last executing test programs: 14m7.897882042s ago: executing program 1 (id=1109): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 14m7.278406934s ago: executing program 1 (id=1112): r0 = socket$unix(0x1, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 14m7.10924297s ago: executing program 1 (id=1113): r0 = inotify_init() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0x80000001}}}, 0x88) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 14m5.346026323s ago: executing program 1 (id=1115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a60", 0xb0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14m3.375908205s ago: executing program 1 (id=1126): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x400000000000003, 0x2) syz_open_dev$video(&(0x7f0000003d00), 0x9, 0xe02) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) close(0x3) 14m3.187400015s ago: executing program 1 (id=1127): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0xb, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 13m47.918092156s ago: executing program 32 (id=1127): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0xb, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 12m18.412665415s ago: executing program 4 (id=1379): syz_io_uring_setup(0x74f9, &(0x7f0000000340)={0x0, 0xff6a, 0x13911, 0x1, 0x200187}, &(0x7f0000003400), &(0x7f0000000240), &(0x7f0000000000)) 12m17.509932882s ago: executing program 4 (id=1381): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x14, 0x0, 0x3, 0x3, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5bf08cece5b99490}, 0x8000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b", 0xa5}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f8", 0x2d}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9", 0xe7}], 0x6, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12m13.720830334s ago: executing program 4 (id=1392): clock_adjtime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) write(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) shutdown(0xffffffffffffffff, 0x1) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x1c, r4, 0x5, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) userfaultfd(0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000080)=@v={0x93, 0x0, 0xa0, 0x16, @generic=0x4, 0x6}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) 11m58.578021981s ago: executing program 33 (id=1392): clock_adjtime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) write(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) shutdown(0xffffffffffffffff, 0x1) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x1c, r4, 0x5, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) userfaultfd(0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000080)=@v={0x93, 0x0, 0xa0, 0x16, @generic=0x4, 0x6}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) 10m40.328629056s ago: executing program 2 (id=1633): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_open_dev$evdev(0x0, 0x1, 0x8c2b01) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7c, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r1, 0x0, 0x317e, 0x4) write$P9_RREAD(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xb) write$tun(r2, &(0x7f0000000840)=ANY=[], 0x11b0) close_range(r0, 0xffffffffffffffff, 0x0) 10m38.298661162s ago: executing program 2 (id=1637): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffff}, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'}) ioctl$BLKPBSZGET(r2, 0x127b, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 10m36.745194924s ago: executing program 2 (id=1641): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x24) 10m36.373741568s ago: executing program 2 (id=1645): socket(0xa, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$qrtr(r0, 0x0, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x522, &(0x7f0000000c40)="$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") 10m32.833929616s ago: executing program 2 (id=1654): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x200000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 10m32.674925189s ago: executing program 2 (id=1657): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) 10m16.20148716s ago: executing program 34 (id=1657): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) 10m10.245091781s ago: executing program 5 (id=1676): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000440)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@uni_xlate}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_mixed}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@rodir}, {@uni_xlateno}]}, 0x81, 0x2a6, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 10m10.24404763s ago: executing program 6 (id=1677): openat(0xffffffffffffff9c, 0x0, 0x149682, 0xc5) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000000)={0x21, &(0x7f0000000600)}) 10m8.722998827s ago: executing program 5 (id=1681): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000100004800400c98008003500", @ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b57002456734348d6042c7ebe17aad5fd1904a7a12e4718c26e4083fad1cb85fd9077e0b91987b1df57ebd0de93"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 10m8.305015152s ago: executing program 5 (id=1684): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaa", 0x79, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)}], 0x1}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d93", 0xe6}], 0x1, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d92", 0xb6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a60", 0xb0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f", 0x9e}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76", 0x59}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf82}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m3.324230028s ago: executing program 0 (id=1690): syz_open_dev$usbfs(0x0, 0x11, 0x1) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000940), 0x20440, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 10m3.248166135s ago: executing program 0 (id=1692): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) umount2(&(0x7f0000000340)='./file0\x00', 0xb) 10m2.049835075s ago: executing program 0 (id=1695): syz_open_dev$usbfs(0x0, 0x11, 0x1) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000940), 0x20440, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 10m2.033319117s ago: executing program 6 (id=1696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, 0x0, 0x42000, 0x70) syz_open_dev$vim2m(0x0, 0x1, 0x2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r4 = fsmount(r3, 0x0, 0x6) fchdir(r4) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 10m2.017368424s ago: executing program 5 (id=1697): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0x0) 10m0.629615872s ago: executing program 6 (id=1699): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x38f9, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x1) write(0xffffffffffffffff, &(0x7f0000000040), 0xffffff4a) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x334, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xfeb1}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 10m0.079086453s ago: executing program 0 (id=1700): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x14, 0x0, 0x3, 0x3, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5bf08cece5b99490}, 0x8000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x50, 0x117, 0x2, 0x35, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf9325571"}], 0x50, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b", 0xa5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9", 0xe7}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9m59.994212882s ago: executing program 5 (id=1701): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6730}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xb34}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 9m59.154045348s ago: executing program 6 (id=1702): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0xb8, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x8d, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9dfcd4bb7391bf43ba726f8bea4e3c1a900000004e52b25dd097e755f75a5b3a8299677050e6a8fa87000000000000000000000028c150b5d110bf9316adb3d6468df0740077e13ff2881e45732221c62688d64c581a4f20aa2b70b98dfbb9d3f0bfc460c5dcb66356e8008e71aaafbb510b0000"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x164, 0x3, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xa5, 0xc, "bcb58aa868678ad4d484b54923b84fb5697e86b84c761c4c07ef145e32645d9bff4d6290172503542afe35a9c3ecae01e42a2eb5280ac48aab9e673e1fb7f9236371891d0471d6ca3fa9e0c961674b9f458b78db879e863859213f0082022a66a63261eac4f8c433eb43cf0dd3e4ec780f7233aef8c17835a221db40d8ffb9b0ac42506fda4543cc4d6259bc6cbe4e96cb43d236340c271a8aa617dffe2f48935d"}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60f44ca7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f3809d8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75391ab4}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x25d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x73}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x101c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3d0, 0x3, 0x0, 0x1, [{0x3cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY={0x370, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "bb0d8d544303c8d637a481d829c9ddda71553b76e941f51f02f2e7b51a3fc62525db4ec360"}, @NFTA_DATA_VALUE={0x35, 0x1, "8e292ec425b239909bdd75b7f4458c2b1334e9902bcd65d2618efc5c5bff18f94e9b9cddfc7d90da941bf01cd99caa02df"}, @NFTA_DATA_VALUE={0x75, 0x1, "b83e89d3267f23019920ab1e5a3881f86c592184ffca4f10baf684ae2af458855e1c48c927dbf6d74def6eb39ad082ff300559c88f98d3daed499d08508bde518ac1a1eb92d78f13847654010e9dac4e2b05810aa643c9a9cdffdba3250faee72002dabe07067be4bbcdc8f75219cf1307"}, @NFTA_DATA_VALUE={0xd5, 0x1, "b7959c41db5b87b23791b23872b1c385b142c6c5e3d10fff46baf3812d5182211702c463b6859a582fcdc6b275e0f4e56f222a4ab639627d9d9d0e68bf4c379d762df155db36281c6447099a772006bb2aaa54c71a5e60725950d551db06efe970fefaffeae540b823f524d116fc01e9061914ffc70f1abbddc6ef818a9a1785613a97c5a724115a1d22236cd472c4daced5365aa2a0655035897cf7729630d7fd1289810e26e3e51dd136e1bb389459724ec9726d9649d68416c2b3831f3babc53f7b8b6717e4af6974fedfc1362fbec9"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xe5, 0x1, "17338e37172f23b8abdecf834e3ca7a74c73037d3a4f99f66fa7d23d2ddff74921d0e28074286563701d2ba1036b5d3e09f0f634ffde7a4c9e9f2e50ba9e3ae79ecd281b90179e7b47d6f02874fda0b230acb2353cf7f7e9ea18afc2dee45978bf550138e09bd44fdca2faf5ee449c15d92a2c1eb546ad557863695114461d0c2fdb0837bbdb3acffa28fa39455554f7379554bfe80c6480c552d5f70ebf279cc34b4c2193b64ae5aa5de36c0134c610f3e5b32c2e83e6a1dcf81a218edcc6db05f9221fff9f05420a014598538054eb9923536c0ef5b6e0ae790aa814a793f85a"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xba8, 0x3, 0x0, 0x1, [{0x428, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x25, 0x1, "71c92cae9b3b550cf7b1f9336a9fa5d3db035a6d869a1a339af600b45413106708"}, @NFTA_DATA_VALUE={0xa5, 0x1, "2e7b7c09181e498e2fc183fa0d4f44d5678c6028f3f0f62c7d961da6a6cf9db7af1a2656c389a545df998e44398475769ab7c496eec91e7403e894ec953c6f8af2d6558e105bc868c8d317a55e55f0a3c72b8392bfa6a10804450c7b1472ff2a327a6ad512faf6917415ee456b56df2b82530b9f84381fb4485dad718b98f6f2e01043c4ea5558422d04872ac923417c2f155b01a158963ddf1ecbc4abe34d5a9a"}, @NFTA_DATA_VALUE={0x31, 0x1, "8b4b6d9c7e9342f82436d33ac6bef41c0b715b5d68823aff8300e9d1c42a461c2e9e026c5a6fb78112977387d9"}]}, @NFTA_SET_ELEM_KEY_END={0xf8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "879dc3147ec50cdf35ce64bbdd210bdf57178c35b26f2aad3137d5d6ed5b9bac7c2581da20e387f8e6d231d54cc24293d57633a5d12a1472f53085cac17815df0124aaa05146144f7b8037b6390e5fa43bd03990d561f61438f58b90485b5eb8eeb54a40fbfb314ce8cb71e45a0c8b7aa2658940815cd0877682b6fa6cc311111566e08023effefc0845911d44f0ab5684b3b47e2ba3e38f7613efd1e715659f5dc734b730c9e0c07c6e0b3dc9a9d13b898a8d813c3b4e402a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "58c28461e2a7e19df7d349ab92ce4980dcf7cabde264a466a52921bfef9c1d7a90d69d4030211c6794bb210e7846b730d7718c0ccffd49cab9a286fe2d2bca29261f31d97c5a7dd02ab65032df3348a4f990c770252920df219c7550e21d536d7815510d8c481dc40232b01c413e788caf68757d253588ff0b5c2493f286e4a0ee"}, @NFTA_DATA_VALUE={0x9d, 0x1, "0d889b1e8988ffd6d89e4da17f0ff2842cf49e4af1be7946f1bf8f129381c022f56cdd5538b4ebf696914dbf1e41e60e72735fec07fba6c23f9a1d830a30387a22c869ae16fd02735df900f575012cef3536b7eef55d6181e84c309b4db6984465b8f824a8d4112b37f7f862b565d282c9bbbb49ff6aa8023569059bef91de9718a83d19a7c7138ecc4e47069fb86e2c0971afd7a97796ebff"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xd, 0x2, 0x1, 0x0, '/dev/sg#\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x800}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7f}, @NFTA_LOG_SNAPLEN={0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x460, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "400d5a5a6c82b528db"}, @NFTA_DATA_VALUE={0x9, 0x1, "1dcd5394ba"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "f59066141f597fd4bb55dd7d5988367486998faf204c7076044da57d580e99e374fa1d74c7ede4870f5d89fd6d4e609479ebb5072ebe57f08351540e585f86767e57b6ff6b0d3ab0e35b3b90b07255d8acea9d2c5352a580793e144b4a165781253187e83904fb9d6bf0968643a9df84b67d7b38b662ffc9f85aa7303a20930d7bd5beb8427f4395b4a8c08feede45f1046120b58e5510d6328c05f672f9eda95ec040cf06a3f4f22227559780"}, @NFTA_DATA_VALUE={0xa1, 0x1, "5a4d1622c3809ebd03a708e39c3baf1b05626d61c0c6fdfc49328fb1148c575f66069e07ee4e8838041b80a34605a75e97e359435a54757da4b2ca89a4357c500e8bcddbabe844b2107b3c2f28742ef8ba57e1d9f32d06775275960402da730b607a7a7d94779adc9367ac00bb5819cf636e7978aa9e7d4d839a0f632f532cb5e241e89046d62e099b162cbd516eff52662b01ae884c07bb14ec480120"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x19c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "7d9c6a23ee8fc18227c3c755e8a34d0ee87ec480ae99efedfae4316aa37b77f22ffdf5d4aea189fa985399c163d99ee688448a94f01d20c5e74c051cd56b2a28158f72da2d361427740d08d71aa5284be883438dea6ecf08876c88993bcdee3330a7045f7d90c3fe24ec984593b1cf6266fd188a997c7553cd0ab3d9a028bb5d2f4c34d3c4c1674842fd043c387f2acac89b3c7c686255bef226dba277df43213110390b6fa42434a17520a26012135155ef6e7ecd2ab19fe507157daebca30b0e4195940556d92f53bba37d040f025ec3fcbfe6bf929a99afedb52f95b424a84bcd018feb473585d5"}, @NFTA_DATA_VALUE={0x35, 0x1, "4e9957e22609836e805cd35ab84e6993cf56638c3211e44da3fa80c8a73aa2f954779f7c58f1d5155f1e6e117c21aadde5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x2d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "9c668180943534491d385454d80479ce52db48be9f33af5f941fceff58619993d3831cd7b8809da1ad9fd8907dfdb68f51a009314ec4d036bbfd448cddc51bc6cdb6e5fef18cdb3471a7945083f237b9038df5464ab82510979db946e95c9338ce64cbbd0d80bccf467d64344b89bb792f4dad33a0b24a36aefc6e3c61b131a890adb1a518c3f99115b94ec91f44d18c29098f109124cf0de61657d50d970158751e8cf6bc63bcfd28bb610e6f1e68059a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "9fd9840f2eee05f7c79090178ef651719692618d1e954c4cb06e4dcabbff2415243092cb8dd87b1a3fe640cddc3de5a8493a3841d77d2e1e13e0ffbb8f4c9414988c65cd575407ce8bbf53efb54e8bb9b470567d27aa618ece22b9f0fb3156c29701fd608225a5490d0b04c8017bcde20bd55f5febe467a370210b8e0d2fcfc6586fed3fb2a3840b388ae57d88cbb431fc86a226c4abdc9667cef0f0b9d332523862aec7407d15b29804b90b1df31a12a959fe49bfc033fb51ceba007333e9f91e6315aa63583381769cd8e5780cdc751f14491542"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "935a6908a7c66a3ca70dc3778a2f6851e62a7823a1d43c0bc1ae10c53bbc82aed9d8ab9847f841bd2f11fc938ce9d5a01b267ea38af2aad637c010685a"}]}, @NFTA_SET_ELEM_KEY={0xdc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xc5, 0x1, "6c80eda3273c221e91844d6ffa0071d2bb7cf40b9bb037731be2c0d1bc09a0e9b61a056e49afcbdecc1b53d3e0d321d3d983e66facf1bd16cdb3eb74b990b5a536ae8a44e6a924ae7181cac1e80733d233d2406f73f31738351db91314a65dd4d421e8b11e4864b8bc5dca8e2c50936c63adf68506a2644b1e3b35679d0bfdc5e08692fbf39d3f654833b3c0ee04712d191be45987757578b700cbcc3cb347c5645291fe505aafecbe4ba2dcb19f7d6dd13928458e04f0093c4df27833ad4f0528"}]}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "08348c570d3ad3b51f1f32c18353f69523aafaf1753d1a8cf19d8fc3aa6f9396dec2baa42e61d4a3e96610c52f6883c18f3458b45fc4e3ccc4322eef63df9fdca2b0fd8691a5c1e7f793d52d3265f2624c"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x13a8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 9m59.030770268s ago: executing program 6 (id=1703): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000100004800400c98008003500", @ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b57002456734348d6042c7ebe17aad5fd1904a7a12e4718c26e4083fad1cb85fd9077e0b91987b1df57ebd0de93"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 9m58.803633925s ago: executing program 3 (id=1704): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) umount2(&(0x7f0000000340)='./file0\x00', 0xb) 9m57.484683923s ago: executing program 3 (id=1705): openat(0xffffffffffffff9c, 0x0, 0x149682, 0xc5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000000)={0x21, &(0x7f0000000600)}) 9m56.075639778s ago: executing program 0 (id=1706): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x1, 0x4, 0x801, 0x0, 0x0, {0xe14e1876b6143122}}, 0x14}}, 0x4048010) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x4}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "2d695bba8426a2aa", "49284afc9803df8e328e7bd42200", "48cec83f", "c1c9a976ceadae14"}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000380), 0x0}, 0x20) 9m55.032282768s ago: executing program 3 (id=1707): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0) ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000001440)={0xfa, 0x2, @qam={0x6, 0x16, 0x11}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000580)={r8}) 9m54.668578245s ago: executing program 0 (id=1708): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6730}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xb34}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 9m53.606431419s ago: executing program 3 (id=1709): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x8, @empty, 0x2}}}, 0x108) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x3, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) 9m52.575974974s ago: executing program 3 (id=1710): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x3c}}, 0x0) 9m50.839010945s ago: executing program 3 (id=1711): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x38f9, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x1) write(0xffffffffffffffff, &(0x7f0000000040), 0xffffff4a) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x334, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xfeb1}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 9m48.661774398s ago: executing program 5 (id=1712): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0xb8, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x8d, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9dfcd4bb7391bf43ba726f8bea4e3c1a900000004e52b25dd097e755f75a5b3a8299677050e6a8fa87000000000000000000000028c150b5d110bf9316adb3d6468df0740077e13ff2881e45732221c62688d64c581a4f20aa2b70b98dfbb9d3f0bfc460c5dcb66356e8008e71aaafbb510b0000"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x164, 0x3, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xa5, 