last executing test programs: 1m5.473229323s ago: executing program 2 (id=558): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 59.439023428s ago: executing program 2 (id=571): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f000001a4c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x420, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(r0) write$midi(r2, &(0x7f0000000d00)="4730d1a547803bc16cc5f07519f23532b9fa6002d2689f0a885fd8ae5e69682600c2eb9d3545548d1d5997804e73353871e43a13cf7141f1b0f5e13353efdf4a1fe28a3d677b88ec88c5d36c2e0e1b5ada45cfadd76f82735bd68d978b5240709d2d98b16ba2615019db2b802b1efd2bff42938424549c5397eb980913e373adc43e1190d4a45f0301ca782dacb6b5079136e564864d98c9165d44cf0ac6e787f45d1ec534f36850becfdc267fca0d43483757d8e5fdb96ec6075e7418849c1b3df5708897ccf3465a68c37bf18753db841357a07672468d9f1b98db4ab8ce71cf67dd1f82773e7b00680879a4105bbb40b1cf3cf6cfbea1353ae660b87f9901bf3129670172d86f78a290ae955c6fc0e7a901316b0a54e1923812d97888b5063e6e306cf67f8d2f4d732f7e0566a6af037546c3c8350240aecdac44acf3a70b285473eb0e6185bbb87834f347452a6a3dc420499c710cb38c498fb90f838e1928a81fa0b61fd755d96428c9353b0a6409af6dfd7ca21c7ebe74dbe33cdf9625b84412382f997adab8cd2f128fa9e88188a6925cca41a659d757372e135017be465c0dd753fdbebd7914943d89133a613bc3bf93831b4c13f341b097372e50b49b2263f340b942d6edb4b0a3ebf9e14e22a46bc3345cfeb29c9d35122e9204e71d7f7eedd5aba3286cb8145a653d7ae873a8309269504eb5801054dff0cc6c5afdc60998d7b0bf077de1e9fe3aac0f24d93b446df2bac2233bfb3d6563a3940b39a7db1677008df94337a0e8fe930ca08983581eed6c072538935723084c8c795dc0353852a7e5b868cec6d0653b8ff8d93d1e77c96bcf1dd7f2d688558139719b0f6a68c9d83278797dbea9ac44b5481389aaf208562a5fb4b11286339d620a26f44ca342d02f39d756f42a567218080af357e1a9718b2bd09a0183026ff4086312e3fad7532d2e1eabc4663c2faaf2041509e547d5711a9406ac1f90c983d78ed4752b35e46c65ee1fc2dcb6345950f72fa68847dd0cd9c185bec4865fa7a68d333540679360007c14cbe2c8e499951e02e3053b6e74ba86b0871e214dc46e45926d6585d1a10d845c36d3aafd0fb491559fef96911e850fdc560283d6c74d194ac3dc3ae6001c8bfe762fedb77e191e90485189be8d2d15dc13eba0cd05db0867a2db952ce7088d410cfc336407cd2a2dfc2b0711491bf24f2e7e4fff3d4f2902a51feaa2da48bf68a06ce5c442211b9c40d6721ebac5b08b563631624bf3b644f6a172968577d3e42f18ecd94d65806db815d94410dd07839ba11dfd7e415c7ede65432e2d44a3048d48c82cd931cc835c806be306ba78ad65d3e9ca48d39a23b6c0041e2a4a7ebcd0e25b9a2d8d87fcd1f1cd52632ad9ca02febb4d5a11940967d621c1b7c5a6f1984e6d6fe02f4c1f8f00810eec3757b442df32e0a2e0f12cda3602f92ceecf1aee10325bae00310426f180d1e5954f35f36e01fab2aad7f548dfa9d8670b3abf7f42fc6524eaf1840ef73839989dbac110a4c1f19e9b989d7e1efc2de6f9e5293779281ab5798338f90c2be4e16818e121fcc89fbe059434c5d4dbc718c6fddc4d692a5f23178a6d7098daacc51644fcce040f79d07cc8f6b3b8d60018fdfc517454ca3d02d5770f63e30e79bcbd0b2a0738647953aa26b5a50abdbffd79acce5400ddadf6577f7bf5a8d1134b05367a8de3ca029e754137eb25599e5b7f37365611189f125c5c4516bf162e7edffc9143037fbda55482d39f14c1fc8c3a81cef45970d4556404ecea1048adec875fa7749bbd61774441", 0x501) 57.774660784s ago: executing program 2 (id=575): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0x2284, &(0x7f00000000c0)={0x0, 0x2083, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unlink(&(0x7f0000000240)='./file0\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="0800b685f75b000200fc00ff05ffdf00da8075392313db00", 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @bpq0, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000009c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 55.388748871s ago: executing program 2 (id=578): sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x10000005) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801f065000040690ad843f36d4d1adf30374eb8fa391a0ad8f03f"], &(0x7f0000000100)='GPL\x00', 0x4407, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0xc0002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newspdinfo={0x1c, 0x24, 0x801, 0x70bd2c, 0x25dfdbfb, 0xc, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x40) 54.996725487s ago: executing program 2 (id=581): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x60781, 0x0) write$vga_arbiter(r4, &(0x7f0000000080)=@other={'decodes', ' ', 'mem'}, 0xc) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 50.597644417s ago: executing program 2 (id=587): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014800800"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 35.267403647s ago: executing program 32 (id=587): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014800800"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 14.630256881s ago: executing program 0 (id=676): r0 = syz_io_uring_complete(0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000300)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x200000000000) socket$inet6(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) ftruncate(r4, 0x400000) finit_module(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x4e20, @loopback}}}, 0x88) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r2) 12.941400318s ago: executing program 0 (id=681): prlimit64(0x0, 0xe, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xe, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x40000}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010029bd7000fddbdf250b0000000c00058008000100756470004dd0ac8b11023d7ffd96a91ec797847859a3623f1b9d9dcf3e1935ed1741350686ef5cd061a9eb61eb68ef086c71db9411a3167ffaf89f3cef48af4131412014d231470e608a71e74c6b3694a2d91dc0bd7f1a82972c775ba066254d735b271febfd202baabeb92017ed64eb580cfd4c9acb82f85a304f216e0fe22ec4d0701f103257f92125e03b845d00"], 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000b000000000000000202000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500001683000000bf090000000000005509010000000000950000000000000018100000fcffffff0000000002000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000201d27a9c631a63f64771a76a49cb591fa"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r6, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf824946", 0x32) bind$bt_hci(r5, &(0x7f0000000300)={0x1f, 0x4, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[], 0x4c}}, 0x0) write$binfmt_misc(r5, &(0x7f0000001280), 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 8.212833762s ago: executing program 1 (id=688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x8000090) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x690, 0x1b8, 0x3e0, 0xffffffff, 0x3e0, 0x1b8, 0x5c0, 0x5c0, 0xffffffff, 0x5c0, 0x5c0, 0x5, &(0x7f0000000300), {[{{@uncond, 0x0, 0x170, 0x1b8, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x4, 0x0, 0x48, 0x5, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff000000, 0xffffffff, 0xffffffff], [0xff, 0xff000000, 0xffffffff, 0xffff00], [0xffffff00, 0x0, 0xff000000], 0x80}}, @common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0xffff, 0x4, 0xb, {0x7}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x6, @ipv6=@loopback, @ipv4=@broadcast, @port=0x4e20, @gre_key=0x8}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xe}, @local, [0xffffffff, 0xff000000, 0x800000ff, 0xffffffff], [0xff, 0xffffffff, 0xff, 0xffffff00], 'virt_wifi0\x00', 'vlan1\x00', {}, {0xff}, 0x5b, 0x6d, 0x2, 0x33}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0xfffffff9, [0x4, 0x3d9], 0xa319, 0x1, 0x4, [@empty, @mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x10}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, @mcast1, @mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, @private2, @private2, @private0={0xfc, 0x0, '\x00', 0x1}], 0x3}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e22}}}, {{@ipv6={@mcast1, @empty, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xffffffff], 'syzkaller1\x00', 'ip6_vti0\x00', {}, {0xff}, 0x2f, 0xa, 0x3, 0x48}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, @ipv4=@private=0xa010102, @gre_key, @icmp_id=0x64}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff000000, 0xff000000, 0xff000000], [0xffffff00, 0x598d599625a459a2, 0xff, 0xff000000], 'rose0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x33, 0x3, 0x1, 0x28}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x19, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}, @gre_key=0x9, @port=0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r4 = socket$key(0xf, 0x3, 0x2) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'geneve0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r6, 0x267a4e37}, 0xc) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x1, 0x50, 0x0, 0x101}, 0xc) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000a80)={0x4c, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20004004) io_uring_setup(0x2471, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000) msgsnd(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x8, 0x800) dup(r0) 6.251499133s ago: executing program 0 (id=691): fanotify_init(0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x801) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 6.075156975s ago: executing program 4 (id=692): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @loopback, 0x4e22, 0x1, 'fo\x00', 0x6, 0x10001, 0x40000}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xfd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) userfaultfd(0x801) r3 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 5.275803708s ago: executing program 4 (id=694): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) listen(r6, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r4, 0x4018aee2, &(0x7f00000011c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001180)={0x7ff, 0xcaa0}}) connect$ax25(r6, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x27) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 4.968369573s ago: executing program 0 (id=696): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x49c, &(0x7f0000000180)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe099, 0x0, 0x1, 0xb5}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000640)=@IORING_OP_ASYNC_CANCEL) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) keyctl$set_reqkey_keyring(0xe, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/20) 4.427760491s ago: executing program 0 (id=697): socket(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x34, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x10, 0x800008001], 0xeeee8000, 0x3c4210}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xc2e89d1952851738) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_pidfd_open(0x0, 0x0) 4.341706303s ago: executing program 3 (id=698): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000740)={0x2c, &(0x7f0000000040)={0x40, 0x2, 0xec, {0xec, 0x21, "0000f8da2690b32ca829573f6bee33ec4485abd148ea67f3bae4245a4bf4d985a26ca7d3c82267d805c8b7d4ff50006b3553bc774dcb5a1bf1c4224ea6abb7ff024b3bcc8da9367c6ab7b0c09daa9b36f507ab3bde79d9422cda0ab859efcc26393c2fdf95cd1ba82919c5f927e568ddcaef122da0d3f1922004c80865e9ba137d8ee8ab5029c73977bd14e88d6a8e1800a7f0f2b6a48580eab0689626d9a81428e96a123f34e87914993f03142f67d7fb490540842edfc66a87422f4022281c46357bebf30d0c38095cf8e9c9476f9ce65400271373a01df3bbb62f6e9c35cc05db9d30f24b27f8877f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2}, 0x3}], 0x1, 0x40012100, 0x0) close(r2) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100006edb10082505a0a4b66f010203010902121f014100000000000000015971082096dd26da4a7167eb3b81f4ea3e2359ac6a832b84fede393ec119aa6f3d0a501fe704"], &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0}) 4.167999585s ago: executing program 4 (id=699): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bind$xdp(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000240)='vfat\x00', 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 4.116732276s ago: executing program 1 (id=700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000400) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d00, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc000, 0x1) 3.23945435s ago: executing program 1 (id=701): socket$nl_route(0x10, 0x3, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0xf, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, 