last executing test programs: 2m4.382704842s ago: executing program 3 (id=46): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0x0, 0x795a, 0x1, 0xffff, 0x8, 0x96, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m59.580806961s ago: executing program 3 (id=59): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x50, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x80, 0x7, 0x0, 0x0, 0x80}}}, 0x50}}, 0x4004040) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80"], 0x38}}, 0x0) 1m56.538876007s ago: executing program 3 (id=63): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRESDEC=r0], 0x0, 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000c80)={'syz0\x00', {0xf, 0x7, 0x6, 0x8}, 0x46, [0x6, 0x3, 0x8, 0x7, 0x3, 0x8, 0xffff, 0x2, 0x1ff, 0x704e, 0x6, 0x2, 0x1, 0x4, 0x7fffffff, 0xc, 0x280, 0x7, 0x4, 0xbf6, 0x6, 0xfff, 0x0, 0x80000005, 0x2, 0x4ebe, 0x3, 0x2, 0x3, 0x0, 0x9, 0x2, 0x8, 0x5, 0x9, 0x0, 0x1, 0x400, 0x0, 0x8, 0x6, 0x1, 0x3, 0x2, 0x3, 0x80, 0x4, 0x40, 0xe, 0xffff, 0x3ca5, 0x81, 0xfffff68e, 0x6, 0x2, 0x10, 0x8001, 0x3, 0x9, 0x4, 0x6, 0xfffffffe, 0xe, 0x3ff], [0x103, 0x3817a07c, 0xfffffffd, 0x2d, 0xd7, 0x2, 0x435f78e4, 0x4, 0x1b9e, 0x0, 0x1, 0x1, 0x4, 0x7, 0x4, 0x80, 0x0, 0x8, 0x4, 0x3, 0x10, 0x1, 0x77, 0x100, 0x0, 0x7f, 0x6, 0x6, 0x0, 0x7f, 0x49, 0x4, 0x9, 0x80000000, 0xd, 0x64, 0x2, 0xe2, 0x0, 0x3, 0x9, 0x6, 0xeebe, 0x5, 0x0, 0x1b, 0xaea0, 0xb, 0x9d, 0xefcc, 0x2, 0x81, 0x6, 0x4, 0x2, 0x2, 0x0, 0x7f, 0x10, 0xff, 0x2, 0x31d, 0xe, 0x7], [0x8000, 0x1, 0x0, 0xb, 0x10001, 0x5, 0x6c5e, 0x401, 0x7, 0xb44, 0x1000, 0xc5d3dd53, 0x9, 0x4, 0x3a, 0x3, 0x80000000, 0x5, 0xa5ff, 0x1, 0x9, 0x0, 0x1, 0x80, 0x0, 0x1, 0xfffff564, 0x4, 0x9, 0x5, 0x5, 0x2, 0x3, 0x8, 0x5, 0xd, 0x6, 0x3ff, 0x3, 0x2, 0x1a, 0x5a, 0x7, 0x400, 0x380000, 0x1, 0x7, 0x3, 0x4, 0xa, 0xfffffffd, 0x5, 0xfffffff7, 0x4, 0x0, 0x1, 0xffffff00, 0x6, 0x2, 0xde2, 0x6, 0x7, 0xb7a, 0x4], [0x3ff, 0x4, 0x1, 0x5, 0x7ff, 0xfffffffa, 0x3, 0x6, 0x2, 0x0, 0x7, 0x8, 0x7, 0x8, 0xf, 0x6, 0x5, 0x329d, 0x49, 0x78079c2a, 0x0, 0x3, 0x5, 0x600, 0x7, 0xbfd2, 0x3, 0x4, 0xffffff7f, 0x0, 0xe, 0x9, 0x6, 0xfffffff2, 0xf, 0x10001, 0xb, 0x2, 0x9, 0x5, 0x8, 0xd195, 0x5, 0xba, 0x10000, 0x8, 0x609a, 0xffff, 0x9, 0x6, 0x51, 0x4, 0xa, 0x9, 0xd9, 0x5, 0x9, 0x2, 0xd, 0x5, 0x7, 0x2, 0xff, 0x4]}, 0x45c) openat$qrtrtun(0xffffff9c, &(0x7f00000000c0), 0x4102) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, &(0x7f0000000a80)={0x10000016}) socket(0x10, 0x3, 0x0) 1m54.021618521s ago: executing program 3 (id=71): socket$can_raw(0x1d, 0x3, 0x1) socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12000000020000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m53.61167415s ago: executing program 3 (id=74): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15", 0xcb}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331", 0x92}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}], 0x2, 0x20000044) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000400)={0x40, r2, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x34}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfb}]}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x45}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x8008010) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m52.718628733s ago: executing program 3 (id=81): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m37.091303202s ago: executing program 32 (id=81): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 5.573068653s ago: executing program 1 (id=424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x64044014) 5.450482689s ago: executing program 1 (id=425): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x50d65ad7, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 4.054015632s ago: executing program 0 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="c4010000030101040000000000000000020000000c001700000100000000000960000e801400018008000100e0000001080002007f0000010c00028005000100880000001400018008000100ac1e010108000200ac1e00011400018008000100e000000108000200ac1414aa06000340000100000c000280050001001100000008001a40800000001c000f800800014000000fff0800024000000005080001400000000a100002800c00028005000100880000007800068014000500fc0000000000000000000000000000010c000380060002004e24000008000100ffffffff14000500fe8000000000000000000000000000bb14000400fe8000000000000000000000000000bb24000380060001004e230000060002004e210000060001004e230000060001004e24000074000d8044000380060001004e220000060002004e210000060002004e230000060002004e230000060001004e210000060002004e210000060001004e200000060001004e2200002c000380060001004e230000060001004e240000060002004e240000060001004e240000060002004e200000080003400000200008000c4000000001140005800e0001006674702d3230303030000000"], 0x1c4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) 3.97289297s ago: executing program 1 (id=428): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "950000cffd914d4f51b57b3f80df847f", '\x00', "00000200"}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="02000000050000000500"/21], 0x50) writev(r2, 0x0, 0x0) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_EVENT={0x15, 0x2c, 0x5}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) unshare(0x20000400) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000100000000001000000085ff00003b000000000000000000000008001c00c9000000e7fea8022bdfc67b8f5c3ab3f72815f1"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 3.309792691s ago: executing program 1 (id=430): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1", 0x82}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e", 0x70}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24c", 0x40}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.086646027s ago: executing program 4 (id=431): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x1, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x38}, 0x300, 0x0, 0x0, 0x8800}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x2c) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYRES16=r4, @ANYBLOB], 0x48}}, 0x3000c000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000597fb1fec7490000000000184500000100000000000000000000008500000078"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e2200005f3323f8e50333f228e3360c7c16108fe74002e9270f825d19653d59dc198630e99c14f49ca80ffcfb781aecb680f726bd8be6ddb0ea58465a62b1bb3846d960a8dcba9126b7d753"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 2.598938134s ago: executing program 1 (id=435): openat$kvm(0xffffffffffffff9c, 0x0, 0x80c80, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000440)=[{0x5, 0x0, 0x0, 0x0}, {0x1000, 0x2000, 0x0, 0x0}, {0x8, 0x8000, 0x0, 0x0}], 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 2.418747154s ago: executing program 0 (id=436): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="7fe1b33315b1fd8cd2523811f49a284c7da2c2dab8d7a3562386f41e36be53b97c6eb951e4cd864a0d49c5251ea819d1fb396061defd1768694a459ea9b8e4c53f8b742f21f50ec2a79795f2e2f94bf0da0d30ad6eac955cedbf65b0838294e2bcea1cbd94f3", 0x34000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000) 2.288470547s ago: executing program 4 (id=438): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x40000000015, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) connect$inet(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x10) sendto$inet(r0, &(0x7f00000004c0)="9bd541e2b70ef7309ba26c22d470538fbc92f866415bced3ea1c3bf8ecf0a8c04cf0f1f9bbd57fd613b2b25b7495f36706ea340e8d7d54445762e8c458682840e5857474db88e4e5b27bce63188b0d00110921f445a68bdaa9630e455486b99d2146f6a9493284a0da9e7ffb23f03bdcb38e4fe1", 0x74, 0x20004001, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r4 = socket$inet(0x2, 0xa, 0x9) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x68) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r3], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r5, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r6, &(0x7f0000000000)="55cd11ea2b519e9bf629dddaebc2840ef13744ce939cddebf5d7d4ac61d968f8d66a41", 0x0}, 0x20) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 2.21381865s ago: executing program 2 (id=439): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "950000cffd914d4f51b57b3f80df847f", '\x00', "00000200"}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="02000000050000000500"/21], 0x50) writev(r2, 0x0, 0x0) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_EVENT={0x15, 0x2c, 0x5}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) unshare(0x20000400) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000080002000000000008000700", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000100000000001000000085ff00003b000000000000000000000008001c00c9000000e7fea8022bdfc67b8f5c3ab3f72815f1"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 1.87387457s ago: executing program 4 (id=440): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x2, 0x4) 1.836238903s ago: executing program 1 (id=441): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) syz_usb_connect(0x4, 0x106, &(0x7f0000001600)={{0x12, 0x1, 0x110, 0x6b, 0xd2, 0x78, 0xff, 0x17a8, 0x5, 0x8b9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x1, 0x4b, 0x1, 0xb0, 0xb, "", [{{0x9, 0x4, 0x72, 0x2, 0x4, 0xc2, 0xf, 0xbf, 0x9, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "06f414"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x0, 0xfa}, [@mdlm_detail={0x24, 0x24, 0x13, 0x7f, "63832544b5992729c2c21e14138e14d2545f2904857f9925c82a39c66ef2f284"}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xe, 0x3, 0x9c, 0x6, 0xd2}, @dmm={0x7, 0x24, 0x14, 0x6, 0x5}]}, @generic={0x8, 0x22, "dc18ffa56b88"}], [{{0x9, 0x5, 0x2, 0x10, 0x10, 0x9, 0x0, 0x42}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x9, 0xdb, 0x1, [@generic={0x2c, 0x5, "e02d445a237f7e38d12a55d30b777b3e32b3b9122286b587f66d616520d33917272bf2b1b18aa485f6a3"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x75, 0x23, 0x10}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x4, 0x4, 0x70, [@generic={0x39, 0x22, "fae95515649ed2d625428b910973775dfc23b93e4e5d5450df8e2ef7a672792b752e6a5c7463e513298db741b78a4a9d74d102f10f74f1"}]}}]}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x250, 0xb2, 0x25, 0x7, 0x40, 