0xc, "bcb58aa868678ad4d484b54923b84fb5697e86b84c761c4c07ef145e32645d9bff4d6290172503542afe35a9c3ecae01e42a2eb5280ac48aab9e673e1fb7f9236371891d0471d6ca3fa9e0c961674b9f458b78db879e863859213f0082022a66a63261eac4f8c433eb43cf0dd3e4ec780f7233aef8c17835a221db40d8ffb9b0ac42506fda4543cc4d6259bc6cbe4e96cb43d236340c271a8aa617dffe2f48935d"}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60f44ca7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f3809d8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75391ab4}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x25d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x73}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x1070, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3d0, 0x3, 0x0, 0x1, [{0x3cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY={0x370, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "bb0d8d544303c8d637a481d829c9ddda71553b76e941f51f02f2e7b51a3fc62525db4ec360"}, @NFTA_DATA_VALUE={0x35, 0x1, "8e292ec425b239909bdd75b7f4458c2b1334e9902bcd65d2618efc5c5bff18f94e9b9cddfc7d90da941bf01cd99caa02df"}, @NFTA_DATA_VALUE={0x75, 0x1, "b83e89d3267f23019920ab1e5a3881f86c592184ffca4f10baf684ae2af458855e1c48c927dbf6d74def6eb39ad082ff300559c88f98d3daed499d08508bde518ac1a1eb92d78f13847654010e9dac4e2b05810aa643c9a9cdffdba3250faee72002dabe07067be4bbcdc8f75219cf1307"}, @NFTA_DATA_VALUE={0xd5, 0x1, "b7959c41db5b87b23791b23872b1c385b142c6c5e3d10fff46baf3812d5182211702c463b6859a582fcdc6b275e0f4e56f222a4ab639627d9d9d0e68bf4c379d762df155db36281c6447099a772006bb2aaa54c71a5e60725950d551db06efe970fefaffeae540b823f524d116fc01e9061914ffc70f1abbddc6ef818a9a1785613a97c5a724115a1d22236cd472c4daced5365aa2a0655035897cf7729630d7fd1289810e26e3e51dd136e1bb389459724ec9726d9649d68416c2b3831f3babc53f7b8b6717e4af6974fedfc1362fbec9"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xe5, 0x1, "17338e37172f23b8abdecf834e3ca7a74c73037d3a4f99f66fa7d23d2ddff74921d0e28074286563701d2ba1036b5d3e09f0f634ffde7a4c9e9f2e50ba9e3ae79ecd281b90179e7b47d6f02874fda0b230acb2353cf7f7e9ea18afc2dee45978bf550138e09bd44fdca2faf5ee449c15d92a2c1eb546ad557863695114461d0c2fdb0837bbdb3acffa28fa39455554f7379554bfe80c6480c552d5f70ebf279cc34b4c2193b64ae5aa5de36c0134c610f3e5b32c2e83e6a1dcf81a218edcc6db05f9221fff9f05420a014598538054eb9923536c0ef5b6e0ae790aa814a793f85a"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xbfc, 0x3, 0x0, 0x1, [{0x428, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x25, 0x1, "71c92cae9b3b550cf7b1f9336a9fa5d3db035a6d869a1a339af600b45413106708"}, @NFTA_DATA_VALUE={0xa5, 0x1, "2e7b7c09181e498e2fc183fa0d4f44d5678c6028f3f0f62c7d961da6a6cf9db7af1a2656c389a545df998e44398475769ab7c496eec91e7403e894ec953c6f8af2d6558e105bc868c8d317a55e55f0a3c72b8392bfa6a10804450c7b1472ff2a327a6ad512faf6917415ee456b56df2b82530b9f84381fb4485dad718b98f6f2e01043c4ea5558422d04872ac923417c2f155b01a158963ddf1ecbc4abe34d5a9a"}, @NFTA_DATA_VALUE={0x31, 0x1, "8b4b6d9c7e9342f82436d33ac6bef41c0b715b5d68823aff8300e9d1c42a461c2e9e026c5a6fb78112977387d9"}]}, @NFTA_SET_ELEM_KEY_END={0xf8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "879dc3147ec50cdf35ce64bbdd210bdf57178c35b26f2aad3137d5d6ed5b9bac7c2581da20e387f8e6d231d54cc24293d57633a5d12a1472f53085cac17815df0124aaa05146144f7b8037b6390e5fa43bd03990d561f61438f58b90485b5eb8eeb54a40fbfb314ce8cb71e45a0c8b7aa2658940815cd0877682b6fa6cc311111566e08023effefc0845911d44f0ab5684b3b47e2ba3e38f7613efd1e715659f5dc734b730c9e0c07c6e0b3dc9a9d13b898a8d813c3b4e402a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "58c28461e2a7e19df7d349ab92ce4980dcf7cabde264a466a52921bfef9c1d7a90d69d4030211c6794bb210e7846b730d7718c0ccffd49cab9a286fe2d2bca29261f31d97c5a7dd02ab65032df3348a4f990c770252920df219c7550e21d536d7815510d8c481dc40232b01c413e788caf68757d253588ff0b5c2493f286e4a0ee"}, @NFTA_DATA_VALUE={0x9d, 0x1, "0d889b1e8988ffd6d89e4da17f0ff2842cf49e4af1be7946f1bf8f129381c022f56cdd5538b4ebf696914dbf1e41e60e72735fec07fba6c23f9a1d830a30387a22c869ae16fd02735df900f575012cef3536b7eef55d6181e84c309b4db6984465b8f824a8d4112b37f7f862b565d282c9bbbb49ff6aa8023569059bef91de9718a83d19a7c7138ecc4e47069fb86e2c0971afd7a97796ebff"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xd, 0x2, 0x1, 0x0, '/dev/sg#\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x800}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7f}, @NFTA_LOG_SNAPLEN={0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x460, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "400d5a5a6c82b528db"}, @NFTA_DATA_VALUE={0x9, 0x1, "1dcd5394ba"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "f59066141f597fd4bb55dd7d5988367486998faf204c7076044da57d580e99e374fa1d74c7ede4870f5d89fd6d4e609479ebb5072ebe57f08351540e585f86767e57b6ff6b0d3ab0e35b3b90b07255d8acea9d2c5352a580793e144b4a165781253187e83904fb9d6bf0968643a9df84b67d7b38b662ffc9f85aa7303a20930d7bd5beb8427f4395b4a8c08feede45f1046120b58e5510d6328c05f672f9eda95ec040cf06a3f4f22227559780"}, @NFTA_DATA_VALUE={0xa1, 0x1, "5a4d1622c3809ebd03a708e39c3baf1b05626d61c0c6fdfc49328fb1148c575f66069e07ee4e8838041b80a34605a75e97e359435a54757da4b2ca89a4357c500e8bcddbabe844b2107b3c2f28742ef8ba57e1d9f32d06775275960402da730b607a7a7d94779adc9367ac00bb5819cf636e7978aa9e7d4d839a0f632f532cb5e241e89046d62e099b162cbd516eff52662b01ae884c07bb14ec480120"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x19c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "7d9c6a23ee8fc18227c3c755e8a34d0ee87ec480ae99efedfae4316aa37b77f22ffdf5d4aea189fa985399c163d99ee688448a94f01d20c5e74c051cd56b2a28158f72da2d361427740d08d71aa5284be883438dea6ecf08876c88993bcdee3330a7045f7d90c3fe24ec984593b1cf6266fd188a997c7553cd0ab3d9a028bb5d2f4c34d3c4c1674842fd043c387f2acac89b3c7c686255bef226dba277df43213110390b6fa42434a17520a26012135155ef6e7ecd2ab19fe507157daebca30b0e4195940556d92f53bba37d040f025ec3fcbfe6bf929a99afedb52f95b424a84bcd018feb473585d5"}, @NFTA_DATA_VALUE={0x35, 0x1, "4e9957e22609836e805cd35ab84e6993cf56638c3211e44da3fa80c8a73aa2f954779f7c58f1d5155f1e6e117c21aadde5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x324, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "9c668180943534491d385454d80479ce52db48be9f33af5f941fceff58619993d3831cd7b8809da1ad9fd8907dfdb68f51a009314ec4d036bbfd448cddc51bc6cdb6e5fef18cdb3471a7945083f237b9038df5464ab82510979db946e95c9338ce64cbbd0d80bccf467d64344b89bb792f4dad33a0b24a36aefc6e3c61b131a890adb1a518c3f99115b94ec91f44d18c29098f109124cf0de61657d50d970158751e8cf6bc63bcfd28bb610e6f1e68059a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "9fd9840f2eee05f7c79090178ef651719692618d1e954c4cb06e4dcabbff2415243092cb8dd87b1a3fe640cddc3de5a8493a3841d77d2e1e13e0ffbb8f4c9414988c65cd575407ce8bbf53efb54e8bb9b470567d27aa618ece22b9f0fb3156c29701fd608225a5490d0b04c8017bcde20bd55f5febe467a370210b8e0d2fcfc6586fed3fb2a3840b388ae57d88cbb431fc86a226c4abdc9667cef0f0b9d332523862aec7407d15b29804b90b1df31a12a959fe49bfc033fb51ceba007333e9f91e6315aa63583381769cd8e5780cdc751f14491542"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "935a6908a7c66a3ca70dc3778a2f6851e62a7823a1d43c0bc1ae10c53bbc82aed9d8ab9847f841bd2f11fc938ce9d5a01b267ea38af2aad637c010685a"}]}, @NFTA_SET_ELEM_KEY={0x130, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x55, 0x1, "cb6a172b62d997201d09ec637d0a515ff782f4c1c38c9eae15cdd58a5e668da3662cd96be4c74cc39051b8eab525c74b7c4083fed66fe62be69dc18b8d32cd4f7085ee077b6f70b7029f45f6e404734c77"}, @NFTA_DATA_VALUE={0xc5, 0x1, "6c80eda3273c221e91844d6ffa0071d2bb7cf40b9bb037731be2c0d1bc09a0e9b61a056e49afcbdecc1b53d3e0d321d3d983e66facf1bd16cdb3eb74b990b5a536ae8a44e6a924ae7181cac1e80733d233d2406f73f31738351db91314a65dd4d421e8b11e4864b8bc5dca8e2c50936c63adf68506a2644b1e3b35679d0bfdc5e08692fbf39d3f654833b3c0ee04712d191be45987757578b700cbcc3cb347c5645291fe505aafecbe4ba2dcb19f7d6dd13928458e04f0093c4df27833ad4f0528"}]}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "08348c570d3ad3b51f1f32c18353f69523aafaf1753d1a8cf19d8fc3aa6f9396dec2baa42e61d4a3e96610c52f6883c18f3458b45fc4e3ccc4322eef63df9fdca2b0fd8691a5c1e7f793d52d3265f2624c"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x13fc}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 9m48.661380461s ago: executing program 6 (id=1713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, 0x0, 0x42000, 0x70) r3 = syz_open_dev$vim2m(0x0, 0x1, 0x2) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) fchdir(r5) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r6, &(0x7f0000000100)='./file0\x00', 0x8910, 0x20004) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000280)=0x2) 9m37.520541625s ago: executing program 35 (id=1708): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6730}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xb34}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 9m34.532397527s ago: executing program 36 (id=1711): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x38f9, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x1) write(0xffffffffffffffff, &(0x7f0000000040), 0xffffff4a) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x334, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xfeb1}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 9m27.191145727s ago: executing program 37 (id=1712): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0xb8, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x8d, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9dfcd4bb7391bf43ba726f8bea4e3c1a900000004e52b25dd097e755f75a5b3a8299677050e6a8fa87000000000000000000000028c150b5d110bf9316adb3d6468df0740077e13ff2881e45732221c62688d64c581a4f20aa2b70b98dfbb9d3f0bfc460c5dcb66356e8008e71aaafbb510b0000"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x164, 0x3, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xa5, 0xc, "bcb58aa868678ad4d484b54923b84fb5697e86b84c761c4c07ef145e32645d9bff4d6290172503542afe35a9c3ecae01e42a2eb5280ac48aab9e673e1fb7f9236371891d0471d6ca3fa9e0c961674b9f458b78db879e863859213f0082022a66a63261eac4f8c433eb43cf0dd3e4ec780f7233aef8c17835a221db40d8ffb9b0ac42506fda4543cc4d6259bc6cbe4e96cb43d236340c271a8aa617dffe2f48935d"}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60f44ca7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f3809d8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75391ab4}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x25d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x73}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x1070, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3d0, 0x3, 0x0, 0x1, [{0x3cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY={0x370, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "bb0d8d544303c8d637a481d829c9ddda71553b76e941f51f02f2e7b51a3fc62525db4ec360"}, @NFTA_DATA_VALUE={0x35, 0x1, "8e292ec425b239909bdd75b7f4458c2b1334e9902bcd65d2618efc5c5bff18f94e9b9cddfc7d90da941bf01cd99caa02df"}, @NFTA_DATA_VALUE={0x75, 0x1, "b83e89d3267f23019920ab1e5a3881f86c592184ffca4f10baf684ae2af458855e1c48c927dbf6d74def6eb39ad082ff300559c88f98d3daed499d08508bde518ac1a1eb92d78f13847654010e9dac4e2b05810aa643c9a9cdffdba3250faee72002dabe07067be4bbcdc8f75219cf1307"}, @NFTA_DATA_VALUE={0xd5, 0x1, "b7959c41db5b87b23791b23872b1c385b142c6c5e3d10fff46baf3812d5182211702c463b6859a582fcdc6b275e0f4e56f222a4ab639627d9d9d0e68bf4c379d762df155db36281c6447099a772006bb2aaa54c71a5e60725950d551db06efe970fefaffeae540b823f524d116fc01e9061914ffc70f1abbddc6ef818a9a1785613a97c5a724115a1d22236cd472c4daced5365aa2a0655035897cf7729630d7fd1289810e26e3e51dd136e1bb389459724ec9726d9649d68416c2b3831f3babc53f7b8b6717e4af6974fedfc1362fbec9"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xe5, 0x1, "17338e37172f23b8abdecf834e3ca7a74c73037d3a4f99f66fa7d23d2ddff74921d0e28074286563701d2ba1036b5d3e09f0f634ffde7a4c9e9f2e50ba9e3ae79ecd281b90179e7b47d6f02874fda0b230acb2353cf7f7e9ea18afc2dee45978bf550138e09bd44fdca2faf5ee449c15d92a2c1eb546ad557863695114461d0c2fdb0837bbdb3acffa28fa39455554f7379554bfe80c6480c552d5f70ebf279cc34b4c2193b64ae5aa5de36c0134c610f3e5b32c2e83e6a1dcf81a218edcc6db05f9221fff9f05420a014598538054eb9923536c0ef5b6e0ae790aa814a793f85a"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xbfc, 0x3, 0x0, 0x1, [{0x428, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x25, 0x1, "71c92cae9b3b550cf7b1f9336a9fa5d3db035a6d869a1a339af600b45413106708"}, @NFTA_DATA_VALUE={0xa5, 0x1, "2e7b7c09181e498e2fc183fa0d4f44d5678c6028f3f0f62c7d961da6a6cf9db7af1a2656c389a545df998e44398475769ab7c496eec91e7403e894ec953c6f8af2d6558e105bc868c8d317a55e55f0a3c72b8392bfa6a10804450c7b1472ff2a327a6ad512faf6917415ee456b56df2b82530b9f84381fb4485dad718b98f6f2e01043c4ea5558422d04872ac923417c2f155b01a158963ddf1ecbc4abe34d5a9a"}, @NFTA_DATA_VALUE={0x31, 0x1, "8b4b6d9c7e9342f82436d33ac6bef41c0b715b5d68823aff8300e9d1c42a461c2e9e026c5a6fb78112977387d9"}]}, @NFTA_SET_ELEM_KEY_END={0xf8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "879dc3147ec50cdf35ce64bbdd210bdf57178c35b26f2aad3137d5d6ed5b9bac7c2581da20e387f8e6d231d54cc24293d57633a5d12a1472f53085cac17815df0124aaa05146144f7b8037b6390e5fa43bd03990d561f61438f58b90485b5eb8eeb54a40fbfb314ce8cb71e45a0c8b7aa2658940815cd0877682b6fa6cc311111566e08023effefc0845911d44f0ab5684b3b47e2ba3e38f7613efd1e715659f5dc734b730c9e0c07c6e0b3dc9a9d13b898a8d813c3b4e402a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "58c28461e2a7e19df7d349ab92ce4980dcf7cabde264a466a52921bfef9c1d7a90d69d4030211c6794bb210e7846b730d7718c0ccffd49cab9a286fe2d2bca29261f31d97c5a7dd02ab65032df3348a4f990c770252920df219c7550e21d536d7815510d8c481dc40232b01c413e788caf68757d253588ff0b5c2493f286e4a0ee"}, @NFTA_DATA_VALUE={0x9d, 0x1, "0d889b1e8988ffd6d89e4da17f0ff2842cf49e4af1be7946f1bf8f129381c022f56cdd5538b4ebf696914dbf1e41e60e72735fec07fba6c23f9a1d830a30387a22c869ae16fd02735df900f575012cef3536b7eef55d6181e84c309b4db6984465b8f824a8d4112b37f7f862b565d282c9bbbb49ff6aa8023569059bef91de9718a83d19a7c7138ecc4e47069fb86e2c0971afd7a97796ebff"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xd, 0x2, 0x1, 0x0, '/dev/sg#\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x800}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7f}, @NFTA_LOG_SNAPLEN={0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x460, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "400d5a5a6c82b528db"}, @NFTA_DATA_VALUE={0x9, 0x1, "1dcd5394ba"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "f59066141f597fd4bb55dd7d5988367486998faf204c7076044da57d580e99e374fa1d74c7ede4870f5d89fd6d4e609479ebb5072ebe57f08351540e585f86767e57b6ff6b0d3ab0e35b3b90b07255d8acea9d2c5352a580793e144b4a165781253187e83904fb9d6bf0968643a9df84b67d7b38b662ffc9f85aa7303a20930d7bd5beb8427f4395b4a8c08feede45f1046120b58e5510d6328c05f672f9eda95ec040cf06a3f4f22227559780"}, @NFTA_DATA_VALUE={0xa1, 0x1, "5a4d1622c3809ebd03a708e39c3baf1b05626d61c0c6fdfc49328fb1148c575f66069e07ee4e8838041b80a34605a75e97e359435a54757da4b2ca89a4357c500e8bcddbabe844b2107b3c2f28742ef8ba57e1d9f32d06775275960402da730b607a7a7d94779adc9367ac00bb5819cf636e7978aa9e7d4d839a0f632f532cb5e241e89046d62e099b162cbd516eff52662b01ae884c07bb14ec480120"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x19c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "7d9c6a23ee8fc18227c3c755e8a34d0ee87ec480ae99efedfae4316aa37b77f22ffdf5d4aea189fa985399c163d99ee688448a94f01d20c5e74c051cd56b2a28158f72da2d361427740d08d71aa5284be883438dea6ecf08876c88993bcdee3330a7045f7d90c3fe24ec984593b1cf6266fd188a997c7553cd0ab3d9a028bb5d2f4c34d3c4c1674842fd043c387f2acac89b3c7c686255bef226dba277df43213110390b6fa42434a17520a26012135155ef6e7ecd2ab19fe507157daebca30b0e4195940556d92f53bba37d040f025ec3fcbfe6bf929a99afedb52f95b424a84bcd018feb473585d5"}, @NFTA_DATA_VALUE={0x35, 0x1, "4e9957e22609836e805cd35ab84e6993cf56638c3211e44da3fa80c8a73aa2f954779f7c58f1d5155f1e6e117c21aadde5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x324, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "9c668180943534491d385454d80479ce52db48be9f33af5f941fceff58619993d3831cd7b8809da1ad9fd8907dfdb68f51a009314ec4d036bbfd448cddc51bc6cdb6e5fef18cdb3471a7945083f237b9038df5464ab82510979db946e95c9338ce64cbbd0d80bccf467d64344b89bb792f4dad33a0b24a36aefc6e3c61b131a890adb1a518c3f99115b94ec91f44d18c29098f109124cf0de61657d50d970158751e8cf6bc63bcfd28bb610e6f1e68059a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "9fd9840f2eee05f7c79090178ef651719692618d1e954c4cb06e4dcabbff2415243092cb8dd87b1a3fe640cddc3de5a8493a3841d77d2e1e13e0ffbb8f4c9414988c65cd575407ce8bbf53efb54e8bb9b470567d27aa618ece22b9f0fb3156c29701fd608225a5490d0b04c8017bcde20bd55f5febe467a370210b8e0d2fcfc6586fed3fb2a3840b388ae57d88cbb431fc86a226c4abdc9667cef0f0b9d332523862aec7407d15b29804b90b1df31a12a959fe49bfc033fb51ceba007333e9f91e6315aa63583381769cd8e5780cdc751f14491542"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "935a6908a7c66a3ca70dc3778a2f6851e62a7823a1d43c0bc1ae10c53bbc82aed9d8ab9847f841bd2f11fc938ce9d5a01b267ea38af2aad637c010685a"}]}, @NFTA_SET_ELEM_KEY={0x130, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x55, 0x1, "cb6a172b62d997201d09ec637d0a515ff782f4c1c38c9eae15cdd58a5e668da3662cd96be4c74cc39051b8eab525c74b7c4083fed66fe62be69dc18b8d32cd4f7085ee077b6f70b7029f45f6e404734c77"}, @NFTA_DATA_VALUE={0xc5, 0x1, "6c80eda3273c221e91844d6ffa0071d2bb7cf40b9bb037731be2c0d1bc09a0e9b61a056e49afcbdecc1b53d3e0d321d3d983e66facf1bd16cdb3eb74b990b5a536ae8a44e6a924ae7181cac1e80733d233d2406f73f31738351db91314a65dd4d421e8b11e4864b8bc5dca8e2c50936c63adf68506a2644b1e3b35679d0bfdc5e08692fbf39d3f654833b3c0ee04712d191be45987757578b700cbcc3cb347c5645291fe505aafecbe4ba2dcb19f7d6dd13928458e04f0093c4df27833ad4f0528"}]}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "08348c570d3ad3b51f1f32c18353f69523aafaf1753d1a8cf19d8fc3aa6f9396dec2baa42e61d4a3e96610c52f6883c18f3458b45fc4e3ccc4322eef63df9fdca2b0fd8691a5c1e7f793d52d3265f2624c"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x13fc}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 9m20.94367663s ago: executing program 38 (id=1713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, 0x0, 0x42000, 0x70) r3 = syz_open_dev$vim2m(0x0, 0x1, 0x2) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) fchdir(r5) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r6, &(0x7f0000000100)='./file0\x00', 0x8910, 0x20004) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000280)=0x2) 8m35.891444235s ago: executing program 9 (id=1715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) fchdir(r4) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 4m51.559412619s ago: executing program 7 (id=1665): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) 4m36.957147417s ago: executing program 4 (id=1717): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x1) write(r0, &(0x7f0000000040), 0xffffff4a) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x334, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23) 4m18.18269302s ago: executing program 8 (id=1714): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) umount2(&(0x7f0000000340)='./file0\x00', 0xb) 4m2.459875119s ago: executing program 9 (id=1715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) fchdir(r4) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 3m34.50961477s ago: executing program 4 (id=1717): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x1) write(r0, &(0x7f0000000040), 0xffffff4a) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x334, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23) 2m36.554778436s ago: executing program 7 (id=1665): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) 1m18.676035739s ago: executing program 4 (id=1717): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x1) write(r0, &(0x7f0000000040), 0xffffff4a) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x334, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23) 0s ago: executing