0x0, 0x0, 0x1a, 0x0, "61a1ed8439cd0606000000000000006b943e8bb0ac60081e33dff8150835f7519d5f73b4f5d80e40000900ffff000000005d092392f816d0fdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000100)=0x1000) 3.23916707s ago: executing program 4 (id=702): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(0x0, 0x22) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) 3.23894186s ago: executing program 3 (id=703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lseek(r1, 0x1ff, 0x3) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, 0x0) 2.969262354s ago: executing program 3 (id=704): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CHANGE_FD(r1, 0x40081271, 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r2, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}, 0x2a}], 0x1, 0x10020, 0x0) bind$l2tp(r2, &(0x7f00000000c0), 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x15) ioctl$TCSETS(r3, 0xc0384707, &(0x7f0000000040)={0x1, 0x0, 0xffffffff, 0x5, 0x0, "3eccd8f9d20000000000001000000200000500"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendto$l2tp(r2, &(0x7f0000000040)="e5786a0d000000000000c8", 0xb, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x16, &(0x7f0000000880)=@raw=[@alu={0x4, 0x0, 0xd, 0x3, 0x8, 0xfffffffffffffff4, 0x4}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f0000000800)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x4, 0x0, 0x50}, 0x10, 0x157a5, r3, 0x6, &(0x7f00000009c0), &(0x7f0000000a00)=[{0x0, 0x3, 0xb, 0x4}, {0x1, 0x1}, {0x0, 0x2, 0x6, 0x4}, {0x4, 0x4, 0xd, 0xa}, {0x1, 0x1, 0x7, 0x3}, {0x3, 0x4, 0x5, 0x9}], 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x19, 0x13, &(0x7f0000000200)=@raw=[@cb_func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000300)='GPL\x00', 0xfffffffa, 0xce, &(0x7f00000003c0)=""/206, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xb, 0xfffffff8, 0x5}, 0x10, 0x0, r6, 0x2, 0x0, &(0x7f0000000b40)=[{0x0, 0x5, 0xb}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x1, @void, @value}, 0x94) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r7, &(0x7f00000000c0)=""/177, 0xb1) read(r7, 0x0, 0x0) 1.831627172s ago: executing program 1 (id=705): fanotify_init(0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x801) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 1.774032933s ago: executing program 3 (id=706): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) epoll_create(0x1a3f) 1.644921435s ago: executing program 4 (id=707): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000180)='4\x00', 0x2) msgsnd(0x0, &(0x7f0000000580)=ANY=[], 0x8, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$video4linux(0x0, 0x6f8, 0x240940) add_key(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x55fa3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.622004235s ago: executing program 1 (id=708): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) listen(r6, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r4, 0x4018aee2, &(0x7f00000011c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001180)={0x7ff, 0xcaa0}}) connect$ax25(r6, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x27) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 683.41531ms ago: executing program 1 (id=709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x8000090) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x690, 0x1b8, 0x3e0, 0xffffffff, 0x3e0, 0x1b8, 0x5c0, 0x5c0, 0xffffffff, 0x5c0, 0x5c0, 0x5, &(0x7f0000000300), {[{{@uncond, 0x0, 0x170, 0x1b8, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x4, 0x0, 0x48, 0x5, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff000000, 0xffffffff, 0xffffffff], [0xff, 0xff000000, 0xffffffff, 0xffff00], [0xffffff00, 0x0, 0xff000000], 0x80}}, @common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0xffff, 0x4, 0xb, {0x7}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x6, @ipv6=@loopback, @ipv4=@broadcast, @port=0x4e20, @gre_key=0x8}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xe}, @local, [0xffffffff, 0xff000000, 0x800000ff, 0xffffffff], [0xff, 0xffffffff, 0xff, 0xffffff00], 'virt_wifi0\x00', 'vlan1\x00', {}, {0xff}, 0x5b, 0x6d, 0x2, 0x33}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0xfffffff9, [0x4, 0x3d9], 0xa319, 0x1, 0x4, [@empty, @mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x10}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, @mcast1, @mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, @private2, @private2, @private0={0xfc, 0x0, '\x00', 0x1}], 0x3}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e22}}}, {{@ipv6={@mcast1, @empty, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xffffffff], 'syzkaller1\x00', 'ip6_vti0\x00', {}, {0xff}, 0x2f, 0xa, 0x3, 0x48}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, @ipv4=@private=0xa010102, @gre_key, @icmp_id=0x64}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff000000, 0xff000000, 0xff000000], [0xffffff00, 0x598d599625a459a2, 0xff, 0xff000000], 'rose0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x33, 0x3, 0x1, 0x28}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x19, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}, @gre_key=0x9, @port=0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r4 = socket$key(0xf, 0x3, 0x2) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'geneve0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r6, 0x267a4e37}, 0xc) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x1, 0x50, 0x0, 0x101}, 0xc) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000a80)={0x4c, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20004004) io_uring_setup(0x2471, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000) msgsnd(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x8, 0x800) dup(r0) 682.94182ms ago: executing program 4 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee01, 0x0) 674.72193ms ago: executing program 3 (id=711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0a00ff0000000071104400000000009500"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 262.383007ms ago: executing program 3 (id=712): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = syz_clone(0x10008200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ptrace(0x10, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ptrace$setregs(0x1a, r2, 0xc, &(0x7f0000000000)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={r4, 0x6}, 0x8) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000100)=r1, 0x4) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x4, 0x1d, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x4, 0x3ff, 0x78}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x400000cd, 0x12d5f, 0x3}}, 0x44) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) 80.12377ms ago: executing program 5 (id=621): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000003c0)=[{0x0, 0x0, [0xe, 0x8, 0x7, 0x2, 0x4, 0xfffffffc, 0x1142, 0x5, 0x2, 0x5, 0x6, 0x0, 0x8, 0x80000001, 0x4, 0xfffffffc]}, {0x1, 0x0, [0x0, 0x2bd, 0x5, 0x5, 0xbd30, 0x6, 0x800, 0x8, 0xd271, 0x7, 0x8, 0x800, 0x4, 0x7f, 0x1, 0x7]}, {0xe, 0x0, [0xffff, 0x5, 0xb, 0x1ff, 0x2, 0xb76, 0xff, 0x46, 0x81, 0x1000, 0x80000000, 0xf1b, 0xe4, 0x4, 0x72b, 0x5]}, {0x14, 0x0, [0x100, 0x7ff, 0x5, 0xfff, 0x9, 0x9948, 0x3, 0x80000001, 0x8, 0x0, 0x132, 0x20000, 0xfffffffb, 0x9, 0x0, 0x2]}], r3, 0x1, 0x1, 0x120}}, 0x20) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000100)='0', 0x1) r5 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f00000001c0)={0x0, "20d9ecd5a2ff730c168e07f775aa5dd3908a93dd4bfc0241877069cf2fac7020b44c2bdef99fa2878ca484e91594410d0bb3b6624813641cc5da53c143a46590", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x2) keyctl$invalidate(0x15, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ppoll(&(0x7f0000000180)=[{r8, 0x1}], 0x1, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 0s ago: executing program 0 (id=713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x40000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x8, &(0x7f0000000600)) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 50.367230][ T4157] cgroup: Unknown subsys name 'net' [ 50.505071][ T4157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.722086][ T4157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.036592][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 53.102333][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 53.121930][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 53.154019][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 53.197685][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 53.282193][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.289270][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.297831][ T4175] device bridge_slave_0 entered promiscuous mode [ 53.317880][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.325846][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.333818][ T4168] device bridge_slave_0 entered promiscuous mode [ 53.341261][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.348322][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.356546][ T4175] device bridge_slave_1 entered promiscuous mode [ 53.371032][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.378188][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.386473][ T4179] device bridge_slave_0 entered promiscuous mode [ 53.394057][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.403552][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.411352][ T4168] device bridge_slave_1 entered promiscuous mode [ 53.434994][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.442145][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.450042][ T4169] device bridge_slave_0 entered promiscuous mode [ 53.457446][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.464609][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.472974][ T4179] device bridge_slave_1 entered promiscuous mode [ 53.505927][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.513360][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.521913][ T4169] device bridge_slave_1 entered promiscuous mode [ 53.542272][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.565820][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.577637][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.589216][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.598514][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.605741][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.613412][ T4177] device bridge_slave_0 entered promiscuous mode [ 53.629186][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.640004][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.662807][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.669861][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.678109][ T4177] device bridge_slave_1 entered promiscuous mode [ 53.693304][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.738135][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.749631][ T4168] team0: Port device team_slave_0 added [ 53.757838][ T4175] team0: Port device team_slave_0 added [ 53.765842][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.776992][ T4179] team0: Port device team_slave_0 added [ 53.784881][ T4179] team0: Port device team_slave_1 added [ 53.795617][ T4168] team0: Port device team_slave_1 added [ 53.810128][ T4175] team0: Port device team_slave_1 added [ 53.817289][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.870303][ T4169] team0: Port device team_slave_0 added [ 53.876937][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.883933][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.910220][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.934361][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.941487][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.967511][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.979456][ T4169] team0: Port device team_slave_1 added [ 