last executing test programs: 6.783903411s ago: executing program 1 (id=223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffffed, 0x0, 0x1000000000001, 0x4000000000000, 0x4002004c8, 0x1007, 0x1, 0xc595, 0x5, 0x1, 0x3ff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.567947711s ago: executing program 1 (id=226): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffd}, {0x0, 0x10}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x54) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) 6.514521761s ago: executing program 1 (id=227): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x4f, 0xfffffffffffffffc, &(0x7f0000001180)="14d11edd8503935b5737dc3e7b1be6dd6647926cc69165be53cc0d0f130e0177ccfb6c2f81be802eb36cc9b5d0c8e89cf0a0906d127d1475324e5cb7929a5cd23d44e61aa4d223a0a091342ce32258"}) 6.298933251s ago: executing program 4 (id=230): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xa8) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) 6.172992017s ago: executing program 4 (id=231): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000a0000000800000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f0000000200)="203343dd", 0x0}, 0x20) 6.003628606s ago: executing program 4 (id=232): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x11f4, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x11c4, 0x2, [@TCA_TCINDEX_ACT={0x11c0, 0x7, [@m_xt={0x1ac, 0x17, 0x0, 0x0, {{0x7}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x5d, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3, "4e5a7cba01e1f38f237aaa59376d75d9625e58ed910ba6e05100142b2f2e7b6f302b868c0401699f8277d8c193f3c7c09a5e9c"}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x148, 0x16, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x209}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcd9}]}, {0xe1, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd007f06888e398a5b1ebc9d8bc2a03083a899050d24dab394fce9a6391ce9085db859988a09d21d1026bb3980d2593302bbf456aa01e22d4e64be134fbd8c7653ca89413645fb68d2776dd5a9ff23ed61a15139d82f7de1aee3b13c48f18cb8dc7c39dd9c924b24b96d151107ca9811f7b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xec8, 0x1e, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xbc0a, 0xf, 0x2, 0x80, 0x3}, 0x3, 0x5, [{0x8, 0xbe4e, 0x7, 0x80000001, 0x9, 0xd}, {0x0, 0x1, 0x0, 0x0, 0x4, 0x9}, {0xfffffffb, 0xffffffff, 0x6, 0x40, 0x1, 0x1}, {0x401, 0x7, 0x0, 0x7, 0x8, 0xd}, {0x7, 0xfffffbff, 0xffffffff, 0x0, 0x3ff, 0x9}]}, [{0x0, 0x1, 0xffff, 0x7, 0xffffff50, 0x7}, {0x6, 0x5, 0x2, 0x401, 0xf, 0xd}, {0x8, 0x40, 0x1, 0x8, 0x0, 0x5}, {0x3, 0xc8, 0x2, 0x2, 0xa, 0xfff}, {0x3, 0xffffffff, 0x7, 0x9, 0x7, 0xbf16}, {0x3ff, 0xfffffffc, 0x7, 0x9, 0x2, 0x7}, {0x0, 0x1ff, 0x8, 0x4, 0x6, 0x5}, {0x6, 0x4, 0x9, 0x0, 0x9}, {0x7, 0x8001, 0x1000, 0x8, 0x9, 0x7ff}, {0x2, 0x5, 0x9, 0x802, 0x4, 0x5}, {0x8, 0xf, 0x3, 0x8, 0x8, 0xaa6}, {0x9, 0xe, 0x4, 0xf, 0xbec4, 0xf}, {0xfffffff7, 0x3, 0x8, 0x0, 0xffff, 0x2}, {0x98, 0x4, 0x4, 0x89, 0x8, 0x6}, {0x0, 0x10, 0xcfd7, 0x100, 0x7fffffff}, {0x8, 0x1000, 0x1, 0xd, 0x1, 0xa589}, {0x6, 0x3, 0x8, 0x5, 0x9, 0x2}, {0x1, 0x80, 0x9, 0x80000001, 0x9, 0x3}, {0x4, 0x7, 0xc, 0x200, 0x4}, {0x0, 0x400, 0x3, 0xdd74, 0x1}, {0x3, 0x6, 0x8, 0xffff8543, 0x3, 0xd2c}, {0x80, 0xffffffff, 0x101, 0x5, 0x7f, 0x300}, {0x4, 0x10, 0x8f, 0x4, 0xd1, 0x1}, {0xb6e0, 0xb9ba, 0x3, 0x17, 0x3, 0x7}, {0x8, 0x0, 0x7, 0x6, 0x7, 0xfffffffe}, {0x8, 0x200, 0xef0, 0x0, 0x6, 0xb4}, {0xae6f, 0x4, 0x2, 0x3, 0x7, 0x1}, {0x34, 0xffff, 0x2, 0x7, 0x2, 0x7fffffff}, {0x6, 0x10, 0x3, 0x6, 0x10000, 0x2}, {0x0, 0x8, 0xfffff34d, 0x80000000, 0xff, 0xfffffffb}, {0x94a, 0x5, 0x9, 0x0, 0x7, 0x6c241156}, {0x8, 0x5, 0x3, 0x5, 0x80000001, 0x1}, {0xffff, 0x4791, 0x5, 0x9, 0xa7, 0x6}, {0x0, 0x7, 0x0, 0xfd, 0x9, 0x6}, {0x400, 0xc577, 0x1000, 0x1, 0x3, 0x8}, {0xdaa5, 0x2, 0xfffffff9, 0x158, 0x6, 0x1d2}, {0x2d, 0x5, 0x400, 0x4, 0x2, 0x9}, {0xad08, 0x0, 0xa, 0x2, 0x36b, 0x63}, {0x6, 0x2, 0xb8, 0x2, 0x7, 0x6}, {0xd4e4, 0x2, 0x6, 0x8001, 0x8, 0x8}, {0x3, 0x4, 0x3ff, 0x81, 0x3, 0x4}, {0x1, 0x1, 0x401, 0x9, 0x8, 0xd4da}, {0xffffff15, 0x7f96, 0xae7, 0x8, 0x80000000}, {0x482f, 0xffffffc5, 0x1, 0x3, 0x2, 0x1}, {0x17, 0x100, 0x9, 0x200, 0x1, 0x5}, {0x1, 0x3a88, 0x9, 0xb50d, 0x0, 0x10000}, {0x80, 0xfd2, 0x6, 0x8, 0x7, 0x4}, {0x3eca, 0x0, 0xa, 0x1ff, 0xab0}, {0x5, 0x8, 0xfffffffd, 0x2, 0xe04b, 0x80000000}, {0x10, 0xffffffff, 0x1ff, 0x1, 0x9b38, 0x2463}, {0x8, 0x3, 0xb, 0xffffff68, 0x370, 0x401}, {0x5, 0x8, 0x4, 0x7, 0x3, 0x4b}, {0x4, 0x9, 0x8, 0x1, 0x800, 0xfffffffe}, {0x7, 0xfffffff9, 0x7fff, 0x9, 0x800000, 0x3}, {0x4, 0x6, 0xf96f, 0x8, 0x5, 0x6}, {0x20c, 0x800, 0x8, 0xfffffffd, 0x7, 0x1}, {0x2, 0x101, 0x0, 0x2, 0xf9, 0x7fffffff}, {0x5, 0x47, 0x100, 0x40, 0x8, 0xe}, {0xfff, 0x3, 0x100, 0xdf9, 0x6, 0x4}, {0x1, 0x8001, 0xff, 0x4, 0xa, 0x3}, {0x101, 0x8, 0x979, 0x6d, 0x6, 0x6}, {0xf, 0x9, 0xfffffff7, 0x1, 0x4, 0x3ff}, {0x10, 0x1, 0x148, 0x2, 0x0, 0x14e7}, {0x4, 0x9, 0x3, 0x6, 0x1590, 0x7}, {0x0, 0x7, 0x3821, 0x5, 0x2, 0x5}, {0x2, 0x9, 0x1, 0x9, 0x28dbd359, 0x6}, {0x10000, 0xc29, 0x5, 0x5, 0x36b9, 0x7f}, {0x2, 0xdb7, 0x842, 0x4b, 0xfffffff8, 0x9}, {0xe, 0x101, 0x400, 0x7, 0x3, 0x7ff}, {0x5, 0x5, 0x9, 0xffffffff, 0x4, 0x2}, {0x40, 0x4, 0x5, 0x3, 0x8, 0x6}, {0x7ff, 0x10000, 0x2, 0xf281, 0x9, 0x8000}, {0x6, 0x14c800, 0x100, 0x8, 0xd, 0x3}, {0x3, 0x8000, 0x3, 0x5, 0x5, 0xc}, {0x5, 0x8, 0x8, 0x6, 0x3ff, 0x2}, {0x5, 0x80000000, 0x1, 0x8, 0x1, 0xdea}, {0x926b, 0x80000000, 0x8, 0x1, 0x2, 0x10001}, {0x6, 0x2, 0x0, 0x7, 0x5, 0x10001}, {0x5, 0xfffffffd, 0x401, 0xa, 0x800, 0x7fff}, {0xa0, 0x7fff, 0x4, 0x7, 0xffffffff, 0x401}, {0xd7, 0xfc, 0x8, 0x4, 0x3ff, 0xc33}, {0x6, 0x19, 0x2, 0x2, 0x7, 0x8001}, {0x7f, 0xffff9dcb, 0x9, 0x1, 0x24000000, 0x7}, {0x5, 0x8, 0x9, 0x5, 0x80000001, 0x6}, {0x2, 0xaebf, 0x6, 0x7a, 0x8, 0x9}, {0x9e7, 0x3ff, 0x1, 0x2, 0x7fffffff, 0x3}, {0x2, 0x2, 0x1, 0x4, 0x0, 0xd5}, {0x6bd, 0x80, 0x7, 0x1, 0xffff, 0xfffffff1}, {0x7, 0x7ff, 0x7fff, 0x6, 0x7, 0xff}, {0x4800, 0x1, 0x2, 0xa131, 0x848, 0x6}, {0x5, 0x6, 0x2, 0x3, 0xffff, 0x3}, {0x6, 0x800, 0x8ce, 0x2, 0x1}, {0x9, 0xfffffff9, 0x1, 0x2, 0x20, 0x38000000}, {0x0, 0xffffffff, 0x7bf, 0x2, 0x5, 0x2}, {0x71d, 0x9, 0x7f, 0x79, 0x7, 0xfff}, {0x6, 0x0, 0x7, 0x4, 0xfffffffe, 0x9bc}, {0x9, 0xfffffffb, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x9, 0x7, 0xf, 0xc}, {0x9, 0xf, 0x4, 0x10, 0x8, 0x215}, {0xa944, 0x86, 0x51b, 0x10000, 0x80000000, 0x3}, {0x8, 0x0, 0x4, 0x7, 0xffffffff, 0x5165}, {0x4, 0x1, 0x4, 0x1, 0x9765}, {0x0, 0x6, 0x6, 0x8, 0x2, 0x2}, {0x3877ae68, 0x4, 0x9, 0xf, 0x2, 0x9}, {0x6, 0x7, 0xc, 0xfff, 0xdc, 0x3}, {0x8, 0x7fff, 0x10, 0xfffffe00, 0xd6, 0x8}, {0x100, 0x8, 0x5d7, 0xe8878000, 0x7, 0x9}, {0x3, 0x4, 0x83c6, 0x0, 0x1000, 0x7}, {0x401, 0x5, 0x9, 0x1186, 0xc0, 0x7f}, {0x7ff, 0xb3, 0x4, 0x0, 0xf, 0xd64}, {0x0, 0x7, 0x3, 0x7, 0x400, 0xffffffff}, {0x0, 0x6, 0x7fffffff, 0x8, 0x7, 0x9}, {0x8, 0x2, 0x101, 0x0, 0x7f}, {0x9, 0x4662, 0x70, 0x9, 0xce, 0x10001}, {0x4, 0xa, 0x3, 0x0, 0xf, 0x5}, {0xcc, 0x8, 0x5137, 0x2, 0x2e9a, 0xaf}, {0x789c, 0x5, 0x2, 0x7ff, 0xb67, 0x4}, {0x0, 0x91f, 0xb0e, 0xffff, 0x2, 0xffffffff}, {0xc7a, 0x6, 0xffffffc5, 0x9, 0x4, 0x7fff}, {0x21, 0x0, 0x7, 0x4, 0x80, 0x2800}, {0x3, 0x9, 0x0, 0x80, 0x6, 0x2}, {0x1, 0xc5, 0x0, 0x3, 0x2, 0x3}, {0x6, 0x4, 0x7ff, 0x8, 0x4, 0xb}, {0x4, 0x0, 0x5, 0x7fff, 0x5, 0x9}, {0x9, 0x4, 0x10, 0x3, 0x0, 0x8}, {0x7fffffff, 0x6, 0x8, 0x7, 0x7, 0x2}, {0x3, 0x5b8, 0x5, 0x6, 0x3d67, 0x3}, {0x4, 0x0, 0x9, 0x5, 0x80000000, 0x1}], [{0x4}, {}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x6, 0x1}, {0x3}, {0x1}, {0x2}, {0x7}, {0x3}, {0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x501abeaffe19eb8}, {0x4}, {0x2}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x6}, {0x3}, {0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x8c8f22033c51199d}, {}, {0x4}, {0x5, 0xe909f12c5f33f997}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x2}, {0x7}, {}, {}, {0x3}, {0x2}, {0x3}, {0x5}, {0x2}, {0x4}, {0x654d41918ae72e00}, {0x4}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x2}, {0x4}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x11f4}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.922558091s ago: executing program 4 (id=233): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000a00)='\x00', 0xa89a5489e6a765d0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x21820, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRES16=r0]) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff2, 0x1, 0xda6, 0x3, 0xa7, 0x8, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x5, 0x9, 0xf, 0xb, 0x10, 0x57899e7f, 0x9, 0xb50, 0x4, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x3, 0x200, 0x0, 0x0, 0x7d, 0x964e, 0x2d5, 0x149, 0x1], [0x4b123e4b, 0xfffffff9, 0x2, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x7, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x9, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x8, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x3, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x2, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x6, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x7, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x5, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0xfffffff8, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x4, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000980)={{}, {0x7}, 0x8, 0x0, 0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000800)="4f525f1af43876e17212c725d35923e788274abfbc3207d86fc5f94a179acc7f5d19ba6274b3004b349db4b321e337448f320d8dd862f034108f6d6f518fe12880fb9f13cd631b58dff6e20a203fab759c7557a6d27bea867452c53877e06451131d5076f645fd01cf2347c158afb620920fda0360356e3e402f9142a4f8aa283a2e0965fab691bbb4c33d35eb15e809529f30caec66ad73705c8b152026d1497284be80c82a82f18185f03df9809755d4a5ab51", 0xb4, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0xaa}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendto(r1, &(0x7f0000000ac0)="d551856fbc3cc2d57c01a3496f3aa4a26170f812315b6dde0914f8624c59a3bc", 0x20, 0x80, &(0x7f0000000180)=@phonet={0x23, 0x0, 0x4, 0x18}, 0x80) socket$inet6(0xa, 0x1, 0x0) mq_open(0x0, 0x40, 0xa8, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x2c05) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000001200)={0x1, 0x1, 0x0, 0x1, 0x4}) 5.625563505s ago: executing