting bearer [ 275.868670][ T5897] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 275.898550][ T7465] netlink: 'syz.3.346': attribute type 10 has an invalid length. [ 275.946979][ T5838] Bluetooth: Wrong link type (-22) [ 275.971795][ T7465] team0: Device ipvlan1 failed to register rx_handler [ 276.120445][ T5897] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 276.128882][ T5897] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 276.147982][ T5897] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 276.161206][ T5897] usb 5-1: config 220 has no interface number 2 [ 276.172343][ T5897] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 276.186167][ T5897] usb 5-1: config 220 interface 0 has no altsetting 0 [ 276.193379][ T5897] usb 5-1: config 220 interface 76 has no altsetting 0 [ 277.007668][ T5897] usb 5-1: config 220 interface 1 has no altsetting 0 [ 277.028041][ T5897] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 277.042134][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.050813][ T5897] usb 5-1: Product: syz [ 277.055214][ T5897] usb 5-1: Manufacturer: syz [ 277.060098][ T5897] usb 5-1: SerialNumber: syz [ 278.030642][ T5897] usb 5-1: selecting invalid altsetting 0 [ 278.053505][ T5897] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 278.116250][ T5897] uvcvideo 5-1:220.0: No valid video chain found. [ 278.186897][ T5897] usb 5-1: selecting invalid altsetting 0 [ 278.257894][ T5897] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 278.292110][ T5897] usb 5-1: USB disconnect, device number 9 [ 278.547381][ T7409] delete_channel: no stack [ 280.006387][ T7502] process 'syz.3.354' launched './file0' with NULL argv: empty string added [ 280.020503][ T7502] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.354'. [ 280.141632][ T5897] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 280.299827][ T5897] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 280.324802][ T5897] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 280.404469][ T5897] usb 5-1: config 150 has no interface number 0 [ 280.415650][ T5897] usb 5-1: config 150 interface 204 has no altsetting 0 [ 280.427370][ T5897] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 280.473474][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.577691][ T5897] usb 5-1: Product: syz [ 280.587858][ T5897] usb 5-1: Manufacturer: syz [ 280.602891][ T5897] usb 5-1: SerialNumber: syz [ 280.891960][ T5897] xr_serial 5-1:150.204: skipping garbage [ 280.918938][ T5897] xr_serial 5-1:150.204: xr_serial converter detected [ 280.954972][ T5897] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 280.982887][ T5897] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 281.092551][ T5897] usb 5-1: USB disconnect, device number 10 [ 281.146596][ T5897] xr_serial 5-1:150.204: device disconnected [ 282.089415][ T7522] overlayfs: failed to resolve './file0': -2 [ 283.923732][ T7544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.362'. [ 286.065522][ T7547] nvme_fabrics: missing parameter 'transport=%s' [ 286.614676][ T7547] nvme_fabrics: missing parameter 'nqn=%s' [ 288.925599][ T7577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.156962][ T7582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.241341][ T7586] mkiss: ax0: crc mode is auto. [ 291.813602][ T7607] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.376'. [ 293.388215][ T5864] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 293.651712][ T5864] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 293.858230][ T7620] nvme_fabrics: missing parameter 'transport=%s' [ 293.869557][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.934420][ T5864] usb 5-1: config 0 descriptor?? [ 293.970515][ T5864] cp210x 5-1:0.0: cp210x converter detected [ 294.178432][ T7620] nvme_fabrics: missing parameter 'nqn=%s' [ 294.303290][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 294.970300][ T5864] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 295.231577][ T5864] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -32 [ 295.248524][ T5864] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 295.282109][ T5864] usb 5-1: cp210x converter now attached to ttyUSB0 [ 295.319620][ T5864] usb 5-1: USB disconnect, device number 11 [ 