53.986046][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.993772][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.021163][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.032952][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.039936][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.065913][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.079542][ T4177] team0: Port device team_slave_0 added [ 54.086138][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.093464][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.120241][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.146873][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.153954][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.180820][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.193489][ T4177] team0: Port device team_slave_1 added [ 54.214854][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.221874][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.248008][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.260294][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.268014][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.294297][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.326252][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.333781][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.360592][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.403769][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.411034][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.437005][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.457069][ T4175] device hsr_slave_0 entered promiscuous mode [ 54.464298][ T4175] device hsr_slave_1 entered promiscuous mode [ 54.479922][ T4168] device hsr_slave_0 entered promiscuous mode [ 54.486902][ T4168] device hsr_slave_1 entered promiscuous mode [ 54.493597][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.501470][ T4168] Cannot create hsr debugfs directory [ 54.528997][ T4169] device hsr_slave_0 entered promiscuous mode [ 54.535561][ T4169] device hsr_slave_1 entered promiscuous mode [ 54.542543][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.550079][ T4169] Cannot create hsr debugfs directory [ 54.578453][ T4179] device hsr_slave_0 entered promiscuous mode [ 54.585080][ T4179] device hsr_slave_1 entered promiscuous mode [ 54.591741][ T4179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.599299][ T4179] Cannot create hsr debugfs directory [ 54.682002][ T4177] device hsr_slave_0 entered promiscuous mode [ 54.688491][ T4177] device hsr_slave_1 entered promiscuous mode [ 54.695226][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.702921][ T4177] Cannot create hsr debugfs directory [ 54.711429][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 54.711663][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 54.724356][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 54.730396][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 54.790877][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 54.964619][ T4168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.975259][ T4168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.984013][ T4168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.000479][ T4168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.039098][ T4169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.059644][ T4169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.076063][ T4169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.085826][ T4169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.140193][ T4179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.153768][ T4179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.183430][ T4179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.197398][ T4179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.260944][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.285976][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.305905][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.316741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.325937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.334779][ T4175] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.356540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.365209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.378032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.387114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.396555][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.403829][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.413547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.422827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.433397][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.440453][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.448686][ T4175] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.475372][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.483355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.492227][ T4175] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.501690][ T4175] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.511287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.554219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.563443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.572917][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.580061][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.588099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.597230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.608303][ T4177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.630498][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.641604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.652109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.661829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.671185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.679560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.697290][ T4177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.706531][ T4177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.718772][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.727520][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.736039][ T1214] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.743096][ T1214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.751937][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.775090][ T4177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.791587][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.800223][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.810043][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.819916][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.828491][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.836881][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.845533][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.854119][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.862039][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.869684][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.882876][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.894860][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.919910][ T4169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.931455][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.949151][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.957632][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.967928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.976964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.986933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.996993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.049648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.067654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.101634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.110503][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.117659][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.127558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.167978][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.178946][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.188060][ T1214] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.195358][ T1214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.204286][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.213602][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.238101][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.257623][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.267650][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.278571][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.287784][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.296695][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.305015][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.319824][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.334659][ T4179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.345953][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.372040][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.379192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.388513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.398970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.406835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.423047][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.439296][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.458629][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.467791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.477191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.485100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.493544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.524559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.533896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.543440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.553631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.563611][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.570729][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.578760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.587522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.596034][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.603421][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.611869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.626097][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.687622][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.703453][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.714312][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.723639][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.732597][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.743111][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.751765][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.760399][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.769208][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.778087][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.787498][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.790951][ T4209] Bluetooth: hci0: command 0x041b tx timeout [ 56.803071][ T4209] Bluetooth: hci1: command 0x041b tx timeout [ 56.809522][ T4209] Bluetooth: hci3: command 0x041b tx timeout [ 56.816051][ T4209] Bluetooth: hci2: command 0x041b tx timeout [ 56.816310][ T4175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.833410][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.863417][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.873201][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.882207][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.882348][ T4209] Bluetooth: hci4: command 0x041b tx timeout [ 56.900844][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.909490][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.918293][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.927156][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.936991][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.945091][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.955408][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.964912][ T1214] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.972043][ T1214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.981510][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.989467][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.997770][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.005599][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.017573][ T4169] device veth0_vlan entered promiscuous mode [ 57.027343][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.076985][ T4169] device veth1_vlan entered promiscuous mode [ 57.096993][ T4168] device veth0_vlan entered promiscuous mode [ 57.108880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.126675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.136199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.150635][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.157858][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.166134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.174718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.184002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.194211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.203289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.213312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.222368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.230337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.238569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.266940][ T4168] device veth1_vlan entered promiscuous mode [ 57.301997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.311717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.350096][ T4177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.365152][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.378355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.386329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.394398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.403219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.411926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.420122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.428569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.438756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.447291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.460410][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.471789][ T4169] device veth0_macvtap entered promiscuous mode [ 57.508032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.517531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.527887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.558300][ T4169] device veth1_macvtap entered promiscuous mode [ 57.569213][ T4168] device veth0_macvtap entered promiscuous mode [ 57.601023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.609801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.618964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.628184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.645686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.662144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.677259][ T4168] device veth1_macvtap entered promiscuous mode [ 57.699890][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.717305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.726871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.735940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.745251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.755646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.777557][ T4179] device veth0_vlan entered promiscuous mode [ 57.789850][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.798964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.807109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.817050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.825703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.835790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.844430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.853138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.861266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.869526][ T4175] device veth0_vlan entered promiscuous mode [ 57.885686][ T4179] device veth1_vlan entered promiscuous mode [ 57.895063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.903700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.911723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.924163][ T4175] device veth1_vlan entered promiscuous mode [ 57.935144][ T4169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.947217][ T4169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.956335][ T4169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.965836][ T4169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.982119][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.989466][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.002405][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.013665][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.031225][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.041821][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.056235][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.072918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.082464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.090377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.099807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.108596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.118314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.134834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.143458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.153251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.177179][ T4179] device veth0_macvtap entered promiscuous mode [ 58.187506][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.196712][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.205666][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.214591][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.241043][ T4179] device veth1_macvtap entered promiscuous mode [ 58.254042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.262827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.271531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.280166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.315167][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.328452][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.338771][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.349810][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.361996][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.383624][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.396270][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.408265][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.419181][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.430184][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.451785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.461855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.470165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.479449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.488374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.497883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.507789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.516342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.531713][ T4175] device veth0_macvtap entered promiscuous mode [ 58.542191][ T4179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.554666][ T4179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.563736][ T4179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.572666][ T4179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.614212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.623426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.634288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.643712][ T4177] device veth0_vlan entered promiscuous mode [ 58.651685][ T4175] device veth1_macvtap entered promiscuous mode [ 58.702302][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.702307][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.702369][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.726668][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.750062][ T4177] device veth1_vlan entered promiscuous mode [ 58.757572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.765853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.774314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.782320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.818758][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.831458][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.841700][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.852426][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.862483][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.873438][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 58.878322][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.879632][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 58.892120][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.900813][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 58.908954][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 58.925553][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.949527][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.960864][ T4209] Bluetooth: hci4: command 0x040f tx timeout [ 58.968887][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.978339][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.987420][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.997204][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.006207][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.016750][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.026616][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.037471][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.047368][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.059043][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.070117][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.084771][ T4175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.095228][ T4175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.104105][ T4175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.114147][ T4175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.137160][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.138341][ T4177] device veth0_macvtap entered promiscuous mode [ 59.156770][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.165625][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.176902][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.186448][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.195490][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.204181][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.213079][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.225333][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.248691][ T4177] device veth1_macvtap entered promiscuous mode [ 59.256750][ T1214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.266687][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.297201][ T1214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.304432][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.324936][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.335144][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.345713][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.356197][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.366852][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.376916][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.387635][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.399654][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.413181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.421597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.429434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.439043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.449814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.529277][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.553042][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.565130][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.575952][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.586403][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.597873][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.608550][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.619045][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.634106][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.659394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.680658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.717528][ T4177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.733233][ T4177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.761626][ T4177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.772300][ T4177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.005128][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.017054][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.027847][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.040494][ T4259] PM: Enabling pm_trace changes system date and time during resume. [ 60.040494][ T4259] PM: Correct system time has to be restored manually after resume. [ 60.147024][ T4250] device bridge_slave_0 left promiscuous mode [ 60.207553][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.468355][ T4250] device bridge_slave_1 left promiscuous mode [ 60.674490][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.762644][ T4250] bond0: (slave bond_slave_0): Releasing backup interface [ 60.842811][ T4250] bond0: (slave bond_slave_1): Releasing backup interface [ 60.878466][ T4250] team0: Port device team_slave_0 removed [ 60.900063][ T4250] team0: Port device team_slave_1 removed [ 60.908105][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.916473][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.925192][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.932788][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.953232][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.954643][ T4214] Bluetooth: hci0: command 0x0419 tx timeout [ 60.979301][ T4214] Bluetooth: hci1: command 0x0419 tx timeout [ 60.986441][ T4214] Bluetooth: hci3: command 0x0419 tx timeout [ 60.991230][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.998746][ T4214] Bluetooth: hci2: command 0x0419 tx timeout [ 61.005298][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 61.034207][ T4250] syz.0.1 (4250) used greatest stack depth: 19552 bytes left [ 61.036811][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 61.066058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.108547][ T4261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.135934][ T4261] bond0: (slave rose0): Enslaving as an active interface with an up link [ 61.227556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 61.356264][ T1214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.417033][ T1214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.716385][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.999185][ T4288] vivid-000: disconnect [ 62.454966][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 62.469926][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #248!!! [ 62.487301][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.496431][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 62.513796][ T4289] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11'. [ 62.550247][ T4287] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.597688][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 62.598976][ T4280] vivid-000: reconnect [ 62.640593][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.649221][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.708285][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.772491][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.822401][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.917657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.526558][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 64.535733][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 64.544659][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 64.553659][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.563220][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.580741][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.871212][ T4355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22'. [ 65.620792][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 65.735279][ T4364] vivid-000: disconnect [ 66.389617][ T24] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 66.936740][ T4358] vivid-000: reconnect [ 66.951558][ T24] usb 1-1: config 0 has no interface number 0 [ 66.957969][ T24] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 66.968978][ T24] usb 1-1: config 0 interface 85 has no altsetting 0 [ 67.157704][ T26] audit: type=1326 audit(1747345457.219:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.1.28" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1434c89969 code=0x0 [ 67.180964][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 67.208903][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.251773][ T24] usb 1-1: Product: syz [ 67.271768][ T24] usb 1-1: Manufacturer: syz [ 67.300472][ T24] usb 1-1: SerialNumber: syz [ 67.359914][ T24] usb 1-1: config 0 descriptor?? [ 67.420820][ T24] usb 1-1: can't set config #0, error -71 [ 67.469457][ T24] usb 1-1: USB disconnect, device number 2 [ 70.122790][ T4414] netlink: 32 bytes leftover after parsing attributes in process `syz.0.37'. [ 71.049092][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.055818][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.760656][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 72.635070][ T4433] vivid-000: disconnect [ 72.670783][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.306680][ T4429] vivid-000: reconnect [ 73.314616][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 73.323653][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 73.333429][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.344021][ T24] usb 4-1: config 0 descriptor?? [ 73.414773][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 73.461177][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 73.653042][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 73.763774][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 73.800655][ T26] audit: type=1326 audit(1747345463.849:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4446 comm="syz.3.48" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd2f28f969 code=0x0 [ 73.906420][ T24] usb 4-1: media controller created [ 73.934993][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.001434][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 74.027035][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 74.132678][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 74.182116][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 74.203139][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 74.258825][ T24] usb 4-1: USB disconnect, device number 2 [ 74.359418][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 74.433346][ T4159] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.691673][ T4159] usb 3-1: Using ep0 maxpacket: 16 [ 75.190265][ T4470] netlink: 32 bytes leftover after parsing attributes in process `syz.0.52'. [ 75.641004][ T4159] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 75.683783][ T4159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.789559][ T4159] usb 3-1: Product: syz [ 75.796144][ T4159] usb 3-1: Manufacturer: syz [ 75.817524][ T4159] usb 3-1: SerialNumber: syz [ 75.831104][ T4159] usb 3-1: config 0 descriptor?? [ 75.902414][ T4159] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 75.958934][ T4159] usb 3-1: Detected FT232H [ 77.200789][ T4159] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 77.211240][ T21] cfg80211: failed to load regulatory.db [ 77.230810][ T4159] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 77.260765][ T4159] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 77.292214][ T4159] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 77.320274][ T4159] usb 3-1: USB disconnect, device number 2 [ 77.347279][ T4159] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 77.520781][ T4159] ftdi_sio 3-1:0.0: device disconnected [ 78.253724][ T26] audit: type=1326 audit(1747345468.319:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.3.63" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd2f28f969 code=0x0 [ 80.439422][ T4532] netlink: 32 bytes leftover after parsing attributes in process `syz.1.66'. [ 81.708885][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.786160][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.584633][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.630159][ T4541] device bridge_slave_0 left promiscuous mode [ 82.637219][ T4541] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.801877][ T4541] device bridge_slave_1 left promiscuous mode [ 82.808242][ T4541] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.834466][ T4541] bond0: (slave bond_slave_0): Releasing backup interface [ 83.661107][ T4541] bond0: (slave bond_slave_1): Releasing backup interface [ 83.695331][ T4539] capability: warning: `syz.0.71' uses deprecated v2 capabilities in a way that may be insecure [ 83.727912][ T4541] team0: Port device team_slave_0 removed [ 83.757823][ T4541] team0: Port device team_slave_1 removed [ 83.765367][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.780963][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.803030][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.810492][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.102160][ T26] audit: type=1326 audit(1747345474.169:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.4.79" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd53b3c969 code=0x0 [ 84.429994][ T4575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.83'. [ 85.344090][ T4580] process 'syz.1.84' launched './file0' with NULL argv: empty string added [ 88.981716][ T4627] device syzkaller0 entered promiscuous mode [ 91.866180][ T4635] Cannot find add_set index 0 as target [ 92.149107][ T4632] netlink: 32 bytes leftover after parsing attributes in process `syz.0.95'. [ 92.848958][ T26] audit: type=1326 audit(1747345482.909:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4640 comm="syz.0.97" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe65fc47969 code=0x0 [ 93.915722][ T4657] zonefs (nullb0) ERROR: Not a zoned block device [ 94.130657][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.484393][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 94.872826][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.016592][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.106309][ T13] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 95.197842][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.294719][ T13] usb 5-1: config 0 descriptor?? [ 95.470364][ T4676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.107'. [ 96.487843][ T13] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0001/input/input6 [ 96.574105][ T26] audit: type=1326 audit(1747345486.639:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4691 comm="syz.2.112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda31cd3969 code=0x0 [ 96.610022][ T13] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 96.626018][ T13] usb 5-1: USB disconnect, device number 2 [ 97.707716][ T4711] overlayfs: missing 'lowerdir' [ 