last executing test programs: 14.05840754s ago: executing program 3 (id=501): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x313041, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x80) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020339c4c87cd5dc710ddda8cce48c30240101000000000000000001000001080001000200001e"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40084) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) r8 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000380)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$sock_int(r1, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) syz_emit_ethernet(0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1e88f574978276bf5399abc081ac4396f7d82387488023953c9b2f7bc8aab71fcfb82ebd726093424cc391d05476afa8d54680f85ef27d4d1f1ff1ee07011926ae7b4bdc93610676b5e58572e3fe21d28e86e039cb1b6f87baeeb048ba3f3d00b9982996f08d78064eb0d1ca784eb60c3eb7df912ae63db6b5c7a454a8246366c1ec1987b9a50a11fb7615f05a448dc5a6a3962235bd822bca8def1f80955700be7efd0cd4b06ad2b85ec584505e294dd6dedb075c25ddf1454b68cb9212c9c4a2d643362d5d9abfbbbeb13845ac23271887648445c84a3b84558b853cd1"], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, r9, &(0x7f0000000140)) recvmmsg(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10022, 0x0) 10.780465641s ago: executing program 3 (id=510): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r4) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)={0x14, r5, 0xf002135a49ffa319, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x44080) 10.079820007s ago: executing program 2 (id=513): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x88e, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x392, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0xf, 0x6, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x80082, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0x8000d, 0x2bf, 0xffffffff, 0x0, 0xfffffffc, 0x334000, 0x0, 0x7, 0x85, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x4, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x5, 0x3, 0x5, 0x348, 0x0, 0xa3d, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x1fe, 0x80, 0x2, 0xcc52, 0x4, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x3, 0xc0, 0x10003, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x2, 0x0, 0xffffffff, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xb, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x3, 0xc, 0xc8, 0xee1, 0x0, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0xb, 0x30b1d693, 0x1, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0x80b1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x40000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) read$FUSE(r0, 0x0, 0x11) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 8.748011566s ago: executing program 2 (id=514): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) prlimit64(r3, 0xd, &(0x7f0000000200)={0x3, 0x7ff}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@loopback, @remote, 0x0}, &(0x7f0000000340)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=@newchain={0xe98, 0x64, 0x1, 0x5, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xe}, {0x4, 0x982a9d66151476e3}, {0xffe0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_fw={{0x7}, {0xe5c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'bond_slave_1\x00'}, @TCA_FW_POLICE={0x874, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x2be, 0x0, 0x101, 0x1ff, 0x3, 0x8, 0xfffffff5, 0x0, 0x3, 0x5, 0x3, 0x9, 0x4, 0x5, 0x0, 0x8000, 0x1000, 0xbf4, 0x5, 0x40, 0x6, 0x6, 0x100, 0x7, 0x9, 0x5, 0x6, 0x4, 0x5, 0x4, 0xc, 0x29, 0x5, 0x5, 0x2, 0xf, 0x9, 0xa, 0x3, 0x5, 0x400, 0x80000001, 0x4, 0x2, 0x2, 0x100, 0x32d, 0xfffff2d7, 0x6, 0xb, 0x9, 0x2, 0xf, 0x3, 0x7f, 0xbd, 0x6, 0x8, 0x9, 0x200, 0x1000, 0x3, 0x7, 0xfffffffd, 0x6, 0x7ff, 0xa3ff, 0x3, 0x4, 0x10001, 0x81, 0x6, 0x9, 0x3, 0x81, 0x9, 0x362f, 0x3fa, 0x2, 0x4, 0x0, 0xffffbe15, 0x0, 0x300, 0x3, 0x4, 0x4, 0x8, 0x8, 0x5, 0x4, 0x4, 0x1ff, 0x0, 0x7ff, 0x5, 0xfffffffc, 0xd157, 0x5, 0xaf, 0x9, 0x9, 0x6f, 0x5, 0x9, 0x8, 0x3, 0x1, 0x4, 0xe, 0xd, 0x4, 0x7, 0xfffffff2, 0x6d, 0x3, 0xa58, 0x9, 0x8001, 0x1, 0x10000, 0x800000, 0x7fffffff, 0x35, 0x1, 0x5, 0x8b7a, 0x50, 0x1000, 0x7, 0x6, 0x5, 0x7fffffff, 0x1000, 0x6ed5, 0x2000, 0xfffffffc, 0x8, 0xa6, 0x3, 0x7, 0x13, 0x0, 0x4, 0x1000, 0xa7, 0x1, 0x4, 0x4, 0x8, 0x80000001, 0xfffffff8, 0x7, 0x0, 0x800, 0x0, 0x160, 0x80, 0x6, 0xff, 0x7, 0xfa32, 0x9, 0x1, 0x5, 0x10000, 0x6, 0x4040, 0x0, 0x1, 0xd292, 0x8, 0x7ff, 0x24c, 0xb0000000, 0xffffffff, 0x1ff, 0x5, 0x2, 0x3, 0x8, 0x9, 0x0, 0xfffffff5, 0x4, 0x58, 0x200, 0x9, 0x0, 0x5, 0x7, 0x1, 0x4, 0x800, 0x9, 0xffff, 0x1, 0xb50, 0x10, 0x9, 0x8, 0x6, 0x200, 0xe, 0x0, 0x7, 0x3, 0x5, 0x401, 0x3, 0x80000001, 0x800, 0x3, 0x6, 0xac, 0x0, 0x7, 0x7, 0xb48, 0x6, 0x9, 0x3, 0x7d5, 0x0, 0xfffffff9, 0x2, 0x6, 0x8001, 0x10001, 0x0, 0x7ff, 0x0, 0x8, 0x4, 0x4, 0x2, 0x5, 0x8fb, 0x8, 0x2, 0x8, 0x6, 0x1cf, 0x4, 0xd, 0xfffffe01, 0x5b8842d7, 0x100, 0x7, 0x0, 0x6, 0x738d, 0x1, 0x5861, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0xc, 0x2238, 0xe, {0x7, 0x2, 0x5, 0x9, 0x6, 0x8}, {0x7, 0x1, 0x101, 0xe969, 0x86, 0x4}, 0x77e354cf, 0x8, 0xd}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x2, 0x6, 0x10, 0x4, 0xb6a, 0x1, 0xfffffff7, 0x9, 0x7ff, 0x4, 0x5, 0x10001, 0x1, 0x6, 0x2, 0x7, 0x100, 0x401, 0x5, 0x6, 0x1, 0x1ec, 0x3, 0x2, 0x0, 0x9, 0x6, 0x91, 0x1000, 0x7, 0x7, 0x2, 0xff, 0x3, 0x7, 0x5, 0x8, 0x6, 0xfffffffc, 0x3, 0x2, 0x800, 0x4, 0x4, 0x5, 0x4, 0xfffffff7, 0x7, 0x3, 0x5, 0x2, 0x8f, 0x7, 0xb80c, 0xbc3b, 0x7, 0x9, 0x1592, 0xfc, 0x8, 0x540, 0xfffffff7, 0x7, 0x7, 0x5, 0x71d3e5a4, 0x8000, 0x9e, 0x2, 0x7, 0x4, 0x200, 0x9, 0x6, 0xab, 0x10001, 0x4, 0x1, 0x8, 0x9d82, 0x80, 0x4, 0x0, 0x3, 0x4, 0x2, 0xa50, 0x8, 0xfffffeff, 0x7ff, 0x1000, 0x611, 0x7ff, 0x1, 0x9, 0x800, 0xfffffff9, 0x6, 0x100, 0x5, 0x5a3, 0x9, 0x9, 0x7, 0x2, 0x5, 0x7, 0x1ff, 0x101, 0xae2, 0x4, 0x400, 0x7, 0x8001, 0x4, 0xfffffff7, 0x1, 0x68000000, 0x10, 0x9, 0x8000, 0x20, 0x4, 0x7, 0x3, 0xff, 0xb20a, 0x7, 0xbc, 0xfffffffb, 0x8, 0x5, 0x0, 0xffffff01, 0x4, 0x874, 0x4, 0x4, 0x80, 0xda, 0xe81, 0x1, 0x3, 0x9, 0x1, 0x0, 0x1, 0x2, 0x2ce, 0x4df, 0x200, 0x0, 0x80000000, 0x5, 0x8000, 0x8, 0x6, 0x0, 0x9, 0x2, 0x100, 0x4e, 0x64b, 0x8, 0x5, 0xb8e, 0x0, 0xfffffc08, 0x100, 0x0, 0x4, 0x9, 0x2, 0xf2b2, 0x5, 0xe69, 0x80000000, 0xd8c, 0x6, 0x8001, 0x4, 0x84, 0x1, 0x2, 0x5ce1, 0x28, 0x3800000, 0x3, 0xa0, 0x6, 0x8, 0x6, 0x8, 0xe, 0x3, 0x2, 0x40, 0x666, 0xd, 0x0, 0x1, 0x2, 0xc, 0x200, 0x6, 0xcb, 0x6, 0x9, 0x4, 0x9, 0x4, 0xe71, 0x7, 0x3, 0x3, 0x2, 0x3, 0x8, 0x51ab, 0x3, 0xd, 0x0, 0x554, 0x1, 0x800, 0x7, 0x7, 0xfffffffb, 0x825, 0x16, 0x80000000, 0xb1c, 0x5, 0x6, 0x3, 0x8, 0x9, 0x3, 0x68, 0xfc, 0x1, 0xa30, 0x4c, 0x1, 0x9, 0x6, 0x4, 0x100, 0x81, 0x8, 0x5, 0x3, 0x19c7079c, 0x0, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}]}, @TCA_FW_POLICE={0x488, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x10001, 0x5, 0x1, 0x974, 0x7, 0x78e4, 0x5, 0x100, 0x3, 0x6, 0x0, 0x401, 0x3, 0xde3, 0x81, 0x1, 0x4, 0x100, 0x200, 0x80000000, 0x7fff, 0x1, 0x79, 0x6, 0xf, 0x2813, 0x401, 0x3f, 0x0, 0x5, 0x876, 0x1, 0x0, 0x7a0, 0x5, 0x1, 0x2, 0x4, 0x4, 0x5, 0xd, 0xd21e, 0x2, 0xfffffffb, 0x72, 0x6, 0x8, 0xfff, 0x3, 0x4, 0x1a7, 0x0, 0x1, 0x1, 0x0, 0x36b5, 0xa4b1, 0x0, 0xb0, 0x4, 0x7, 0x0, 0x400, 0x711a, 0x2, 0x2, 0x0, 0x119, 0x9, 0x1, 0x200, 0x4, 0x8000, 0x8, 0x4, 0x7, 0x3, 0xe, 0xfd, 0x7, 0x6, 0x6, 0x7, 0x4, 0x0, 0x9, 0x3, 0x1ccad6c, 0x2, 0x86, 0x80, 0x7fc0, 0x5, 0x4, 0x3, 0x7, 0x7, 0x6, 0x3, 0x30, 0x5, 0x5, 0xfffffe00, 0xfffffffb, 0x4, 0x7, 0x1, 0x8001, 0x80000000, 0x5, 0x9, 0x7, 0x6f2, 0xe, 0xf14, 0xd2a, 0x4, 0x1, 0x2, 0x60000000, 0x2, 0x3, 0x3, 0x1c8, 0xffff8000, 0xb, 0x6, 0x147, 0x6, 0x40, 0x3, 0x2, 0x4, 0x6, 0x644d5b12, 0x7, 0x5, 0x800, 0x5, 0x100, 0x7, 0x3, 0x200, 0x6, 0x9, 0x9, 0x6, 0x1, 0x2, 0x1, 0x9, 0x9, 0x5, 0x100, 0x2, 0x9, 0x9, 0x1, 0x200, 0x3ff, 0x80000001, 0x1, 0x6, 0xffffb93a, 0x3, 0x6, 0xb, 0x94, 0x7, 0x2, 0x10000, 0x4, 0x40, 0x7a, 0x443d, 0x1, 0x0, 0x0, 0x6e69, 0x3, 0xc09, 0xfffffffc, 0xb, 0x1, 0x3, 0x10000, 0xa9a1, 0x0, 0xfd3, 0x11, 0x8, 0x993, 0x6, 0xe1, 0x6, 0xad0, 0x400000, 0x4, 0x3, 0x10001, 0x1, 0x9, 0xffff, 0x101, 0x0, 0x6, 0x1, 0x700, 0x7, 0x0, 0xe, 0x0, 0x5, 0x4, 0x7fff, 0x9, 0x10001, 0xfffffff8, 0xd8, 0x6, 0x8ae, 0x80000000, 0x5, 0x3, 0x2506, 0x2, 0x50, 0xf, 0xfffffffe, 0xb6, 0xc08, 0xc12f, 0xd, 0x5, 0x2d6d, 0x6, 0xffff, 0x8, 0xc9, 0x6a90, 0x1, 0x59b0bfb7, 0x101, 0x8, 0x0, 0xb, 0x2, 0x2, 0x6, 0xfffff801, 0x4, 0x3e7, 0x1, 0x40, 0xfff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffeffff, 0x3, 0x5, 0x89fc, 0xfb7e, {0x9, 0x0, 0xd, 0x81, 0x55f9, 0x3ff}, {0x6, 0x0, 0x3, 0x1, 0x624d, 0x4f}, 0x1, 0x448b, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x869b, 0x2, 0x7, 0x1, 0xfff, {0x10, 0x1, 0x9, 0x4, 0x5, 0xb1c}, {0x2, 0x1, 0xfff6, 0x8001, 0x9, 0xb2}, 0x4, 0x7, 0x6}}]}, @TCA_FW_ACT={0x134, 0x4, [@m_connmark={0x130, 0x6, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0xffffffffffffffff, 0xff, 0x5d85}, 0x7}}]}, {0xe4, 0x6, "8cd77c586a18e564063dfe90c682467e4040934fc882397aadea976fe07e2064a4b738d076b87ef36dc96ec3b6ae775e0db35687a91ab2da6ba7d3570e10d8ce5cf3c481409950e8a6046e05dc3dca5369446b7114284314c071c91b0712a37cfeb69bdfafca147d05b3fb80b285c84a64f866f5157f696a8cd35a3b33214fc7baf8ba2de67739edd060d02fc8a2db957ff0e499f189dbfb247ea74a9b481769660c9388c88a73318126bd69d2e13f2c98ca92ce94fc48e3f1a7215c4bc6994c0a86e1d990620bc6a6c61ba35fdd8eb83e7fd756d5eb4933f573c63c010e711b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'wg0\x00'}]}}]}, 0xe98}}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_SET(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x4, 0xfe, 0x100, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, @empty, 0x8000, 0x0, 0x2}}) 6.819760689s ago: executing program 2 (id=519): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6.440074488s ago: executing program 3 (id=522): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x88e, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x392, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0xf, 0x6, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x80082, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0x8000d, 0x2bf, 0xffffffff, 0x0, 0xfffffffc, 0x334000, 0x0, 0x7, 0x85, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x4, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x5, 0x3, 0x5, 0x348, 0x0, 0xa3d, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x1fe, 0x80, 0x2, 0xcc52, 