program 1 (id=234): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffd}, {0x0, 0x10}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x54) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x2}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) 5.393889832s ago: executing program 1 (id=237): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) 4.178060116s ago: executing program 4 (id=253): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_secret(0x80000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r2, 0x0, r2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0xfffffffffffffffe, 0x3, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r5, &(0x7f0000000300)='1\x00', 0x2) ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) 3.379841998s ago: executing program 4 (id=258): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) sendto$isdn(0xffffffffffffffff, 0x0, 0x0, 0x4840, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000640)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.849435069s ago: executing program 3 (id=263): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0089061327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.760539423s ago: executing program 3 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000002400)=[{0xd28, 0x1, 0x8, "244df5680b8203b6b985638f2545f2ac042a9aee660edf5459c22ed1ed6026739f79e286a1f42ab62b2270f719c0ea01f4cfde2afa600b46d7d34e10f60c895126a9adf4a9885156ee2178974a935091e8c514514f31db8fcb6395a59a1710c7cff57d7f512eb909c22710e93086e706d2a3e4c1a121465944394844b45ed609c9fabb4edaf37a3df4d37a5ea7e027b1c5b22dd328957ae0b6f90667ae9f43322d694eebddddf7f23f1943855002a99e58c8402393d5a7dfd8d88cd1fcb86fe7aac690f8fcffa5b9dc3fdbb4822e588b7773ff35873a5ea7cc83b006d00e70987f313f1b9ba1b1b93ed3eb0362a138f2fba123982919b7aa914be8ba9c71a8d76f7045daafabfb4a50993005e0686440e9f97cc259b5350c86a0effdea17facf052b6772c96ea5fedb6b9497e591f51bd0e02ac86402d6f3fe7d0e856a69c6e3d49d89ba91e2fe519d5ac2186091766c178f274e81493af54a02f7e0b3e47c0a862bd7af9712e65f74595e8c63c91a45ebd081ad910d95f26192ead1daf401b015eb772f4b91bbacf26157d5d6d626eff439e238a6dd9ebce65fb960ae90ec490d5014589a24d107c8b66a587166ce85e9bffd332defeee0c3333d15ed629874fb3259217911d50a1eec22b3c205b3c2068bdbe9d0145de5536049af47bea81d4cffdc45b277e8c06249510d2d429cb3e606d27f40918bd250818d0a09512ed8a2727c81a38e44366deb7ca5e30556b03305ae54b19cc17f6a543a9d397676d1d18c873c30f02a873c6fe6cb1c21d0ebf78c1bc732ef62cbc92e71d461886c9fa5f04d28dc4c7e3b3ed55fb39603c041d27017322610ac1a16c63c91ed376d9bba0df833d185fff47bad911c26a5918034211a3dbe77663f21a22b4bed8a3cbabfcd5622a1bbc3c015d1890391c5f5f57ff316718f57d7927f41724ee25f274c98a22d8cc1f7348cdd5ff604f4fe21d50f21a1638a75b39c6a5e5c0470812e9e7a663f4f61e6f8b008d31c6e9bd4686a17e0f4fb42c06a19436731d612990f7dbdc2d9b6dd4a5152b8cdbef0906e6f6dd07ad305da2d579fb968b000ad7075c91d35f1af5c3783cbeb9306de0cb3f086a0e2950f564b6e1d0ff9bc785d53ed0176c3feaa5356559ebf4508bccc9202ee45d1c20f768f98f60aed75b7da8dba4f1c36a8b668e3a9a19eb431d4759a7b6840c888774194f60f872790fb243fdb2fb1184bc6dd225bfdb447cc1cfa5277569536d051e8069185956aaa7c34217597ab9c93e3ac647542aab63a11dce2a50d9ae996bb2477afc23d2456f36c58a8ca9308aea7548ea875ed4159d2df58cc3edcc0f1afd5fbed7e8fd540a9e97009a801e6d1397670d528f6c8ebbfce8ac7196efb13d05df6d95942f3a5f7629c857e558f0f408cfe6c5d7b9b3c07ac388904b79ffa7f947c0738b1722e6c817cb87cbee4d26d29ac34205523c121677cf55e891a681e9e4a1847ff29a8f440a427ebb9fa040f212b558c0932ad7f7e1115f48c52adcfbfb13ca9fe08f5507a74b04fee211674865f4ffa3f5cfba2fa7640a055efb6e848f4b6f9222bbe3b26a3721ddabc492c0586ca63fb03cc73007bef0e35606cfc629fa1c551eee50593712449e31c730042128ecdf57b35c79d040c6c23c663c5d30e2f3e711c8a9b9949814afee7117207a2b3ee989dd8edf72d997b3baa3ad5b700a8bf3c29d347094df4864bd4f4c234d5ef682b20f2664f7af13ec91c2490b0ddaff7cb2214d84a0a4486e6c51db48c21b6ef2bccf637bd589204716b019f976491ec9eedea1e67d48521a6e42cbc77c808e597a876226ba352c79e5f485ce3dd499f7eb22831a3951b70c5c869c90596fa211a1b9844c8a80e3fccaef546d08c4599f43b08bf198d8ed3b666088b191103f477bcf885bee9e280c9c126f1a2ddff0963ef5da8136f405dd5479e121fccbfa18c290acbee162a13006fcca07773a3da5db87b29c6ee7d66d2340bc053b83d600b5aaab198965f691aa52be98fda0998bb6a330f54575429a3cb7dcca97db0cdf3a2f1003514b1c213875e5306feb23a152898fd2cd25d4b93867018f713fd5d070846cd9981a489bd1b26ddc9c55a84d2d69d2687c5119cda5dffd0f425205aad0533f1bbef18df707d80422c3ce3f41382bf63906622250d2013552d40d97f2ef8bfca77331262e2989401b7644797bad8525f93754b54ad7098bfccb80540686972f7bc6aae896cd999c7bfdef03d14c013fbe14d2664cedbee82453ce9c0353142b5f8a2914572b1e59c072149b467a52979027666a0659c2e509dd6fd542d2410c42509ceca783d663c5c3813becb351d4a6f1602e40d047fedcbcdffad0c0b37f93bdce20ab98003cb718f613b6900aa252648e54d8b311ab249dfd548f5b60d2d8694f8aa1859b3c5c05f76d3f9b2de17a4a8328c7f5db363d9d161ad3de19b99781ce192ac0082d3b798d84f4bed0dd93ebdca87a6301c68ef57934f00089d3a2b943235633e22d3df2364917738a1cd3a3d3a16c682f087e5df2a7b91eb6fb6902ae15dcf48f5ca55d50015a9013fc9176cba5e37d75bc8d6a7cc72b8ad3fa2da84b31570d100499c7cafd1627c41bc0201f0954e8a8e26e876cd1b090af8d053735298d0d07a86e6d72988ad1f50a9897dc4382a9f6d5c651006e15dddc8951d543d0500adf8112de6767b075655b359407a9492e2076bd357592eda6479e6f37e55ce92024b4f791066f4e815ca5187caaf9870c10b1cdc7484d8f86185690f09c8af0fb222bc8f48e83837525f219cc7f2cef1b66bd392800103fc047dcc2dcfbb33fb4bfd2bd67dacbf66b80b6287f682b4c6b8c0d58cf4f9e3a9f69ea56f9e27e52cd21aab42f9f04eba3317f1927fbdd500e10acc508ff158346839d7e2ec004d9d25d5f785971940a329e89c89ee7575e34060ecdd5333071defcfd84abbf5787a5db4248e312b9f4955d3c767ec218e726fa2f46fbcd75dd6966efdac1ae06013cfcdbb62cb6be19ec96d883676995fb9e325a8c7bf5658806de9c8dd9ce0a7d1bea024c1aca7c1baaf3d5b0a68a8eb75996dc5ca3327dee4794d121d08cae66e2ca9c749c4956deeed5f5a341ae324a98185918c63d09c262acbc3f3190f224a555e133e2629eb7e21db87e075a92d4b3d02c0938c9d155c4816842a6b916b0c57f2c80ca53ecd39194eede230b3c9377b39c8f8d62ab9ca9eb2463e69003c34c9833165ed3063e4541bc5ee55ecb2164784648a1741e505c8609e868b29d52fb4a7ca2bc762ea0a127fdd7f14787faa5188afc8e74557213ec261b86a80227566141885b6a27ef42bc90e9615439ba996c5a47c22812ca7e790ff5b992185cc95438118d34e4e967863a93be631a7e20356b29b8d46fccc0d80feb218d368a8aeae7a7dc7d5005abf36013498fb177e2c8776cc8d1f606ef95217e0be7e18bd75e209427a05895b26354f140e9e1870fc52913d17e09f78e7beb3ce86b3b3f424086b68b5eb7dbb76d45441b7523ac1b7b2c423440886c946b7f9dc1e7baadb434f30a70908a46bb2fc70c5a4ff234d13c3c62065d31931b200426b38fe46cc82cab2d95fcb12ce95ef3910ed0270fe40e65fa6eac628c46abd2aceb604fb64390313ac734f793764e9fd6579591b8b9a87394a2dcb5fee88deadad3b4774cba87c5f2c75a6ab0f2da04a583b1e47da363ca00c7f9a4c7593d139acbefb6f6ec341079d6c713b5fbfd8237e186f2166d6619411092b82b7cf4f45953b33cfccb8fadc4ab5cde926b5a909ec288eb7a9089b8cceb1cef2ef299881bd2a107574325116a7f72d68b641c0ba04024df088606a51c619d7dc1fc924e269f46fb1e73db8b55da8f87e68e66ff52967e66d971acccf2bbf0d6beaa53eb2f1215e23f961dc7370cb05c23606a2c1628509f04448091964cee7ed1eb9c419788f8b6d50f7da0c8ab6d3c206910d345d4e5da8c751145616a9fbf13c9958e253200f4cc65c542486cfd5444aa0f29da078e44f3867f996a04989acc14de81468f7e465737e6394df89fa04793d75c1dd60047fef04717536562e7149c273dfb3587753115e67a18e3de27fa09158bf8e987011b7f227cc1fde527604bf5e5faea8ed9ed60ea18d5b74f4369437adcf590ebade205567c3c4900cef28e91761746d4b031dbe202143712fc31eb9382f9700c6b90b39d6cd382923d44f46401b5325871985cce1822514686d5483725fc89b9c51b43ef05342a3a5c58be8e4220dfdd08e1c46954a9600bf682b21a6734aec38dc4f80d8a8018f2b73bb881e8380e09ec76626524b93695842145408d82817a7fc6aa28818246a554ba9c544dcbb110252cccfbc7c0c0127b66711ee999aa55bd104792077698e569e8b019acebb1b22c0938898a09fa9eef45ebdbeadb9681b3279364484f9b2a22cb77980e0fadca6d102bab74ad40168fc0639fb84ccb6c97594f8be0d8c5565a7e95dbc26769393d54bba05d43f6e5889daeebdc4d907c479395e47ecba27d3e3be73e55a0ba18285879db493386b3c1c1cc9336f9c93b52539595e2da1ddbda556f0f2e5ed9270347d4d41733aaa648394286abf34c347eef0e760f38c51961f3ca4c8089afc6a680aaf1b3b09108dcc7b35f2d14a9bb47a97b7d263fb65f3af91c3a2649d5a62ad0fa19780a02ff8e1b57b422285cdd02727d07819646b45780c383672cd97c88f39"}], 0xd28}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.64051264s ago: executing program 3 (id=269): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x59) 2.53185138s ago: executing program 3 (id=270): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, 0x0, &(0x7f0000000040)) 2.498045744s ago: executing program 0 (id=272): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffd}, {0x0, 0x10}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x54) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x2}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) 2.497705144s ago: executing program 3 (id=273): r0 = syz_open_dev$video(0x0, 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) timer_create(0x3129c2dfde5bdfd7, &(0x7f0000000080)={0x0, 0x26}, &(0x7f00000000c0)) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000200)) r6 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) writev(r6, &(0x7f0000000140)=[{&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000001200)='\x00', 0x1}], 0x2) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb", 0x1b) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x6b929545a606890f) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r8, 0xc0405519, &(0x7f0000000200)={0x4, 0x2, 0x2c1af2a9, 0x40, 'syz0\x00', 0x2}) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000018000100ffff000100f1ffffffffffa20b48bd3a7cf0e7016c430638e6c57f16caef29a8a3832c80c0e84becff000000ffffe00000f0fb01000000d0330000000000000000a3bd33", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r10, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9]}, 0x0) sendmsg$key(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e00000090000000000000000020001000000000000000002000000000300050000000000020000000000"], 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) 2.463195018s ago: executing program 0 (id=274): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xa8) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) 2.394702585s ago: executing program 0 (id=275): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0x9}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.279755343s ago: executing program 0 (id=276): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) 2.133991146s ago: executing