99.686402][ T4707] fido_id[4707]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 101.491288][ T4734] netlink: 32 bytes leftover after parsing attributes in process `syz.3.121'. [ 102.051433][ T4743] x_tables: duplicate underflow at hook 1 [ 104.744734][ T4764] device syzkaller0 entered promiscuous mode [ 106.129020][ T4769] overlayfs: missing 'lowerdir' [ 108.142659][ T4780] block nbd3: shutting down sockets [ 109.739456][ T4791] netlink: 32 bytes leftover after parsing attributes in process `syz.0.133'. [ 110.211242][ T4421] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 111.542242][ T4802] sched: RT throttling activated [ 112.158605][ T4421] usb 3-1: config index 0 descriptor too short (expected 7954, got 18) [ 112.167973][ T4421] usb 3-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 112.181842][ T4421] usb 3-1: config 65 has 0 interfaces, different from the descriptor's value: 1 [ 112.230683][ T4421] usb 3-1: string descriptor 0 read error: -71 [ 112.236969][ T4421] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 112.242562][ T4282] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 112.271778][ T4421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.377047][ T4421] usb 3-1: can't set config #65, error -71 [ 112.408569][ T4421] usb 3-1: USB disconnect, device number 3 [ 112.443187][ T4282] Bluetooth: hci3: Injecting HCI hardware error event [ 112.446410][ T4812] overlayfs: missing 'lowerdir' [ 112.453344][ T4170] Bluetooth: hci3: hardware error 0x00 [ 112.586697][ T4816] netlink: 32 bytes leftover after parsing attributes in process `syz.1.142'. [ 115.661456][ T4282] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 116.608386][ T4282] usb 2-1: config index 0 descriptor too short (expected 7954, got 18) [ 116.669949][ T4282] usb 2-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 116.731281][ T4282] usb 2-1: config 65 has 0 interfaces, different from the descriptor's value: 1 [ 116.769039][ T4849] x_tables: duplicate underflow at hook 1 [ 116.951885][ T4159] Bluetooth: hci2: command 0x0406 tx timeout [ 117.597554][ T4856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.153'. [ 117.643824][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 117.909918][ T4856] misc userio: The device must be registered before sending interrupts [ 118.791341][ T4282] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 118.809487][ T4282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.871288][ T4282] usb 2-1: can't set config #65, error -71 [ 118.967407][ T4282] usb 2-1: USB disconnect, device number 2 [ 119.954833][ T4874] overlayfs: missing 'lowerdir' [ 121.498019][ T4879] Zero length message leads to an empty skb [ 122.362324][ T4885] device syzkaller0 entered promiscuous mode [ 126.744016][ T4920] x_tables: duplicate underflow at hook 1 [ 129.887918][ T4947] binder: 4946:4947 ioctl 4004af61 200000000000 returned -22 [ 129.931843][ T4946] delete_channel: no stack [ 129.937456][ T4946] delete_channel: no stack [ 132.596638][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.603031][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.722476][ T26] audit: type=1326 audit(1747345524.789:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.2.189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda31cd3969 code=0x0 [ 134.743988][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.891825][ T4996] x_tables: duplicate underflow at hook 1 [ 136.909679][ T5014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 138.354884][ T5009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'. [ 138.392836][ T5009] device wg1 entered promiscuous mode [ 139.550720][ T4159] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.981556][ T5050] Cannot find add_set index 0 as target [ 142.083395][ T5049] x_tables: duplicate underflow at hook 1 [ 142.386576][ T5051] device syzkaller0 entered promiscuous mode [ 145.619723][ T5063] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 148.580909][ T4211] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 148.637108][ T5096] Cannot find add_set index 0 as target [ 150.238568][ T13] Bluetooth: hci4: command 0x0411 tx timeout [ 150.551084][ T4211] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 150.616536][ T4211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.275851][ T4211] usb 3-1: config 0 descriptor?? [ 151.472809][ T5125] device syzkaller0 entered promiscuous mode [ 152.537200][ T4211] usb 3-1: can't set config #0, error -71 [ 153.030998][ T5116] loop6: detected capacity change from 0 to 524287999 [ 153.044632][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.050365][ T4211] usb 3-1: USB disconnect, device number 4 [ 153.055775][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.160881][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.171887][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.404556][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.415678][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.120347][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.131679][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.155045][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.166459][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.224283][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.235732][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.272071][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.277478][ T5142] x_tables: duplicate underflow at hook 1 [ 154.283238][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.300330][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.311375][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.319329][ T5116] ldm_validate_partition_table(): Disk read failed. [ 154.328802][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.340170][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.872186][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.883198][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.894124][ T5116] Dev loop6: unable to read RDB block 0 [ 154.987954][ T5116] loop6: unable to read partition table [ 154.993809][ T5116] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾xИCÖ) failed (rc=-5) [ 155.310061][ T5155] Cannot find add_set index 0 as target [ 161.970691][ T4212] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 162.340797][ T4212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.448314][ T4212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.686648][ T4212] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 162.917876][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.022788][ T4212] usb 4-1: config 0 descriptor?? [ 163.180908][ T5253] x_tables: duplicate underflow at hook 1 [ 164.416077][ T4212] hid-generic 0003:1038:12B6.0002: unknown main item tag 0x0 [ 164.423945][ T4212] hid-generic 0003:1038:12B6.0002: item fetching failed at offset 6/7 [ 164.435073][ T4212] hid-generic: probe of 0003:1038:12B6.0002 failed with error -22 [ 164.487968][ T4212] usb 4-1: USB disconnect, device number 3 [ 165.407080][ T5284] netlink: 36 bytes leftover after parsing attributes in process `syz.0.254'. [ 168.575685][ T5306] x_tables: duplicate underflow at hook 1 [ 169.095415][ T5315] device batadv1 entered promiscuous mode [ 172.695064][ T5365] netlink: 32 bytes leftover after parsing attributes in process `syz.3.272'. [ 175.556809][ T4211] Bluetooth: hci2: command 0x0406 tx timeout [ 176.515335][ T4159] Bluetooth: hci0: command 0x0406 tx timeout [ 176.537431][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 176.545171][ T4159] Bluetooth: hci1: command 0x0406 tx timeout [ 176.673211][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.739833][ T5378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.794203][ T5407] x_tables: duplicate underflow at hook 1 [ 180.081288][ T5419] Cannot find add_set index 0 as target [ 183.499286][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 183.748591][ T5438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'. [ 183.831261][ T5445] Cannot find add_set index 0 as target [ 184.334206][ T5449] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 186.090940][ T5465] ksmbd: Unknown IPC event: 6, ignore. [ 187.069909][ T5479] x_tables: duplicate underflow at hook 1 [ 187.606146][ T5483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.302'. [ 187.615496][ T5483] netlink: 64 bytes leftover after parsing attributes in process `syz.0.302'. [ 190.208415][ T5498] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 192.420205][ T5525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.317'. [ 192.429191][ T5525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.317'. [ 193.911980][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.538004][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.202015][ T5558] x_tables: duplicate underflow at hook 1 [ 198.193559][ T5574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.331'. [ 198.202661][ T5574] netlink: 36 bytes leftover after parsing attributes in process `syz.1.331'. [ 202.198101][ T5605] x_tables: duplicate underflow at hook 1 [ 204.786496][ T5621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.345'. [ 204.795589][ T5621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.345'. [ 210.929049][ T5671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.359'. [ 210.938174][ T5671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.359'. [ 215.682739][ T26] audit: type=1326 audit(1747345605.749:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5705 comm="syz.2.372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda31cd3969 code=0x0 [ 221.268555][ T26] audit: type=1326 audit(1747345611.329:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.1.389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1434c89969 code=0x0 [ 221.557751][ T5753] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 226.043464][ T26] audit: type=1326 audit(1747345616.109:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.4.401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd53b3c969 code=0x0 [ 230.360667][ T26] audit: type=1326 audit(1747345620.409:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.2.420" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda31cd3969 code=0x0 [ 233.832895][ T5886] netlink: 224 bytes leftover after parsing attributes in process `syz.1.421'. [ 233.842016][ T5886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.421'. [ 236.621774][ T26] audit: type=1326 audit(1747345626.689:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd2f28f969 code=0x0 [ 237.383851][ T5928] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 238.868132][ T5924] netlink: 'syz.4.431': attribute type 4 has an invalid length. [ 238.918820][ T5927] syz.4.431 uses obsolete (PF_INET,SOCK_PACKET) [ 252.272542][ T13] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 252.864099][ T13] usb 4-1: no configurations [ 252.868862][ T13] usb 4-1: can't read configurations, error -22 [ 253.710645][ T13] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 253.958662][ T6065] sp0: Synchronizing with TNC [ 255.511651][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.518370][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.547284][ T6106] netlink: 56 bytes leftover after parsing attributes in process `syz.3.484'. [ 262.290005][ T6135] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 266.557204][ T6162] x_tables: duplicate underflow at hook 1 [ 266.713046][ T6148] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 267.837011][ T6172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.502'. [ 270.816236][ T6194] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 271.090598][ T4213] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 272.090972][ T4213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.102636][ T4213] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 272.115810][ T4213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.392028][ T6211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.514'. [ 273.146004][ T4213] usb 