program 7 (id=1665): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) kernel console output (not intermixed with test programs): dpoint 0x2 has an invalid bInterval 251, changing to 11 [ 242.099994][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024 [ 242.100018][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.101308][ T5883] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 242.101333][ T5883] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 242.101350][ T5883] usb 5-1: Manufacturer: syz [ 242.103399][ T7232] overlayfs: overlapping lowerdir path [ 242.114530][ T5883] usb 5-1: config 0 descriptor?? [ 242.191099][ T6665] usb 1-1: Using ep0 maxpacket: 16 [ 242.209297][ T6665] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 242.209347][ T6665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.209373][ T6665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 242.209396][ T6665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024 [ 242.209422][ T6665] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.211332][ T6665] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 242.211360][ T6665] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 242.211380][ T6665] usb 1-1: Manufacturer: syz [ 243.257231][ T38] audit: type=1326 audit(1781910131.589:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.2.405" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff22461ce59 code=0x0 [ 243.338768][ T6665] usb 1-1: config 0 descriptor?? [ 243.434765][ T5883] rc_core: IR keymap rc-hauppauge not found [ 243.434784][ T5883] Registered IR keymap rc-empty [ 243.435228][ T5883] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 243.556890][ T5883] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 243.619501][ T5883] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 243.704308][ T5883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 243.745563][ T6665] rc_core: IR keymap rc-hauppauge not found [ 243.745582][ T6665] Registered IR keymap rc-empty [ 243.746007][ T6665] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 243.794964][ T6665] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 243.814581][ T6665] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 243.819061][ T6665] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input10 [ 243.821788][ T5883] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 243.840030][ T5883] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 243.853171][ T5883] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 243.873741][ T5883] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 243.889659][ T6665] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 243.909350][ T5883] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 243.918952][ T6665] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 243.923771][ T5883] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 243.954384][ T6665] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 243.961720][ T5883] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 243.976083][ T6665] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 243.977550][ T5883] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 243.992854][ T5883] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 244.003788][ T6665] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 244.017527][ T5883] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 244.035071][ T6665] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 244.054261][ T6665] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 244.072807][ T6665] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 244.097730][ T6665] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 244.112874][ T6665] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 244.160781][ T5883] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 244.160817][ T5883] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 244.182943][ T6665] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 244.182966][ T6665] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 244.249770][ T5883] usb 5-1: USB disconnect, device number 5 [ 244.250064][ T6665] usb 1-1: USB disconnect, device number 16 [ 246.230563][ T7273] netlink: 'syz.2.414': attribute type 3 has an invalid length. [ 246.422619][ T5883] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 246.573670][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 246.575806][ T5883] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.575837][ T5883] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.575860][ T5883] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 246.575886][ T5883] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.575918][ T5883] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 246.575941][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.591010][ T5883] usb 2-1: config 0 descriptor?? [ 246.897340][ T7290] overlayfs: overlapping lowerdir path [ 247.040467][ T5883] hid (null): bogus close delimiter [ 247.403617][ T38] audit: type=1326 audit(1781910136.169:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.2.419" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff22461ce59 code=0x0 [ 247.946718][ T5883] usb 2-1: USB disconnect, device number 9 [ 249.727551][ T5801] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 249.882413][ T5801] usb 1-1: Using ep0 maxpacket: 16 [ 249.892387][ T5801] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 249.892443][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.892471][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 249.892497][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024 [ 249.892522][ T5801] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.956086][ T5801] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 249.956117][ T5801] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 249.956137][ T5801] usb 1-1: Manufacturer: syz [ 249.998098][ T5801] usb 1-1: config 0 descriptor?? [ 250.922427][ T5801] rc_core: IR keymap rc-hauppauge not found [ 250.922447][ T5801] Registered IR keymap rc-empty [ 250.922889][ T5801] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 250.964654][ T5801] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 251.000730][ T5801] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 251.019151][ T5801] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 251.056887][ T5801] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 251.079114][ T5801] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 251.102866][ T5801] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 251.122820][ T5801] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 251.152834][ T5801] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 251.182066][ T5801] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 251.202824][ T5801] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 251.222857][ T5801] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 251.243009][ T5801] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 251.262772][ T5801] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 251.533317][ T5801] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 251.533342][ T5801] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 252.417487][ T38] audit: type=1326 audit(1781910140.769:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.4.431" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f682ca7ce59 code=0x0 [ 252.513429][ T5801] usb 1-1: USB disconnect, device number 17 [ 252.851929][ T7334] netlink: 'syz.2.429': attribute type 3 has an invalid length. [ 254.765117][ T7360] lo speed is unknown, defaulting to 1000 [ 255.414256][ T7369] program syz.3.437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.931833][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.931922][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.444535][ T6012] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 260.431440][ T6012] usb 2-1: device not accepting address 10, error -71 [ 261.397891][ T7413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.448'. [ 261.693840][ T7418] program syz.2.450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.732438][ T5801] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 263.164618][ T7422] netlink: 'syz.0.449': attribute type 3 has an invalid length. [ 263.187162][ T5801] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 263.189733][ T5801] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 263.189762][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.189782][ T5801] usb 3-1: Product: syz [ 263.189796][ T5801] usb 3-1: Manufacturer: syz [ 263.189809][ T5801] usb 3-1: SerialNumber: syz [ 263.213878][ T7420] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 263.417460][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.451'. [ 263.476823][ T5801] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.476879][ T5801] usb 3-1: MIDIStreaming interface descriptor not found [ 264.210768][ T7439] lo speed is unknown, defaulting to 1000 [ 264.650546][ T5801] usb 3-1: USB disconnect, device number 13 [ 264.906438][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.119374][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'. [ 265.119399][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'. [ 266.223502][ T5801] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 266.393072][ T5801] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 266.402008][ T5801] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 266.402038][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.402058][ T5801] usb 4-1: Product: syz [ 266.402071][ T5801] usb 4-1: Manufacturer: syz [ 266.402086][ T5801] usb 4-1: SerialNumber: syz [ 266.446706][ T7468] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 266.715811][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 267.016342][ T5801] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.016397][ T5801] usb 4-1: MIDIStreaming interface descriptor not found [ 269.100151][ T5801] usb 4-1: USB disconnect, device number 7 [ 269.134667][ T7477] program syz.4.468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.526779][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.429322][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.475'. [ 270.429346][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.475'. [ 271.382484][ T7504] lo speed is unknown, defaulting to 1000 [ 272.190403][ T7515] netlink: 620 bytes leftover after parsing attributes in process `syz.1.480'. [ 272.436422][ T822] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 272.585203][ T822] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 272.588876][ T822] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 272.588985][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.589003][ T822] usb 5-1: Product: syz [ 272.589014][ T822] usb 5-1: Manufacturer: syz [ 272.589024][ T822] usb 5-1: SerialNumber: syz [ 272.644964][ T7513] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 272.893301][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 275.593660][ T822] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.593714][ T822] usb 5-1: MIDIStreaming interface descriptor not found [ 275.733019][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'. [ 275.733043][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'. [ 275.793451][ T822] usb 5-1: USB disconnect, device number 6 [ 275.867678][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.890150][ T7568] lo speed is unknown, defaulting to 1000 [ 279.842438][ T5801] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 281.444698][ T5801] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 281.447498][ T5801] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 281.447528][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.447547][ T5801] usb 2-1: Product: syz [ 281.447561][ T5801] usb 2-1: Manufacturer: syz [ 281.447574][ T5801] usb 2-1: SerialNumber: syz [ 281.505483][ T7593] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 281.672459][ T822] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 281.842706][ T822] usb 5-1: Using ep0 maxpacket: 16 [ 281.880861][ T822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.880896][ T822] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.905439][ T822] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 281.905470][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.905702][ T822] usb 5-1: Product: syz [ 281.905717][ T822] usb 5-1: Manufacturer: syz [ 281.905731][ T822] usb 5-1: SerialNumber: syz [ 282.128784][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.505'. [ 282.691451][ T7615] program syz.0.506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.787063][ T822] usb 5-1: config 0 descriptor?? [ 283.832505][ T822] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 283.924921][ T5801] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.924972][ T5801] usb 2-1: MIDIStreaming interface descriptor not found [ 284.012440][ T822] usb 4-1: Using ep0 maxpacket: 16 [ 284.017609][ T822] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.017651][ T822] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.017664][ T822] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 284.017678][ T822] usb 4-1: config 0 interface 0 has no altsetting 0 [ 284.017698][ T822] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 284.017709][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.036379][ T822] usb 4-1: config 0 descriptor?? [ 284.433432][ T5716] usb 5-1: USB disconnect, device number 7 [ 285.990791][ T7637] lo speed is unknown, defaulting to 1000 [ 286.047376][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.123793][ T822] hid (null): unknown global tag 0xe [ 286.221022][ T5801] usb 2-1: USB disconnect, device number 12 [ 286.349126][ T823] usb 4-1: USB disconnect, device number 8 [ 287.697125][ T5801] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 288.534637][ T5801] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.534665][ T5801] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.537822][ T5801] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 288.537851][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 288.537871][ T5801] usb 2-1: Manufacturer: syz [ 288.537886][ T5801] usb 2-1: SerialNumber: syz [ 288.650125][ T5801] usb 2-1: config 0 descriptor?? [ 289.056063][ T7665] program syz.3.518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.821045][ T7671] netlink: 48 bytes leftover after parsing attributes in process `syz.0.520'. [ 291.424961][ T5883] usb 2-1: USB disconnect, device number 13 [ 291.635387][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.465664][ T7697] lo speed is unknown, defaulting to 1000 [ 294.807731][ T7716] program syz.4.534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.453413][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.249158][ T7759] lo speed is unknown, defaulting to 1000 [ 299.215084][ T5612] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 299.415127][ T5612] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.416931][ T5612] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 299.416959][ T5612] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 299.416979][ T5612] usb 4-1: Manufacturer: syz [ 299.416993][ T5612] usb 4-1: SerialNumber: syz [ 299.443728][ T5612] usb 4-1: config 0 descriptor?? [ 299.552105][ T32] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 299.892399][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 299.894456][ T32] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.894488][ T32] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.894508][ T32] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 299.894533][ T32] usb 1-1: config 0 interface 0 has no altsetting 0 [ 299.894561][ T32] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 299.894582][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.904307][ T32] usb 1-1: config 0 descriptor?? [ 301.099152][ T32] hid (null): unknown global tag 0xe [ 301.451116][ T32] usb 1-1: USB disconnect, device number 18 [ 302.497523][ T32] usb 4-1: USB disconnect, device number 9 [ 303.316103][ T7799] lo speed is unknown, defaulting to 1000 [ 303.825474][ T7804] Device name cannot be null; rc = [-22] [ 306.950311][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.568'. [ 307.488403][ T7836] syz.3.569 uses obsolete (PF_INET,SOCK_PACKET) [ 311.310829][ T7876] lo speed is unknown, defaulting to 1000 [ 311.772870][ T5617] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 312.212991][ T7889] Device name cannot be null; rc = [-22] [ 313.000353][ T7901] Device name cannot be null; rc = [-22] [ 314.775815][ T5617] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 316.058127][ T7934] netlink: 'syz.2.596': attribute type 1 has an invalid length. [ 316.152509][ T5628] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 316.284588][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 316.322373][ T5628] usb 4-1: Using ep0 maxpacket: 16 [ 316.332016][ T5628] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 316.332070][ T5628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 316.332099][ T5628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 316.332124][ T5628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024 [ 316.332150][ T5628] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.355439][ T5628] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 316.355468][ T5628] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 316.355485][ T5628] usb 4-1: Manufacturer: syz [ 317.054979][ T5628] usb 4-1: config 0 descriptor?? [ 317.247478][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.247540][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.202963][ T7934] bond1: entered promiscuous mode [ 318.203017][ T7934] bond1: entered allmulticast mode [ 318.205107][ T7934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.252423][ T5628] rc_core: IR keymap rc-hauppauge not found [ 318.252444][ T5628] Registered IR keymap rc-empty [ 318.253032][ T5628] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 318.272722][ T5628] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 318.328732][ T7956] Device name cannot be null; rc = [-22] [ 318.361153][ T5628] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 318.468512][ T5628] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 318.507950][ T5628] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 318.532945][ T5628] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 318.562703][ T5628] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 318.576786][ T5617] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 318.592773][ T5628] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 318.613045][ T5628] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 318.643067][ T5628] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 318.672939][ T5628] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 318.692976][ T5628] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 318.713076][ T5628] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 318.733085][ T5628] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 318.782930][ T5628] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 318.782955][ T5628] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 318.821776][ T5628] usb 4-1: USB disconnect, device number 10 [ 320.035606][ T7967] Device name cannot be