0x4, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x3, 0xc0, 0x10003, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x2, 0x0, 0xffffffff, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xb, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x3, 0xc, 0xc8, 0xee1, 0x0, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0xb, 0x30b1d693, 0x1, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0x80b1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x40000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) read$FUSE(r0, 0x0, 0x11) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 6.300556201s ago: executing program 3 (id=525): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x20, 0x1c, 0x68, 0x0, 0xe, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) 6.190578953s ago: executing program 3 (id=527): r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = timerfd_create(0x1, 0x0) timerfd_settime(r4, 0x2, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r7 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b7d0510"], 0xe) syz_usb_disconnect(0xffffffffffffffff) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) readv(r8, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1) prctl$PR_MCE_KILL(0x42, 0x1, 0x1) 6.180801233s ago: executing program 2 (id=528): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x40, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf4e, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357bc"}}}}}}}, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) close(0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) 6.124604005s ago: executing program 0 (id=529): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x2, 0x0, @dev, @private1, 0x7, 0x2900, 0x0, 0x5}}) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) connect(0xffffffffffffffff, &(0x7f0000002440)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x80) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r2 = userfaultfd(0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) recvmmsg(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/240, 0xf0}], 0x1}, 0xa5f}], 0x2, 0x40000163, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) 5.106505297s ago: executing program 0 (id=531): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x5e9602, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600", @ANYRES32, @ANYBLOB], 0x34}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="0500002300002100000008000300611a9a2455a2a9df2a977c15bdb04a3991665902126f0cc192d4dc33ff03fd87d035a4eed68c9d25bdaefc87080f86a8642938711a37ae0d99d770c12080f715f5bb47", @ANYRES32, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x84) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, 0x0, &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xf, 0x2800, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0xffffffffffffffff], &(0x7f0000000680)=[{0x3, 0x4, 0x6, 0x2}], 0x10, 0x9}, 0x94) 4.467792481s ago: executing program 2 (id=532): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x31, 0x2, "22dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f00000000c0)=""/129, 0x81) 4.200426067s ago: executing program 1 (id=534): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 4.188627257s ago: executing program 1 (id=535): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x20, 0x1c, 0x68, 0x0, 0xe, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) 4.172150968s ago: executing program 0 (id=536): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000340)={0xc4, r4, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a0x0, 0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x1, 0xfffffffd, 0x4, @mcast1, @loopback, 0x10, 0x40, 0x2, 0x100}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6213, 0x200, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20, 0x0, 0xba, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000380)={0x1, 0x1, 0x5, 0x1ab9e6b8}) syz_usb_connect(0x2, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001661e0720d219c17f57e8010203010902380002088120040904d40103e00103"], 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) 1.786842511s ago: executing program 1 (id=539): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x2, 0x0, @dev, @private1, 0x7, 0x2900, 0x0, 0x5}}) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) connect(0xffffffffffffffff, &(0x7f0000002440)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x80) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r2 = userfaultfd(0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) recvmmsg(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/240, 0xf0}], 0x1}, 0xa5f}], 0x2, 0x40000163, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) 1.167422874s ago: executing program 1 (id=540): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x40, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf4e, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357bc"}}}}}}}, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) close(0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) 1.108560435s ago: executing program 2 (id=541): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r4) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)={0x14, r5, 0xf002135a49ffa319, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x44080) 1.082764176s ago: executing program 0 (id=542): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x88e, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x392, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0xf, 0x6, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x80082, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0x8000d, 0x2bf, 0xffffffff, 0x0, 0xfffffffc, 0x334000, 0x0, 0x7, 0x85, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x4, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x5, 0x3, 0x5, 0x348, 0x0, 0xa3d, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x1fe, 0x80, 0x2, 0xcc52, 0x4, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x3, 0xc0, 0x10003, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x2, 0x0, 0xffffffff, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xb, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x3, 0xc, 0xc8, 0xee1, 0x0, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0xb, 0x30b1d693, 0x1, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0x80b1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) r1 = syz_open_dev$evdev(0x0, 0x3, 0x822b01) read$FUSE(r0, 0x0, 0x11) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 149.122576ms ago: executing program 0 (id=543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 581.12µs ago: executing program 0 (id=544): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff07056b", @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0800080001", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 1 (id=545): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x5e9602, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600", @ANYRES32, @ANYBLOB], 0x34}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="0500002300002100000008000300611a9a2455a2a9df2a977c15bdb04a3991665902126f0cc192d4dc33ff03fd87d035a4eed68c9d25bdaefc87080f86a8642938711a37ae0d99d770c12080f715f5bb47", @ANYRES32, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x84) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, 0x0, &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xf, 0x2800, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0xffffffffffffffff], &(0x7f0000000680)=[{0x3, 0x4, 0x6, 0x2}], 0x10, 0x9}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 64.312558][ T5759] cgroup: Unknown subsys name 'net' [ 64.459780][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.856713][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.297137][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.305820][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.314520][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.323420][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.331289][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.339619][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.341809][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.347943][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.357913][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.363952][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.369414][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.377518][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.384001][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.390295][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.397453][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.411147][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.411517][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.420096][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.426341][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.432674][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.447345][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.455284][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.462798][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.475436][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.875092][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 67.947840][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 68.021470][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 68.037347][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.046473][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.053912][ T5774] bridge_slave_0: entered allmulticast mode [ 68.060652][ T5774] bridge_slave_0: entered promiscuous mode [ 68.069875][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 68.093412][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.100566][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.107822][ T5774] bridge_slave_1: entered allmulticast mode [ 68.114649][ T5774] bridge_slave_1: entered promiscuous mode [ 68.218311][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.225619][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.233370][ T5771] bridge_slave_0: entered allmulticast mode [ 68.240054][ T5771] bridge_slave_0: entered promiscuous mode [ 68.248463][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.255658][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.263020][ T5771] bridge_slave_1: entered allmulticast mode [ 68.270677][ T5771] bridge_slave_1: entered promiscuous mode [ 68.289524][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.322517][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.342625][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.357739][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.373622][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.380738][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.388515][ T5772] bridge_slave_0: entered allmulticast mode [ 68.396618][ T5772] bridge_slave_0: entered promiscuous mode [ 68.442932][ T5774] team0: Port device team_slave_0 added [ 68.449510][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.457182][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.464486][ T5772] bridge_slave_1: entered allmulticast mode [ 68.471134][ T5772] bridge_slave_1: entered promiscuous mode [ 68.488711][ T5771] team0: Port device team_slave_0 added [ 68.498814][ T5774] team0: Port device team_slave_1 added [ 68.506222][ T5771] team0: Port device team_slave_1 added [ 68.518673][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.526329][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.533791][ T5773] bridge_slave_0: entered allmulticast mode [ 68.540437][ T5773] bridge_slave_0: entered promiscuous mode [ 68.548111][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.555339][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.562501][ T5773] bridge_slave_1: entered allmulticast mode [ 68.569425][ T5773] bridge_slave_1: entered promiscuous mode [ 68.606215][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.640247][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.658799][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.668394][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.694638][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.706910][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.716299][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.743333][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.755714][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.762682][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.788864][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.810309][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.820106][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.827167][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.853302][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.886150][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.924505][ T5772] team0: Port device team_slave_0 added [ 68.931886][ T5772] team0: Port device team_slave_1 added [ 68.956321][ T5773] team0: Port device team_slave_0 added [ 68.964651][ T5773] team0: Port device team_slave_1 added [ 68.990873][ T5774] hsr_slave_0: entered promiscuous mode [ 68.998444][ T5774] hsr_slave_1: entered promiscuous mode [ 69.048012][ T5771] hsr_slave_0: entered promiscuous mode [ 69.054916][ T5771] hsr_slave_1: entered promiscuous mode [ 69.061025][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.068852][ T5771] Cannot create hsr debugfs directory [ 69.094070][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.101064][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.127240][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.144586][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.151559][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.177571][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.208963][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.218206][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.244305][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.294167][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.301146][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.328329][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.365400][ T5772] hsr_slave_0: entered promiscuous mode [ 69.371627][ T5772] hsr_slave_1: entered promiscuous mode [ 69.378615][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.386428][ T5772] Cannot create hsr debugfs directory [ 69.459374][ T5773] hsr_slave_0: entered promiscuous mode [ 69.465794][ T5773] hsr_slave_1: entered promiscuous mode [ 69.471805][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.479430][ T5773] Cannot create hsr debugfs directory [ 69.485949][ T5785] Bluetooth: hci1: command tx timeout [ 69.493239][ T5775] Bluetooth: hci2: command tx timeout [ 69.563603][ T5785] Bluetooth: hci3: command tx timeout [ 69.573429][ T5785] Bluetooth: hci0: command tx timeout [ 69.771140][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.790877][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.802743][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.813574][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.868686][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.897743][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.908823][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.918335][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.014121][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.026038][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.038648][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.051689][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.126497][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.136476][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.149399][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.159221][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.219443][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.246777][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.277208][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.305146][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.312362][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.329565][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.359631][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.366812][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.390247][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.397524][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.422004][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.429124][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.506756][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.531749][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.561145][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.568334][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.600721][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.607929][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.628477][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.738702][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.790591][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.797785][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.852971][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.860190][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.967936][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.028638][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.112725][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.170724][ T5771] veth0_vlan: entered promiscuous mode [ 71.199437][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.229786][ T5771] veth1_vlan: entered promiscuous mode [ 71.263760][ T5774] veth0_vlan: entered promiscuous mode [ 71.300065][ T5774] veth1_vlan: entered promiscuous mode [ 71.338210][ T5771] veth0_macvtap: entered promiscuous mode [ 71.348888][ T5773] veth0_vlan: entered promiscuous mode [ 71.368787][ T5771] veth1_macvtap: entered promiscuous mode [ 71.388310][ T5774] veth0_macvtap: entered promiscuous mode [ 71.405976][ T5773] veth1_vlan: entered promiscuous mode [ 71.412972][ T5774] veth1_macvtap: entered promiscuous mode [ 71.426547][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.459250][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.478639][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.491537][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.503021][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.518014][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.529799][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.540168][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.549595][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.558901][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.569877][ T5785] Bluetooth: hci1: command tx timeout [ 71.569914][ T5775] Bluetooth: hci2: command tx timeout [ 71.587124][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.596713][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.628035][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.640760][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.650965][ T5775] Bluetooth: hci0: command tx timeout [ 71.651006][ T5775] Bluetooth: hci3: command tx timeout [ 71.662171][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.692010][ T5773] veth0_macvtap: entered promiscuous mode [ 71.710049][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.722137][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.732361][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.741371][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.763217][ T5773] veth1_macvtap: entered promiscuous mode [ 71.788267][ T5772] veth0_vlan: entered promiscuous mode [ 71.828906][ T4214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.842217][ T4214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.849207][ T5772] veth1_vlan: entered promiscuous mode [ 71.869544][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.882758][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.894607][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.905129][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.917113][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.962039][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.984481][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.001074][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.017611][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.028648][ T5772] veth0_macvtap: entered promiscuous mode [ 