3-1: config 0 descriptor?? [ 273.750713][ T4213] usbhid 3-1:0.0: can't add hid device: -71 [ 273.758004][ T4213] usbhid: probe of 3-1:0.0 failed with error -71 [ 273.779297][ T4213] usb 3-1: USB disconnect, device number 5 [ 275.776823][ T6250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.526'. [ 281.413573][ T6282] netlink: 32 bytes leftover after parsing attributes in process `syz.3.534'. [ 283.736767][ T6300] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 283.758925][ T6300] netlink: 40 bytes leftover after parsing attributes in process `syz.3.539'. [ 292.596881][ T6367] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 293.958741][ T6377] Cannot find add_set index 0 as target [ 306.142750][ T6457] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 308.279356][ T6477] netlink: set zone limit has 8 unknown bytes [ 311.505695][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 312.263086][ T6507] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 312.471357][ T7] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 312.492023][ T7] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 312.557682][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 312.605123][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 312.667030][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 312.941385][ T7] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 312.986101][ T7] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 313.066454][ T7] usb 5-1: Product: syz [ 313.106175][ T7] usb 5-1: Manufacturer: syz [ 313.280739][ T7] usb 5-1: can't set config #1, error -71 [ 313.335435][ T7] usb 5-1: USB disconnect, device number 3 [ 314.081160][ T6529] Cannot find add_set index 0 as target [ 315.557969][ T6537] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 317.220121][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.227746][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.788745][ T6550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.608'. [ 318.797789][ T6550] netlink: 64 bytes leftover after parsing attributes in process `syz.4.608'. [ 320.606210][ T6564] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 320.827157][ T6576] netlink: 66 bytes leftover after parsing attributes in process `syz.0.615'. [ 323.065008][ T6592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 323.995436][ T4421] Bluetooth: hci0: command 0x0c20 tx timeout [ 324.520793][ T4421] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 324.910682][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 324.931695][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.941936][ T4421] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 324.953071][ T4421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.964172][ T4421] usb 1-1: config 0 descriptor?? [ 325.231111][ T6615] Cannot find add_set index 0 as target [ 325.514331][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.721263][ T4421] bigben 0003:146B:0902.0003: unexpected rdesc, please submit for review [ 325.730313][ T4421] bigben 0003:146B:0902.0003: unknown main item tag 0x0 [ 325.755628][ T4421] bigben 0003:146B:0902.0003: unknown main item tag 0x0 [ 325.793666][ T4421] bigben 0003:146B:0902.0003: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.0-1/input0 [ 325.854373][ T4421] bigben 0003:146B:0902.0003: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 325.937932][ T4421] bigben 0003:146B:0902.0003: no output report found [ 327.530634][ T4421] usb 1-1: USB disconnect, device number 4 [ 327.553393][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 327.578204][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.448526][ T6640] 9pnet: Insufficient options for proto=fd [ 328.517175][ T6633] fido_id[6633]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 329.917863][ T4421] Bluetooth: hci2: command 0x041b tx timeout [ 330.065555][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.243217][ T6605] chnl_net:caif_netlink_parms(): no params data found [ 330.302011][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.670069][ T6666] netlink: 66 bytes leftover after parsing attributes in process `syz.1.641'. [ 330.685695][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.693775][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.707466][ T6605] device bridge_slave_0 entered promiscuous mode [ 330.726169][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.266654][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.406867][ T6605] device bridge_slave_1 entered promiscuous mode [ 331.990910][ T4211] Bluetooth: hci2: command 0x040f tx timeout [ 332.484027][ T6605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.536316][ T6605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.826968][ T6685] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 333.529552][ T6605] team0: Port device team_slave_0 added [ 333.748555][ T6605] team0: Port device team_slave_1 added [ 333.932721][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.981917][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.059451][ T6605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.080123][ T4211] Bluetooth: hci2: command 0x0419 tx timeout [ 334.129943][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.157962][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.245376][ T6605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.486134][ T6605] device hsr_slave_0 entered promiscuous mode [ 334.706046][ T6605] device hsr_slave_1 entered promiscuous mode [ 334.961761][ T6605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.985359][ T6605] Cannot create hsr debugfs directory [ 336.522833][ T6748] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 337.358309][ T6605] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 337.382858][ T6605] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 338.664456][ T6605] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 338.782806][ T6605] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 340.617843][ T6605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.776223][ T6605] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.931512][ T6605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.966593][ T6605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.119809][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.161175][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.169108][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.227302][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.266640][ T4981] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.273858][ T4981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.314599][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.331350][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.344303][ T4981] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.351523][ T4981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.363726][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.379736][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.440114][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.486147][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.533684][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.809943][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.991101][ T21] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 342.122300][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 342.359375][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.405272][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 342.415312][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.424946][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.433462][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.447396][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 342.472020][ T21] usb 5-1: config index 0 descriptor too short (expected 7954, got 18) [ 342.499724][ T21] usb 5-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 342.674608][ T21] usb 5-1: config 65 has 0 interfaces, different from the descriptor's value: 1 [ 343.202025][ T9] device hsr_slave_0 left promiscuous mode [ 343.209043][ T9] device hsr_slave_1 left promiscuous mode [ 343.228300][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.239023][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.255702][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.269143][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.281467][ T9] device bridge_slave_1 left promiscuous mode [ 343.288197][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.425263][ T9] device bridge_slave_0 left promiscuous mode [ 343.469541][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.543553][ T9] device veth1_macvtap left promiscuous mode [ 343.574550][ T9] device veth0_macvtap left promiscuous mode [ 343.593645][ T9] device veth1_vlan left promiscuous mode [ 343.606284][ T26] audit: type=1326 audit(1747345733.669:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65fc47969 code=0x7ffc0000 [ 343.648467][ T9] device veth0_vlan left promiscuous mode [ 343.688774][ T26] audit: type=1326 audit(1747345733.709:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65fc47969 code=0x7ffc0000 [ 344.020468][ T26] audit: type=1326 audit(1747345733.729:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe65fc47969 code=0x7ffc0000 [ 344.043194][ T26] audit: type=1326 audit(1747345733.729:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65fc47969 code=0x7ffc0000 [ 344.066932][ T26] audit: type=1326 audit(1747345733.729:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65fc47969 code=0x7ffc0000 [ 344.091116][ T26] audit: type=1326 audit(1747345733.949:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe65fc47969 code=0x7ffc0000 [ 344.146928][ T26] audit: type=1326 audit(1747345733.949:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65fc47969 code=0x7ffc0000 [ 344.347805][ T26] audit: type=1326 audit(1747345733.949:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65fc47969 code=0x7ffc0000 [ 344.396617][ T26] audit: type=1326 audit(1747345733.949:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe65fc47969 code=0x7ffc0000 [ 344.428967][ T26] audit: type=1326 audit(1747345733.949:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65fc47969 code=0x7ffc0000 [ 344.520171][ T6822] Invalid ELF header magic: != ELF [ 344.650948][ T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 344.663334][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.697559][ T21] usb 5-1: can't set config #65, error -71 [ 344.711636][ T21] usb 5-1: USB disconnect, device number 4 [ 344.827588][ T9] team0 (unregistering): Port device team_slave_1 removed [ 344.843329][ T9] team0 (unregistering): Port device team_slave_0 removed [ 344.856649][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.875817][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.950243][ T9] bond0 (unregistering): Released all slaves [ 346.478615][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 346.490288][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 346.586348][ T6853] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 347.420863][ T6605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.843910][ T6862] ======================================================= [ 348.843910][ T6862] WARNING: The mand mount option has been deprecated and [ 348.843910][ T6862] and is ignored by this kernel. Remove the mand [ 348.843910][ T6862] option from the mount to silence this warning. [ 348.843910][ T6862] ======================================================= [ 350.032476][ T6885] x_tables: duplicate underflow at hook 1 [ 350.196630][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 350.219043][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 350.478772][ T6605] device veth0_vlan entered promiscuous mode [ 350.492744][ T6605] device veth1_vlan entered promiscuous mode [ 351.852759][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 351.878458][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.915925][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 