null; rc = [-22] [ 320.188594][ T7975] overlayfs: overlapping lowerdir path [ 320.973633][ T5612] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 321.124021][ T5612] usb 2-1: Using ep0 maxpacket: 16 [ 321.126600][ T5612] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 321.126651][ T5612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 321.126678][ T5612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 321.126702][ T5612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024 [ 321.126728][ T5612] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.128221][ T5612] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 321.128247][ T5612] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 321.128264][ T5612] usb 2-1: Manufacturer: syz [ 321.136702][ T5612] usb 2-1: config 0 descriptor?? [ 321.432540][ T5612] rc_core: IR keymap rc-hauppauge not found [ 321.432560][ T5612] Registered IR keymap rc-empty [ 321.432992][ T5612] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 321.452909][ T5612] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 321.481975][ T5612] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 321.494510][ T5612] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 321.511818][ T5612] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 321.525595][ T5612] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 321.542970][ T5612] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 321.565223][ T5612] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 321.582979][ T5612] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 321.604000][ T5612] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 321.622872][ T5612] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 321.642962][ T5612] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 321.663794][ T5612] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 321.684034][ T5612] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 321.766798][ T5612] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 321.767196][ T5612] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 321.824555][ T5612] usb 2-1: USB disconnect, device number 14 [ 323.112798][ T8001] netlink: 'syz.4.612': attribute type 1 has an invalid length. [ 323.249055][ T8001] bond1: entered promiscuous mode [ 323.277989][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 323.279894][ T8001] bond1: entered allmulticast mode [ 323.280967][ T8001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.988373][ T8037] Zero length message leads to an empty skb [ 326.016737][ T8035] Device name cannot be null; rc = [-22] [ 326.334311][ T8045] overlayfs: overlapping lowerdir path [ 327.463780][ T8053] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 327.512530][ T6665] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 327.664383][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 327.675384][ T8053] bond1: entered promiscuous mode [ 327.675943][ T8053] bond1: entered allmulticast mode [ 327.677084][ T8053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.792402][ T6665] usb 3-1: device descriptor read/64, error -71 [ 328.202469][ T6665] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 329.446772][ T6665] usb 3-1: device descriptor read/64, error -71 [ 329.552913][ T6665] usb usb3-port1: attempt power cycle [ 330.529336][ T8079] ======================================================= [ 330.529336][ T8079] WARNING: The mand mount option has been deprecated and [ 330.529336][ T8079] and is ignored by this kernel. Remove the mand [ 330.529336][ T8079] option from the mount to silence this warning. [ 330.529336][ T8079] ======================================================= [ 330.531220][ T8079] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 330.860957][ T8081] program syz.1.632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.688519][ T8109] netlink: 'syz.4.638': attribute type 1 has an invalid length. [ 333.905082][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 335.741587][ T8109] bond2: entered promiscuous mode [ 335.753840][ T8109] bond2: entered allmulticast mode [ 335.754868][ T8109] 8021q: adding VLAN 0 to HW filter on device bond2 [ 337.967649][ T8145] Device name cannot be null; rc = [-22] [ 340.259284][ T8161] lo speed is unknown, defaulting to 1000 [ 341.860678][ T822] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 342.832822][ T822] usb 5-1: Using ep0 maxpacket: 16 [ 342.845603][ T822] usb 5-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 342.845674][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.845701][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 342.845726][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024 [ 342.845751][ T822] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.847056][ T822] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 342.847079][ T822] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 342.847094][ T822] usb 5-1: Manufacturer: syz [ 342.971541][ T822] usb 5-1: config 0 descriptor?? [ 344.287630][ T822] rc_core: IR keymap rc-hauppauge not found [ 344.287651][ T822] Registered IR keymap rc-empty [ 344.289214][ T822] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 344.358977][ T822] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 344.374779][ T822] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 344.400446][ T822] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 344.846446][ T822] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 344.865087][ T822] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 344.892732][ T822] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 344.897945][ T8199] program syz.2.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.912788][ T822] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 344.964936][ T822] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 344.982808][ T822] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 345.013028][ T822] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 345.037698][ T822] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 345.052752][ T822] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 345.082908][ T822] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 345.187485][ T822] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 345.187501][ T822] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 345.227173][ T822] usb 5-1: USB disconnect, device number 8 [ 346.379538][ T8215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.668'. [ 351.533024][ T5883] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 352.873797][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 353.864330][ T5883] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 353.864487][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 353.864536][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 353.864558][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024 [ 353.864599][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.885109][ T5883] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 353.885135][ T5883] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 353.885151][ T5883] usb 2-1: Manufacturer: syz [ 354.424615][ T5883] usb 2-1: config 0 descriptor?? [ 354.500933][ T5883] usb 2-1: can't set config #0, error -71 [ 354.600461][ T5883] usb 2-1: USB disconnect, device number 15 [ 354.754726][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 361.143270][ T8349] program syz.2.703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.772453][ T5883] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 361.922404][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 361.924255][ T5883] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.924281][ T5883] usb 3-1: config 0 has no interface number 0 [ 361.926474][ T5883] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 361.926564][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.926582][ T5883] usb 3-1: Product: syz [ 361.926595][ T5883] usb 3-1: Manufacturer: syz [ 361.926609][ T5883] usb 3-1: SerialNumber: syz [ 361.954028][ T8377] overlayfs: overlapping lowerdir path [ 361.996648][ T5883] usb 3-1: config 0 descriptor?? [ 362.011176][ T5883] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 364.408960][ T5883] gspca_spca1528: reg_w err -110 [ 364.410922][ T5883] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 367.492186][ T823] usb 3-1: USB disconnect, device number 17 [ 370.302984][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.736'. [ 370.364898][ T5883] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 370.512459][ T823] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 370.522526][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 370.527771][ T5883] usb 3-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 370.527821][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.527847][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 370.527873][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024 [ 370.527898][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.529783][ T5883] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 370.529811][ T5883] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 370.529829][ T5883] usb 3-1: Manufacturer: syz [ 370.549169][ T5883] usb 3-1: config 0 descriptor?? [ 370.982726][ T823] usb 1-1: Using ep0 maxpacket: 16 [ 370.985470][ T823] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.985496][ T823] usb 1-1: config 0 has no interface number 0 [ 372.057586][ T823] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 372.057617][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.057637][ T823] usb 1-1: Product: syz [ 372.057651][ T823] usb 1-1: Manufacturer: syz [ 372.057664][ T823] usb 1-1: SerialNumber: syz [ 372.064002][ T823] usb 1-1: config 0 descriptor?? [ 372.077382][ T823] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 372.112553][ T5883] rc_core: IR keymap rc-hauppauge not found [ 372.112572][ T5883] Registered IR keymap rc-empty [ 372.137159][ T5883] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 372.248912][ T5883] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 372.268019][ T5883] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 372.279738][ T5883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 373.732742][ T5883] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 373.755410][ T5883] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 373.773658][ T5883] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 373.792922][ T5883] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 373.812947][ T5883] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 373.832768][ T5883] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 373.853011][ T5883] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 373.873092][ T5883] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 373.893012][ T5883] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 373.962070][ T5883] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 374.182105][ T5883] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 374.182131][ T5883] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 374.348645][ T823] gspca_spca1528: reg_r err -32 [ 374.348741][ T823] spca1528 1-1:0.1: probe with driver spca1528 failed with error -32 [ 374.404380][ T823] usb 1-1: USB disconnect, device number 19 [ 374.529190][ T5883] usb 3-1: USB disconnect, device number 18 [ 375.088821][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'. [ 375.399303][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.748'. [ 378.671422][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.671519][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.168672][ T8581] program syz.0.769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.415393][ T5883] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 386.606684][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 386.608315][ T5883] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.608335][ T5883] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.608347][ T5883] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 386.608361][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 386.608384][ T5883] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 386.608397][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.658243][ T5883] usb 3-1: config 0 descriptor?? [ 387.507673][ T5883] usbhid 3-1:0.0: can't add hid device: -71 [ 387.507812][ T5883] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 387.538573][ T5883] usb 3-1: USB disconnect, device number 19 [ 389.865848][ T38] audit: type=1326 audit(1781910278.189:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.0.785" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8179a9ce59 code=0x0 [ 391.877916][ T8661] program syz.4.793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.273920][ T8671] program syz.4.797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.902471][ T5883] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 394.052354][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 394.055204][ T5883] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.055236][ T5883] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.055257][ T5883] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 394.055282][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 394.055314][ T5883] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 394.055335][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.076136][ T5883] usb 5-1: config 0 descriptor?? [ 394.427257][ T38] audit: type=1326 audit(1781910283.459:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.2.801" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff22461ce59 code=0x0 [ 394.629581][ T8694] Device name cannot be null; rc = [-22] [ 394.735766][ T5883] usbhid 5-1:0.0: can't add hid device: -71 [ 394.735903][ T5883] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 394.765459][ T5883] usb 5-1: USB disconnect, device number 9 [ 396.416417][ T8707] program syz.1.808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.733789][ T8753] program syz.4.821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.887721][ T8792] Device name cannot be null; rc = [-22] [ 404.924146][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'. [ 405.187178][ T8799] program syz.4.834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.850819][ T8840] program syz.2.845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.203334][ T5801] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 410.414715][ T5801] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 410.433730][ T5801] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 410.433769][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.433789][ T5801] usb 4-1: Product: syz [ 410.433802][ T5801] usb 4-1: Manufacturer: syz [ 410.433816][ T5801] usb 4-1: SerialNumber: syz [ 410.480488][ T8845] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 410.703718][ T32] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 411.423141][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 411.432326][ T32] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 411.432355][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.432374][ T32] usb 1-1: Product: syz [ 411.432388][ T32] usb 1-1: Manufacturer: syz [ 411.432400][ T32] usb 1-1: SerialNumber: syz [ 411.654366][ T8861] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 411.684333][ T5801] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 411.684406][ T5801] usb 4-1: MIDIStreaming interface descriptor not found [ 411.857301][ T8875] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 412.348290][ T5628] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 412.585277][ T5628] usb 2-1: device descriptor read/64, error -71 [ 412.724677][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 412.842369][ T5628] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 413.020868][ T5628] usb 2-1: device descriptor read/64, error -71 [ 413.212984][ T5628] usb usb2-port1: attempt power cycle [ 413.602088][ T32] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 413.602139][ T32] usb 1-1: MIDIStreaming interface descriptor not found [ 414.028865][ T5801] usb 4-1: USB disconnect, device number 11 [ 415.149106][ T8893] program syz.2.859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.581899][ T32] usb 1-1: USB disconnect, device number 20 [ 416.749375][ T8905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.864'. [ 418.651589][ T8922] udevd[8922]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.782384][ T822] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 418.806591][ T8929] vivid-000: disconnect [ 418.807874][ T8927] vivid-000: reconnect [ 418.854903][ T8848] udevd[8848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 419.004527][ T822] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 419.007685][ T822] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 419.007716][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.007736][ T822] usb 2-1: Product: syz [ 419.007749][ T822] usb 2-1: Manufacturer: syz [ 419.007763][ T822] usb 2-1: SerialNumber: syz [ 419.100327][ T8917] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 419.435574][ T5612] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 419.716262][ T32] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 419.776274][ T822] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 419.776329][ T822] usb 2-1: MIDIStreaming interface descriptor not found [ 419.902386][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 419.904610][ T32] usb 3-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 419.904662][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 419.904689][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 419.904715][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024 [ 419.904741][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.908713][ T32] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 419.908744][ T32] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 419.908764][ T32] usb 3-1: Manufacturer: syz [ 420.000619][ T32] usb 3-1: config 0 descriptor?? [ 421.246364][ T5612] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 421.250761][ T5612] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 421.250791][ T5612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.250811][ T5612] usb 4-1: Product: syz [ 421.250826][ T5612] usb 4-1: Manufacturer: syz [ 421.250839][ T5612] usb 4-1: SerialNumber: syz [ 421.362317][ T32] rc_core: IR keymap rc-hauppauge not found [ 421.362338][ T32] Registered IR keymap rc-empty [ 421.362787][ T32] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 421.382809][ T32] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 422.520428][ T5612] usb 4-1: can't set config #1, error -71 [ 422.525602][ T5612] usb 4-1: USB disconnect, device number 12 [ 422.545298][ T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 422.579259][ T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 422.610658][ T32] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 422.632771][ T32] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 422.695377][ T32] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 422.717792][ T32] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 422.732723][ T32] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 422.749110][ T822] usb 2-1: USB