0x96}, 0x6e, &(0x7f00000019c0)={0x5, 0xf, 0x6e, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0xae, 0x81, 0x1, 0x100, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "34e85c8f6f181c451c2b7a643255ac3e"}, @ssp_cap={0x1c, 0x10, 0xa, 0xff, 0x4, 0x6, 0x0, 0xfffc, [0xffff0f, 0x3fc0, 0x3fc0, 0xffc000]}, @generic={0x2e, 0x10, 0xb, "5cedcff9a96681ac319d477488d63e7157d0ef22976b3e7ab043ab2e57f5330448a63953b7a4b6161356d2"}]}, 0x4, [{0x0, 0x0}, {0xf4, &(0x7f0000001b00)=@string={0xf4, 0x3, "4527be8a1cb45db394ce43ce3cf66e86a1f3718f99958960e49d3186cce9249c78cf00abffa08409f98f6984121f9b6287f681445f6600313b6196cbf74d06a98a9f4740cb3240c63efcf54b1af16b301045d49068617fdd042fe04847595ba9ffbc7cee5543578a4b176f7ed00f5d0f979339c6a1592282e36d4131c911915495875740e44f81253768fcf1d8071ad8224dbb70ece71a9f6fdfb71dba17c5959cbba9f69631ab4c60b70863c4dde2092d6194b70576c10278abff5bd9a641d9e5095fb98e43fd09e21d17f1d938402de9ff9f6ed799fb9d6187a2445ccfc5bcd0bbc6aaf7f9099c2f92b26124fbde1a43ab"}}, {0x6c, &(0x7f0000001c00)=@string={0x6c, 0x3, "48e9c11f966279087fb005073d085caf7fd5b377150b4b6565324c843ce8598cb47b4273e708a667d1d781340efdaf73451952d25170bda5dfd9914c74cedcb9b8f1551fd99c2f64b78d015ab4990ca4b20b9cd6149d7857808bfca0d123fce81816db708ee0fb8cf653"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x414}}]}) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000101c0)={0x0, 0x2, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x8001, 0x0, 0x1000000, "64f778ddcf2907e63600"}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xe000, 0x201000, 0x8}) 1.834821571s ago: executing program 2 (id=442): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{}], 0x1}}], 0x1, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.605566952s ago: executing program 2 (id=443): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000", @ANYBLOB], 0x310) 1.605241424s ago: executing program 4 (id=444): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1", 0x82}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e", 0x70}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24c", 0x40}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.435801647s ago: executing program 2 (id=445): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1022000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x14, r5, 0xc32, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20000010) pread64(r3, &(0x7f0000000480)=""/209, 0xd1, 0x2) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 1.299219715s ago: executing program 0 (id=446): open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) stat(&(0x7f0000001180)='./file1\x00', 0x0) setresuid(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0x76be, 0xc000, 0x3, 0x20002f7}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 461.368226ms ago: executing program 2 (id=447): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x1, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x38}, 0x300, 0x0, 0x0, 0x8800}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a505000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000597fb1fec7490000000000184500000100000000000000000000008500000078"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e2200005f3323f8e50333f228e3360c7c16108fe74002e9270f825d19653d59dc198630e99c14f49ca80ffcfb781aecb680f726bd8be6ddb0ea58465a62b1bb3846d960a8dcba9126b7d753"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 460.215112ms ago: executing program 0 (id=448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 369.142708ms ago: executing program 4 (id=449): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x40000000015, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) connect$inet(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x10) sendto$inet(r0, &(0x7f00000004c0)="9bd541e2b70ef7309ba26c22d470538fbc92f866415bced3ea1c3bf8ecf0a8c04cf0f1f9bbd57fd613b2b25b7495f36706ea340e8d7d54445762e8c458682840e5857474db88e4e5b27bce63188b0d00110921f445a68bdaa9630e455486b99d2146f6a9493284a0da9e7ffb23f03bdcb38e4fe1", 0x74, 0x20004001, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r4 = socket$inet(0x2, 0xa, 0x9) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x68) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r3], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r5, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r6, &(0x7f0000000000)="55cd11ea2b519e9bf629dddaebc2840ef13744ce939cddebf5d7d4ac61d968f8d66a41", 0x0}, 0x20) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 174.881649ms ago: executing program 0 (id=450): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x88, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1300}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10001}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 56.855217ms ago: executing program 0 (id=451): openat$kvm(0xffffffffffffff9c, 0x0, 0x80c80, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000440)=[{0x5, 0x0, 0x0, 0x0}, {0x1000, 0x2000, 0x0, 0x0}, {0x8, 0x8000, 0x0, 0x0}], 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 13.554012ms ago: executing program 4 (id=452): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{}], 0x1}}], 0x1, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 2 (id=453): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x18, r0, 0x603, 0x70bd2f, 0x25dfdc00, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20042080}, 0x4000054) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 75.495504][ T5815] cgroup: Unknown subsys name 'net' [ 75.737345][ T5815] cgroup: Unknown subsys name 'cpuset' [ 75.792200][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.513379][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.788893][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.846075][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.847102][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.856246][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.883711][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.915890][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.916075][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.916547][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.920921][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.931001][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.936404][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.938585][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.938948][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.946381][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.957651][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.960359][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.960780][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.962527][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.963014][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.968151][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.981613][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.986839][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.990033][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.990585][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.017003][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.130580][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 81.165816][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 81.222943][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 81.286621][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 81.319935][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 81.584343][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.585635][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.586101][ T5832] bridge_slave_0: entered allmulticast mode [ 81.588192][ T5832] bridge_slave_0: entered promiscuous mode [ 81.609941][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.610220][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.610801][ T5828] bridge_slave_0: entered allmulticast mode [ 81.614398][ T5828] bridge_slave_0: entered promiscuous mode [ 81.656588][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.656842][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.657094][ T5832] bridge_slave_1: entered allmulticast mode [ 81.659047][ T5832] bridge_slave_1: entered promiscuous mode [ 81.687206][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.687806][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.688377][ T5828] bridge_slave_1: entered allmulticast mode [ 81.694088][ T5828] bridge_slave_1: entered promiscuous mode [ 81.697127][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.697403][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.697964][ T5830] bridge_slave_0: entered allmulticast mode [ 81.701330][ T5830] bridge_slave_0: entered promiscuous mode [ 81.777494][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.777676][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.777836][ T5830] bridge_slave_1: entered allmulticast mode [ 81.779588][ T5830] bridge_slave_1: entered promiscuous mode [ 81.856696][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.857026][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.857287][ T5829] bridge_slave_0: entered allmulticast mode [ 81.861198][ T5829] bridge_slave_0: entered promiscuous mode [ 81.914336][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.914660][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.915227][ T5831] bridge_slave_0: entered allmulticast mode [ 81.919016][ T5831] bridge_slave_0: entered promiscuous mode [ 81.938076][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.938529][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.938828][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.939075][ T5829] bridge_slave_1: entered allmulticast mode [ 81.943883][ T5829] bridge_slave_1: entered promiscuous mode [ 81.955006][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.983509][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.984850][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.985409][ T5831] bridge_slave_1: entered allmulticast mode [ 81.988565][ T5831] bridge_slave_1: entered promiscuous mode [ 