72.041064][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.057189][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.067436][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.080116][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.092068][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.114613][ T5772] veth1_macvtap: entered promiscuous mode [ 72.125281][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.138678][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.148859][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.157646][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.177412][ T5043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.195827][ T5043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.249077][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.266427][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.276777][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.287547][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.298289][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.308854][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.320257][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.345364][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.366036][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.376062][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.388239][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.399263][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.411651][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.427936][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.474938][ T4214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.482816][ T4214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.498692][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.529667][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.573506][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.619699][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.710662][ T5834] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.776811][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.838841][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.062955][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.083433][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.169566][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.182763][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.713843][ T5775] Bluetooth: hci1: command tx timeout [ 73.719386][ T5775] Bluetooth: hci2: command tx timeout [ 73.726143][ T5775] Bluetooth: hci0: command tx timeout [ 73.731652][ T5775] Bluetooth: hci3: command tx timeout [ 74.002026][ T5847] warning: `syz.3.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.803534][ T5785] Bluetooth: hci3: command tx timeout [ 75.804814][ T5775] Bluetooth: hci2: command tx timeout [ 75.809046][ T5785] Bluetooth: hci1: command tx timeout [ 77.538526][ T5875] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10'. [ 77.548301][ T5875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10'. [ 80.983357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.362366][ T5918] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 85.369292][ T5918] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 85.378115][ T5918] vhci_hcd vhci_hcd.0: Device attached [ 85.456429][ T5920] vhci_hcd: connection closed [ 85.844751][ T42] vhci_hcd: stop threads [ 85.923507][ T42] vhci_hcd: release socket [ 85.978189][ T42] vhci_hcd: disconnect device [ 86.043898][ T5810] vhci_hcd: vhci_device speed not set [ 86.939142][ T172] cfg80211: failed to load regulatory.db [ 88.493434][ T5829] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.688523][ T5776] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.698665][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 88.719210][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.743224][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.778541][ T5829] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 88.803246][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.833151][ T5829] usb 2-1: config 0 descriptor?? [ 88.945320][ T5776] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.963402][ T5776] usb 3-1: config 0 has no interfaces? [ 88.975006][ T5776] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 89.003397][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 89.027208][ T5776] usb 3-1: Product: syz [ 89.031483][ T5776] usb 3-1: Manufacturer: syz [ 89.065866][ T5776] usb 3-1: SerialNumber: syz [ 89.134209][ T5776] usb 3-1: config 0 descriptor?? [ 89.553766][ T5829] usbhid 2-1:0.0: can't add hid device: -32 [ 89.651617][ T5829] usbhid: probe of 2-1:0.0 failed with error -32 [ 94.265880][ T5810] usb 3-1: USB disconnect, device number 2 [ 94.326810][ T5811] usb 2-1: USB disconnect, device number 2 [ 94.504372][ T5785] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 98.305026][ T5988] syzkaller0: entered promiscuous mode [ 98.448882][ T5988] syzkaller0: entered allmulticast mode [ 99.145727][ T5785] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 99.273385][ T5810] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.596469][ T5810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.607195][ T5810] usb 1-1: config 0 has no interfaces? [ 99.615621][ T5810] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 99.649214][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 99.695470][ T5810] usb 1-1: Product: syz [ 99.699732][ T5810] usb 1-1: Manufacturer: syz [ 99.721496][ T5810] usb 1-1: SerialNumber: syz [ 99.742412][ T5810] usb 1-1: config 0 descriptor?? [ 100.689333][ T6018] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 100.696020][ T6018] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.704401][ T6018] vhci_hcd vhci_hcd.0: Device attached [ 100.736415][ T6020] usbip_core: unknown command [ 100.801762][ T6020] vhci_hcd: unknown pdu 3868514402 [ 100.871838][ T6020] usbip_core: unknown command [ 100.942298][ T12] vhci_hcd: stop threads [ 101.037779][ T12] vhci_hcd: release socket [ 101.064197][ T5810] vhci_hcd: vhci_device speed not set [ 101.104969][ T12] vhci_hcd: disconnect device [ 101.215002][ T5810] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 101.290874][ T5810] usb 37-1: enqueue for inactive port 0 [ 101.852663][ T6024] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 102.615043][ T172] usb 1-1: USB disconnect, device number 2 [ 102.691267][ T5810] vhci_hcd: vhci_device speed not set [ 104.287648][ T5785] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 104.928617][ T6045] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.123996][ T5761] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.697383][ T6063] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 107.435595][ T5761] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.467509][ T5761] usb 4-1: config 0 has no interfaces? [ 107.489176][ T5761] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 107.518109][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 107.540877][ T5761] usb 4-1: Product: syz [ 107.550757][ T5761] usb 4-1: Manufacturer: syz [ 107.574456][ T5761] usb 4-1: SerialNumber: syz [ 107.601956][ T5761] usb 4-1: config 0 descriptor?? [ 109.127930][ T5785] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 109.310613][ T5836] usb 4-1: USB disconnect, device number 2 [ 109.671888][ T6091] syz.2.66 (6091) used greatest stack depth: 20824 bytes left [ 109.929314][ T6097] syz_tun: entered allmulticast mode [ 110.734594][ T6100] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 111.703254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.074010][ T5785] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 113.553249][ T6119] process 'syz.0.74' launched './file0' with NULL argv: empty string added [ 114.273012][ T5836] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.280698][ T27] audit: type=1800 audit(1784091822.993:2): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.74" name="/" dev="fuse" ino=4 res=0 errno=0 [ 114.597657][ T5836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.732027][ T5836] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.013857][ T5836] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 115.157100][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 115.282051][ T5836] usb 4-1: Product: syz [ 115.332618][ T5836] usb 4-1: Manufacturer: syz [ 115.421180][ T5836] usb 4-1: SerialNumber: syz [ 115.839166][ T6137] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 118.363209][ T5776] usb 4-1: USB disconnect, device number 3 [ 118.567450][ T6164] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 118.575209][ T6164] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 118.583314][ T6164] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 118.589944][ T6164] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 118.599281][ T6164] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 118.607773][ T6164] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 118.619778][ T6164] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 118.626583][ T6164] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 118.634607][ T6164] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 118.641444][ T6164] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 118.648613][ T6164] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 118.655330][ T6164] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 118.662334][ T6164] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 118.669396][ T6164] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 118.676738][ T6164] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 118.683596][ T6164] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 118.690763][ T6164] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 118.697608][ T6164] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 118.704252][ T6164] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 118.710866][ T6164] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 118.717771][ T6164] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 118.724447][ T6164] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 118.731212][ T6164] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 118.737936][ T6164] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 118.744567][ T6164] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 118.787126][ T6164] bridge1: entered promiscuous mode [ 118.792457][ T6164] bridge1: entered allmulticast mode [ 118.808369][ T6164] team0: Port device bridge1 added [ 119.002946][ T5829] IPVS: starting estimator thread 0... [ 119.155484][ T5785] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 119.163436][ T6166] IPVS: using max 22 ests per chain, 52800 per kthread [ 122.922777][ T6211] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 123.733646][ T5829] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.849195][ T5785] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 123.945493][ T5829] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.963194][ T5829] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.024036][ T5829] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 124.585237][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 124.847893][ T5829] usb 2-1: Product: syz [ 124.852125][ T5829] usb 2-1: Manufacturer: syz [ 124.857185][ T5829] usb 2-1: SerialNumber: syz [ 125.017852][ T6229] netlink: 128 bytes leftover after parsing attributes in process `syz.0.94'. [ 125.026844][ T6229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.94'. [ 126.648544][ T5836] usb 2-1: USB disconnect, device number 3 [ 128.367259][ T6285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.107'. [ 128.518836][ T6287] Bluetooth: MGMT ver 1.22 [ 128.653326][ T5810] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.283589][ T6292] binder: BINDER_SET_CONTEXT_MGR already set [ 129.293237][ T6292] binder: 6291:6292 ioctl 4018620d 200000004a80 returned -16 [ 129.332371][ T6296] netlink: 128 bytes leftover after parsing attributes in process `syz.0.110'. [ 129.341812][ T6296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.110'. [ 129.558167][ T5810] usb 2-1: config 0 has an invalid interface number: 91 but max is 0 [ 129.595391][ T5810] usb 2-1: config 0 has no interface number 0 [ 129.666243][ T5810] usb 2-1: config 0 interface 91 has no altsetting 0 [ 130.194801][ T5810] usb 2-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 130.222019][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.236406][ T5810] usb 2-1: Product: syz [ 130.243361][ T5810] usb 2-1: Manufacturer: syz [ 130.261104][ T5810] usb 2-1: SerialNumber: syz [ 130.312233][ T5810] usb 2-1: config 0 descriptor?? [ 131.429848][ T6312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.689046][ T5810] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 131.740598][ T5810] usb 2-1: USB disconnect, device number 4 [ 131.801961][ T6325] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 133.007487][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.014639][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.034969][ T6342] netlink: 128 bytes leftover after parsing attributes in process `syz.1.119'. [ 133.044019][ T6342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.119'. [ 133.266660][ T6345] binder: BINDER_SET_CONTEXT_MGR already set [ 133.371290][ T6345] binder: 6344:6345 ioctl 4018620d 200000004a80 returned -16 [ 135.853478][ T5872] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.105657][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 136.204755][ T5872] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.337306][ T5872] usb 4-1: config 0 interface 0 has no altsetting 0 [ 136.513725][ T5872] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 136.522835][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.571955][ T5872] usb 4-1: Product: syz [ 136.603983][ T5872] usb 4-1: Manufacturer: syz [ 136.608684][ T5872] usb 4-1: SerialNumber: syz [ 136.680564][ T5872] usb 4-1: config 0 descriptor?? [ 136.967565][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 136.998525][ T5872] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 137.635196][ T5872] imon:send_packet: packet tx failed (-71) [ 137.753447][ T5872] imon 4-1:0.0: panel buttons/knobs setup failed [ 139.584005][ T6395] binder: BINDER_SET_CONTEXT_MGR already set [ 139.587196][ T5872] rc_core: IR keymap rc-imon-pad not found [ 139.609534][ T6395] binder: 6394:6395 ioctl 4018620d 200000004a80 returned -16 [ 139.623330][ T5872] Registered IR keymap rc-empty [ 139.628326][ T5872] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 139.642647][ T5872] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 139.658111][ T5872] imon:send_packet: packet tx failed (-71) [ 139.683300][ T5872] imon 4-1:0.0: remote input dev register failed [ 139.693392][ T5872] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 139.747968][ T5872] imon 4-1:0.0: unable to initialize intf0, err 0 [ 139.769188][ T5872] imon:imon_probe: failed to initialize context! [ 139.778847][ T5872] imon 4-1:0.0: unable to register, err -19 [ 139.797185][ T5872] usb 4-1: USB disconnect, device number 4 [ 140.153260][ T5872] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.409616][ T5872] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 140.420069][ T5872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.460942][ T5872] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 140.525406][ T5872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.575806][ T5872] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 140.599330][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 140.633204][ T5872] usb 4-1: Product: syz [ 140.666049][ T5872] usb 4-1: Manufacturer: syz [ 140.717735][ T5872] cdc_wdm 4-1:1.0: skipping garbage [ 140.723021][ T5872] cdc_wdm 4-1:1.0: skipping garbage [ 140.764890][ T5872] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 141.077981][ T5761] usb 4-1: USB disconnect, device number 5 [ 144.402936][ T6425] netlink: 20264 bytes leftover after parsing attributes in process `syz.0.142'. [ 144.784663][ T5785] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 148.610334][ T6480] ======================================================= [ 148.610334][ T6480] WARNING: The mand mount option has been deprecated and [ 148.610334][ T6480] and is ignored by this kernel. Remove the mand [ 148.610334][ T6480] option from the mount to silence this warning. [ 148.610334][ T6480] ======================================================= [ 149.333379][ T5761] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.525815][ T5761] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.553206][ T5761] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.603559][ T5761] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 150.406659][ T5761] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.443712][ T5761] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.465059][ T5761] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 150.493246][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 150.501303][ T5761] usb 1-1: Product: syz [ 150.523379][ T5761] usb 1-1: Manufacturer: syz [ 150.538060][ T5761] cdc_wdm 1-1:1.0: skipping garbage [ 150.543793][ T5761] cdc_wdm 1-1:1.0: skipping garbage [ 150.556169][ T5761] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 150.562141][ T5761] cdc_wdm 1-1:1.0: Unknown control protocol [ 150.754187][ T5761] usb 1-1: USB disconnect, device number 3 [ 151.372383][ T5761] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 151.611611][ T5761] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 151.639146][ T5761] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.719697][ T5761] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 151.785744][ T5761] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.885213][ T5761] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.014380][ T5761] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.136305][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.262823][ T5761] usb 1-1: Product: syz [ 152.323285][ T5761] usb 1-1: Manufacturer: syz [ 152.504451][ T5761] usb 1-1: can't set config #1, error -71 [ 152.747774][ T5761] usb 1-1: USB disconnect, device number 4 [ 154.574077][ T6513] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 154.590665][ T6513] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 154.599320][ T6513] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 155.567527][ T6515] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 155.653512][ T5761] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 157.123699][ T5811] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 157.392111][ T5811] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.497357][ T5811] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.563307][ T5811] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.598582][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.654394][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.695583][ T5811] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.713281][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.728385][ T5811] usb 4-1: Product: syz [ 157.733917][ T5811] usb 4-1: Manufacturer: syz [ 157.939741][ T5811] cdc_wdm 4-1:1.0: skipping garbage [ 157.945090][ T5811] cdc_wdm 4-1:1.0: skipping garbage [ 157.952220][ T5811] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 157.958253][ T5811] cdc_wdm 4-1:1.0: Unknown control protocol [ 158.202479][ T5811] usb 4-1: USB disconnect, device number 6 [ 158.923326][ T5811] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 159.347911][ T5811] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.407672][ T5811] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.479903][ T5811] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.560979][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.735919][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.792148][ T5811] usb 4-1: string descriptor 0 read error: -71 [ 159.826883][ T5811] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.864746][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.930661][ T5811] usb 4-1: can't set config #1, error -71 [ 159.953666][ T5811] usb 4-1: USB disconnect, device number 7 [ 160.953301][ T5776] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 161.843441][ T5776] usb 3-1: Using ep0 maxpacket: 32 [ 161.906011][ T5776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.937731][ T5776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.963428][ T5776] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 161.973196][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.994557][ T5776] usb 3-1: config 0 descriptor?? [ 162.403128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 