disconnect, device number 19 [ 422.754109][ T32] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 422.776215][ T32] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 422.803841][ T32] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 422.825156][ T32] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 422.842667][ T32] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 422.934715][ T8965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.881'. [ 422.953136][ T32] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 422.953161][ T32] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 423.004083][ T32] usb 3-1: USB disconnect, device number 20 [ 424.622379][ T5883] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 425.012398][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 425.014642][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.014695][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 425.014722][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 425.014744][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.016012][ T5883] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 425.016040][ T5883] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 425.016060][ T5883] usb 4-1: Manufacturer: syz [ 425.882521][ T5883] usb 4-1: config 0 descriptor?? [ 427.152726][ T822] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 427.304813][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 427.325255][ T822] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 427.325313][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 427.325454][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 427.325485][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024 [ 427.325511][ T822] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.327882][ T822] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 427.327909][ T822] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 427.327928][ T822] usb 2-1: Manufacturer: syz [ 427.413824][ T822] usb 2-1: config 0 descriptor?? [ 427.453309][ T5801] usb 4-1: USB disconnect, device number 13 [ 427.782377][ T822] rc_core: IR keymap rc-hauppauge not found [ 427.782398][ T822] Registered IR keymap rc-empty [ 427.782940][ T822] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 427.802716][ T822] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 427.819113][ T9013] Device name cannot be null; rc = [-22] [ 427.826829][ T822] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 427.841807][ T822] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 427.867442][ T822] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 428.046907][ T822] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 428.071094][ T822] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 428.083269][ T822] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 428.118378][ T822] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 428.132858][ T822] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 428.153374][ T822] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 428.172950][ T822] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 428.192857][ T822] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 428.212721][ T822] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 428.347584][ T9019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.896'. [ 428.349348][ T822] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 428.349371][ T822] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 428.432121][ T822] usb 2-1: USB disconnect, device number 20 [ 429.588695][ T9028] program syz.3.900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.112663][ T32] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 434.262318][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 434.264671][ T32] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 434.264726][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.264754][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 434.264779][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024 [ 434.264805][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.330089][ T32] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 434.330121][ T32] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 434.330141][ T32] usb 4-1: Manufacturer: syz [ 434.365395][ T32] usb 4-1: config 0 descriptor?? [ 434.716894][ T32] rc_core: IR keymap rc-hauppauge not found [ 434.716916][ T32] Registered IR keymap rc-empty [ 434.720493][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.732667][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.755296][ T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 434.776691][ T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 434.841244][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.863472][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.884601][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.912858][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.932882][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.953100][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.972821][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 435.002636][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 435.024792][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 435.361848][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 438.832599][ T32] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 438.832625][ T32] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 438.849612][ T32] usb 4-1: USB disconnect, device number 14 [ 440.247097][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.247192][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.376898][ T9140] program syz.3.929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.834516][ T9149] Device name cannot be null; rc = [-22] [ 446.741211][ T9173] overlayfs: missing 'lowerdir' [ 452.245565][ T9198] program syz.3.945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.055624][ T9249] lo speed is unknown, defaulting to 1000 [ 459.387467][ T32] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 459.942491][ T32] usb 5-1: Using ep0 maxpacket: 16 [ 459.945645][ T32] usb 5-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 459.945696][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.945723][ T32] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 459.948102][ T32] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 459.948134][ T32] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 459.948152][ T32] usb 5-1: Manufacturer: syz [ 459.965741][ T32] usb 5-1: config 0 descriptor?? [ 460.195429][ T822] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 460.437426][ T822] usb 1-1: Using ep0 maxpacket: 16 [ 460.440037][ T822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.440092][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 460.440119][ T822] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 460.440141][ T822] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.441516][ T822] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 460.441543][ T822] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 460.441563][ T822] usb 1-1: Manufacturer: syz [ 461.056921][ T822] usb 1-1: config 0 descriptor?? [ 461.097944][ T9284] lo speed is unknown, defaulting to 1000 [ 461.321519][ T9290] program syz.2.970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.576671][ T5612] usb 5-1: USB disconnect, device number 10 [ 462.803647][ T9308] program syz.2.976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 463.035919][ T9313] lo speed is unknown, defaulting to 1000 [ 463.094410][ T822] usb 1-1: USB disconnect, device number 21 [ 465.174375][ T822] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 465.683904][ T822] usb 1-1: Using ep0 maxpacket: 16 [ 465.689734][ T822] usb 1-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 465.689787][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.689829][ T822] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 465.691114][ T822] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 465.691141][ T822] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 465.691161][ T822] usb 1-1: Manufacturer: syz [ 465.699617][ T822] usb 1-1: config 0 descriptor?? [ 465.744633][ T9347] program syz.4.989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 466.064313][ T9353] lo speed is unknown, defaulting to 1000 [ 466.790248][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.994'. [ 468.354824][ T822] usb 1-1: USB disconnect, device number 22 [ 468.730500][ T9376] program syz.0.996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.985807][ T9388] program syz.0.1001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.491749][ T32] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 470.712788][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 471.074745][ T32] usb 1-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 471.074802][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 471.074830][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 471.076347][ T32] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 471.076377][ T32] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 471.076397][ T32] usb 1-1: Manufacturer: syz [ 471.081531][ T32] usb 1-1: config 0 descriptor?? [ 471.447667][ T9418] program syz.4.1010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.266941][ T822] usb 1-1: USB disconnect, device number 23 [ 477.353247][ T9468] program syz.2.1022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 478.889683][ T9493] fuse: Unknown parameter 'É«' [ 478.958072][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1032'. [ 479.258448][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'. [ 479.517326][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 479.829947][ T9516] program syz.1.1038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.070459][ T9522] Device name cannot be null; rc = [-22] [ 482.539495][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1048'. [ 482.602804][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1048'. [ 482.729305][ T9550] program syz.3.1050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.386451][ T9589] program syz.3.1063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.474479][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 486.273074][ T32] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 486.380423][ T9587] bond1: entered promiscuous mode [ 486.386130][ T9587] bond1: entered allmulticast mode [ 486.397005][ T9587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 486.899994][ T9593] bond1 (unregistering): Released all slaves [ 486.914336][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 486.916566][ T32] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 486.916596][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.916616][ T32] usb 4-1: Product: syz [ 486.916630][ T32] usb 4-1: Manufacturer: syz [ 486.916643][ T32] usb 4-1: SerialNumber: syz [ 487.523051][ T9592] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 487.763912][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'. [ 487.845659][ T9606] program syz.4.1068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 488.241972][ T9614] Device name cannot be null; rc = [-22] [ 489.260023][ T32] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.260075][ T32] usb 4-1: MIDIStreaming interface descriptor not found [ 489.353300][ T32] usb 4-1: USB disconnect, device number 15 [ 489.491146][ T9632] udevd[9632]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.612962][ T9635] program syz.1.1075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.729830][ T9643] lo speed is unknown, defaulting to 1000 [ 490.941942][ T9650] program syz.3.1079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.040170][ T9691] lo speed is unknown, defaulting to 1000 [ 494.507895][ T9715] Device name cannot be null; rc = [-22] [ 495.992351][ T5883] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 496.142576][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 496.145296][ T5883] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 496.145351][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 496.145379][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 496.145405][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024 [ 496.145431][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.146911][ T5883] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 496.146936][ T5883] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 496.146954][ T5883] usb 1-1: Manufacturer: syz [ 496.243602][ T5883] usb 1-1: config 0 descriptor?? [ 496.720132][ T5883] rc_core: IR keymap rc-hauppauge not found [ 496.720155][ T5883] Registered IR keymap rc-empty [ 496.722095][ T5883] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 496.744068][ T5883] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 496.764148][ T5883] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 496.770766][ T5883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 496.932079][ T5883] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 496.952912][ T5883] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 496.979499][ T5883] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 496.992788][ T5883] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 497.012738][ T5883] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 497.034426][ T5883] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 497.052802][ T5883] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 497.073094][ T5883] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 497.092707][ T5883] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 497.112757][ T5883] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 497.253472][ T5883] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 497.253499][ T5883] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 497.323796][ T5883] usb 1-1: USB disconnect, device number 24 [ 501.830642][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.830735][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.954568][ T38] audit: type=1326 audit(1781910392.969:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.3.1136" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bce58ce59 code=0x0 [ 508.670676][ T9857] program syz.2.1140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 515.936277][ T38] audit: type=1326 audit(1781910404.969:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.0.1158" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8179a9ce59 code=0x0 [ 517.582673][ T9929] program syz.0.1161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.217031][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 518.267503][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 518.269131][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 518.289149][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 518.291775][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 520.255707][ T38] audit: type=1326 audit(1781910409.289:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.0.1170" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8179a9ce59 code=0x0 [ 520.424500][ T5617] Bluetooth: hci5: command tx timeout [ 522.140542][ T9932] lo speed is unknown, defaulting to 1000 [ 522.512523][ T5617] Bluetooth: hci5: command tx timeout [ 524.501709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.587073][ T5617] Bluetooth: hci5: command tx timeout [ 524.739095][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1178'. [ 524.942972][ T5612] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 525.094383][ T5612] usb 4-1: Using ep0 maxpacket: 16 [ 525.100690][ T5612] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.100743][ T5612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 525.100771][ T5612] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 525.100801][ T5612] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.103015][ T5612] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 525.103043][ T5612] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 525.103061][ T5612] usb 4-1: Manufacturer: syz [ 525.125824][ T5612] usb 4-1: config 0 descriptor?? [ 525.333922][ T9932] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.334308][ T9932] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.334647][ T9932] bridge_slave_0: entered allmulticast mode [ 525.338052][ T9932] bridge_slave_0: entered promiscuous mode [ 525.369112][ T9932] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.369481][ T9932] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.369811][ T9932] bridge_slave_1: entered allmulticast mode [ 525.395706][ T9932] bridge_slave_1: entered promiscuous mode [ 525.526628][ T9932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.528353][T10010] program syz.2.1181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.427134][T10015] Device name cannot be null; rc = [-22] [ 526.440906][ T9932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.567058][ T822] usb 4-1: USB disconnect, device number 16 [ 526.667957][ T5617] Bluetooth: hci5: command tx timeout [ 527.023088][ T5612] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 527.023354][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 527.342353][ T5612] usb 3-1: device descriptor read/64, error -32 [ 527.699860][ T5612] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 528.513966][ T5612] usb 3-1: Using ep0 maxpacket: 32 [ 528.527343][ T5612] usb 3-1: config 1 interface 0 altsetting 35 bulk endpoint 0x1 has invalid maxpacket 1023 [ 528.527375][ T5612] usb 3-1: config 1 interface 0 has no altsetting 0 [ 528.529529][ T5612] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 528.529556][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.529578][ T5612] usb 3-1: Product: syz [ 528.529592][ T5612] usb 3-1: Manufacturer: syz [ 528.529605][ T5612] usb 3-1: SerialNumber: syz [ 528.559662][T10017] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 530.568994][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1190'. [ 531.953286][ T9932] team0: Port device team_slave_0 added [ 532.266324][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.995705][ T9932] team0: Port device team_slave_1 added [ 533.782967][ T5612] usb 3-1: USB disconnect, device number 22 [ 534.117994][ T9932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.118011][ T9932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.118039][ T9932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.121549][ T9932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.121566][ T9932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.121593][ T9932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.684673][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.974490][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.102448][ T9932] hsr_slave_0: entered promiscuous mode [ 535.164923][ T9932] hsr_slave_1: entered promiscuous mode [ 535.166625][ T9932] debugfs: 'hsr0' already exists in 'hsr' [ 535.166651][ T9932] Cannot create hsr debugfs directory [ 538.393811][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1202'. [ 538.475019][T10087] program syz.3.1201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.716728][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.769986][ T9932] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 539.774742][ T9932] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 