351.956934][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 352.091819][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.475788][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.704288][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 352.734529][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.823689][ T6605] device veth0_macvtap entered promiscuous mode [ 352.861908][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 352.898553][ T6605] device veth1_macvtap entered promiscuous mode [ 353.154518][ T6913] Cannot find add_set index 0 as target [ 353.163791][ T6913] netlink: 66 bytes leftover after parsing attributes in process `syz.4.694'. [ 353.398408][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.410256][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.449882][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.780820][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.922910][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.940243][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 354.019669][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 354.229888][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.807810][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.903443][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.982025][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.023167][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.056145][ T6605] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.084502][ T6605] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.371642][ T6605] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.550637][ T6605] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.669828][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 355.735200][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 356.477579][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.504922][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.510950][ T6962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.706'. [ 357.209548][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 357.312945][ T6442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.347312][ T6442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.433721][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 357.445826][ T6977] x_tables: duplicate underflow at hook 1 [ 358.158696][ T6992] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 358.168630][ T6992] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 6992, name: syz.3.712 [ 358.177686][ T6992] 1 lock held by syz.3.712/6992: [ 358.182638][ T6992] #0: ffffffff8c1417b8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 358.192422][ T6992] irq event stamp: 336 [ 358.196498][ T6992] hardirqs last enabled at (335): [] finish_lock_switch+0x12f/0x280 [ 358.206155][ T6992] hardirqs last disabled at (336): [] _raw_spin_lock_irq+0x7a/0xe0 [ 358.215634][ T6992] softirqs last enabled at (316): [] ip_setsockopt+0x4c0/0x3070 [ 358.224943][ T6992] softirqs last disabled at (314): [] release_sock+0x2b/0x1b0 [ 358.234008][ T6992] Preemption disabled at: [ 358.234022][ T6992] [<0000000000000000>] 0x0 [ 358.242793][ T6992] CPU: 0 PID: 6992 Comm: syz.3.712 Not tainted 5.15.182-syzkaller #0 [ 358.250959][ T6992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 358.261117][ T6992] Call Trace: [ 358.264416][ T6992] [ 358.267371][ T6992] dump_stack_lvl+0x168/0x230 [ 358.272085][ T6992] ? ip_setsockopt+0x4c0/0x3070 [ 358.276972][ T6992] ? show_regs_print_info+0x20/0x20 [ 358.282201][ T6992] ? load_image+0x3b0/0x3b0 [ 358.286720][ T6992] ? finish_task_switch+0x12f/0x640 [ 358.292037][ T6992] ___might_sleep+0x47c/0x600 [ 358.296850][ T6992] ? __might_sleep+0xf0/0xf0 [ 358.301478][ T6992] down_read+0x20/0x2e0 [ 358.305657][ T6992] kernfs_walk_and_get_ns+0x81/0x2b0 [ 358.310968][ T6992] ? kernfs_find_ns+0x510/0x510 [ 358.315850][ T6992] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 358.322036][ T6992] cgroup_get_from_path+0x5f/0x2f0 [ 358.327184][ T6992] cgroup_mt_check_v1+0x1ae/0x2c0 [ 358.332236][ T6992] xt_check_match+0x3c6/0xaa0 [ 358.336940][ T6992] ? xt_check_proc_name+0x240/0x240 [ 358.342174][ T6992] ? xt_find_match+0x1e1/0x210 [ 358.347082][ T6992] translate_table+0x14f8/0x1fe0 [ 358.352153][ T6992] ? ipt_register_table+0x7e0/0x7e0 [ 358.357368][ T6992] ? __might_fault+0xb7/0x110 [ 358.362078][ T6992] ? __lock_acquire+0x7c60/0x7c60 [ 358.367134][ T6992] ? _copy_from_user+0x111/0x170 [ 358.372104][ T6992] do_ipt_set_ctl+0x96c/0xcf0 [ 358.376807][ T6992] ? nf_setsockopt+0x218/0x280 [ 358.381595][ T6992] ? ipt_unregister_table_exit+0x220/0x220 [ 358.387431][ T6992] ? __lock_acquire+0x7c60/0x7c60 [ 358.392474][ T6992] ? __mutex_lock_common+0x431/0x2390 [ 358.398320][ T6992] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 358.403975][ T6992] ? mutex_unlock+0x10/0x10 [ 358.408497][ T6992] ? __local_bh_enable_ip+0x12a/0x1b0 [ 358.413892][ T6992] ? lockdep_hardirqs_on+0x94/0x140 [ 358.419114][ T6992] ? __local_bh_enable_ip+0x12a/0x1b0 [ 358.424505][ T6992] nf_setsockopt+0x25f/0x280 [ 358.429127][ T6992] ip_setsockopt+0x2127/0x3070 [ 358.433922][ T6992] ? try_to_wake_up+0x701/0x1050 [ 358.438887][ T6992] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 358.444295][ T6992] ? __might_sleep+0xf0/0xf0 [ 358.448904][ T6992] ? rcu_lock_release+0x9/0x20 [ 358.453701][ T6992] tcp_setsockopt+0x21a/0x1d70 [ 358.458493][ T6992] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 358.463887][ T6992] ? aa_af_perm+0x2b0/0x2b0 [ 358.468407][ T6992] ? __fget_files+0x40f/0x480 [ 358.473107][ T6992] ? aa_sock_opt_perm+0x74/0x100 [ 358.478072][ T6992] ? sock_common_setsockopt+0x32/0xb0 [ 358.483482][ T6992] ? sock_common_recvmsg+0x1b0/0x1b0 [ 358.488788][ T6992] __sys_setsockopt+0x3d6/0x5e0 [ 358.493671][ T6992] ? __ia32_sys_recv+0xb0/0xb0 [ 358.498457][ T6992] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 358.504563][ T6992] ? lock_chain_count+0x20/0x20 [ 358.509435][ T6992] ? vtime_user_exit+0x2dc/0x400 [ 358.514399][ T6992] __x64_sys_setsockopt+0xb1/0xc0 [ 358.519540][ T6992] do_syscall_64+0x4c/0xa0 [ 358.523974][ T6992] ? clear_bhb_loop+0x15/0x70 [ 358.528669][ T6992] ? clear_bhb_loop+0x15/0x70 [ 358.533369][ T6992] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 358.539285][ T6992] RIP: 0033:0x7efd2f28f969 [ 358.543719][ T6992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.563337][ T6992] RSP: 002b:00007efd2d0d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 358.571763][ T6992] RAX: ffffffffffffffda RBX: 00007efd2f4b7080 RCX: 00007efd2f28f969 [ 358.579761][ T6992] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 000000000000000d [ 358.587762][ T6992] RBP: 00007efd2f311ab1 R08: 00000000000022f8 R09: 0000000000000000 [ 358.595759][ T6992] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 358.603750][ T6992] R13: 0000000000000000 R14: 00007efd2f4b7080 R15: 00007ffc91a06c98 [ 358.611762][ T6992] [ 358.614809][ T6992] [ 358.617148][ T6992] ============================= [ 358.621996][ T6992] [ BUG: Invalid wait context ] [ 358.626852][ T6992] 5.15.182-syzkaller #0 Tainted: G W [ 358.633440][ T6992] ----------------------------- [ 358.638288][ T6992] syz.3.712/6992 is trying to lock: [ 358.643488][ T6992] ffffffff8c24e130 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x81/0x2b0 [ 358.653004][ T6992] other info that might help us debug this: [ 358.658901][ T6992] context-{4:4} [ 358.662368][ T6992] 1 lock held by syz.3.712/6992: [ 358.667314][ T6992] #0: ffffffff8c1417b8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 358.677089][ T6992] stack backtrace: [ 358.680811][ T6992] CPU: 0 PID: 6992 Comm: syz.3.712 Tainted: G W 5.15.182-syzkaller #0 [ 358.690284][ T6992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 358.700354][ T6992] Call Trace: [ 358.703648][ T6992] [ 358.706591][ T6992] dump_stack_lvl+0x168/0x230 [ 358.711290][ T6992] ? show_regs_print_info+0x20/0x20 [ 358.716507][ T6992] ? load_image+0x3b0/0x3b0 [ 358.721036][ T6992] __lock_acquire+0x1be9/0x7c60 [ 358.725918][ T6992] ? 0xffffffffa002a000 [ 358.730091][ T6992] ? verify_lock_unused+0x140/0x140 [ 358.735310][ T6992] ? __printk_cpu_unlock+0x5f/0x70 [ 358.740435][ T6992] ? dump_stack_lvl+0x1bf/0x230 [ 358.745302][ T6992] ? ip_setsockopt+0x4c0/0x3070 [ 358.750173][ T6992] ? show_regs_print_info+0x20/0x20 [ 358.755390][ T6992] ? load_image+0x3b0/0x3b0 [ 358.759903][ T6992] ? finish_task_switch+0x12f/0x640 [ 358.765120][ T6992] lock_acquire+0x197/0x3f0 [ 358.769642][ T6992] ? kernfs_walk_and_get_ns+0x81/0x2b0 [ 358.775119][ T6992] ? __might_sleep+0xf0/0xf0 [ 358.779729][ T6992] ? read_lock_is_recursive+0x10/0x10 [ 358.785123][ T6992] down_read+0x44/0x2e0 [ 358.789300][ T6992] ? kernfs_walk_and_get_ns+0x81/0x2b0 [ 358.794779][ T6992] kernfs_walk_and_get_ns+0x81/0x2b0 [ 358.800080][ T6992] ? kernfs_find_ns+0x510/0x510 [ 358.804947][ T6992] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 358.811118][ T6992] cgroup_get_from_path+0x5f/0x2f0 [ 358.816246][ T6992] cgroup_mt_check_v1+0x1ae/0x2c0 [ 358.821291][ T6992] xt_check_match+0x3c6/0xaa0 [ 358.825996][ T6992] ? xt_check_proc_name+0x240/0x240 [ 358.831222][ T6992] ? xt_find_match+0x1e1/0x210 [ 358.836000][ T6992] translate_table+0x14f8/0x1fe0 [ 358.840969][ T6992] ? ipt_register_table+0x7e0/0x7e0 [ 358.846186][ T6992] ? __might_fault+0xb7/0x110 [ 358.850888][ T6992] ? __lock_acquire+0x7c60/0x7c60 [ 358.855950][ T6992] ? _copy_from_user+0x111/0x170 [ 358.861023][ T6992] do_ipt_set_ctl+0x96c/0xcf0 [ 358.865724][ T6992] ? nf_setsockopt+0x218/0x280 [ 358.870503][ T6992] ? ipt_unregister_table_exit+0x220/0x220 [ 358.876323][ T6992] ? __lock_acquire+0x7c60/0x7c60 [ 358.881364][ T6992] ? __mutex_lock_common+0x431/0x2390 [ 358.886752][ T6992] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 358.892402][ T6992] ? mutex_unlock+0x10/0x10 [ 358.896923][ T6992] ? __local_bh_enable_ip+0x12a/0x1b0 [ 358.902306][ T6992] ? lockdep_hardirqs_on+0x94/0x140 [ 358.907519][ T6992] ? __local_bh_enable_ip+0x12a/0x1b0 [ 358.912909][ T6992] nf_setsockopt+0x25f/0x280 [ 358.917513][ T6992] ip_setsockopt+0x2127/0x3070 [ 358.922289][ T6992] ? try_to_wake_up+0x701/0x1050 [ 358.927242][ T6992] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 358.932643][ T6992] ? __might_sleep+0xf0/0xf0 [ 358.937274][ T6992] ? rcu_lock_release+0x9/0x20 [ 358.942085][ T6992] tcp_setsockopt+0x21a/0x1d70 [ 358.946877][ T6992] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 358.952365][ T6992] ? aa_af_perm+0x2b0/0x2b0 [ 358.956885][ T6992] ? __fget_files+0x40f/0x480 [ 358.961579][ T6992] ? aa_sock_opt_perm+0x74/0x100 [ 358.966649][ T6992] ? sock_common_setsockopt+0x32/0xb0 [ 358.972057][ T6992] ? sock_common_recvmsg+0x1b0/0x1b0 [ 358.977362][ T6992] __sys_setsockopt+0x3d6/0x5e0 [ 358.982231][ T6992] ? __ia32_sys_recv+0xb0/0xb0 [ 358.987012][ T6992] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 358.993220][ T6992] ? lock_chain_count+0x20/0x20 [ 358.998103][ T6992] ? vtime_user_exit+0x2dc/0x400 [ 359.003067][ T6992] __x64_sys_setsockopt+0xb1/0xc0 [ 359.008122][ T6992] do_syscall_64+0x4c/0xa0 [ 359.012564][ T6992] ? clear_bhb_loop+0x15/0x70 [ 359.017342][ T6992] ? clear_bhb_loop+0x15/0x70 [ 359.022048][ T6992] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 359.027962][ T6992] RIP: 0033:0x7efd2f28f969 [ 359.032478][ T6992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.052104][ T6992] RSP: 002b:00007efd2d0d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 359.060540][ T6992] RAX: ffffffffffffffda RBX: 00007efd2f4b7080 RCX: 00007efd2f28f969 [ 359.068535][ T6992] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 000000000000000d [ 359.076519][ T6992] RBP: 00007efd2f311ab1 R08: 00000000000022f8 R09: 0000000000000000 [ 359.084502][ T6992] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 359.092483][ T6992] R13: 0000000000000000 R14: 00007efd2f4b7080 R15: 00007ffc91a06c98 [ 359.100578][ T6992] [ 359.560571][ T6992] xt_cgroup: invalid path, errno=-2 [ 364.950515][ T13] Bluetooth: hci4: command 0x0406 tx timeout