program 0 (id=277): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0xc, 0x1, 0x539e09df839dfe94, "d3fa5b89042b7205fe7bafe9e6415dbf6b34944d164ce8cd4e0d4c7b546787a7", 0x3631564e}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000078a000/0x2000)=nil, 0x2000, 0x9) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e0"], 0x58}}, 0x0) 2.094106559s ago: executing program 1 (id=278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x20000000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.149357923s ago: executing program 3 (id=281): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x80ded]}, 0x8) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) io_setup(0x2, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 691.884388ms ago: executing program 2 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000a00010000a6"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 642.414429ms ago: executing program 2 (id=284): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffd}, {0x0, 0x10}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x54) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x2}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) 556.469373ms ago: executing program 2 (id=285): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xa8) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) 474.145878ms ago: executing program 2 (id=286): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) 409.822896ms ago: executing program 2 (id=287): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffd}, {0x0, 0x10}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x54) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) 348.228125ms ago: executing program 2 (id=288): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="21010000db168920402000d92ca9010203010902120001000000000904"], 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0xc, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100b, 0xffffffffffffffff, 0x0, 0x0}) syz_open_dev$I2C(0x0, 0x1, 0x2003) syz_usb_connect(0x5, 0x24, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66"], 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000008ec0)=ANY=[@ANYBLOB="120110012b10ca0102e4c8cd2e3fe764be03010902120001"], 0x0) io_setup(0x3ff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000006500)={0x0, 0x0, "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", "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"}) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) 0s ago: executing program 0 (id=289): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. [ 51.536446][ T4170] cgroup: Unknown subsys name 'net' [ 51.673084][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.142372][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.583726][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 54.598598][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 54.638320][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 54.700262][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 54.715977][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 54.784224][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.791413][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.799973][ T4192] device bridge_slave_0 entered promiscuous mode [ 54.813828][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.820933][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.829371][ T4192] device bridge_slave_1 entered promiscuous mode [ 54.853465][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.860639][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.869020][ T4183] device bridge_slave_0 entered promiscuous mode [ 54.884423][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.891825][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.899557][ T4188] device bridge_slave_0 entered promiscuous mode [ 54.909665][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.916843][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.924540][ T4183] device bridge_slave_1 entered promiscuous mode [ 54.942518][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.949706][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.958193][ T4188] device bridge_slave_1 entered promiscuous mode [ 54.987130][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.014585][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.033668][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.049122][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.060260][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.070024][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.077316][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.084913][ T4190] device bridge_slave_0 entered promiscuous mode [ 55.111642][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.118872][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.127303][ T4196] device bridge_slave_0 entered promiscuous mode [ 55.136361][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.145678][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.152727][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.161161][ T4190] device bridge_slave_1 entered promiscuous mode [ 55.183919][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.191208][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.199053][ T4196] device bridge_slave_1 entered promiscuous mode [ 55.222070][ T4192] team0: Port device team_slave_0 added [ 55.237597][ T4188] team0: Port device team_slave_0 added [ 55.245157][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.263468][ T4188] team0: Port device team_slave_1 added [ 55.271121][ T4183] team0: Port device team_slave_0 added [ 55.279464][ T4183] team0: Port device team_slave_1 added [ 55.286551][ T4192] team0: Port device team_slave_1 added [ 55.298976][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.336717][ T4190] team0: Port device team_slave_0 added [ 55.369285][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.379549][ T4190] team0: Port device team_slave_1 added [ 55.386299][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.393232][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.419429][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.431552][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.438526][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.464421][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.476031][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.482978][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.508936][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.521751][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.538791][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.545888][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.572177][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.588416][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.595411][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.621323][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.632613][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.639860][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.666048][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.713938][ T4196] team0: Port device team_slave_0 added [ 55.720850][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.728478][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.754534][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.773927][ T4196] team0: Port device team_slave_1 added [ 55.800342][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.807608][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.833914][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.871008][ T4183] device hsr_slave_0 entered promiscuous mode [ 55.878264][ T4183] device hsr_slave_1 entered promiscuous mode [ 55.887742][ T4192] device hsr_slave_0 entered promiscuous mode [ 55.894366][ T4192] device hsr_slave_1 entered promiscuous mode [ 55.901192][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.908990][ T4192] Cannot create hsr debugfs directory [ 55.928388][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.935874][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.962056][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.996171][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.003149][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.029099][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.043181][ T4188] device hsr_slave_0 entered promiscuous mode [ 56.050713][ T4188] device hsr_slave_1 entered promiscuous mode [ 56.057708][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.065311][ T4188] Cannot create hsr debugfs directory [ 56.081362][ T4190] device hsr_slave_0 entered promiscuous mode [ 56.088484][ T4190] device hsr_slave_1 entered promiscuous mode [ 56.094956][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.102553][ T4190] Cannot create hsr debugfs directory [ 56.206009][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 56.216101][ T4196] device hsr_slave_0 entered promiscuous mode [ 56.222714][ T4196] device hsr_slave_1 entered promiscuous mode [ 56.229188][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.237279][ T4196] Cannot create hsr debugfs directory [ 56.285500][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 56.365463][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 56.368776][ T4189] Bluetooth: hci4: command 0x0409 tx timeout [ 56.375521][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 56.466601][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.479320][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.489075][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.499530][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.551612][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.572739][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.582508][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.598147][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.632455][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.643229][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.651986][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.667863][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.724353][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.746589][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.759846][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.787300][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.801307][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.847171][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.859001][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.879444][ T4196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.892073][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.914236][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.921190][ T4196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.931882][ T4196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.942775][ T4196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.963731][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.991935][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.001411][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.009700][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.019881][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.029023][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.036201][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.044373][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.053574][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.062239][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.069336][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.077513][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.087204][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.095855][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.102901][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.110616][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.120458][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.128462][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.142043][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.151096][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.159558][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.166639][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.181086][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.208752][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.219861][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.229540][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.239034][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.247929][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.256470][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.279576][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.300815][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.320786][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.330087][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.339566][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.349155][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.357960][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.378980][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.391446][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.403380][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.412900][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.426933][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.434625][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.442582][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.451961][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.461249][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.469841][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.479545][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.488346][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.497078][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.504131][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.512277][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.548536][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.571645][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.591839][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.603718][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.611794][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.620586][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.629133][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.639122][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.648033][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.656653][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.663685][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.672505][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.680885][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.689363][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.698200][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.709009][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.732227][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.744150][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.766715][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.777072][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.794595][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.802839][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.819806][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.832889][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.866286][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.874464][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.884028][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.897391][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.904470][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.913217][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.929195][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.937861][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.944910][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.952658][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.961741][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.970901][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.979587][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.988679][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.998277][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.006793][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.015737][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.024048][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.032088][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.046127][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.054732][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.069940][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.083475][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.092408][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.110029][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.120952][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.130755][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.137869][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.146657][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.166741][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.194824][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.208209][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.222517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.232161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.241478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.249460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.257180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.266593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.274869][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.281945][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.285505][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 58.290244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.304181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.312802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.322116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.330990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.340253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.349497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.365787][ T4225] Bluetooth: hci1: command 0x041b tx timeout [ 58.373880][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.382547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.391538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.411131][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.425108][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.449759][ T4225] Bluetooth: hci2: command 0x041b tx timeout [ 58.455947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.464317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.473154][ T4225] Bluetooth: hci4: command 0x041b tx timeout [ 58.481200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.489402][ T4225] Bluetooth: hci3: command 0x041b tx timeout [ 58.499091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.507764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.517262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.526679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.566090][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.589869][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.608586][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.623828][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.632242][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.644883][ T4183] device veth0_vlan entered promiscuous mode [ 58.685151][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.693901][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.703212][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.711109][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.719440][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.727484][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.742248][ T4183] device veth1_vlan entered promiscuous mode [ 