295.342788][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 295.365572][ T5864] cp210x 5-1:0.0: device disconnected [ 295.378257][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 295.570859][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 295.603112][ T9] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 296.351683][ T7637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.555619][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 296.566187][ T9] usb 3-1: config 220 has no interface number 2 [ 296.574750][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 296.588177][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 296.595067][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 296.602095][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 296.612139][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 296.621640][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.629953][ T9] usb 3-1: Product: syz [ 296.634344][ T9] usb 3-1: Manufacturer: syz [ 296.640776][ T9] usb 3-1: SerialNumber: syz [ 298.325166][ T5864] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 298.608045][ T9] usb 3-1: selecting invalid altsetting 0 [ 298.614299][ T9] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 298.628480][ T9] uvcvideo 3-1:220.0: No valid video chain found. [ 298.670294][ T9] usb 3-1: selecting invalid altsetting 0 [ 298.677132][ T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 298.690882][ T5864] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 298.706079][ T9] usb 3-1: USB disconnect, device number 8 [ 298.712126][ T5864] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 298.712155][ T5864] usb 5-1: config 150 has no interface number 0 [ 298.753125][ T5864] usb 5-1: config 150 interface 204 has no altsetting 0 [ 298.763588][ T5864] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 298.773511][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.782904][ T5864] usb 5-1: Product: syz [ 298.787393][ T5864] usb 5-1: Manufacturer: syz [ 298.797276][ T7662] netlink: 'syz.1.389': attribute type 1 has an invalid length. [ 299.249256][ T5864] usb 5-1: SerialNumber: syz [ 299.773485][ T7664] bond1: entered promiscuous mode [ 299.945132][ T7664] bond1: entered allmulticast mode [ 300.142187][ T7664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.151714][ T5864] xr_serial 5-1:150.204: skipping garbage [ 300.157486][ T5864] xr_serial 5-1:150.204: xr_serial converter detected [ 300.180371][ T5864] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 300.865585][ T5864] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 300.883072][ T5864] usb 5-1: USB disconnect, device number 12 [ 300.892856][ T5864] xr_serial 5-1:150.204: device disconnected [ 306.076806][ T7706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.330330][ T7727] syz_tun: entered allmulticast mode [ 317.269109][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.275783][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.468818][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [aoe_tx0:1299] [ 464.468838][ C0] Modules linked in: [ 464.468846][ C0] irq event stamp: 514505695 [ 464.468850][ C0] hardirqs last enabled at (514505694): [] _raw_spin_unlock_irqrestore+0x85/0x110 [ 464.468873][ C0] hardirqs last disabled at (514505695): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 464.468889][ C0] softirqs last enabled at (12362): [] __dev_queue_xmit+0x284/0x3740 [ 464.468901][ C0] softirqs last disabled at (12366): [] __dev_queue_xmit+0x284/0x3740 [ 464.468916][ C0] CPU: 0 UID: 0 PID: 1299 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 464.468928][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 464.468934][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 464.468948][ C0] Code: 74 05 e8 0b 66 71 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 77 39 f6 65 8b 05 ec 94 1c 07 85 c0 74 40 48 c7 04 24 0e 36 [ 464.468956][ C0] RSP: 0018:ffffc90003f17640 EFLAGS: 00000206 [ 464.468965][ C0] RAX: c173ae128552d500 RBX: 0000000000000a02 RCX: c173ae128552d500 [ 464.468973][ C0] RDX: 0000000000000002 RSI: ffffffff8d77a730 RDI: 0000000000000001 [ 464.468980][ C0] RBP: ffffc90003f176c8 R08: ffffffff8f7d6677 R09: 1ffffffff1efacce [ 464.468987][ C0] R10: dffffc0000000000 R11: fffffbfff1efaccf