162.513128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 163.319198][ T5776] usbhid 3-1:0.0: can't add hid device: -71 [ 163.344681][ T5776] usbhid: probe of 3-1:0.0 failed with error -71 [ 163.361878][ T5776] usb 3-1: USB disconnect, device number 3 [ 165.576408][ T5761] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.879698][ T5761] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.903166][ T5761] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.935633][ T5761] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.571058][ T5761] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.633321][ T5761] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.653705][ T5761] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.673452][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.707878][ T5761] usb 3-1: Product: syz [ 166.723699][ T5761] usb 3-1: Manufacturer: syz [ 167.120335][ T5761] cdc_wdm 3-1:1.0: skipping garbage [ 167.142561][ T5761] cdc_wdm 3-1:1.0: skipping garbage [ 167.180334][ T5761] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 167.211449][ T5761] cdc_wdm 3-1:1.0: Unknown control protocol [ 168.161731][ T5829] usb 3-1: USB disconnect, device number 4 [ 177.599636][ T6666] bridge1: entered promiscuous mode [ 177.605041][ T6666] bridge1: entered allmulticast mode [ 177.818500][ T5811] IPVS: starting estimator thread 0... [ 178.007275][ T6669] IPVS: using max 17 ests per chain, 40800 per kthread [ 178.008012][ T5776] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.065098][ T5776] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.084087][ T5776] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.103273][ T5776] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.112400][ T5776] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.127533][ T5776] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.140163][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.150076][ T5776] usb 4-1: Product: syz [ 180.154940][ T5776] usb 4-1: Manufacturer: syz [ 180.180570][ T5776] cdc_wdm 4-1:1.0: skipping garbage [ 180.186037][ T5776] cdc_wdm 4-1:1.0: skipping garbage [ 180.208588][ T5776] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 180.222985][ T5776] cdc_wdm 4-1:1.0: Unknown control protocol [ 180.399739][ T5776] usb 4-1: USB disconnect, device number 8 [ 181.455336][ T5829] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 181.659041][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 181.668800][ T5829] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.682237][ T5829] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.694600][ T5829] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0xB6, skipping [ 181.705874][ T5829] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.719413][ T5829] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.728817][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.757478][ T5829] usbtmc 1-1:16.0: bulk endpoints not found [ 183.717420][ T5873] usb 1-1: USB disconnect, device number 6 [ 184.045723][ T5811] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 184.570570][ T5811] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.599526][ T5811] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 184.612522][ T5811] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.622096][ T5811] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 184.633523][ T5811] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 184.873521][ T5811] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.903469][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.911734][ T5811] usb 2-1: Product: syz [ 184.921722][ T5811] usb 2-1: Manufacturer: syz [ 184.997292][ T5811] cdc_wdm 2-1:1.0: skipping garbage [ 185.933376][ T5811] cdc_wdm 2-1:1.0: skipping garbage [ 186.259809][ T5811] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 186.301156][ T5811] cdc_wdm 2-1:1.0: Unknown control protocol [ 186.761024][ T5811] usb 2-1: USB disconnect, device number 5 [ 187.493199][ T5873] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 187.724667][ T5873] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 187.751774][ T5873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.503155][ T5873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.523697][ T5873] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.537285][ T5873] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.551583][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.572455][ T5873] usb 4-1: Product: syz [ 188.580073][ T5873] usb 4-1: Manufacturer: syz [ 188.603460][ T5873] cdc_wdm 4-1:1.0: skipping garbage [ 188.608703][ T5873] cdc_wdm 4-1:1.0: skipping garbage [ 188.636935][ T5873] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 188.642900][ T5873] cdc_wdm 4-1:1.0: Unknown control protocol [ 189.655688][ T172] usb 4-1: USB disconnect, device number 9 [ 190.273523][ T6745] bridge1: entered promiscuous mode [ 190.278930][ T6745] bridge1: entered allmulticast mode [ 191.573753][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 191.579929][ T5083] Bluetooth: hci3: command 0x0406 tx timeout [ 191.586029][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 191.592120][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 194.452126][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.458926][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.073011][ T6765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.187828][ T5836] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 198.223165][ T5836] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 198.242206][ T5836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.259545][ T5836] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 198.269602][ T5836] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.285738][ T5836] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.295461][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.304597][ T5836] usb 2-1: Product: syz [ 198.308849][ T5836] usb 2-1: Manufacturer: syz [ 198.428935][ T5836] cdc_wdm 2-1:1.0: skipping garbage [ 198.515955][ T5836] cdc_wdm 2-1:1.0: skipping garbage [ 198.543628][ T5836] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 198.549582][ T5836] cdc_wdm 2-1:1.0: Unknown control protocol [ 198.702883][ T5836] usb 2-1: USB disconnect, device number 6 [ 203.604802][ T6815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.728247][ T172] IPVS: starting estimator thread 0... [ 206.123660][ T6835] IPVS: using max 18 ests per chain, 43200 per kthread [ 208.720924][ T6851] ubi16: attaching mtd0 [ 208.794399][ T6851] ubi16: scanning is finished [ 208.848437][ T6851] ubi16: empty MTD device detected [ 209.433815][ T6857] capability: warning: `syz.3.257' uses deprecated v2 capabilities in a way that may be insecure [ 210.283874][ T6853] netlink: 'syz.3.257': attribute type 21 has an invalid length. [ 210.291665][ T6853] netlink: 128 bytes leftover after parsing attributes in process `syz.3.257'. [ 210.930024][ T6853] netlink: 3 bytes leftover after parsing attributes in process `syz.3.257'. [ 211.183849][ T6851] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 211.196272][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.261'. [ 211.264560][ T5777] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 214.965573][ T6900] ref_ctr increment failed for inode: 0x1bf offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802488af80 [ 215.092892][ T5777] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 215.129806][ T6900] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.203201][ T5873] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 215.943234][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 215.975905][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.993322][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.003838][ T5873] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 216.013559][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.076976][ T5873] usb 1-1: config 0 descriptor?? [ 216.705797][ T5873] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 216.721250][ T5873] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 217.573132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 217.723140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 217.903924][ T6922] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 217.953128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 217.973137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 218.033126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 218.207895][ T5873] ft260 0003:0403:6030.0001: failed to retrieve chip version [ 218.379102][ T5873] ft260: probe of 0003:0403:6030.0001 failed with error -71 [ 218.391958][ T5873] usb 1-1: USB disconnect, device number 7 [ 218.433478][ T6929] syz.0.281[6929]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 218.877693][ T6931] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 218.992034][ T5777] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 222.937464][ T5777] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 224.236978][ T6987] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.296'. [ 224.264171][ T6987] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.296'. [ 224.399135][ T6995] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 225.087720][ T6995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.133974][ T6997] bond1: entered promiscuous mode [ 225.139197][ T6997] bond1: entered allmulticast mode [ 225.198099][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 225.331263][ T7007] kvm: pic: non byte write [ 226.447597][ T5777] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 228.501195][ T7034] sctp: failed to load transform for md5: -2 [ 231.039162][ T5777] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 231.159808][ T7065] netlink: 128 bytes leftover after parsing attributes in process `syz.2.315'. [ 231.168943][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.315'. [ 232.195686][ T7072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.118785][ T7117] kvm: pic: non byte write [ 237.418585][ T7121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.135958][ T7131] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 240.435318][ T7145] IPv6: NLM_F_CREATE should be specified when creating new route [ 243.357632][ T5777] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 243.488901][ T7163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.281979][ T7176] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 248.466989][ T7206] binder: BINDER_SET_CONTEXT_MGR already set [ 248.497475][ T7206] binder: 7204:7206 ioctl 4018620d 200000004a80 returned -16 [ 248.931988][ T5777] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 249.869990][ T7229] netlink: 128 bytes leftover after parsing attributes in process `syz.1.357'. [ 249.879100][ T7229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.357'. [ 250.103596][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 250.345161][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 250.397453][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.475125][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.573700][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 250.646854][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.717912][ T9] usb 4-1: config 0 descriptor?? [ 251.183493][ T9] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 251.190707][ T9] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 251.538954][ T9] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 251.982372][ T9] ft260 0003:0403:6030.0002: failed to retrieve system status [ 252.006526][ T9] ft260: probe of 0003:0403:6030.0002 failed with error -32 [ 252.340855][ T7255] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.530782][ T7261] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 252.537455][ T7261] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 252.546815][ T7261] vhci_hcd vhci_hcd.0: Device attached [ 252.753774][ T5836] vhci_hcd: vhci_device speed not set [ 252.863610][ T5836] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 252.947997][ T7262] vhci_hcd: connection closed [ 252.962105][ T7263] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 253.121211][ T11] vhci_hcd: stop threads [ 253.194766][ T11] vhci_hcd: release socket [ 253.291123][ T11] vhci_hcd: disconnect device [ 253.952189][ T172] usb 4-1: USB disconnect, device number 10 [ 254.654628][ T7275] netlink: 128 bytes leftover after parsing attributes in process `syz.0.369'. [ 254.663771][ T7275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.369'. [ 255.897192][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.905550][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.378054][ T5777] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 258.124780][ T5836] vhci_hcd: vhci_device speed not set [ 258.736479][ T7307] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 258.743146][ T7307] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 258.751060][ T7307] vhci_hcd vhci_hcd.0: Device attached [ 258.997126][ T5776] vhci_hcd: vhci_device speed not set [ 259.011588][ T7308] vhci_hcd: connection closed [ 259.024706][ T11] vhci_hcd: stop threads [ 259.516744][ T11] vhci_hcd: release socket [ 259.523271][ T11] vhci_hcd: disconnect device [ 259.533386][ T5776] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 259.693816][ T5776] usb 33-1: enqueue for inactive port 0 [ 259.953622][ T5776] vhci_hcd: vhci_device speed not set [ 260.201591][ T7319] netlink: 128 bytes leftover after parsing attributes in process `syz.1.380'. [ 260.211155][ T7319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.380'. [ 262.043675][ T5777] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 263.929105][ T7362] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 263.935779][ T7362] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 263.943827][ T7362] vhci_hcd vhci_hcd.0: Device attached [ 264.034038][ T7363] vhci_hcd: connection closed [ 264.038942][ T1144] vhci_hcd: stop threads [ 264.101866][ T1144] vhci_hcd: release socket [ 264.174675][ T1144] vhci_hcd: disconnect device [ 264.184849][ T5811] vhci_hcd: vhci_device speed not set [ 264.945556][ T7370] netlink: 128 bytes leftover after parsing attributes in process `syz.2.397'. [ 264.954751][ T7370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.397'. [ 266.884267][ T7381] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 269.184011][ T5777] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 270.094284][ T7401] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 270.100963][ T7401] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 270.108834][ T7401] vhci_hcd vhci_hcd.0: Device attached [ 270.142089][ T7402] usbip_core: unknown command [ 270.197424][ T7402] vhci_hcd: unknown pdu 3868514402 [ 270.259307][ T7402] usbip_core: unknown command [ 270.303466][ T11] vhci_hcd: stop threads [ 270.316669][ T11] vhci_hcd: release socket [ 270.368735][ T11] vhci_hcd: disconnect device [ 270.404039][ T9] vhci_hcd: vhci_device speed not set [ 271.537352][ T7407] netlink: 128 bytes leftover after parsing attributes in process `syz.0.406'. [ 271.546752][ T7407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.406'. [ 272.797142][ T7424] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 274.240989][ T7420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.563377][ T5777] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 275.712962][ T7448] netlink: 128 bytes leftover after parsing attributes in process `syz.1.416'. [ 275.722105][ T7448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.416'. [ 277.175664][ T7462] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 278.896291][ T7465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.929299][ T5777] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 282.474919][ T5777] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 283.090351][ T7527] netlink: 60 bytes leftover after parsing attributes in process `syz.1.442'. [ 287.433389][ T5777] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 291.894222][ T7601] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 294.138456][ T7614] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 294.145127][ T7614] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 294.154455][ T7614] vhci_hcd vhci_hcd.0: Device attached [ 294.363909][ T5811] vhci_hcd: vhci_device speed not set [ 295.381295][ T7627] usbip_core: unknown command [ 295.752493][ T7627] vhci_hcd: unknown pdu 3868514402 [ 295.759119][ T7627] usbip_core: unknown command [ 295.765495][ T48] vhci_hcd: stop threads [ 295.769773][ T48] vhci_hcd: release socket [ 295.806379][ T48] vhci_hcd: disconnect device [ 295.873255][ T5811] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 295.880805][ T5811] usb 39-1: enqueue for inactive port 0 [ 295.963407][ T5811] vhci_hcd: vhci_device speed not set [ 296.744559][ T7644] netlink: 'syz.2.470': attribute type 4 has an invalid length. [ 297.234953][ T7644] syz.2.470 (7644) used greatest stack depth: 20184 bytes left [ 298.161485][ T7654] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 298.562109][ T7658] Zero length message leads to an empty skb [ 301.885046][ T7685] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 304.228633][ T7700] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 304.653320][ T5777] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 306.512249][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 310.166427][ T7752] veth0_macvtap: left promiscuous mode [ 311.396507][ T7761] sched: RT throttling activated [ 311.403840][ T5777] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 311.570118][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 314.713280][ T5777] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 315.580328][ T7831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.353174][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 316.494094][ T27] audit: type=1326 audit(1784092025.193:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830bd9de59 code=0x7ffc0000 [ 316.611005][ T23] usb 3-1: device descriptor read/64, error -71 [ 316.677196][ T7846] netlink: 756 bytes leftover after parsing attributes in process `syz.0.536'. [ 316.690628][ T27] audit: type=1326 audit(1784092025.193:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830bd9de59 code=0x7ffc0000 [ 316.839170][ T27] audit: type=1326 audit(1784092025.193:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830bd9de59 code=0x7ffc0000 [ 316.991076][ T27] audit: type=1326 audit(1784092025.193:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830bd9de59 code=0x7ffc0000 [ 317.024660][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 317.177286][ T27] audit: type=1326 audit(1784092025.193:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830bd9de59 code=0x7ffc0000 [ 317.203219][ T23] usb 3-1: device descriptor read/64, error -71 [ 317.329785][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.336216][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.354137][ T23] usb usb3-port1: attempt power cycle [ 317.839293][ T27] audit: type=1326 audit(1784092025.193:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f830bd9de59 code=0x7ffc0000 [ 318.102795][ T27] audit: type=1326 audit(1784092025.203:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830bd9de59 code=0x7ffc0000 [ 318.128646][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 318.205507][ T23] usb 3-1: device descriptor read/8, error -71 [ 318.334096][ T27] audit: type=1326 audit(1784092025.203:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830bd9de59 code=0x7ffc0000 [ 318.503301][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 318.545630][ T23] usb 3-1: device descriptor read/8, error -71 [ 318.563799][ T27] audit: type=1326 audit(1784092025.203:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830bd9de59 code=0x7ffc0000 [ 318.733982][ T23] usb usb3-port1: unable to enumerate USB device [ 319.246124][ T27] audit: type=1326 audit(1784092025.203:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f830bd9de59 code=0x7ffc0000 [ 319.513220][ T5829] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 319.695480][ T5829] usb 4-1: config 8 has an invalid interface number: 212 but max is 1 [ 319.710786][ T5829] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 319.725628][ T5829] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 319.737383][ T5829] usb 4-1: config 8 has no interface number 0 [ 319.743848][ T5829] usb 4-1: config 8 interface 212 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.757420][ T5829] usb 4-1: config 8 interface 212 has no altsetting 0 [ 319.767269][ T5829] usb 4-1: New USB device found, idVendor=19d2, idProduct=7fc1, bcdDevice=e8.57 [ 