81.997157][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.027801][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.043677][ T5841] Bluetooth: hci4: command tx timeout [ 82.144034][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.202409][ T5841] Bluetooth: hci0: command tx timeout [ 82.202512][ T5841] Bluetooth: hci3: command tx timeout [ 82.202976][ T5842] Bluetooth: hci1: command tx timeout [ 82.203568][ T5841] Bluetooth: hci2: command tx timeout [ 82.210236][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.256927][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.294716][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.298649][ T5832] team0: Port device team_slave_0 added [ 82.313906][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.318449][ T5828] team0: Port device team_slave_0 added [ 82.345044][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.347625][ T5832] team0: Port device team_slave_1 added [ 82.371085][ T5828] team0: Port device team_slave_1 added [ 82.378002][ T5830] team0: Port device team_slave_0 added [ 82.452446][ T5830] team0: Port device team_slave_1 added [ 82.483082][ T5829] team0: Port device team_slave_0 added [ 82.515812][ T5831] team0: Port device team_slave_0 added [ 82.517634][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.517643][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.517656][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.524185][ T5829] team0: Port device team_slave_1 added [ 82.526317][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.526330][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.526353][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.561053][ T5831] team0: Port device team_slave_1 added [ 82.564175][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.564188][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.564210][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.588178][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.588192][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.588216][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.590865][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.590877][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.590900][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.674500][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.674515][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.674538][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.713965][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.713980][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.714003][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.737933][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.737948][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.737971][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.748024][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.748039][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.748062][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.755409][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.755423][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.755445][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.925302][ T5832] hsr_slave_0: entered promiscuous mode [ 82.927675][ T5832] hsr_slave_1: entered promiscuous mode [ 82.946848][ T5828] hsr_slave_0: entered promiscuous mode [ 82.948852][ T5828] hsr_slave_1: entered promiscuous mode [ 82.950593][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 82.950693][ T5828] Cannot create hsr debugfs directory [ 83.018995][ T5830] hsr_slave_0: entered promiscuous mode [ 83.020159][ T5830] hsr_slave_1: entered promiscuous mode [ 83.021081][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 83.021103][ T5830] Cannot create hsr debugfs directory [ 83.099696][ T5829] hsr_slave_0: entered promiscuous mode [ 83.100894][ T5829] hsr_slave_1: entered promiscuous mode [ 83.102777][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 83.102799][ T5829] Cannot create hsr debugfs directory [ 83.134034][ T5831] hsr_slave_0: entered promiscuous mode [ 83.135209][ T5831] hsr_slave_1: entered promiscuous mode [ 83.136645][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 83.136666][ T5831] Cannot create hsr debugfs directory [ 84.121765][ T5842] Bluetooth: hci4: command tx timeout [ 84.285037][ T5842] Bluetooth: hci2: command tx timeout [ 84.285067][ T5842] Bluetooth: hci3: command tx timeout [ 84.285083][ T5842] Bluetooth: hci0: command tx timeout [ 84.292166][ T5841] Bluetooth: hci1: command tx timeout [ 84.359671][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.424976][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.456432][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.486071][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.488163][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.531162][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.567197][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.612658][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.735601][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.779240][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.793838][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.835959][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.854747][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.897149][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.917616][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.968758][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.130718][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.161393][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.172888][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.196170][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.205424][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.237208][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.267392][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.297136][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.459325][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.515352][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.531976][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.583731][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.603037][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.640210][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.668921][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.700029][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.816298][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.878921][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.916980][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.921075][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.970666][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.983259][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.018181][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.038675][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.066641][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.105441][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.154690][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.155526][ T3079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.184711][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.203180][ T5841] Bluetooth: hci4: command tx timeout [ 86.260691][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.260803][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.362521][ T5841] Bluetooth: hci1: command tx timeout [ 86.363111][ T5841] Bluetooth: hci0: command tx timeout [ 86.363136][ T5841] Bluetooth: hci3: command tx timeout [ 86.363154][ T5841] Bluetooth: hci2: command tx timeout [ 86.400807][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.477287][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.484449][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.484647][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.544651][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.544745][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.640470][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.666341][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.705661][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.705948][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.804602][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.804740][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.920207][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.941846][ T1251] cfg80211: failed to load regulatory.db [ 87.010650][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.020812][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.033659][ T3079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.093737][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.093914][ T3079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.195584][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.242703][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.323520][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.324355][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.372428][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.372645][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.638795][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.762218][ T5832] veth0_vlan: entered promiscuous mode [ 87.929063][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.930660][ T5832] veth1_vlan: entered promiscuous mode [ 88.194823][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.244467][ T5832] veth0_macvtap: entered promiscuous mode [ 88.285082][ T5841] Bluetooth: hci4: command tx timeout [ 88.304756][ T5832] veth1_macvtap: entered promiscuous mode [ 88.337427][ T5829] veth0_vlan: entered promiscuous mode [ 88.419415][ T5829] veth1_vlan: entered promiscuous mode [ 88.432362][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.443478][ T5842] Bluetooth: hci0: command tx timeout [ 88.443506][ T5842] Bluetooth: hci1: command tx timeout [ 88.443552][ T5841] Bluetooth: hci2: command tx timeout [ 88.451892][ T5841] Bluetooth: hci3: command tx timeout [ 88.480293][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.506372][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.530871][ T5830] veth0_vlan: entered promiscuous mode [ 88.570735][ T3079] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.596252][ T3079] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.613752][ T3079] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.636798][ T3079] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.646211][ T5830] veth1_vlan: entered promiscuous mode [ 88.655776][ T5828] veth0_vlan: entered promiscuous mode [ 88.819385][ T5828] veth1_vlan: entered promiscuous mode [ 88.882152][ T5829] veth0_macvtap: entered promiscuous mode [ 89.008072][ T5829] veth1_macvtap: entered promiscuous mode [ 89.074459][ T5831] veth0_vlan: entered promiscuous mode [ 89.154168][ T5830] veth0_macvtap: entered promiscuous mode [ 89.175544][ T5831] veth1_vlan: entered promiscuous mode [ 89.202468][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.218650][ T5830] veth1_macvtap: entered promiscuous mode [ 89.224728][ T1374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.224756][ T1374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.287983][ T5828] veth0_macvtap: entered promiscuous mode [ 89.306557][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.356707][ T5828] veth1_macvtap: entered promiscuous mode [ 89.378630][ T1374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.383235][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.383251][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.387988][ T1374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.439277][ T1374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.450462][ T1374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.464939][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.625493][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.652469][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.730604][ T5831] veth0_macvtap: entered promiscuous mode [ 89.751157][ T3079] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.767016][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.825779][ T3079] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.900703][ T3079] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.005312][ T3079] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.030502][ T5831] veth1_macvtap: entered promiscuous mode [ 90.058356][ T3079] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.122616][ T3079] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.183894][ T3079] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.232790][ T3079] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.268672][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.268692][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.899895][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.671608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.691626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.701641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.711624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.721625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.731627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.741627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.751618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.761621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.949014][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6'. [ 97.415575][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.419181][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.419202][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.529240][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.639013][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.656497][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.719993][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.725300][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.725323][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.040272][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.040292][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.667433][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.667452][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.816109][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.816127][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.042830][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.042846][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.671616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.031022][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.031041][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.466232][ T5979] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 104.065512][ T5817] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.583111][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 105.583133][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 105.583158][ T6010] netlink: 'syz.2.17': attribute type 13 has an invalid length. [ 105.583172][ T6010] netlink: 'syz.2.17': attribute type 12 has an invalid length. [ 107.703557][ T6006] syz.4.19 uses obsolete (PF_INET,SOCK_PACKET) [ 111.073241][ T6031] netlink: 'syz.0.21': attribute type 44 has an invalid length. [ 111.073261][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 112.534701][ T6053] netlink: 'syz.4.30': attribute type 5 has an invalid length. [ 112.913030][ T1251] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.601706][ T1251] usb 2-1: Using ep0 maxpacket: 8 [ 113.618581][ T1251] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 113.618611][ T1251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.871733][ T5960] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.043989][ T5960] usb 3-1: Using ep0 maxpacket: 8 [ 114.145978][ T6069] random: crng reseeded on system resumption [ 114.718945][ T5960] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 114.718976][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 114.718995][ T5960] usb 3-1: Product: syz [ 114.719008][ T5960] usb 3-1: Manufacturer: syz [ 114.719020][ T5960] usb 3-1: SerialNumber: syz [ 114.966830][ T1251] pvrusb2: Hardware description: Terratec Grabster AV400 [ 114.966849][ T1251] pvrusb2: ********** [ 114.966856][ T1251] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 114.966866][ T1251] pvrusb2: Important functionality might not be entirely working. [ 114.966874][ T1251] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 114.966884][ T1251] pvrusb2: ********** [ 115.124960][ T2373] pvrusb2: Invalid write control endpoint [ 115.211406][ T5960] usb 3-1: config 0 descriptor?? [ 115.373684][ T10] usb 2-1: USB disconnect, device number 2 [ 115.703971][ T5960] gspca_main: sq905-2.14.0 probing 2770:9120 [ 116.690352][ T5960] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 116.690626][ T5960] sq905 3-1:0.0: probe with driver sq905 failed with error -110 [ 119.635498][ T2373] pvrusb2: Invalid write control endpoint [ 119.635513][ T2373] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 119.635522][ T2373] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 119.635529][ T2373] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 119.635542][ T2373] pvrusb2: Device being rendered inoperable [ 119.635665][ T2373] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 119.745828][ T2373] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 120.827727][ T6102] input: syz0 as /devices/virtual/input/input5 [ 120.913271][ T2373] pvrusb2: Attached sub-driver cx25840 [ 120.913285][ T2373] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 120.913293][ T2373] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 120.960851][ T6109] netlink: 'syz.1.45': attribute type 44 has an invalid length. [ 120.960872][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 121.223581][ T1251] usb 3-1: USB disconnect, device number 2 [ 121.996970][ T6127] Zero length message leads to an empty skb [ 122.635662][ T5921] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 122.757214][ T6139] tipc: Started in network mode [ 122.757245][ T6139] tipc: Node identity dac6564201d3, cluster identity 4711 [ 122.757908][ T6139] tipc: Enabled bearer , priority 0 [ 122.797792][ T5492] veth0_vlan: left promiscuous mode [ 122.848902][ T5492] veth0_vlan: entered promiscuous mode [ 123.021512][ T5921] usb 5-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 123.021681][ T5921] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.045897][ T5921] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.045924][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 123.045942][ T5921] usb 5-1: Product: syz [ 123.045954][ T5921] usb 5-1: Manufacturer: syz [ 123.045967][ T5921] usb 5-1: SerialNumber: syz [ 123.075723][ T5921] usb 5-1: config 0 descriptor?? [ 123.174850][ T6138] tipc: Resetting bearer [ 123.221297][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.398262][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 123.427000][ T32] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 123.427027][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.510336][ T6137] tipc: Disabling bearer [ 123.583739][ T32] pvrusb2: Hardware description: Terratec Grabster AV400 [ 123.583750][ T32] pvrusb2: ********** [ 123.583754][ T32] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 123.583760][ T32] pvrusb2: Important functionality might not be entirely working. [ 123.583764][ T32] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 123.583769][ T32] pvrusb2: ********** [ 123.751741][ T2373] pvrusb2: Invalid write control endpoint [ 123.771679][ T5817] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.921680][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 123.938650][ T5817] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 123.938680][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.938698][ T5817] usb 2-1: Product: syz [ 123.938711][ T5817] usb 2-1: Manufacturer: syz [ 123.938732][ T5817] usb 2-1: SerialNumber: syz [ 123.983405][ T5817] usb 2-1: config 0 descriptor?? [ 124.030736][ T5817] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 124.042560][ T6145] pvrusb2: Invalid write control endpoint [ 124.345209][ T6166] affs: No valid root block on device nullb0 [ 126.194608][ T32] usb 1-1: USB disconnect, device number 2 [ 127.096494][ T5817] usb 2-1: clie_3_5_startup: get config number failed: -110 [ 127.096670][ T5817] visor 2-1:0.0: probe with driver visor failed with error -110 [ 127.281317][ T2373] pvrusb2: Invalid write control endpoint [ 127.281332][ T2373] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 127.281340][ T2373] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 127.281348][ T2373] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 127.281356][ T2373] pvrusb2: Device being rendered inoperable [ 127.608319][ T2373] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 127.608375][ T2373] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 127.814165][ T5817] usb 2-1: USB disconnect, device number 3 [ 127.999413][ T6180] netlink: 'syz.0.61': attribute type 44 has an invalid length. [ 127.999435][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 128.133588][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 128.134266][ T6170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.324606][ T2373] pvrusb2: Attached sub-driver cx25840 [ 128.324621][ T2373] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 128.324630][ T2373] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 128.480049][ T6187] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.088055][ T6198] input: syz0 as /devices/virtual/input/input6 [ 130.937018][ T6214] binder: 6209:6214 ioctl c0306201 0 returned -14 [ 131.316719][ T5921] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 131.418041][ T5921] usb 5-1: USB disconnect, device number 3 [ 131.536809][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 131.537369][ T6231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.622309][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 131.622336][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 131.622354][ T6233] netlink: 304 bytes leftover after parsing attributes in process `syz.2.76'. [ 131.877479][ T6240] netlink: 'syz.4.77': attribute type 44 has an invalid length. [ 131.877492][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 131.941891][ T6075] udevd[6075]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.825107][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.825236][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.876362][ T1335] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 136.765337][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 136.816083][ T6277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.079096][ T6281] trusted_key: encrypted_key: insufficient parameters specified [ 137.404587][ T6298] netlink: 'syz.1.93': attribute type 44 has an invalid length. [ 137.404607][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 142.067718][ T6316] syz.1.96 (6316) used greatest stack depth: 18928 bytes left [ 142.454254][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 142.454278][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 142.454292][ T6338] netlink: 124 bytes leftover after parsing attributes in process `syz.4.101'. [ 143.494060][ T6361] netlink: 'syz.0.106': attribute type 44 has an invalid length. [ 143.494079][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 145.012415][ T6371] trusted_key: encrypted_key: insufficient parameters specified [ 147.806664][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 147.806687][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 147.806700][ T6393] netlink: 124 bytes leftover after parsing attributes in process `syz.2.113'. [ 148.272357][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.368235][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.370157][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.372740][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.374705][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.573992][ T61] Bluetooth: hci5: command tx timeout [ 151.591483][ T6425] netlink: 'syz.0.120': attribute type 44 has an invalid length. [ 151.591496][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 152.486389][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 152.486414][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 152.486428][ T6438] netlink: 124 bytes leftover after parsing attributes in process `syz.0.126'. [ 153.975351][ T61] Bluetooth: hci5: command tx timeout [ 154.391650][ T5921] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 154.595031][ T5921] usb 5-1: config 35 has an invalid interface number: 120 but max is 0 [ 154.595057][ T5921] usb 5-1: config 35 has no interface number 0 [ 154.595098][ T5921] usb 5-1: config 35 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.595123][ T5921] usb 5-1: config 35 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.595146][ T5921] usb 5-1: config 35 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 154.596509][ T5921] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 154.596531][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 154.596546][ T5921] usb 5-1: Product: syz [ 154.620677][ T6460] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.859690][ T5921] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:35.120/input/input13 [ 155.358009][ T125] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.999337][ T5921] usb 5-1: USB disconnect, device number 4 [ 156.043183][ T61] Bluetooth: hci5: command tx timeout [ 156.154185][ C0] usbtouchscreen 5-1:35.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 156.408466][ T32] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 156.569445][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 156.574226][ T32] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 156.574252][ T32] usb 3-1: config 254 has no interface number 0 [ 156.574293][ T32] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 156.574315][ T32] usb 3-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0x25, changing to 0x5 [ 156.574339][ T32] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x5 has an invalid bInterval 175, changing to 7 [ 156.574362][ T32] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x5 has invalid maxpacket 17976, setting to 1024 [ 156.574386][ T32] usb 3-1: config 254 interface 235 has no altsetting 0 [ 156.618709][ T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 156.618736][ T32] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 156.618752][ T32] usb 3-1: Product: syz [ 156.618762][ T32] usb 3-1: Manufacturer: syz [ 156.618773][ T32] usb 3-1: SerialNumber: syz [ 156.787342][ T6480] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.896637][ T125] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.019994][ T32] usbtest 3-1:254.235: couldn't get endpoints, -71 [ 157.020077][ T32] usbtest 3-1:254.235: probe with driver usbtest failed with error -71 [ 157.061263][ T32] usb 3-1: USB disconnect, device number 3 [ 157.204731][ T6401] chnl_net:caif_netlink_parms(): no params data found [ 157.749973][ T6506] random: crng reseeded on system resumption [ 158.559910][ T61] Bluetooth: hci5: command tx timeout [ 159.514821][ T125] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.642123][ T125] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.161610][ T6558] random: crng reseeded on system resumption [ 164.215468][ T6401] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.217645][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.217969][ T6401] bridge_slave_0: entered allmulticast mode [ 164.227279][ T6401] bridge_slave_0: entered promiscuous mode [ 164.280916][ T6401] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.281230][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.301492][ T6401] bridge_slave_1: entered allmulticast mode [ 164.319591][ T6401] bridge_slave_1: entered promiscuous mode [ 164.583477][ T6401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.669493][ T6401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.601483][ T6401] team0: Port device team_slave_0 added [ 167.642327][ T6401] team0: Port device team_slave_1 added [ 168.925102][ T6401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.925120][ T6401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.925144][ T6401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.992820][ T6401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.992837][ T6401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.992861][ T6401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.364508][ T6628] bond1: option arp_interval: invalid value (18446744073709551615) [ 169.364535][ T6628] bond1: option arp_interval: allowed values 0 - 2147483647 [ 169.444310][ T6628] bond1 (unregistering): Released all slaves [ 169.705551][ T6645] random: crng reseeded on system resumption [ 170.733322][ T6667] input: syz0 as /devices/virtual/input/input17 [ 171.502041][ T6401] hsr_slave_0: entered promiscuous mode [ 171.520762][ T6401] hsr_slave_1: entered promiscuous mode [ 171.532014][ T6401] debugfs: 'hsr0' already exists in 'hsr' [ 171.532040][ T6401] Cannot create hsr debugfs directory [ 174.128652][ T125] bridge_slave_1: left allmulticast mode [ 174.209151][ T125] bridge_slave_1: left promiscuous mode [ 174.247371][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.472207][ T125] bridge_slave_0: left allmulticast mode [ 174.472329][ T125] bridge_slave_0: left promiscuous mode [ 174.472738][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.204235][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 178.442429][ T5817] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 178.452589][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.532787][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.553763][ T125] bond0 (unregistering): Released all slaves [ 178.598354][ T6717] tipc: Started in network mode [ 178.598366][ T6717] tipc: Node identity , cluster identity 4711 [ 178.598418][ T6717] tipc: Failed to obtain node identity [ 178.598436][ T6717] tipc: Enabling of bearer rejected, failed to enable media [ 