R12: dffffc0000000000 [ 464.468994][ C0] R13: dffffc0000000000 R14: ffffffff99b3fb20 R15: 1ffff920007e2ec8 [ 464.469001][ C0] FS: 0000000000000000(0000) GS:ffff888125ee9000(0000) knlGS:0000000000000000 [ 464.469009][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.469016][ C0] CR2: 0000200000001180 CR3: 0000000079cf0000 CR4: 00000000003526f0 [ 464.469027][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 464.469034][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 464.469040][ C0] Call Trace: [ 464.469047][ C0] [ 464.469054][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 464.469072][ C0] uart_port_unlock_deref+0x111/0x2f0 [ 464.469090][ C0] uart_write_room+0xe4/0x170 [ 464.469107][ C0] handle_tx+0x163/0x610 [ 464.469125][ C0] dev_hard_start_xmit+0x2d7/0x830 [ 464.469143][ C0] __dev_queue_xmit+0x172a/0x3740 [ 464.469160][ C0] ? __dev_queue_xmit+0x284/0x3740 [ 464.469171][ C0] ? stack_trace_save+0x9c/0xe0 [ 464.469186][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 464.469201][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 464.469217][ C0] ? __lock_acquire+0xab9/0xd20 [ 464.469233][ C0] ? do_raw_spin_lock+0x121/0x290 [ 464.469252][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 464.469268][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 464.469285][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.469297][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.469311][ C0] tx+0x6b/0x190 [ 464.469322][ C0] ? __pfx_tx+0x10/0x10 [ 464.469331][ C0] kthread+0x1d0/0x3e0 [ 464.469349][ C0] ? __pfx_kthread+0x10/0x10 [ 464.469363][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 464.469375][ C0] ? __kthread_parkme+0x7b/0x200 [ 464.469388][ C0] ? __kthread_parkme+0x1a1/0x200 [ 464.469403][ C0] kthread+0x711/0x8a0 [ 464.469419][ C0] ? __pfx_kthread+0x10/0x10 [ 464.469432][ C0] ? __pfx_kthread+0x10/0x10 [ 464.469447][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.469459][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.469470][ C0] ? __pfx_kthread+0x10/0x10 [ 464.469485][ C0] ret_from_fork+0x4bc/0x870 [ 464.469500][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 464.469515][ C0] ? __switch_to_asm+0x39/0x70 [ 464.469524][ C0] ? __switch_to_asm+0x33/0x70 [ 464.469532][ C0] ? __pfx_kthread+0x10/0x10 [ 464.469547][ C0] ret_from_fork_asm+0x1a/0x30 [ 464.469565][ C0] [ 464.469570][ C0] Sending NMI from CPU 0 to CPUs 1: [ 464.843666][ C1] NMI backtrace for cpu 1 [ 464.843686][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 464.843703][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 464.843713][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 464.843748][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 fa 13 00 f3 0f 1e fa fb f4 c8 ea 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 464.843761][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 464.843777][ C1] RAX: d590206c1d109700 RBX: ffffffff8196e347 RCX: d590206c1d109700 [ 464.843788][ C1] RDX: 0000000000000001 RSI: ffffffff8d77a730 RDI: ffffffff8bbf2140 [ 464.843799][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 464.843809][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f7d6670 [ 464.843820][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003adeb58 [ 464.843831][ C1] FS: 0000000000000000(0000) GS:ffff888125fe9000(0000) knlGS:0000000000000000 [ 464.843843][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.843853][ C1] CR2: 0000200000032000 CR3: 00000000311ae000 CR4: 00000000003526f0 [ 464.843869][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 464.843880][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 464.843890][ C1] Call Trace: [ 464.843899][ C1] [ 464.843905][ C1] default_idle+0x13/0x20 [ 464.843920][ C1] default_idle_call+0x73/0xb0 [ 464.843936][ C1] do_idle+0x1e7/0x510 [ 464.843955][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 464.843971][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.843990][ C1] ? __pfx_do_idle+0x10/0x10 [ 464.844011][ C1] ? do_idle+0xa/0x510 [ 464.844028][ C1] cpu_startup_entry+0x44/0x60 [ 464.844045][ C1] start_secondary+0x101/0x110 [ 464.844061][ C1] common_startup_64+0x13e/0x147 [ 464.844090][ C1] [ 464.844651][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 465.041588][ C0] CPU: 0 UID: 