539.777227][ T9932] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 541.090323][ T9932] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.110678][ T9932] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 542.224897][ T9932] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 542.227478][ T9932] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 542.740600][ T9932] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.586150][T10142] program syz.2.1212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 544.821840][ T9932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.867573][ T9932] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.880637][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.880957][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.924199][ T7064] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.924397][ T7064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.042079][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1214'. [ 545.833494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.934106][T10140] Device name cannot be null; rc = [-22] [ 546.172462][ T32] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 546.375269][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.375324][ T32] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 546.375346][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.390655][ T32] usb 3-1: config 0 descriptor?? [ 546.430564][ T32] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 546.430654][ T32] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 548.216462][ T5883] usb 3-1: USB disconnect, device number 23 [ 550.718466][T10193] program syz.4.1226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.180541][ T9932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.088314][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.773809][T10241] Device name cannot be null; rc = [-22] [ 553.818767][ T9932] veth0_vlan: entered promiscuous mode [ 553.836351][ T9932] veth1_vlan: entered promiscuous mode [ 553.912937][ T9932] veth0_macvtap: entered promiscuous mode [ 553.931798][ T9932] veth1_macvtap: entered promiscuous mode [ 553.982068][ T9932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.998587][ T9932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.155722][ T32] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 554.259885][ T258] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.344237][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.344294][ T32] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 554.344318][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.349486][ T32] usb 1-1: config 0 descriptor?? [ 554.355972][ T32] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 554.356052][ T32] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 554.779127][ T258] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.780425][ T258] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.780704][ T258] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.727811][ T5628] usb 1-1: USB disconnect, device number 25 [ 559.166285][ T3383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.166305][ T3383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.296339][T10278] netlink: 'syz.2.1247': attribute type 1 has an invalid length. [ 559.351061][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 560.043197][T10278] bond2: entered promiscuous mode [ 560.049564][T10278] bond2: entered allmulticast mode [ 560.051554][T10278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 560.147615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.274034][T10279] bond2 (unregistering): Released all slaves [ 560.338114][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.338134][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.536915][ T32] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 560.695686][ T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.695745][ T32] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 560.695768][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.701143][ T32] usb 5-1: config 0 descriptor?? [ 560.751185][ T32] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 560.751273][ T32] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 560.817133][T10296] Device name cannot be null; rc = [-22] [ 562.038078][ T5612] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 562.913954][ T5612] usb 4-1: Using ep0 maxpacket: 16 [ 562.937538][ T5612] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.937593][ T5612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 562.937619][ T5612] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 562.937641][ T5612] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 562.941977][ T5612] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 562.942005][ T5612] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 562.942025][ T5612] usb 4-1: Manufacturer: syz [ 562.974299][ T5883] usb 5-1: USB disconnect, device number 11 [ 562.996253][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.996362][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.018297][ T5612] usb 4-1: config 0 descriptor?? [ 563.361957][T10308] program syz.5.1159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.282676][ T32] usb 4-1: USB disconnect, device number 17 [ 566.354986][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1261'. [ 566.376536][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1261'. [ 566.710713][T10343] program syz.4.1266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.918273][T10344] cgroup: Invalid name [ 567.672291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.969863][T10375] cgroup: Invalid name [ 571.621229][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 571.675105][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 572.461550][T10397] Device name cannot be null; rc = [-22] [ 574.065821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.216681][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1288'. [ 574.235735][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1288'. [ 579.412287][ T822] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 580.259620][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 580.309901][ T822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.309957][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 580.309984][ T822] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 580.310007][ T822] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.395681][ T822] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 580.395700][ T822] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 580.395710][ T822] usb 3-1: Manufacturer: syz [ 580.401193][ T822] usb 3-1: config 0 descriptor?? [ 581.138070][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.314317][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 582.363227][ T5612] usb 3-1: USB disconnect, device number 24 [ 582.380234][T10504] program syz.0.1310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 586.247633][ T823] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 586.293142][ T822] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 586.462315][ T822] usb 6-1: Using ep0 maxpacket: 16 [ 586.464870][ T822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.464924][ T822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 586.464953][ T822] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 586.464976][ T822] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.540876][ T822] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 586.540914][ T822] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 586.540939][ T822] usb 6-1: Manufacturer: syz [ 586.542246][ T823] usb 4-1: Using ep0 maxpacket: 16 [ 586.544357][ T823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.544407][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 586.544433][ T823] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 586.544453][ T823] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.554542][ T823] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 586.554581][ T823] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 586.554600][ T823] usb 4-1: Manufacturer: syz [ 586.565914][ T823] usb 4-1: config 0 descriptor?? [ 587.307389][ T822] usb 6-1: config 0 descriptor?? [ 587.915396][T10570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1326'. [ 587.944079][ T822] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 588.122265][ T822] usb 5-1: Using ep0 maxpacket: 32 [ 588.124625][ T822] usb 5-1: config 1 interface 0 altsetting 35 bulk endpoint 0x1 has invalid maxpacket 1023 [ 588.124657][ T822] usb 5-1: config 1 interface 0 has no altsetting 0 [ 588.126824][ T822] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 588.126858][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.126876][ T822] usb 5-1: Product: syz [ 588.126886][ T822] usb 5-1: Manufacturer: syz [ 588.126893][ T822] usb 5-1: SerialNumber: syz [ 588.134056][T10566] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 588.408011][ T822] usb 5-1: USB disconnect, device number 12 [ 588.711809][ T5883] usb 4-1: USB disconnect, device number 18 [ 589.669442][ T823] usb 6-1: USB disconnect, device number 2 [ 591.938056][T10605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1337'. [ 592.664444][T10612] cgroup: Invalid name [ 592.686748][T10618] Device name cannot be null; rc = [-22] [ 595.916395][ T823] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 596.062615][ T823] usb 6-1: Using ep0 maxpacket: 16 [ 596.064826][ T823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.064893][ T823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 596.064912][ T823] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 596.064924][ T823] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 596.069377][ T823] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 596.069398][ T823] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 596.069408][ T823] usb 6-1: Manufacturer: syz [ 596.082933][ T823] usb 6-1: config 0 descriptor?? [ 599.448729][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.714751][ T823] usb 6-1: USB disconnect, device number 3 [ 623.256531][T10807] faux_driver vkms: [drm] *ERROR* [CRTC:45:crtc-0] flip_done timed out [ 623.967192][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 624.468925][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.469022][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.029672][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 627.284045][T10861] Device name cannot be null; rc = [-22] [ 627.787607][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 628.095511][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 628.117941][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 628.118720][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 630.386083][ T5617] Bluetooth: hci1: command tx timeout [ 631.535096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.647258][T10908] Device name cannot be null; rc = [-22] [ 632.447463][ T5617] Bluetooth: hci1: command tx timeout [ 635.912288][ T5617] Bluetooth: hci1: command tx timeout [ 636.309777][T10853] lo speed is unknown, defaulting to 1000 [ 637.083676][T10966] Device name cannot be null; rc = [-22] [ 638.053623][ T5617] Bluetooth: hci1: command tx timeout [ 644.729677][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 649.183026][T11035] Device name cannot be null; rc = [-22] [ 650.727741][T10853] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.728098][T10853] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.728414][T10853] bridge_slave_0: entered allmulticast mode [ 650.733266][T10853] bridge_slave_0: entered promiscuous mode [ 650.740995][T10853] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.741397][T10853] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.741982][T10853] bridge_slave_1: entered allmulticast mode [ 650.749907][T10853] bridge_slave_1: entered promiscuous mode [ 651.011795][T10853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.072377][T10853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.303112][T10853] team0: Port device team_slave_0 added [ 651.311941][T10853] team0: Port device team_slave_1 added [ 651.441791][T10853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.441807][T10853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.441833][T10853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.481968][T10853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.481984][T10853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.482012][T10853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.632451][ T823] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 651.685476][T10853] hsr_slave_0: entered promiscuous mode [ 651.687757][T10853] hsr_slave_1: entered promiscuous mode [ 651.689315][T10853] debugfs: 'hsr0' already exists in 'hsr' [ 651.689340][T10853] Cannot create hsr debugfs directory [ 651.802409][ T823] usb 3-1: Using ep0 maxpacket: 16 [ 651.805189][ T823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.805243][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 651.805271][ T823] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 651.805294][ T823] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 651.810650][ T823] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 651.810679][ T823] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 651.810707][ T823] usb 3-1: Manufacturer: syz [ 651.930844][ T823] usb 3-1: config 0 descriptor?? [ 653.759786][T11090] program syz.3.1467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 654.309908][ T5883] usb 3-1: USB disconnect, device number 25 [ 654.475266][T11105] binder: 11104:11105 ioctl 127b 0 returned -22 [ 654.767291][T11112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1475'. [ 655.470378][T10853] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 656.523192][T11124] Device name cannot be null; rc = [-22] [ 656.547032][T10853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 656.585540][T10853] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 657.523474][T10853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 657.530351][T10853] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 657.836533][T10853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 657.867558][T10853] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 657.936501][T10853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 659.063582][ T822] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 659.233673][ T822] usb 6-1: Using ep0 maxpacket: 16 [ 659.238213][ T822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.238267][ T822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 659.238295][ T822] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 659.238317][ T822] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.239696][ T822] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 659.239723][ T822] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 659.239744][ T822] usb 6-1: Manufacturer: syz [ 659.342242][ T822] usb 6-1: config 0 descriptor?? [ 659.775254][T10853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.822612][T10853] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.841787][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.841949][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.939168][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.939330][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.795424][T11163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1486'. [ 661.787576][ T823] usb 6-1: USB disconnect, device number 4 [ 663.341539][T10853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.878024][T11199] Device name cannot be null; rc = [-22] [ 663.886354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.227273][ T5617] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 665.551919][T10853] veth0_vlan: entered promiscuous mode [ 665.580198][T11214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1497'. [ 665.849964][T10853] veth1_vlan: entered promiscuous mode [ 667.798745][T10853] veth0_macvtap: entered promiscuous mode [ 667.850338][T10853] veth1_macvtap: entered promiscuous mode [ 668.023669][T10853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.068427][T10853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.111529][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.124659][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.124930][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.124966][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.990170][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 669.507484][ T124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.507504][ T124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.977714][ T4852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.977734][ T4852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.347725][T11284] Device name cannot be null; rc = [-22] [ 676.583859][T11305] Device name cannot be null; rc = [-22] [ 678.061821][T11351] binder: 11349:11351 ioctl 127b 0 returned -22 [ 678.838051][T11366] program syz.2.1549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 681.031015][T11387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 681.031033][T11387] IPv6: NLM_F_CREATE should be set when creating new route [ 681.031274][T11387] IPv6: NLM_F_CREATE should be set when creating new route [ 681.303646][T11403] program syz.2.1561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 682.517007][T11416] Device name cannot be null; rc = [-22] [ 685.960336][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.960432][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.248445][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1579'. [ 688.185468][T11484] lo speed is unknown, defaulting to 1000 [ 689.390037][T11494] program syz.3.1586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 689.620117][T11498] program syz.6.1588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 692.994118][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1595'. [ 693.875599][T11544] Device name cannot be null; rc = [-22] [ 693.940536][T11549] program syz.2.1600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 694.095184][T11547] program syz.5.1599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 696.197999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.249164][T11584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1607'. [ 697.467186][T11589] program syz.0.1611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 697.550940][T11592] program syz.2.1612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 698.221724][T11603] overlayfs: overlapping lowerdir path [ 699.850275][T11622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1621'. [ 701.456384][T11641] Device name cannot be null; rc = [-22] [ 701.586765][T11643] netlink: 'syz.2.1626': attribute type 1 has an invalid length. [ 702.155936][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1626'. [ 702.367450][T11643] bond2: entered promiscuous mode [ 702.367627][T11643] bond2: entered allmulticast mode [ 702.368694][T11643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 703.570842][T11660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1631'. [ 704.963797][T11675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1633'. [ 705.978760][T11685] binder: 