178.672467][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 178.702997][ T5817] usb 3-1: config 123 interface 0 has no altsetting 0 [ 178.705521][ T5817] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 178.705545][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.705563][ T5817] usb 3-1: Product: syz [ 178.705576][ T5817] usb 3-1: Manufacturer: syz [ 178.705589][ T5817] usb 3-1: SerialNumber: syz [ 179.008300][ T5817] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 179.271059][ T6703] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 179.271095][ T6703] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 179.271105][ T6703] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 179.618580][ T125] tipc: Left network mode [ 179.980432][ T6743] input: syz0 as /devices/virtual/input/input18 [ 180.837486][ T5817] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 180.838362][ T5817] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 180.838543][ T5817] usb 3-1: media controller created [ 180.875782][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.863794][ T5817] set interface failed [ 181.864358][ T5817] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 181.864379][ T5817] error writing reg: 0xff, val: 0x00 [ 182.512134][ T5817] dvb_usb_mxl111sf 3-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 182.533592][ T5817] usb 3-1: USB disconnect, device number 4 [ 183.227973][ T6774] input: syz0 as /devices/virtual/input/input19 [ 185.400167][ T5837] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 186.505449][ T5837] usb 2-1: device not accepting address 4, error -71 [ 187.854475][ T6817] overlayfs: failed to resolve './file1': -2 [ 189.014032][ T5492] 8021q: adding VLAN 0 to HW filter on device eth1 [ 190.667807][ T6874] overlayfs: failed to resolve './file1': -2 [ 192.056716][ T125] hsr_slave_0: left promiscuous mode [ 192.103078][ T125] hsr_slave_1: left promiscuous mode [ 192.129033][ T125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.129152][ T125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.166430][ T125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.166455][ T125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.478019][ T6909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.849053][ T125] veth1_macvtap: left promiscuous mode [ 192.849206][ T125] veth0_macvtap: left promiscuous mode [ 192.850924][ T125] veth1_vlan: left promiscuous mode [ 192.851215][ T125] veth0_vlan: left promiscuous mode [ 193.912275][ T125] team0 (unregistering): Port device team_slave_1 removed [ 193.974831][ T125] team0 (unregistering): Port device team_slave_0 removed [ 194.268549][ T5492] 8021q: adding VLAN 0 to HW filter on device eth2 [ 194.423745][ T6401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.465978][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.466071][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.509508][ T1335] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 194.632070][ T6401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.551593][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 195.681216][ T6942] overlayfs: failed to resolve './file1': -2 [ 196.064199][ T6401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 196.154603][ T6401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.621223][ T6401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 197.249287][ T6401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 197.258869][ T6401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 197.835215][ T6401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.913497][ T6401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.999968][ T6401] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.123336][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.123564][ T6939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.305691][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.306691][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.169105][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'. [ 201.947282][ T5492] 8021q: adding VLAN 0 to HW filter on device eth3 [ 206.547256][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'. [ 206.776815][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 206.776878][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 207.003046][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 207.003086][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 207.801443][ T5492] 8021q: adding VLAN 0 to HW filter on device eth4 [ 211.468123][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.504515][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.508673][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.540717][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.560685][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.633793][ T7130] binder: 7128:7130 ioctl c0306201 0 returned -14 [ 211.947867][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 212.096174][ T7138] syzkaller0: entered promiscuous mode [ 212.096200][ T7138] syzkaller0: entered allmulticast mode [ 213.807723][ T5842] Bluetooth: hci1: command tx timeout [ 214.503464][ T5837] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 214.550509][ T7168] QAT: failed to copy from user. [ 214.651635][ T5837] usb 5-1: Using ep0 maxpacket: 8 [ 214.659311][ T5837] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 214.659340][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.689396][ T5948] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 214.712823][ T5837] pvrusb2: Hardware description: Terratec Grabster AV400 [ 214.712842][ T5837] pvrusb2: ********** [ 214.712848][ T5837] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 214.712859][ T5837] pvrusb2: Important functionality might not be entirely working. [ 214.712867][ T5837] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 214.712877][ T5837] pvrusb2: ********** [ 214.857558][ T5948] usb 1-1: Using ep0 maxpacket: 8 [ 214.865279][ T5948] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 214.865304][ T5948] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.865321][ T5948] usb 1-1: config 0 has no interface number 0 [ 214.868278][ T5948] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 214.868303][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.868321][ T5948] usb 1-1: Product: syz [ 214.868333][ T5948] usb 1-1: Manufacturer: syz [ 214.868346][ T5948] usb 1-1: SerialNumber: syz [ 214.891290][ T5948] usb 1-1: config 0 descriptor?? [ 214.898449][ T5948] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 214.898489][ T5948] uvcvideo 1-1:0.31: No valid video chain found. [ 215.052598][ T2373] pvrusb2: Invalid write control endpoint [ 215.165678][ T7166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.202564][ T7166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.206731][ T7166] netlink: 48 bytes leftover after parsing attributes in process `syz.0.312'. [ 215.263223][ T7163] pvrusb2: Invalid write control endpoint [ 215.279242][ T7178] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.312'. [ 215.298126][ T5837] usb 5-1: USB disconnect, device number 5 [ 215.435447][ T2373] pvrusb2: Invalid write control endpoint [ 215.435462][ T2373] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 215.435470][ T2373] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 215.435476][ T2373] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 215.435483][ T2373] pvrusb2: Device being rendered inoperable [ 215.435552][ T2373] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 215.435604][ T2373] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 215.460404][ T7172] vlan2: entered promiscuous mode [ 215.460427][ T7172] geneve1: entered promiscuous mode [ 215.484718][ T7172] vlan2: entered allmulticast mode [ 215.484740][ T7172] geneve1: entered allmulticast mode [ 215.627547][ T2373] pvrusb2: Attached sub-driver cx25840 [ 215.627558][ T2373] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 215.627563][ T2373] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 215.702471][ T7166] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 215.828698][ T7166] bond1 (unregistering): Released all slaves [ 215.895715][ T5842] Bluetooth: hci1: command tx timeout [ 217.833573][ T5948] usb 1-1: USB disconnect, device number 3 [ 217.977070][ T5842] Bluetooth: hci1: command tx timeout [ 218.292930][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'. [ 219.894888][ T5837] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 219.895162][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 220.048350][ T5842] Bluetooth: hci1: command tx timeout [ 220.057752][ T5837] usb 2-1: device descriptor read/64, error -32 [ 220.398614][ T5837] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 220.622580][ T5837] usb 2-1: Using ep0 maxpacket: 8 [ 220.625117][ T5837] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 220.625153][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.664816][ T7120] chnl_net:caif_netlink_parms(): no params data found [ 220.809951][ T5837] pvrusb2: Hardware description: Terratec Grabster AV400 [ 220.809970][ T5837] pvrusb2: ********** [ 220.809977][ T5837] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 220.809986][ T5837] pvrusb2: Important functionality might not be entirely working. [ 220.809994][ T5837] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 220.810004][ T5837] pvrusb2: ********** [ 220.958982][ T2373] pvrusb2: Invalid write control endpoint [ 221.106093][ T2373] pvrusb2: Invalid write control endpoint [ 221.106108][ T2373] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 221.106115][ T2373] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 221.106122][ T2373] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 221.106129][ T2373] pvrusb2: Device being rendered inoperable [ 221.106163][ T2373] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 221.106205][ T2373] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 221.107154][ T2373] pvrusb2: Attached sub-driver cx25840 [ 221.107165][ T2373] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 221.107174][ T2373] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 221.169890][ T7221] pvrusb2: Attempted to execute control transfer when device not ok [ 221.228578][ T5837] usb 2-1: USB disconnect, device number 7 [ 222.166789][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.167167][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.167444][ T7120] bridge_slave_0: entered allmulticast mode [ 222.171116][ T7120] bridge_slave_0: entered promiscuous mode [ 222.220253][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.222014][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.222356][ T7120] bridge_slave_1: entered allmulticast mode [ 222.251859][ T7120] bridge_slave_1: entered promiscuous mode [ 222.322625][ T7277] binder: 7276:7277 ioctl c0306201 0 returned -14 [ 222.562487][ T7268] syzkaller1: entered promiscuous mode [ 222.562504][ T7268] syzkaller1: entered allmulticast mode [ 222.568510][ T7275] syzkaller0: entered promiscuous mode [ 222.568535][ T7275] syzkaller0: entered allmulticast mode [ 222.761656][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 223.011723][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 223.018550][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 223.018577][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.939631][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 223.939648][ T10] pvrusb2: ********** [ 223.939654][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 223.939720][ T10] pvrusb2: Important functionality might not be entirely working. [ 223.939729][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 223.939738][ T10] pvrusb2: ********** [ 223.995473][ T2373] pvrusb2: Invalid write control endpoint [ 224.099875][ T2373] pvrusb2: Invalid write control endpoint [ 224.099890][ T2373] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 224.099898][ T2373] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 224.099904][ T2373] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 224.099912][ T2373] pvrusb2: Device being rendered inoperable [ 224.099948][ T2373] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 224.099992][ T2373] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 224.125431][ T2373] pvrusb2: Attached sub-driver cx25840 [ 224.125446][ T2373] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 224.125455][ T2373] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 224.165198][ T5921] usb 3-1: USB disconnect, device number 5 [ 224.394897][ T7120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.511918][ T3492] bridge_slave_1: left allmulticast mode [ 224.511943][ T3492] bridge_slave_1: left promiscuous mode [ 224.517488][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.572746][ T3492] bridge_slave_0: left allmulticast mode [ 224.572770][ T3492] bridge_slave_0: left promiscuous mode [ 224.572976][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.065645][ T7306] binder: 7305:7306 ioctl c0306201 0 returned -14 [ 226.064141][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 227.087172][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.165542][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.183048][ T7323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.208383][ T3492] bond0 (unregistering): Released all slaves [ 227.386331][ T7120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.544869][ T5921] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 227.640516][ T7120] team0: Port device team_slave_0 added [ 227.655573][ T7120] team0: Port device team_slave_1 added [ 227.668756][ T7330] binder: 7329:7330 ioctl c0306201 0 returned -14 [ 227.701658][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 227.734017][ T5921] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 227.734044][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.819393][ T5921] pvrusb2: Hardware description: Terratec Grabster AV400 [ 227.819408][ T5921] pvrusb2: ********** [ 227.819414][ T5921] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 227.819424][ T5921] pvrusb2: Important functionality might not be entirely working. [ 227.819428][ T5921] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 227.819434][ T5921] pvrusb2: ********** [ 227.981182][ T2373] pvrusb2: Invalid write control endpoint [ 228.113891][ T2373] pvrusb2: Invalid write control endpoint [ 228.113904][ T2373] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 228.113913][ T2373] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 228.113921][ T2373] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 228.113929][ T2373] pvrusb2: Device being rendered inoperable [ 228.113996][ T2373] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 228.114042][ T2373] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 228.118026][ T2373] pvrusb2: Attached sub-driver cx25840 [ 228.118039][ T2373] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 228.118048][ T2373] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 228.178581][ T7325] pvrusb2: Attempted to execute control transfer when device not ok [ 228.198296][ T5921] usb 5-1: USB disconnect, device number 6 [ 228.281783][ T3492] hsr_slave_0: left promiscuous mode [ 228.321652][ T3492] hsr_slave_1: left promiscuous mode [ 228.322647][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.346201][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.606906][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 229.685503][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 229.985369][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.985384][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.985407][ T7120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.065015][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.065027][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.065041][ T7120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.263114][ T7360] vlan2: entered promiscuous mode [ 230.263133][ T7360] geneve1: entered promiscuous mode [ 230.263339][ T7360] vlan2: entered allmulticast mode [ 230.263352][ T7360] geneve1: entered allmulticast mode [ 230.605343][ T7120] hsr_slave_0: entered promiscuous mode [ 230.607479][ T7120] hsr_slave_1: entered promiscuous mode [ 230.609215][ T7120] debugfs: 'hsr0' already exists in 'hsr' [ 230.609237][ T7120] Cannot create hsr debugfs directory [ 230.956448][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 231.151783][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 231.155500][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 231.155527][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.286449][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 231.286462][ T10] pvrusb2: ********** [ 231.286466][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 231.286471][ T10] pvrusb2: Important functionality might not be entirely working. [ 231.286475][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 231.286480][ T10] pvrusb2: ********** [ 231.473761][ T2373] pvrusb2: Invalid write control endpoint [ 231.661350][ T7373] pvrusb2: Invalid write control endpoint [ 231.758869][ T10] usb 5-1: USB disconnect, device number 7 [ 231.896697][ T2373] pvrusb2: Invalid write control endpoint [ 231.896711][ T2373] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 231.896720][ T2373] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 231.896727][ T2373] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 231.896736][ T2373] pvrusb2: Device being rendered inoperable [ 231.896760][ T2373] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 231.896805][ T2373] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 232.589685][ T2373] pvrusb2: Attached sub-driver cx25840 [ 232.589701][ T2373] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 232.589710][ T2373] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 232.835171][ T5492] 8021q: adding VLAN 0 to HW filter on device eth5 [ 232.975029][ T7403] vlan2: entered promiscuous mode [ 232.975049][ T7403] geneve1: entered promiscuous mode [ 232.975273][ T7403] vlan2: entered allmulticast mode [ 232.975286][ T7403] geneve1: entered allmulticast mode [ 233.192423][ T7410] netlink: 'syz.0.393': attribute type 39 has an invalid length. [ 234.678727][ T821] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 235.621807][ T821] usb 1-1: Using ep0 maxpacket: 8 [ 235.624199][ T821] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 235.624225][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.704453][ T821] pvrusb2: Hardware description: Terratec Grabster AV400 [ 235.704472][ T821] pvrusb2: ********** [ 235.704478][ T821] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 235.704488][ T821] pvrusb2: Important functionality might not be entirely working. [ 235.704496][ T821] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 235.704506][ T821] pvrusb2: ********** [ 235.833940][ T820] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 235.880181][ T2373] pvrusb2: Invalid write control endpoint [ 235.983551][ T820] usb 5-1: Using ep0 maxpacket: 32 [ 235.986195][ T820] usb 5-1: config 123 interface 0 has no altsetting 0 [ 235.996908][ T820] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 235.996935][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.996953][ T820] usb 5-1: Product: syz [ 235.996966][ T820] usb 5-1: Manufacturer: syz [ 235.996978][ T820] usb 5-1: SerialNumber: syz [ 236.043880][ T2373] pvrusb2: Invalid write control endpoint [ 236.043894][ T2373] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 236.043903][ T2373] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 236.043910][ T2373] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 236.043919][ T2373] pvrusb2: Device being rendered inoperable [ 236.043986][ T2373] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 236.044031][ T2373] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 236.044996][ T2373] pvrusb2: Attached sub-driver cx25840 [ 236.045006][ T2373] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 236.045013][ T2373] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 236.099280][ T7436] pvrusb2: Attempted to execute control transfer when device not ok [ 236.226819][ T5837] usb 