0 PID: 1299 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.052189][ C0] Tainted: [L]=SOFTLOCKUP [ 465.056517][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 465.066566][ C0] Call Trace: [ 465.069914][ C0] [ 465.072758][ C0] dump_stack_lvl+0x99/0x250 [ 465.077345][ C0] ? __asan_memcpy+0x40/0x70 [ 465.081938][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.087156][ C0] ? __pfx__printk+0x10/0x10 [ 465.091791][ C0] vpanic+0x237/0x6d0 [ 465.095781][ C0] ? __pfx_vpanic+0x10/0x10 [ 465.100291][ C0] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 465.106303][ C0] panic+0xb9/0xc0 [ 465.110022][ C0] ? __pfx_panic+0x10/0x10 [ 465.114456][ C0] ? nmi_backtrace_stall_check+0x433/0x440 [ 465.120260][ C0] ? irq_work_queue+0xc3/0x140 [ 465.125020][ C0] watchdog_timer_fn+0x832/0x840 [ 465.129952][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 465.135403][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 465.141287][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 465.147607][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 465.153068][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 465.158521][ C0] __hrtimer_run_queues+0x4e0/0xc60 [ 465.163710][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 465.169690][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 465.175402][ C0] ? read_tsc+0x9/0x20 [ 465.179465][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 465.184495][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 465.190486][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 465.196165][ C0] [ 465.199103][ C0] [ 465.202030][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 465.208005][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 465.214512][ C0] Code: 74 05 e8 0b 66 71 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 77 39 f6 65 8b 05 ec 94 1c 07 85 c0 74 40 48 c7 04 24 0e 36 [ 465.234203][ C0] RSP: 0018:ffffc90003f17640 EFLAGS: 00000206 [ 465.240273][ C0] RAX: c173ae128552d500 RBX: 0000000000000a02 RCX: c173ae128552d500 [ 465.248318][ C0] RDX: 0000000000000002 RSI: ffffffff8d77a730 RDI: 0000000000000001 [ 465.256322][ C0] RBP: ffffc90003f176c8 R08: ffffffff8f7d6677 R09: 1ffffffff1efacce [ 465.264329][ C0] R10: dffffc0000000000 R11: fffffbfff1efaccf R12: dffffc0000000000 [ 465.272313][ C0] R13: dffffc0000000000 R14: ffffffff99b3fb20 R15: 1ffff920007e2ec8 [ 465.280288][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 465.286620][ C0] uart_port_unlock_deref+0x111/0x2f0 [ 465.292001][ C0] uart_write_room+0xe4/0x170 [ 465.296703][ C0] handle_tx+0x163/0x610 [ 465.300947][ C0] dev_hard_start_xmit+0x2d7/0x830 [ 465.306074][ C0] __dev_queue_xmit+0x172a/0x3740 [ 465.311096][ C0] ? __dev_queue_xmit+0x284/0x3740 [ 465.316300][ C0] ? stack_trace_save+0x9c/0xe0 [ 465.321150][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 465.326514][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 465.331873][ C0] ? __lock_acquire+0xab9/0xd20 [ 465.336716][ C0] ? do_raw_spin_lock+0x121/0x290 [ 465.341733][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 465.346924][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 465.352810][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.357999][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.363279][ C0] tx+0x6b/0x190 [ 465.366815][ C0] ? __pfx_tx+0x10/0x10 [ 465.370973][ C0] kthread+0x1d0/0x3e0 [ 465.375042][ C0] ? __pfx_kthread+0x10/0x10 [ 465.379639][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 465.385462][ C0] ? __kthread_parkme+0x7b/0x200 [ 465.390415][ C0] ? __kthread_parkme+0x1a1/0x200 [ 465.395534][ C0] kthread+0x711/0x8a0 [ 465.399619][ C0] ? __pfx_kthread+0x10/0x10 [ 465.404214][ C0] ? __pfx_kthread+0x10/0x10 [ 465.408797][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.413988][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.419175][ C0] ? __pfx_kthread+0x10/0x10 [ 465.423759][ C0] ret_from_fork+0x4bc/0x870 [ 465.428344][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 465.433465][ C0] ? __switch_to_asm+0x39/0x70 [ 465.438227][ C0] ? __switch_to_asm+0x33/0x70 [ 465.442996][ C0] ? __pfx_kthread+0x10/0x10 [ 465.447636][ C0] ret_from_fork_asm+0x1a/0x30 [ 465.452450][ C0] [ 465.455887][ C0] Kernel Offset: disabled [ 465.460214][ C0] Rebooting in 86400 seconds..