319.776712][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.787298][ T5829] usb 4-1: Product: syz [ 319.791575][ T5829] usb 4-1: Manufacturer: syz [ 319.800775][ T5829] usb 4-1: SerialNumber: syz [ 319.843124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 320.583907][ T7874] netlink: 36 bytes leftover after parsing attributes in process `syz.0.544'. [ 320.597890][ T7874] ------------[ cut here ]------------ [ 320.603544][ T7874] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 320.617189][ T7874] WARNING: CPU: 0 PID: 7874 at net/sched/cls_u32.c:855 u32_change+0x1ce8/0x2690 [ 320.626458][ T7874] Modules linked in: [ 320.630394][ T7874] CPU: 0 PID: 7874 Comm: syz.0.544 Not tainted syzkaller #0 [ 320.637790][ T7874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 320.648029][ T7874] RIP: 0010:u32_change+0x1ce8/0x2690 [ 320.653411][ T7874] Code: f8 eb 59 e8 aa 7c d2 f8 c6 05 89 8a c2 05 01 b9 10 00 00 00 48 c7 c7 60 06 c8 8b 4c 89 fe 48 c7 c2 e0 06 c8 8b e8 88 55 9c f8 <0f> 0b e9 1f f0 ff ff e8 7c 7c d2 f8 eb 24 e8 75 7c d2 f8 c6 05 16 [ 320.673208][ T7874] RSP: 0018:ffffc900034c6d60 EFLAGS: 00010246 [ 320.679304][ T7874] RAX: ef184dfd868ed900 RBX: ffff88805da63800 RCX: 0000000000080000 [ 320.687534][ T7874] RDX: ffffc9000cc4a000 RSI: 0000000000008c9a RDI: 0000000000008c9b [ 320.696063][ T7874] RBP: ffffc900034c6ef8 R08: ffffc900034c6967 R09: 1ffff92000698d2c [ 320.704277][ T7874] R10: dffffc0000000000 R11: fffff52000698d2d R12: 1ffff92000698dbc [ 320.712283][ T7874] R13: ffff88805da600e8 R14: ffff88801dfc1dc0 R15: 0000000000000020 [ 320.720360][ T7874] FS: 00007f830cc336c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 320.729387][ T7874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.736054][ T7874] CR2: 0000001b2d823ffc CR3: 00000000264bf000 CR4: 00000000003506f0 [ 320.744138][ T7874] Call Trace: [ 320.747466][ T7874] [ 320.750473][ T7874] ? u32_get+0x370/0x370 [ 320.754964][ T7874] tc_new_tfilter+0x1109/0x1820 [ 320.759950][ T7874] ? tcf_proto_signal_destroying+0x240/0x240 [ 320.766848][ T7874] ? rcu_read_unlock+0x8c/0xa0 [ 320.771742][ T7874] ? tcf_proto_signal_destroying+0x240/0x240 [ 320.778032][ T7874] ? tcf_proto_signal_destroying+0x240/0x240 [ 320.784281][ T7874] rtnetlink_rcv_msg+0x892/0xf90 [ 320.789323][ T7874] ? rtnetlink_rcv_msg+0x220/0xf90 [ 320.794649][ T7874] ? rtnetlink_bind+0x80/0x80 [ 320.799415][ T7874] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 320.805553][ T7874] ? lock_chain_count+0x20/0x20 [ 320.810549][ T7874] ? __local_bh_enable_ip+0x13a/0x1c0 [ 320.816170][ T7874] ? lockdep_hardirqs_on+0x98/0x150 [ 320.821448][ T7874] ? __local_bh_enable_ip+0x13a/0x1c0 [ 320.827027][ T7874] ? _local_bh_enable+0xa0/0xa0 [ 320.831980][ T7874] ? __dev_queue_xmit+0x275/0x3630 [ 320.837303][ T7874] ? __dev_queue_xmit+0x1bc2/0x3630 [ 320.842603][ T7874] ? __dev_queue_xmit+0x275/0x3630 [ 320.848491][ T7874] ? ref_tracker_free+0x686/0x830 [ 320.853748][ T7874] netlink_rcv_skb+0x235/0x4c0 [ 320.858612][ T7874] ? rtnetlink_bind+0x80/0x80 [ 320.863403][ T7874] ? netlink_ack+0x1160/0x1160 [ 320.868295][ T7874] ? __lock_acquire+0x7d80/0x7d80 [ 320.873534][ T7874] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.878857][ T7874] netlink_unicast+0x7b1/0x930 [ 320.883777][ T7874] netlink_sendmsg+0x8d0/0xbf0 [ 320.888667][ T7874] ? netlink_getsockopt+0x590/0x590 [ 320.894081][ T7874] ? apparmor_socket_sendmsg+0x8e/0x330 [ 320.899732][ T7874] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 320.905278][ T7874] ? security_socket_sendmsg+0x80/0xa0 [ 320.910839][ T7874] ? netlink_getsockopt+0x590/0x590 [ 320.916285][ T7874] ____sys_sendmsg+0x61b/0x980 [ 320.921183][ T7874] ? __asan_memset+0x22/0x40 [ 320.925988][ T7874] ? __sys_sendmsg_sock+0x30/0x30 [ 320.931238][ T7874] ? __import_iovec+0x5f2/0x850 [ 320.936372][ T7874] ? import_iovec+0x73/0xa0 [ 320.940950][ T7874] ___sys_sendmsg+0x2a6/0x360 [ 320.945751][ T7874] ? preempt_schedule+0xc0/0xd0 [ 320.950670][ T7874] ? __sys_sendmsg+0x2b0/0x2b0 [ 320.955726][ T7874] __sys_sendmmsg+0x2ca/0x510 [ 320.960526][ T7874] ? __ia32_sys_sendmsg+0x90/0x90 [ 320.965702][ T7874] ? __ia32_sys_get_robust_list+0x110/0x110 [ 320.971688][ T7874] ? __fdget+0x192/0x210 [ 320.976100][ T7874] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 320.982178][ T7874] ? lock_chain_count+0x20/0x20 [ 320.987170][ T7874] __x64_sys_sendmmsg+0xa0/0xb0 [ 320.992099][ T7874] do_syscall_64+0x55/0xb0 [ 320.996704][ T7874] ? clear_bhb_loop+0x40/0x90 [ 321.001476][ T7874] ? clear_bhb_loop+0x40/0x90 [ 321.006277][ T7874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.012243][ T7874] RIP: 0033:0x7f830bd9de59 [ 321.016895][ T7874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.036721][ T7874] RSP: 002b:00007f830cc33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 321.045321][ T7874] RAX: ffffffffffffffda RBX: 00007f830c025fa0 RCX: 00007f830bd9de59 [ 321.053500][ T7874] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 321.061541][ T7874] RBP: 00007f830be33e6f R08: 0000000000000000 R09: 0000000000000000 [ 321.069633][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.077779][ T7874] R13: 00007f830c026038 R14: 00007f830c025fa0 R15: 00007ffd48b3f3e8 [ 321.086034][ T7874] [ 321.089096][ T7874] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 321.096386][ T7874] CPU: 0 PID: 7874 Comm: syz.0.544 Not tainted syzkaller #0 [ 321.103684][ T7874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 321.113740][ T7874] Call Trace: [ 321.117032][ T7874] [ 321.119962][ T7874] dump_stack_lvl+0x18c/0x250 [ 321.124652][ T7874] ? show_regs_print_info+0x20/0x20 [ 321.129878][ T7874] ? load_image+0x420/0x420 [ 321.134417][ T7874] panic+0x2ca/0x720 [ 321.138339][ T7874] ? bpf_jit_dump+0xd0/0xd0 [ 321.142875][ T7874] __warn+0x2e0/0x470 [ 321.146855][ T7874] ? u32_change+0x1ce8/0x2690 [ 321.151550][ T7874] ? u32_change+0x1ce8/0x2690 [ 321.156252][ T7874] report_bug+0x2be/0x4f0 [ 321.160599][ T7874] ? u32_change+0x1ce8/0x2690 [ 321.165294][ T7874] ? u32_change+0x1ce8/0x2690 [ 321.169977][ T7874] ? u32_change+0x1cea/0x2690 [ 321.174667][ T7874] handle_bug+0xcf/0x120 [ 321.178925][ T7874] exc_invalid_op+0x1a/0x50 [ 321.183417][ T7874] asm_exc_invalid_op+0x1a/0x20 [ 321.188286][ T7874] RIP: 0010:u32_change+0x1ce8/0x2690 [ 321.193576][ T7874] Code: f8 eb 59 e8 aa 7c d2 f8 c6 05 89 8a c2 05 01 b9 10 00 00 00 48 c7 c7 60 06 c8 8b 4c 89 fe 48 c7 c2 e0 06 c8 8b e8 88 55 9c f8 <0f> 0b e9 1f f0 ff ff e8 7c 7c d2 f8 eb 24 e8 75 7c d2 f8 c6 05 16 [ 321.213962][ T7874] RSP: 0018:ffffc900034c6d60 EFLAGS: 00010246 [ 321.220058][ T7874] RAX: ef184dfd868ed900 RBX: ffff88805da63800 RCX: 0000000000080000 [ 321.228044][ T7874] RDX: ffffc9000cc4a000 RSI: 0000000000008c9a RDI: 0000000000008c9b [ 321.236038][ T7874] RBP: ffffc900034c6ef8 R08: ffffc900034c6967 R09: 1ffff92000698d2c [ 321.244977][ T7874] R10: dffffc0000000000 R11: fffff52000698d2d R12: 1ffff92000698dbc [ 321.252956][ T7874] R13: ffff88805da600e8 R14: ffff88801dfc1dc0 R15: 0000000000000020 [ 321.260972][ T7874] ? u32_get+0x370/0x370 [ 321.265271][ T7874] tc_new_tfilter+0x1109/0x1820 [ 321.270176][ T7874] ? tcf_proto_signal_destroying+0x240/0x240 [ 321.276178][ T7874] ? rcu_read_unlock+0x8c/0xa0 [ 321.280940][ T7874] ? tcf_proto_signal_destroying+0x240/0x240 [ 321.286925][ T7874] ? tcf_proto_signal_destroying+0x240/0x240 [ 321.292909][ T7874] rtnetlink_rcv_msg+0x892/0xf90 [ 321.297850][ T7874] ? rtnetlink_rcv_msg+0x220/0xf90 [ 321.302964][ T7874] ? rtnetlink_bind+0x80/0x80 [ 321.307657][ T7874] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 321.313639][ T7874] ? lock_chain_count+0x20/0x20 [ 321.318511][ T7874] ? __local_bh_enable_ip+0x13a/0x1c0 [ 321.323936][ T7874] ? lockdep_hardirqs_on+0x98/0x150 [ 321.329163][ T7874] ? __local_bh_enable_ip+0x13a/0x1c0 [ 321.334552][ T7874] ? _local_bh_enable+0xa0/0xa0 [ 321.339419][ T7874] ? __dev_queue_xmit+0x275/0x3630 [ 321.344557][ T7874] ? __dev_queue_xmit+0x1bc2/0x3630 [ 321.349772][ T7874] ? __dev_queue_xmit+0x275/0x3630 [ 321.354924][ T7874] ? ref_tracker_free+0x686/0x830 [ 321.359962][ T7874] netlink_rcv_skb+0x235/0x4c0 [ 321.364752][ T7874] ? rtnetlink_bind+0x80/0x80 [ 321.369421][ T7874] ? netlink_ack+0x1160/0x1160 [ 321.374206][ T7874] ? __lock_acquire+0x7d80/0x7d80 [ 321.379239][ T7874] ? netlink_deliver_tap+0x2e/0x1b0 [ 321.384465][ T7874] netlink_unicast+0x7b1/0x930 [ 321.389261][ T7874] netlink_sendmsg+0x8d0/0xbf0 [ 321.394049][ T7874] ? netlink_getsockopt+0x590/0x590 [ 321.399273][ T7874] ? apparmor_socket_sendmsg+0x8e/0x330 [ 321.404832][ T7874] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 321.410143][ T7874] ? security_socket_sendmsg+0x80/0xa0 [ 321.415621][ T7874] ? netlink_getsockopt+0x590/0x590 [ 321.420835][ T7874] ____sys_sendmsg+0x61b/0x980 [ 321.425617][ T7874] ? __asan_memset+0x22/0x40 [ 321.430227][ T7874] ? __sys_sendmsg_sock+0x30/0x30 [ 321.435281][ T7874] ? __import_iovec+0x5f2/0x850 [ 321.440159][ T7874] ? import_iovec+0x73/0xa0 [ 321.444687][ T7874] ___sys_sendmsg+0x2a6/0x360 [ 321.449374][ T7874] ? preempt_schedule+0xc0/0xd0 [ 321.454221][ T7874] ? __sys_sendmsg+0x2b0/0x2b0 [ 321.459060][ T7874] __sys_sendmmsg+0x2ca/0x510 [ 321.463743][ T7874] ? __ia32_sys_sendmsg+0x90/0x90 [ 321.468791][ T7874] ? __ia32_sys_get_robust_list+0x110/0x110 [ 321.474717][ T7874] ? __fdget+0x192/0x210 [ 321.478981][ T7874] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 321.484972][ T7874] ? lock_chain_count+0x20/0x20 [ 321.489844][ T7874] __x64_sys_sendmmsg+0xa0/0xb0 [ 321.494720][ T7874] do_syscall_64+0x55/0xb0 [ 321.499166][ T7874] ? clear_bhb_loop+0x40/0x90 [ 321.503860][ T7874] ? clear_bhb_loop+0x40/0x90 [ 321.508536][ T7874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.514442][ T7874] RIP: 0033:0x7f830bd9de59 [ 321.518856][ T7874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.538463][ T7874] RSP: 002b:00007f830cc33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 321.546864][ T7874] RAX: ffffffffffffffda RBX: 00007f830c025fa0 RCX: 00007f830bd9de59 [ 321.554834][ T7874] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 321.562807][ T7874] RBP: 00007f830be33e6f R08: 0000000000000000 R09: 0000000000000000 [ 321.570787][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.578763][ T7874] R13: 00007f830c026038 R14: 00007f830c025fa0 R15: 00007ffd48b3f3e8 [ 321.586734][ T7874] [ 321.590008][ T7874] Kernel Offset: disabled [ 321.594320][ T7874] Rebooting in 86400 seconds..