1-1: USB disconnect, device number 4 [ 236.423433][ T820] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 236.541008][ T820] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 236.541445][ T820] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 236.546064][ T820] usb 5-1: media controller created [ 236.669172][ T820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.980408][ T820] set interface failed [ 236.980431][ T820] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 236.980451][ T820] error writing reg: 0xff, val: 0x00 [ 237.197118][ T7491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 237.207165][ T820] dvb_usb_mxl111sf 5-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 237.234802][ T820] usb 5-1: USB disconnect, device number 8 [ 237.348880][ T7475] syzkaller0: entered promiscuous mode [ 237.348895][ T7475] syzkaller0: entered allmulticast mode [ 239.231738][ T821] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 239.381795][ T821] usb 3-1: Using ep0 maxpacket: 32 [ 239.397279][ T821] usb 3-1: config 123 interface 0 has no altsetting 0 [ 239.410275][ T821] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 239.410302][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.410320][ T821] usb 3-1: Product: syz [ 239.410333][ T821] usb 3-1: Manufacturer: syz [ 239.410346][ T821] usb 3-1: SerialNumber: syz [ 241.001376][ T821] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 241.043322][ T821] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 241.044939][ T821] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 241.044988][ T821] usb 3-1: media controller created [ 241.085297][ T7548] netlink: 'syz.1.428': attribute type 44 has an invalid length. [ 241.085315][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 241.158872][ T821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.266639][ T821] set interface failed [ 241.266661][ T821] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 241.266680][ T821] error writing reg: 0xff, val: 0x00 [ 241.383249][ T821] dvb_usb_mxl111sf 3-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 241.422071][ T821] usb 3-1: USB disconnect, device number 6 [ 241.427460][ T7120] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.612300][ T7120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 241.639277][ T7120] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.767187][ T7120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 241.777904][ T7120] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.857014][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 241.906796][ T7120] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 241.944046][ T7120] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 242.125910][ T7120] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 242.720599][ T7594] netlink: 'syz.2.439': attribute type 44 has an invalid length. [ 242.720619][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 242.938219][ T7120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.140421][ T7120] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.238079][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.239215][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.474760][ T1251] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 244.294481][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.294642][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.361943][ T1251] usb 2-1: Using ep0 maxpacket: 32 [ 244.363988][ T1251] usb 2-1: config 123 interface 0 has no altsetting 0 [ 244.366755][ T1251] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 244.366781][ T1251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.366798][ T1251] usb 2-1: Product: syz [ 244.366811][ T1251] usb 2-1: Manufacturer: syz [ 244.366824][ T1251] usb 2-1: SerialNumber: syz [ 244.428461][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.447'. [ 244.752773][ T1251] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 244.781318][ T1251] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 244.785781][ T1251] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 244.785831][ [ 244.785831][ T1251] usb 2-1: media controller created [ 244.794679][ T7624] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 244.794702][ T7624] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 244.794736][ T7624] CPU: 1 UID: 0 PID: 7624 Comm: syz.0.451 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 244.794766][ T7624] Tainted: [L]=SOFTLOCKUP [ 244.794773][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 244.794784][ T7624] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 244.794818][ T7624] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 244.794834][ T7624] RSP: 0018:ffffc90005f3f4d8 EFLAGS: 00010206 [ 244.794858][ T7624] RAX: dffffc0000000000 RBX: ffffffff8b395f5a RCX: 0000000080000001 [ 244.794872][ T7624] RDX: 0000000000000000 RSI: ffffffff8b395f5a RDI: 0000000000000018 [ 244.794885][ T7624] RBP: ffffffff8780be46 R08: 0000000000000001 R09: 0000000000000000 [ 244.794896][ T7624] R10: dffffc0000000000 R11: ffffed1007a8992a R12: 0000000000000000 [ 244.794908][ T7624] R13: 00000000000000c0 R14: 00000000000000c0 R15: 0000000000000001 [ 244.794919][ T7624] FS: 00007f1f739b66c0(0000) GS:ffff888125fb4000(0000) knlGS:0000000000000000 [ 244.794935][ T7624] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.794947][ T7624] CR2: 000000110c38b9d9 CR3: 00000000410e6000 CR4: 00000000003526f0 [ 244.794963][ T7624] Call Trace: [ 244.794973][ T7624] [ 244.794980][ T7624] __kasan_check_byte+0x12/0x40 [ 244.795006][ T7624] lock_acquire+0x84/0x350 [ 244.795033][ T7624] ? dvb_usbv2_generic_write+0x26/0x60 [ 244.795053][ T7624] ? dvb_usbv2_generic_write+0x26/0x60 [ 244.795070][ T7624] mutex_lock_nested+0x5a/0x1d0 [ 244.795088][ T7624] ? dvb_usbv2_generic_write+0x26/0x60 [ 244.795104][ T7624] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.795128][ T7624] dvb_usbv2_generic_write+0x26/0x60 [ 244.795146][ T7624] mxl111sf_ctrl_msg+0x160/0x2f0 [ 244.795171][ T7624] mxl111sf_write_reg+0xa9/0x1b0 [ 244.795199][ T7624] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 244.795220][ T7624] ? lockdep_hardirqs_on+0x7a/0x110 [ 244.795243][ T7624] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.795267][ T7624] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 244.795286][ T7624] ? mxl111sf_i2c_xfer+0x173/0x5100 [ 244.795313][ T7624] mxl111sf_i2c_xfer+0x496/0x5100 [ 244.795338][ T7624] ? unwind_next_frame+0xa6/0x2550 [ 244.795374][ T7624] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 244.795399][ T7624] ? is_bpf_text_address+0x292/0x2b0 [ 244.795423][ T7624] ? is_bpf_text_address+0x26/0x2b0 [ 244.795447][ T7624] ? kernel_text_address+0xa5/0xe0 [ 244.795473][ T7624] ? __kernel_text_address+0xd/0x30 [ 244.795498][ T7624] ? unwind_get_return_address+0x4d/0x90 [ 244.795520][ T7624] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 244.795541][ T7624] ? arch_stack_walk+0xfb/0x150 [ 244.795568][ T7624] ? stack_trace_save+0xa9/0x100 [ 244.795587][ T7624] ? __pfx_stack_trace_save+0x10/0x10 [ 244.795607][ T7624] ? __lock_acquire+0x6b5/0x2cf0 [ 244.795631][ T7624] ? stack_depot_save_flags+0x33/0x810 [ 244.795651][ T7624] ? __pfx_stack_trace_save+0x10/0x10 [ 244.795670][ T7624] ? look_up_lock_class+0x57/0x110 [ 244.795693][ T7624] ? register_lock_class+0x31/0x2e0 [ 244.795717][ T7624] ? __lock_acquire+0x6b5/0x2cf0 [ 244.795753][ T7624] __i2c_transfer+0x79a/0x1f70 [ 244.795778][ T7624] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 244.795802][ T7624] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.795826][ T7624] ? i2c_transfer+0xc8/0x2d0 [ 244.795850][ T7624] i2c_transfer+0x1cc/0x2d0 [ 244.795874][ T7624] i2cdev_ioctl_rdwr+0x460/0x740 [ 244.795902][ T7624] i2cdev_ioctl+0x6a8/0x890 [ 244.795926][ T7624] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 244.795949][ T7624] ? __fget_files+0x3a6/0x420 [ 244.795970][ T7624] ? __fget_files+0x2a/0x420 [ 244.795992][ T7624] ? bpf_lsm_file_ioctl+0x9/0x20 [ 244.796013][ T7624] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 244.796036][ T7624] __se_sys_ioctl+0xff/0x170 [ 244.796062][ T7624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.796081][ T7624] do_syscall_64+0x15f/0xf80 [ 244.796104][ T7624] ? trace_irq_disable+0x3b/0x140 [ 244.796125][ T7624] ? clear_bhb_loop+0x40/0x90 [ 244.796145][ T7624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.796163][ T7624] RIP: 0033:0x7f1f7575c819 [ 244.796188][ T7624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.796209][ T7624] RSP: 002b:00007f1f739b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.796228][ T7624] RAX: ffffffffffffffda RBX: 00007f1f759d5fa0 RCX: 00007f1f7575c819 [ 244.796242][ T7624] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 244.796254][ T7624] RBP: 00007f1f757f2c91 R08: 0000000000000000 R09: 0000000000000000 [ 244.796266][ T7624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.796276][ T7624] R13: 00007f1f759d6038 R14: 00007f1f759d5fa0 R15: 00007ffec4586cc8 [ 244.796297][ T7624] [ 244.796304][ T7624] Modules linked in: [ 244.796344][ T7624] ---[ end trace 0000000000000000 ]--- [ 244.799420][ T7624] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 244.799457][ T7624] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 244.799473][ T7624] RSP: 0018:ffffc90005f3f4d8 EFLAGS: 00010206 [ 244.799489][ T7624] RAX: dffffc0000000000 RBX: ffffffff8b395f5a RCX: 0000000080000001 [ 244.799502][ T7624] RDX: 0000000000000000 RSI: ffffffff8b395f5a RDI: 0000000000000018 [ 244.799514][ T7624] RBP: ffffffff8780be46 R08: 0000000000000001 R09: 0000000000000000 [ 244.799526][ T7624] R10: dffffc0000000000 R11: ffffed1007a8992a R12: 0000000000000000 [ 244.799540][ T7624] R13: 00000000000000c0 R14: 00000000000000c0 R15: 0000000000000001 [ 244.799551][ T7624] FS: 00007f1f739b66c0(0000) GS:ffff888125fb4000(0000) knlGS:0000000000000000 [ 244.799568][ T7624] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.799581][ T7624] CR2: 000000110c38b9d9 CR3: 00000000410e6000 CR4: 00000000003526f0 [ 244.799600][ T7624] Kernel panic - not syncing: Fatal exception [ 244.800054][ T7624] Kernel Offset: disabled