58.758124][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.779325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.794058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.804436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.820212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.834125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.851284][ T4192] device veth0_vlan entered promiscuous mode [ 58.875710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.883709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.901283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.929209][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.948068][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.960417][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.979404][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.989035][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.002832][ T4192] device veth1_vlan entered promiscuous mode [ 59.013593][ T4183] device veth0_macvtap entered promiscuous mode [ 59.026932][ T4190] device veth0_vlan entered promiscuous mode [ 59.035604][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.043709][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.054460][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.064296][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.072795][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.092165][ T4183] device veth1_macvtap entered promiscuous mode [ 59.103555][ T4190] device veth1_vlan entered promiscuous mode [ 59.136604][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.148511][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.156876][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.165060][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.174161][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.183908][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.192444][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.201081][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.210258][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.219984][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.229031][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.241725][ T4192] device veth0_macvtap entered promiscuous mode [ 59.250652][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.276712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.284779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.293689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.302638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.311754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.319872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.330634][ T4192] device veth1_macvtap entered promiscuous mode [ 59.340777][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.349743][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.359244][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.368230][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.379716][ T4196] device veth0_vlan entered promiscuous mode [ 59.394511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.402713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.411384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.419399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.429727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.438156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.446344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.469775][ T4188] device veth0_vlan entered promiscuous mode [ 59.481162][ T4196] device veth1_vlan entered promiscuous mode [ 59.497371][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.508090][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.519843][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.553530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.569832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.578281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.587444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.596193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.604526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.616248][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.627485][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.638625][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.651457][ T4190] device veth0_macvtap entered promiscuous mode [ 59.661405][ T4188] device veth1_vlan entered promiscuous mode [ 59.695986][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.703940][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.712053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.723042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.732083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.740935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.749663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.759837][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.769853][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.778816][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.787788][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.800425][ T4190] device veth1_macvtap entered promiscuous mode [ 59.822997][ T4196] device veth0_macvtap entered promiscuous mode [ 59.847954][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.857384][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.867118][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.881465][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.890775][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.912276][ T4196] device veth1_macvtap entered promiscuous mode [ 59.931377][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.943857][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.954079][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.964725][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.976900][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.984238][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.992907][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.001657][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.010561][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.027772][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.036119][ T4188] device veth0_macvtap entered promiscuous mode [ 60.042913][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.085391][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.093335][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.102212][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.112725][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.122751][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.134245][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.146230][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.154685][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.166915][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.178064][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.188565][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.198667][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.209652][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.220450][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.243036][ T4188] device veth1_macvtap entered promiscuous mode [ 60.253906][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.271189][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.282847][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.292433][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.302717][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.313694][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.323299][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.332334][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.341296][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.354182][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.355670][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.369764][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.382806][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 60.388143][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.396683][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.405000][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.418660][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.429527][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.440937][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.445500][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 60.462950][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.473820][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.483841][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.494503][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.504558][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.515818][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.526167][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 60.532368][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 60.532583][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.538563][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 60.558024][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.568983][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.621325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.636270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.640073][ T4259] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.645003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.668588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.691493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.712348][ T4261] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.718306][ T4196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.743785][ T4196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.752561][ T4196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.767184][ T4196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.802297][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.814860][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.827062][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.837823][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.849396][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.860364][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.870982][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.881705][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.893540][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.919928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.947891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.969704][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.993642][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.002723][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.012270][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.037915][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.055863][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.084474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.132926][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.154488][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.195113][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.286504][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.294345][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.332822][ T26] audit: type=1326 audit(1773278895.653:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e584d799 code=0x7ffc0000 [ 61.342063][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.363570][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.382829][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.395058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.404389][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.414881][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.448531][ T26] audit: type=1326 audit(1773278895.733:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e584d799 code=0x7ffc0000 [ 61.467424][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.480457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.545491][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.557776][ T26] audit: type=1326 audit(1773278895.743:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e584d799 code=0x7ffc0000 [ 61.583407][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.600033][ T26] audit: type=1326 audit(1773278895.743:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e584d799 code=0x7ffc0000 [ 61.627350][ T4277] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10'. [ 61.650170][ T463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.678990][ T26] audit: type=1326 audit(1773278895.743:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f12e584d799 code=0x7ffc0000 [ 61.690347][ T463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.780095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.801810][ T26] audit: type=1326 audit(1773278895.743:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e584d799 code=0x7ffc0000 [ 61.838259][ T4284] Zero length message leads to an empty skb [ 62.070713][ T26] audit: type=1326 audit(1773278895.743:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e584d799 code=0x7ffc0000 [ 62.194316][ T4301] usb usb8: usbfs: process 4301 (syz.4.16) did not claim interface 0 before use [ 62.214520][ T26] audit: type=1326 audit(1773278895.753:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f12e584d799 code=0x7ffc0000 [ 62.236350][ C0] vkms_vblank_simulate: vblank timer overrun [ 62.275867][ T4227] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 62.345293][ T13] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 62.374989][ T26] audit: type=1326 audit(1773278895.753:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4270 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f12e584d799 code=0x7ffc0000 [ 62.446308][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 62.526075][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 62.600543][ T4309] netlink: 'syz.4.19': attribute type 21 has an invalid length. [ 62.609146][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 62.615769][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 62.624737][ T4226] Bluetooth: hci3: command 0x0419 tx timeout [ 62.631894][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 62.638735][ T4309] netlink: 'syz.4.19': attribute type 6 has an invalid length. [ 62.647843][ T4309] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19'. [ 62.686681][ T4227] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.707280][ T4227] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 62.715464][ T13] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 62.755909][ T13] usb 2-1: config 0 has no interface number 0 [ 62.926466][ T4227] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.937067][ T13] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 62.955574][ T4227] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 62.983234][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.041925][ T13] usb 2-1: Product: syz [ 63.083925][ T13] usb 2-1: Manufacturer: syz [ 63.095649][ T4227] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.112669][ T13] usb 2-1: SerialNumber: syz [ 63.133041][ T4227] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 63.170942][ T13] usb 2-1: config 0 descriptor?? [ 63.225601][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #142!!! [ 63.234766][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.245264][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.255773][ T13] hub 2-1:0.132: bad descriptor, ignoring hub [ 63.268901][ T13] hub: probe of 2-1:0.132 failed with error -5 [ 63.332406][ T13] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input5 [ 63.485590][ T4227] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 63.505495][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.585084][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.592020][ T13] usb 2-1: USB disconnect, device number 2 [ 63.680400][ T4227] usb 1-1: Product: syz [ 63.684592][ T4227] usb 1-1: Manufacturer: syz [ 63.753724][ T4227] usb 1-1: SerialNumber: syz [ 63.795318][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 63.812117][ T4227] usb 1-1: config 0 descriptor?? [ 63.879852][ T4227] ti_usb_3410_5052 1-1:0.0: required endpoints missing [ 63.945375][ T21] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.996380][ T21] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 64.071061][ T21] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 64.152332][ T21] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.219043][ T21] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 64.261875][ T4292] fuse: Bad value for 'user_id' [ 64.277345][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.611368][ T21] usb 5-1: GET_CAPABILITIES returned 0 [ 64.617015][ T21] usbtmc 5-1:16.0: can't read capabilities [ 64.685927][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 64.925649][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.935677][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.936167][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 64.944759][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.962821][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.965969][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 64.971874][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.980788][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 64.990071][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.998720][ C0] vkms_vblank_simulate: vblank timer overrun [ 65.008010][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 65.013819][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 65.022933][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 65.031732][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 65.040844][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 65.049651][ C0] vkms_vblank_simulate: vblank timer overrun [ 65.058684][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 65.073684][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 65.082704][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 65.091720][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 65.100737][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 65.109752][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 65.118772][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 65.559891][ T13] usb 1-1: USB disconnect, device number 2 [ 65.685332][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.945289][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 66.075611][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.095089][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 66.113197][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 66.133890][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 66.155266][ T7] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 66.175313][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.237505][ T7] hub 4-1:1.0: bad descriptor, ignoring hub [ 66.254532][ T7] hub: probe of 4-1:1.0 failed with error -5 [ 66.288841][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 66.294798][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 66.318804][ T7] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 66.358076][ T7] cdc_wdm 4-1:1.0: Unknown control protocol [ 66.585482][ T4189] usb 4-1: USB disconnect, device number 2 [ 67.048564][ T4349] netlink: 44 bytes leftover after parsing attributes in process `syz.1.31'. [ 67.140592][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.148486][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.303762][ T4352] netlink: 44 bytes leftover after parsing attributes in process `syz.1.31'. [ 67.381866][ T13] usb 5-1: USB disconnect, device number 2 [ 67.389339][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 67.882946][ T4379] device team_slave_0 entered promiscuous mode [ 67.889352][ T4379] device team_slave_1 entered promiscuous mode [ 69.564880][ T4428] netlink: 176 bytes leftover after parsing attributes in process `syz.4.60'. [ 69.582812][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 69.872823][ T4426] capability: warning: `syz.0.58' uses deprecated v2 capabilities in a way that may be insecure [ 70.932287][ T4450] syz.0.67 uses obsolete (PF_INET,SOCK_PACKET) [ 71.195624][ T4456] netlink: 'syz.3.71': attribute type 4 has an invalid length. [ 71.409910][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.422407][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.521107][ T4456] syz.3.71 (4456) used greatest stack depth: 21136 bytes left [ 71.912132][ T26] audit: type=1326 audit(1773278906.233:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.0.85" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12e584d799 code=0x0 [ 72.035376][ T4494] device caif0 entered promiscuous mode [ 72.080428][ T4488] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 74.468577][ T4588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.124'. [ 74.579885][ T4580] sctp: failed to load transform for md5: -2 [ 74.845384][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.892018][ T4608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.130'. [ 75.246296][ T7] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 75.283330][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.316336][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.335279][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 75.445320][ T4226] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.446051][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 75.642215][ T7] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 75.704900][ T7] usb 5-1: Manufacturer: syz [ 75.733972][ T7] usb 5-1: config 0 descriptor?? [ 75.805553][ T4226] usb 1-1: Using ep0 maxpacket: 32 [ 75.935424][ T4226] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.968505][ T4226] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 76.145432][ T4226] usb 1-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 76.161501][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.189199][ T4226] usb 1-1: Product: syz [ 76.204044][ T4226] usb 1-1: Manufacturer: syz [ 76.232222][ T4226] usb 1-1: SerialNumber: syz [ 76.253382][ T7] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 76.262948][ T4226] usb 1-1: config 0 descriptor?? [ 76.292095][ T7] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 76.354705][ T4633] netlink: 80 bytes leftover after parsing attributes in process `syz.1.139'. [ 76.395399][ T4633] netlink: 80 bytes leftover after parsing attributes in process `syz.1.139'. [ 76.404944][ T7] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 76.565946][ T4610] udc-core: couldn't find an available UDC or it's busy [ 76.573039][ T4610] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.246644][ T4661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.150'. [ 77.560699][ T4667] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.705350][ T7] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 78.798564][ T1108] usb 5-1: USB disconnect, device number 3 [ 78.989801][ T4189] usb 1-1: USB disconnect, device number 3 [ 79.246670][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 79.356368][ T4724] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 79.382609][ T4724] team0: Device ipvlan2 is already an upper device of the team interface [ 79.479655][ T4730] device team_slave_0 entered promiscuous mode [ 79.485871][ T4730] device team_slave_1 entered promiscuous mode [ 79.533707][ T4730] device vlan2 entered promiscuous mode [ 79.559910][ T4730] device team0 entered promiscuous mode [ 79.623518][ T4724] syz.2.178 (4724) used greatest stack depth: 20784 bytes left [ 80.565396][ T4227] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 80.855564][ T4227] usb 1-1: Using ep0 maxpacket: 8 [ 81.015686][ T4227] usb 1-1: config 0 has no interfaces? [ 81.115453][ T4227] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 81.132021][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 81.151233][ T4227] usb 1-1: Product: syz [ 81.192926][ T4227] usb 1-1: config 0 descriptor?? [ 81.659157][ T23] cfg80211: failed to load regulatory.db [ 83.250849][ T23] usb 1-1: USB disconnect, device number 4 [ 83.671066][ T4882] device vlan2 entered promiscuous mode [ 83.708672][ T4227] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.965237][ T4227] usb 2-1: Using ep0 maxpacket: 8 [ 84.085491][ T4227] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 84.092920][ T4227] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 84.175325][ T4227] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 84.233958][ T4227] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 84.280243][ T4227] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 84.345239][ T4227] usb 2-1: config 168 interface 0 has no altsetting 0 [ 84.435439][ T4227] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 84.442873][ T4227] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 84.523161][ T4227] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 84.622551][ T4227] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 84.664763][ T4227] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 84.709169][ T4227] usb 2-1: config 168 interface 0 has no altsetting 0 [ 84.853740][ T4227] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 84.876762][ T4227] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 84.939102][ T4227] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 84.997710][ T4227] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 85.025364][ T4227] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.055357][ T4227] usb 2-1: config 168 interface 0 has no altsetting 0 [ 85.315403][ T4227] usb 2-1: string descriptor 0 read error: -22 [ 85.324051][ T4227] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 85.361078][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.437123][ T4227] adutux 2-1:168.0: interrupt endpoints not found [ 85.581805][ T4929] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4290396940 (8580793880 ns) > initial count (7730345080 ns). Using initial count to start timer. [ 85.656759][ T4876] udc-core: couldn't find an available UDC or it's busy [ 85.684408][ T4876] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 85.895248][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.912494][ T1108] usb 2-1: USB disconnect, device number 3 [ 86.135303][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 86.262517][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.320389][ T21] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 86.340328][ T21] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.370012][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.404324][ T21] usb 5-1: config 0 descriptor?? [ 86.509076][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 86.510448][ T4970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.651632][ T4970] syz.0.276 (4970) used greatest stack depth: 20688 bytes left [ 87.004230][ T4929] kvm [4926]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 87.034093][ T4929] kvm [4926]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 87.070446][ T4929] APIC base relocation is unsupported by KVM [ 87.832763][ T4987] netlink: 60 bytes leftover after parsing attributes in process `syz.2.282'. [ 87.935277][ T4189] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.306285][ T4189] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.325632][ T4189] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 88.376645][ T4189] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.436510][ T4189] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 88.615526][ T4189] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.638267][ T4189] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.680410][ T4189] usb 4-1: Product: syz [ 88.683494][ T7] usb 5-1: USB disconnect, device number 4 [ 88.693589][ T4189] usb 4-1: Manufacturer: syz [ 88.755543][ T4985] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 88.770076][ T5003] ================================================================== [ 88.778292][ T5003] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 88.787514][ T5003] Read of size 1 at addr ffff888073a3f608 by task syz.0.289/5003 [ 88.795247][ T5003] [ 88.797584][ T5003] CPU: 1 PID: 5003 Comm: syz.0.289 Not tainted syzkaller #0 [ 88.804881][ T5003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.814948][ T5003] Call Trace: [ 88.818244][ T5003] [ 88.821196][ T5003] dump_stack_lvl+0x188/0x250 [ 88.825904][ T5003] ? show_regs_print_info+0x20/0x20 [ 88.831137][ T5003] ? load_image+0x400/0x400 [ 88.835665][ T5003] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 88.841168][ T5003] print_address_description+0x60/0x2d0 [ 88.846745][ T5003] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 88.853281][ T5003] kasan_report+0xdf/0x130 [ 88.857725][ T5003] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 88.864258][ T5003] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 88.870614][ T5003] ? xfrm_policy_addr_delta+0x212/0x340 [ 88.872777][ T4977] ODEBUG: Out of memory. ODEBUG disabled [ 88.876178][ T5003] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 88.876237][ T5003] ? __kasan_kmalloc+0xb5/0xf0 [ 88.892913][ T5003] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 88.899088][ T5003] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 88.905014][ T5003] xfrm_policy_inexact_insert+0xe0/0x1460 [ 88.910758][ T5003] ? do_raw_spin_lock+0x128/0x2f0 [ 88.915814][ T5003] ? __rwlock_init+0x140/0x140 [ 88.920597][ T5003] ? policy_hash_bysel+0x135/0x7b0 [ 88.925725][ T5003] xfrm_policy_insert+0x112/0x930 [ 88.930750][ T5003] xfrm_add_policy+0x4f2/0x880 [ 88.935517][ T5003] ? xfrm_dump_sa_done+0xc0/0xc0 [ 88.940443][ T5003] ? apparmor_capable+0x12c/0x190 [ 88.945467][ T5003] ? __nla_parse+0x3c/0x50 [ 88.949911][ T5003] xfrm_user_rcv_msg+0x5e5/0x910 [ 88.954865][ T5003] ? xfrm_netlink_rcv+0x90/0x90 [ 88.959724][ T5003] ? xfrm_netlink_rcv+0x66/0x90 [ 88.964567][ T5003] ? __mutex_lock_common+0x465/0x2400 [ 88.969935][ T5003] ? __skb_clone+0x480/0x790 [ 88.974521][ T5003] netlink_rcv_skb+0x1f5/0x440 [ 88.979277][ T5003] ? xfrm_netlink_rcv+0x90/0x90 [ 88.984123][ T5003] ? netlink_ack+0xb50/0xb50 [ 88.988703][ T5003] ? __lock_acquire+0x7d10/0x7d10 [ 88.993738][ T5003] xfrm_netlink_rcv+0x75/0x90 [ 88.998429][ T5003] netlink_unicast+0x774/0x920 [ 89.003187][ T5003] netlink_sendmsg+0x8ba/0xbe0 [ 89.007949][ T5003] ? netlink_getsockopt+0x570/0x570 [ 89.013139][ T5003] ? aa_sock_msg_perm+0x94/0x150 [ 89.018067][ T5003] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 89.023342][ T5003] ? security_socket_sendmsg+0x7c/0xa0 [ 89.028789][ T5003] ? netlink_getsockopt+0x570/0x570 [ 89.033980][ T5003] ____sys_sendmsg+0x5b7/0x8f0 [ 89.038746][ T5003] ? __sys_sendmsg_sock+0x30/0x30 [ 89.043776][ T5003] ? import_iovec+0x6f/0xa0 [ 89.048273][ T5003] ___sys_sendmsg+0x236/0x2e0 [ 89.052945][ T5003] ? __sys_sendmsg+0x2a0/0x2a0 [ 89.057713][ T5003] ? percpu_counter_add_batch+0x13b/0x160 [ 89.063469][ T5003] __se_sys_sendmsg+0x1af/0x290 [ 89.068325][ T5003] ? __x64_sys_sendmsg+0x80/0x80 [ 89.073263][ T5003] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 89.079256][ T5003] ? lockdep_hardirqs_on+0x94/0x140 [ 89.084465][ T5003] do_syscall_64+0x4c/0xa0 [ 89.088879][ T5003] ? clear_bhb_loop+0x30/0x80 [ 89.093557][ T5003] ? clear_bhb_loop+0x30/0x80 [ 89.098239][ T5003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.104131][ T5003] RIP: 0033:0x7f12e584d799 [ 89.108549][ T5003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.128153][ T5003] RSP: 002b:00007f12e3aa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.136567][ T5003] RAX: ffffffffffffffda RBX: 00007f12e5ac6fa0 RCX: 00007f12e584d799 [ 89.144538][ T5003] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 89.152509][ T5003] RBP: 00007f12e58e3c99 R08: 0000000000000000 R09: 0000000000000000 [ 89.160478][ T5003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.168448][ T5003] R13: 00007f12e5ac7038 R14: 00007f12e5ac6fa0 R15: 00007ffea4b6d2b8 [ 89.176432][ T5003] [ 89.179449][ T5003] [ 89.181778][ T5003] Allocated by task 5003: [ 89.186101][ T5003] __kasan_kmalloc+0xb5/0xf0 [ 89.190691][ T5003] sk_prot_alloc+0xe7/0x210 [ 89.195193][ T5003] sk_alloc+0x2f/0x310 [ 89.199256][ T5003] pfkey_create+0xd8/0x560 [ 89.203669][ T5003] __sock_create+0x47b/0x900 [ 89.208257][ T5003] __sys_socket+0xe2/0x170 [ 89.212670][ T5003] __x64_sys_socket+0x76/0x80 [ 89.217345][ T5003] do_syscall_64+0x4c/0xa0 [ 89.221758][ T5003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.227659][ T5003] [ 89.229983][ T5003] Last potentially related work creation: [ 89.235690][ T5003] kasan_save_stack+0x35/0x60 [ 89.240367][ T5003] kasan_record_aux_stack+0xb8/0x100 [ 89.245672][ T5003] call_rcu+0x189/0x950 [ 89.249827][ T5003] netlink_release+0x1369/0x17b0 [ 89.254759][ T5003] sock_close+0xd5/0x240 [ 89.259000][ T5003] __fput+0x234/0x930 [ 89.262979][ T5003] task_work_run+0x125/0x1a0 [ 89.267568][ T5003] exit_to_user_mode_loop+0x10f/0x130 [ 89.272948][ T5003] exit_to_user_mode_prepare+0xee/0x180 [ 89.278490][ T5003] syscall_exit_to_user_mode+0x16/0x40 [ 89.283946][ T5003] do_syscall_64+0x58/0xa0 [ 89.288359][ T5003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.294250][ T5003] [ 89.296567][ T5003] The buggy address belongs to the object at ffff888073a3f000 [ 89.296567][ T5003] which belongs to the cache kmalloc-2k of size 2048 [ 89.310615][ T5003] The buggy address is located 1544 bytes inside of [ 89.310615][ T5003] 2048-byte region [ffff888073a3f000, ffff888073a3f800) [ 89.324058][ T5003] The buggy address belongs to the page: [ 89.329680][ T5003] page:ffffea0001ce8e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73a38 [ 89.339831][ T5003] head:ffffea0001ce8e00 order:3 compound_mapcount:0 compound_pincount:0 [ 89.348150][ T5003] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 89.356136][ T5003] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c42000 [ 89.364714][ T5003] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 89.373287][ T5003] page dumped because: kasan: bad access detected [ 89.379693][ T5003] page_owner tracks the page as allocated [ 89.385400][ T5003] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4192, ts 54507854364, free_ts 53938761142 [ 89.404495][ T5003] get_page_from_freelist+0x1bbd/0x1ca0 [ 89.410044][ T5003] __alloc_pages+0x1ee/0x480 [ 89.414632][ T5003] new_slab+0xc0/0x4b0 [ 89.418694][ T5003] ___slab_alloc+0x80a/0xdd0 [ 89.423281][ T5003] __kmalloc+0x1cd/0x330 [ 89.427518][ T5003] __register_sysctl_table+0xe0/0x1230 [ 89.432976][ T5003] __addrconf_sysctl_register+0x271/0x3e0 [ 89.438693][ T5003] addrconf_sysctl_register+0x15c/0x1b0 [ 89.444235][ T5003] ipv6_add_dev+0xbf3/0x1190 [ 89.448825][ T5003] addrconf_notify+0x66f/0xf00 [ 89.453584][ T5003] raw_notifier_call_chain+0xcb/0x160 [ 89.458953][ T5003] register_netdevice+0x12a6/0x1710 [ 89.464148][ T5003] rtnl_newlink+0x1597/0x1a50 [ 89.468826][ T5003] rtnetlink_rcv_msg+0x844/0xf30 [ 89.473766][ T5003] netlink_rcv_skb+0x1f5/0x440 [ 89.478525][ T5003] netlink_unicast+0x774/0x920 [ 89.483288][ T5003] page last free stack trace: [ 89.487952][ T5003] free_unref_page_prepare+0x637/0x6c0 [ 89.493408][ T5003] free_unref_page+0x8f/0x2a0 [ 89.498080][ T5003] skb_release_data+0x3b1/0x800 [ 89.502930][ T5003] __kfree_skb+0x4c/0x60 [ 89.507169][ T5003] tcp_recvmsg_locked+0x14e1/0x27f0 [ 89.512362][ T5003] tcp_recvmsg+0x232/0x770 [ 89.516778][ T5003] inet_recvmsg+0x146/0x200 [ 89.521281][ T5003] sock_read_iter+0x2b8/0x380 [ 89.525951][ T5003] vfs_read+0x759/0xd60 [ 89.530104][ T5003] ksys_read+0x152/0x260 [ 89.534340][ T5003] do_syscall_64+0x4c/0xa0 [ 89.538751][ T5003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.544647][ T5003] [ 89.546970][ T5003] Memory state around the buggy address: [ 89.552605][ T5003] ffff888073a3f500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 89.560671][ T5003] ffff888073a3f580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 89.568732][ T5003] >ffff888073a3f600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.576795][ T5003] ^ [ 89.581121][ T5003] ffff888073a3f680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.589178][ T5003] ffff888073a3f700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.597231][ T5003] ================================================================== [ 89.605288][ T5003] Disabling lock debugging due to kernel taint [ 89.611564][ T5003] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.618767][ T5003] CPU: 1 PID: 5003 Comm: syz.0.289 Tainted: G B syzkaller #0 [ 89.627430][ T5003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.637469][ T5003] Call Trace: [ 89.640734][ T5003] [ 89.643659][ T5003] dump_stack_lvl+0x188/0x250 [ 89.648328][ T5003] ? show_regs_print_info+0x20/0x20 [ 89.653537][ T5003] ? load_image+0x400/0x400 [ 89.658029][ T5003] panic+0x2e5/0x810 [ 89.661913][ T5003] ? bpf_jit_dump+0xd0/0xd0 [ 89.666404][ T5003] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 89.672282][ T5003] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 89.678165][ T5003] ? _raw_spin_unlock+0x40/0x40 [ 89.683017][ T5003] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 89.689505][ T5003] check_panic_on_warn+0x80/0xa0 [ 89.694437][ T5003] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 89.700924][ T5003] end_report+0x6d/0xf0 [ 89.705069][ T5003] kasan_report+0x102/0x130 [ 89.709561][ T5003] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 89.716051][ T5003] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 89.722368][ T5003] ? xfrm_policy_addr_delta+0x212/0x340 [ 89.727900][ T5003] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 89.734042][ T5003] ? __kasan_kmalloc+0xb5/0xf0 [ 89.738795][ T5003] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 89.744937][ T5003] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 89.750822][ T5003] xfrm_policy_inexact_insert+0xe0/0x1460 [ 89.756536][ T5003] ? do_raw_spin_lock+0x128/0x2f0 [ 89.761547][ T5003] ? __rwlock_init+0x140/0x140 [ 89.766300][ T5003] ? policy_hash_bysel+0x135/0x7b0 [ 89.771401][ T5003] xfrm_policy_insert+0x112/0x930 [ 89.776419][ T5003] xfrm_add_policy+0x4f2/0x880 [ 89.781169][ T5003] ? xfrm_dump_sa_done+0xc0/0xc0 [ 89.786091][ T5003] ? apparmor_capable+0x12c/0x190 [ 89.791104][ T5003] ? __nla_parse+0x3c/0x50 [ 89.795507][ T5003] xfrm_user_rcv_msg+0x5e5/0x910 [ 89.800433][ T5003] ? xfrm_netlink_rcv+0x90/0x90 [ 89.805292][ T5003] ? xfrm_netlink_rcv+0x66/0x90 [ 89.810153][ T5003] ? __mutex_lock_common+0x465/0x2400 [ 89.815543][ T5003] ? __skb_clone+0x480/0x790 [ 89.820133][ T5003] netlink_rcv_skb+0x1f5/0x440 [ 89.824892][ T5003] ? xfrm_netlink_rcv+0x90/0x90 [ 89.829737][ T5003] ? netlink_ack+0xb50/0xb50 [ 89.834326][ T5003] ? __lock_acquire+0x7d10/0x7d10 [ 89.839343][ T5003] xfrm_netlink_rcv+0x75/0x90 [ 89.844009][ T5003] netlink_unicast+0x774/0x920 [ 89.848765][ T5003] netlink_sendmsg+0x8ba/0xbe0 [ 89.853521][ T5003] ? netlink_getsockopt+0x570/0x570 [ 89.858710][ T5003] ? aa_sock_msg_perm+0x94/0x150 [ 89.863639][ T5003] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 89.868909][ T5003] ? security_socket_sendmsg+0x7c/0xa0 [ 89.874356][ T5003] ? netlink_getsockopt+0x570/0x570 [ 89.879538][ T5003] ____sys_sendmsg+0x5b7/0x8f0 [ 89.884305][ T5003] ? __sys_sendmsg_sock+0x30/0x30 [ 89.889316][ T5003] ? import_iovec+0x6f/0xa0 [ 89.893807][ T5003] ___sys_sendmsg+0x236/0x2e0 [ 89.898477][ T5003] ? __sys_sendmsg+0x2a0/0x2a0 [ 89.903231][ T5003] ? percpu_counter_add_batch+0x13b/0x160 [ 89.908941][ T5003] __se_sys_sendmsg+0x1af/0x290 [ 89.913794][ T5003] ? __x64_sys_sendmsg+0x80/0x80 [ 89.918718][ T5003] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 89.924689][ T5003] ? lockdep_hardirqs_on+0x94/0x140 [ 89.929892][ T5003] do_syscall_64+0x4c/0xa0 [ 89.934305][ T5003] ? clear_bhb_loop+0x30/0x80 [ 89.938967][ T5003] ? clear_bhb_loop+0x30/0x80 [ 89.943628][ T5003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.949509][ T5003] RIP: 0033:0x7f12e584d799 [ 89.953912][ T5003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.973506][ T5003] RSP: 002b:00007f12e3aa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.981907][ T5003] RAX: ffffffffffffffda RBX: 00007f12e5ac6fa0 RCX: 00007f12e584d799 [ 89.989868][ T5003] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 89.998091][ T5003] RBP: 00007f12e58e3c99 R08: 0000000000000000 R09: 0000000000000000 [ 90.006051][ T5003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.014010][ T5003] R13: 00007f12e5ac7038 R14: 00007f12e5ac6fa0 R15: 00007ffea4b6d2b8 [ 90.021971][ T5003] [ 90.025086][ T5003] Kernel Offset: disabled [ 90.029401][ T5003] Rebooting in 86400 seconds..