11683:11685 ioctl 127b 0 returned -22 [ 710.826425][T11736] Device name cannot be null; rc = [-22] [ 711.213317][T11738] program syz.6.1653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 712.029392][T11750] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1658'. [ 712.958046][T11751] lo speed is unknown, defaulting to 1000 [ 728.893865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.994563][T11786] binder: 11783:11786 ioctl 127b 0 returned -22 [ 730.731288][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 730.772553][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 730.778343][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 730.780223][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 730.786335][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 732.618173][T11816] binder: 11804:11816 ioctl 127b 0 returned -22 [ 733.000827][ T61] Bluetooth: hci4: command tx timeout [ 735.151318][ T61] Bluetooth: hci4: command tx timeout [ 735.499911][T11847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1682'. [ 737.234395][ T61] Bluetooth: hci4: command tx timeout [ 739.681744][T11794] lo speed is unknown, defaulting to 1000 [ 740.506900][ T61] Bluetooth: hci4: command tx timeout [ 740.914269][T11881] program syz.3.1691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 744.611956][ T32] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 744.966305][ T32] usb 4-1: device descriptor read/64, error -71 [ 745.023467][T11919] program syz.6.1702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 747.373481][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.373580][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.422581][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 760.826373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.231500][T11794] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.231843][T11794] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.232273][T11794] bridge_slave_0: entered allmulticast mode [ 786.243677][T11794] bridge_slave_0: entered promiscuous mode [ 786.261157][T11794] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.266942][T11794] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.267288][T11794] bridge_slave_1: entered allmulticast mode [ 786.276001][T11794] bridge_slave_1: entered promiscuous mode [ 791.460869][T11955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 792.808716][T11955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 793.149177][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.497428][T11955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 796.512437][T11955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 796.513446][T11955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 800.586088][T11955] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 801.562871][ T9938] Bluetooth: hci2: command tx timeout [ 802.590238][T11955] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 803.006554][T11955] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 803.008965][T11955] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 804.636616][ T9938] Bluetooth: hci2: command tx timeout [ 804.665728][ T9938] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 806.743644][ T9938] Bluetooth: hci2: command tx timeout [ 809.705916][ T9938] Bluetooth: hci2: command tx timeout [ 809.708964][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.709075][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.813950][T11985] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 815.484518][ T9938] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 815.519559][ T5617] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 815.524891][ T5617] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 815.535123][ T5617] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 817.590074][ T5617] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 818.866326][T11985] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 818.888761][T11985] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 820.041745][T11985] Bluetooth: hci6: command tx timeout [ 824.092108][T11985] Bluetooth: hci6: command tx timeout [ 824.134891][T11980] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 825.472008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.119415][T11985] Bluetooth: hci6: command tx timeout [ 828.178044][T11985] Bluetooth: hci8: command tx timeout [ 829.196846][T11955] Bluetooth: hci6: command tx timeout [ 830.205253][T11955] Bluetooth: hci8: command tx timeout [ 833.198698][T11955] Bluetooth: hci8: command tx timeout [ 835.343978][T11955] Bluetooth: hci8: command tx timeout [ 857.559121][T11985] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 857.794824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.542320][T11985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 859.458464][T11985] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 860.434068][T11985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 860.435006][T11985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 865.198492][T11985] Bluetooth: hci0: command tx timeout [ 867.268463][T11985] Bluetooth: hci0: command tx timeout [ 869.364825][T11985] Bluetooth: hci0: command tx timeout [ 870.278007][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.278105][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.316353][T11985] Bluetooth: hci0: command tx timeout [ 875.324880][T11955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 875.351138][T11955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 877.355691][T11955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 877.356839][T11955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 877.357625][T11955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 885.323571][T11955] Bluetooth: hci1: command tx timeout [ 887.387784][T11955] Bluetooth: hci1: command tx timeout [ 889.537460][T11955] Bluetooth: hci1: command tx timeout [ 890.117638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.503992][T11985] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 891.509685][T11985] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 892.374751][ T5617] Bluetooth: hci1: command tx timeout [ 896.602974][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 897.518318][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 898.544391][T11989] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 898.582406][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 899.554667][T11989] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 899.555457][T11989] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 900.606264][T11989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 902.579149][T11955] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 902.585834][T12035] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 902.624401][T12035] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 903.613791][T11955] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 904.608508][T11985] Bluetooth: hci3: command tx timeout [ 906.717636][T12035] Bluetooth: hci3: command tx timeout [ 906.774012][T11985] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 906.774852][T11985] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 910.697953][T11955] Bluetooth: hci4: command tx timeout [ 910.872388][T11985] Bluetooth: hci3: command tx timeout [ 913.726875][ T5617] Bluetooth: hci3: command tx timeout [ 913.726951][T12035] Bluetooth: hci4: command tx timeout [ 916.001636][T12035] Bluetooth: hci4: command tx timeout [ 916.765282][T11985] Bluetooth: hci5: command tx timeout [ 918.034436][T11985] Bluetooth: hci4: command tx timeout [ 919.033944][T11985] Bluetooth: hci5: command tx timeout [ 921.158914][T12035] Bluetooth: hci5: command tx timeout [ 921.270583][T12035] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 922.440471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.232607][ T5617] Bluetooth: hci5: command tx timeout [ 923.277378][T12035] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 924.255518][T12035] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 925.282286][T12035] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 925.283963][T12035] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 932.666911][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.667008][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.668326][T12035] Bluetooth: hci7: command tx timeout [ 935.727665][ T5617] Bluetooth: hci7: command tx timeout [ 935.731568][T12035] Bluetooth: hci6: command 0x0406 tx timeout [ 938.377575][ T5617] Bluetooth: hci7: command tx timeout [ 940.502123][ T5617] Bluetooth: hci7: command tx timeout [ 943.039253][T12035] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 945.031485][T12035] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 945.035259][T12035] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 945.048477][T12035] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 945.171746][T11989] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 946.023411][T12035] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 947.102915][ T5617] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 947.310822][T12035] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 953.661761][T11989] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 953.666824][T11989] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 954.629585][T11985] Bluetooth: hci9: command tx timeout [ 954.763298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.716289][T11989] Bluetooth: hci9: command tx timeout [ 957.716357][T11989] Bluetooth: hci10: command tx timeout [ 959.878852][T11989] Bluetooth: hci10: command tx timeout [ 960.956812][T11989] Bluetooth: hci9: command tx timeout [ 961.972106][T11989] Bluetooth: hci10: command tx timeout [ 965.060273][T11989] Bluetooth: hci10: command tx timeout [ 966.025726][T11985] Bluetooth: hci9: command tx timeout [ 967.324201][T11989] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 967.362464][T11989] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 967.364046][T11989] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 971.491557][T11989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 971.492416][T11989] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 979.666320][T11989] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 980.343222][T11989] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 982.488789][ T5617] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 983.472557][T12079] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 985.498393][T12035] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 986.515371][T12035] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 987.086097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.657550][T12035] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 989.674028][T12035] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 993.843347][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.843442][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.992095][T12035] Bluetooth: hci2: command tx timeout [ 1001.980718][T12035] Bluetooth: hci2: command tx timeout [ 1002.018730][T10945] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.074358][T12035] Bluetooth: hci2: command tx timeout [ 1005.092464][T12035] Bluetooth: hci11: command tx timeout [ 1007.344747][T12035] Bluetooth: hci2: command tx timeout [ 1007.344811][T12035] Bluetooth: hci11: command tx timeout [ 1009.556852][T12035] Bluetooth: hci11: command tx timeout [ 1011.653561][T11985] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1012.620412][T11985] Bluetooth: hci11: command tx timeout [ 1012.656025][T12035] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1013.629921][T11955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1013.649754][T11955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1013.878116][T12035] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1013.899099][T12035] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1013.900580][T12035] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1014.872280][T11955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1014.886573][T11955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1014.889677][T11955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1019.408932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.489799][T11989] Bluetooth: hci0: command tx timeout [ 1026.490250][T11989] Bluetooth: hci4: command tx timeout [ 1028.522772][T11955] Bluetooth: hci4: command tx timeout [ 1028.522815][T11955] Bluetooth: hci0: command tx timeout [ 1030.631576][T11955] Bluetooth: hci0: command tx timeout [ 1030.631619][T11955] Bluetooth: hci4: command tx timeout [ 1032.002844][T11985] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1033.783190][T11955] Bluetooth: hci0: command tx timeout [ 1033.783282][T11985] Bluetooth: hci4: command tx timeout [ 1036.841817][T11985] Bluetooth: hci1: command 0x1003 tx timeout [ 1037.138520][T11985] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1037.211802][T12035] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1037.794999][T11989] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1040.203028][T12117] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1040.971791][T11985] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1042.325824][T12125] Bluetooth: hci3: Opcode 0x0c03 failed: -4 [ 1050.511014][T10945] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.731766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.558615][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.558725][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.605093][T11985] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1063.039531][T11985] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1065.099671][T12129] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1080.420751][T11989] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1082.425634][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1083.835452][T12035] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1083.885277][T11955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1083.886684][T11955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1083.887787][T11955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1084.054595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.884060][T11955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1085.895350][T11985] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1085.899612][T11985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1085.900633][T11985] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1086.922082][T11985] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1087.975254][T12035] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1088.986835][T12142] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1100.414597][T10945] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.961618][T11989] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1103.704660][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1104.451857][T11989] Bluetooth: hci3: command tx timeout [ 1104.455566][T11989] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1104.466790][T11989] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1104.471285][T11989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1104.479097][T11989] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1106.571385][T12035] Bluetooth: hci3: command tx timeout [ 1107.865898][T12035] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1107.996307][ T5617] Bluetooth: hci1: command tx timeout [ 1109.045647][T12035] Bluetooth: hci3: command tx timeout [ 1109.918538][T12035] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1112.254720][T12035] Bluetooth: hci1: command tx timeout [ 1112.254760][T12035] Bluetooth: hci3: command tx timeout [ 1113.327978][T11955] Bluetooth: hci5: Opcode 0x1009 failed: -110 [ 1113.376378][T11955] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1114.326917][T11955] Bluetooth: hci1: command tx timeout [ 1115.328456][T11955] Bluetooth: hci2: command tx timeout [ 1115.570112][T12163] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1116.377389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.423028][T11955] Bluetooth: hci1: command tx timeout [ 1116.572958][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.573063][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.459658][T11955] Bluetooth: hci2: command tx timeout [ 1120.596793][T11955] Bluetooth: hci2: command tx timeout [ 1123.592516][T11955] Bluetooth: hci2: command tx timeout [ 1131.799055][T12035] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1132.897919][T12035] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1132.899646][T12035] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1132.900702][T12035] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1132.901691][T12035] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1135.176289][T10945] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.326803][T11955] Bluetooth: hci0: command tx timeout [ 1139.602065][T11955] Bluetooth: hci0: command tx timeout [ 1141.726693][T11955] Bluetooth: hci0: command tx timeout [ 1143.825039][T12035] Bluetooth: hci0: command tx timeout [ 1146.875435][T11955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1146.889157][T11955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1146.891413][T11955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1146.903744][T11955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1146.918665][T11955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1148.700227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.036800][T11955] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1152.478815][T11985] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1154.420484][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1155.424112][ T5617] Bluetooth: hci4: command tx timeout [ 1156.436443][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1156.437159][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1158.788337][ T5617] Bluetooth: hci4: command tx timeout [ 1161.510577][T11985] Bluetooth: hci5: command tx timeout [ 1161.510968][T11985] Bluetooth: hci4: command tx timeout [ 1163.573632][ T5617] Bluetooth: hci4: command tx timeout [ 1163.573668][ T5617] Bluetooth: hci5: command tx timeout [ 1167.625966][T11985] Bluetooth: hci5: command tx timeout [ 1170.792526][ T5617] Bluetooth: hci5: command tx timeout [ 1172.781662][T11985] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1173.981880][T11985] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1174.832181][T12219] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1177.977531][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.977624][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.023034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.111663][T12035] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1183.124322][T12035] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1183.138953][T12035] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1183.140381][T12035] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1183.160704][T12035] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1185.183471][T12035] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1185.262174][T12035] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1186.245728][T12035] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1187.216415][T12035] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1187.217521][T12035] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1187.224391][T12035] Bluetooth: hci7: command tx timeout [ 1189.682888][T12035] Bluetooth: hci7: command tx timeout [ 1191.774019][ T5617] Bluetooth: hci7: command tx timeout [ 1192.776012][ T5617] Bluetooth: hci8: command tx timeout [ 1195.787097][ T5617] Bluetooth: hci7: command tx timeout [ 1195.787136][ T5617] Bluetooth: hci8: command tx timeout [ 1199.052845][T12035] Bluetooth: hci8: command tx timeout [ 1201.114937][T12035] Bluetooth: hci8: command tx timeout [ 1212.468570][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1213.345857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.496987][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1214.503444][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1214.504735][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1216.452017][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1223.981727][T12035] Bluetooth: hci6: command tx timeout [ 1225.996327][T12197] lo speed is unknown, defaulting to 1000 [ 1226.018595][T12035] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1226.077727][T11985] Bluetooth: hci6: command tx timeout [ 1226.098636][T12035] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1226.103370][T12035] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1226.109721][T12035] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1226.110558][T12035] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1228.102106][ T5617] Bluetooth: hci6: command tx timeout [ 1230.182432][ T5617] Bluetooth: hci6: command tx timeout [ 1232.279961][ T5617] Bluetooth: hci1: command tx timeout [ 1232.307392][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1233.355632][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1234.547982][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1234.552844][ T5617] Bluetooth: hci1: command tx timeout [ 1235.551347][T12035] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1235.555928][T12035] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1237.199757][T12035] Bluetooth: hci1: command tx timeout [ 1238.594372][T11985] Bluetooth: hci2: command tx timeout [ 1239.218190][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.218287][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.315697][T11985] Bluetooth: hci1: command tx timeout [ 1239.598289][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1241.271957][T12035] Bluetooth: hci2: command tx timeout [ 1241.280184][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1243.401808][T12035] Bluetooth: hci2: command tx timeout [ 1243.402061][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1245.668693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.421278][T12035] Bluetooth: hci2: command tx timeout [ 1247.485788][T11985] Bluetooth: hci3: Opcode 0x1005 failed: -110 [ 1248.539190][T11985] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1250.642677][T12276] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1264.454482][T11955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1267.437856][T11955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1267.444312][T11955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1268.403081][T11955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1268.403855][T11955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1269.398431][T10945] bridge_slave_1: left allmulticast mode [ 1269.398720][T10945] bridge_slave_1: left promiscuous mode [ 1269.400493][T10945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.613859][ T5617] Bluetooth: hci0: command tx timeout [ 1276.922381][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 1277.991501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.596462][T11955] Bluetooth: hci0: command tx timeout [ 1282.290822][T11955] Bluetooth: hci0: command tx timeout [ 1282.290863][T11955] Bluetooth: hci5: command 0x0406 tx timeout [ 1284.651921][T12035] Bluetooth: hci0: command tx timeout [ 1287.310470][T10945] bridge_slave_0: left allmulticast mode [ 1287.310507][T10945] bridge_slave_0: left promiscuous mode [ 1288.741964][T10945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.735192][T11985] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1294.743669][T11985] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1294.811747][T11985] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1294.812994][T11985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1294.813769][T11985] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1300.989740][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.989839][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1309.730853][T12035] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1310.314345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.707638][ T5617] Bluetooth: hci3: command tx timeout [ 1310.738128][T12035] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1310.743399][T12035] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1311.718213][T12035] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1312.748243][T12035] Bluetooth: hci3: command tx timeout [ 1314.756708][ T5617] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1314.915432][ T5617] Bluetooth: hci3: command tx timeout [ 1317.033647][ T5617] Bluetooth: hci3: command tx timeout [ 1318.518738][ T5617] Bluetooth: hci8: command tx timeout [ 1319.860190][T11955] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1320.827470][T12035] Bluetooth: hci8: command tx timeout [ 1320.838421][T11955] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1321.522013][T12035] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1321.523485][T12035] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1321.524604][T12035] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1321.525859][T12035] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1322.566657][T11955] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1322.592062][T11955] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1323.594486][ T5617] Bluetooth: hci8: command tx timeout [ 1323.594552][T11955] Bluetooth: hci6: command tx timeout [ 1323.836650][T12035] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1323.837745][T12035] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1324.585322][ T5617] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1325.939847][T12035] Bluetooth: hci6: command tx timeout [ 1325.939887][T12035] Bluetooth: hci8: command tx timeout [ 1326.577262][ T5617] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1327.948397][T11985] Bluetooth: hci6: command tx timeout [ 1327.952017][T11989] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1327.953477][T11989] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1327.954201][T11989] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1332.040743][T12328] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 1332.048232][T11989] Bluetooth: hci6: command tx timeout [ 1332.048913][T11955] Bluetooth: hci9: command tx timeout [ 1335.060648][T11955] Bluetooth: hci9: command tx timeout [ 1337.809933][T11955] Bluetooth: hci9: command tx timeout [ 1338.904621][ T5617] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1338.915124][ T5617] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1338.917622][ T5617] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1338.921525][ T5617] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1338.922286][ T5617] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1340.837917][ T5617] Bluetooth: hci9: command tx timeout [ 1342.637242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.069809][T11955] Bluetooth: hci10: command tx timeout [ 1347.192044][ T5617] Bluetooth: hci10: command tx timeout [ 1349.257199][ T5617] Bluetooth: hci10: command tx timeout [ 1351.386465][ T5617] Bluetooth: hci10: command tx timeout [ 1354.631954][T11955] Bluetooth: hci1: command 0x0406 tx timeout [ 1360.868468][ T5617] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1361.070773][ T5617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1361.932798][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.932897][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.094181][ T5617] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1363.096349][ T5617] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1363.097174][ T5617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1364.092355][T11985] Bluetooth: hci2: command 0x0406 tx timeout [ 1368.385748][ T5617] Bluetooth: hci7: command tx timeout [ 1371.409518][T11989] Bluetooth: hci7: command tx timeout [ 1374.142078][T11989] Bluetooth: hci7: command tx timeout [ 1374.959946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.382138][T11989] Bluetooth: hci7: command tx timeout [ 1387.831970][ T5617] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1387.839213][ T5617] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1387.858471][ T5617] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1389.880598][T11985] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1389.906871][T11985] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1390.966850][T11985] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1390.967184][T11985] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1390.968398][T11985] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1390.973151][T11985] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1390.973876][T11985] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1395.026549][ T5617] Bluetooth: hci11: command tx timeout [ 1396.192006][T11985] Bluetooth: hci12: command tx timeout [ 1396.202797][T11955] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 1396.977090][ T5617] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1397.318874][ T5617] Bluetooth: hci11: command tx timeout [ 1397.344285][T11955] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1399.182261][T11955] Bluetooth: hci12: command tx timeout [ 1400.285970][T11955] Bluetooth: hci0: command 0x0406 tx timeout [ 1400.323660][T11955] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1400.331669][T11985] Bluetooth: hci11: command tx timeout [ 1401.286673][T11985] Bluetooth: hci12: command tx timeout [ 1402.302612][T11955] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1402.304401][T11955] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1402.307673][T11955] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1403.294817][T11985] Bluetooth: hci11: command tx timeout [ 1404.400428][T11985] Bluetooth: hci12: command tx timeout [ 1407.282798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.558238][T11955] Bluetooth: hci13: command tx timeout [ 1409.758911][T11955] Bluetooth: hci13: command tx timeout [ 1410.621654][ T5617] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1411.962778][T11985] Bluetooth: hci13: command tx timeout [ 1413.651870][T11955] Bluetooth: hci14: Opcode 0x1003 failed: -110 [ 1413.689509][ T5617] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1414.233521][T11955] Bluetooth: hci13: command tx timeout [ 1414.259393][T11955] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1414.259828][T11955] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1415.313478][ T5617] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1415.320585][ T5617] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1415.321399][ T5617] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1417.392032][ T39] INFO: task kworker/u8:8:1173 blocked for more than 144 seconds. [ 1417.392062][ T39] Not tainted syzkaller #0 [ 1417.392073][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1417.392082][ T39] task:kworker/u8:8 state:D stack:22880 pid:1173 tgid:1173 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1417.392158][ T39] Workqueue: events_unbound linkwatch_event [ 1417.392194][ T39] Call Trace: [ 1417.392296][ T39] [ 1417.392377][ T39] __schedule+0x1709/0x5530 [ 1417.392518][ T39] ? __pfx___schedule+0x10/0x10 [ 1417.392669][ T39] rt_mutex_schedule+0x76/0xf0 [ 1417.392734][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1417.392799][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1417.392821][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1417.392842][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1417.392872][ T39] ? linkwatch_event+0xe/0x60 [ 1417.392894][ T39] ? process_one_work+0x8cd/0x12b0 [ 1417.392955][ T39] ? linkwatch_event+0xe/0x60 [ 1417.392972][ T39] mutex_lock_nested+0x168/0x1d0 [ 1417.392991][ T39] ? rcu_is_watching+0x15/0xb0 [ 1417.393039][ T39] ? process_one_work+0x8cd/0x12b0 [ 1417.393065][ T39] linkwatch_event+0xe/0x60 [ 1417.393081][ T39] process_one_work+0x93a/0x12b0 [ 1417.393127][ T39] ? __pfx_process_one_work+0x10/0x10 [ 1417.393161][ T39] ? assign_work+0x3cf/0x5d0 [ 1417.393193][ T39] worker_thread+0xb05/0x10d0 [ 1417.393234][ T39] kthread+0x388/0x470 [ 1417.393257][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1417.393275][ T39] ? __pfx_kthread+0x10/0x10 [ 1417.393298][ T39] ret_from_fork+0x514/0xb70 [ 1417.393332][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1417.393356][ T39] ? __switch_to+0xc89/0x1420 [ 1417.393380][ T39] ? __pfx_kthread+0x10/0x10 [ 1417.393404][ T39] ret_from_fork_asm+0x1a/0x30 [ 1417.393445][ T39] [ 1417.393559][ T39] INFO: task kworker/u8:18:4852 blocked for more than 144 seconds. [ 1417.393575][ T39] Not tainted syzkaller #0 [ 1417.393592][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1417.393601][ T39] task:kworker/u8:18 state:D stack:20816 pid:4852 tgid:4852 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1417.393650][ T39] Workqueue: ipv6_addrconf addrconf_verify_work [ 1417.393678][ T39] Call Trace: [ 1417.393684][ T39] [ 1417.393696][ T39] __schedule+0x1709/0x5530 [ 1417.393723][ T39] ? __lock_acquire+0x683/0x2ce0 [ 1417.393805][ T39] ? __pfx___schedule+0x10/0x10 [ 1417.393843][ T39] rt_mutex_schedule+0x76/0xf0 [ 1417.393869][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1417.393903][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1417.393926][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1417.393947][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1417.393976][ T39] ? addrconf_verify_work+0x19/0x30 [ 1417.394004][ T39] ? process_one_work+0x8cd/0x12b0 [ 1417.394028][ T39] ? addrconf_verify_work+0x19/0x30 [ 1417.394058][ T39] ? addrconf_verify_work+0x19/0x30 [ 1417.394081][ T39] mutex_lock_nested+0x168/0x1d0 [ 1417.394100][ T39] ? rcu_is_watching+0x15/0xb0 [ 1417.394121][ T39] ? process_one_work+0x8cd/0x12b0 [ 1417.394146][ T39] addrconf_verify_work+0x19/0x30 [ 1417.394170][ T39] process_one_work+0x93a/0x12b0 [ 1417.394214][ T39] ? __pfx_process_one_work+0x10/0x10 [ 1417.394239][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 1417.394296][ T39] ? assign_work+0x3cf/0x5d0 [ 1417.394335][ T39] worker_thread+0xb05/0x10d0 [ 1417.394377][ T39] kthread+0x388/0x470 [ 1417.394399][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1417.394417][ T39] ? __pfx_kthread+0x10/0x10 [ 1417.394440][ T39] ret_from_fork+0x514/0xb70 [ 1417.394467][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1417.394491][ T39] ? __switch_to+0xc89/0x1420 [ 1417.394514][ T39] ? __pfx_kthread+0x10/0x10 [ 1417.394538][ T39] ret_from_fork_asm+0x1a/0x30 [ 1417.394579][ T39] [ 1417.394709][ T39] INFO: task kworker/1:1:11926 blocked for more than 144 seconds. [ 1417.394733][ T39] Not tainted syzkaller #0 [ 1417.394743][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1417.394751][ T39] task:kworker/1:1 state:D stack:25416 pid:11926 tgid:11926 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1417.394800][ T39] Workqueue: events switchdev_deferred_process_work [ 1417.394828][ T39] Call Trace: [ 1417.394834][ T39] [ 1417.394846][ T39] __schedule+0x1709/0x5530 [ 1417.394896][ T39] ? __pfx___schedule+0x10/0x10 [ 1417.394933][ T39] rt_mutex_schedule+0x76/0xf0 [ 1417.394958][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1417.394992][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1417.395015][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1417.395035][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1417.395065][ T39] ? switchdev_deferred_process_work+0xe/0x20 [ 1417.395095][ T39] ? process_one_work+0x8cd/0x12b0 [ 1417.395128][ T39] ? switchdev_deferred_process_work+0xe/0x20 [ 1417.395152][ T39] mutex_lock_nested+0x168/0x1d0 [ 1417.395170][ T39] ? rcu_is_watching+0x15/0xb0 [ 1417.395191][ T39] ? process_one_work+0x8cd/0x12b0 [ 1417.395216][ T39] switchdev_deferred_process_work+0xe/0x20 [ 1417.395241][ T39] process_one_work+0x93a/0x12b0 [ 1417.395285][ T39] ? __pfx_process_one_work+0x10/0x10 [ 1417.395318][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 1417.395346][ T39] ? assign_work+0x3cf/0x5d0 [ 1417.395378][ T39] worker_thread+0xb05/0x10d0 [ 1417.395407][ T39] ? __kthread_parkme+0x71/0x1f0 [ 1417.395437][ T39] kthread+0x388/0x470 [ 1417.395459][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1417.395476][ T39] ? __pfx_kthread+0x10/0x10 [ 1417.395500][ T39] ret_from_fork+0x514/0xb70 [ 1417.395526][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1417.395549][ T39] ? __switch_to+0xc89/0x1420 [ 1417.395572][ T39] ? __pfx_kthread+0x10/0x10 [ 1417.395596][ T39] ret_from_fork_asm+0x1a/0x30 [ 1417.395636][ T39] [ 1417.395648][ T39] INFO: task syz-executor:12183 blocked for more than 144 seconds. [ 1417.395663][ T39] Not tainted syzkaller #0 [ 1417.395672][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1417.395681][ T39] task:syz-executor state:D stack:25800 pid:12183 tgid:12183 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1417.395727][ T39] Call Trace: [ 1417.395733][ T39] [ 1417.395744][ T39] __schedule+0x1709/0x5530 [ 1417.395793][ T39] ? __pfx___schedule+0x10/0x10 [ 1417.395830][ T39] rt_mutex_schedule+0x76/0xf0 [ 1417.395855][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1417.395890][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1417.395912][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1417.395933][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1417.395951][ T39] ? ksys_unshare+0x57d/0xa00 [ 1417.395982][ T39] ? unregister_netdevice_notifier_net+0x87/0x2f0 [ 1417.396012][ T39] ? unregister_netdevice_notifier_net+0x87/0x2f0 [ 1417.396042][ T39] ? unregister_netdevice_notifier_net+0x87/0x2f0 [ 1417.396064][ T39] mutex_lock_nested+0x168/0x1d0 [ 1417.396088][ T39] unregister_netdevice_notifier_net+0x87/0x2f0 [ 1417.396112][ T39] ? net_generic+0x1e/0x240 [ 1417.396214][ T39] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 1417.396241][ T39] ? net_generic+0x1e/0x240 [ 1417.396266][ T39] ? net_generic+0x1e/0x240 [ 1417.396288][ T39] ? net_generic+0x1e/0x240 [ 1417.396321][ T39] ? net_generic+0x1f4/0x240 [ 1417.396349][ T39] ops_undo_list+0x43d/0x8d0 [ 1417.396379][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 1417.396400][ T39] ? ops_init+0x46a/0x5d0 [ 1417.396432][ T39] setup_net+0x2f6/0x350 [ 1417.396456][ T39] ? __pfx_setup_net+0x10/0x10 [ 1417.396482][ T39] ? preinit_net+0x4b5/0x7d0 [ 1417.396506][ T39] copy_net_ns+0x4f9/0x720 [ 1417.396531][ T39] create_new_namespaces+0x3f0/0x6b0 [ 1417.396562][ T39] ? security_capable+0x7e/0x2c0 [ 1417.396672][ T39] unshare_nsproxy_namespaces+0x149/0x190 [ 1417.396703][ T39] ksys_unshare+0x57d/0xa00 [ 1417.396733][ T39] ? __pfx_ksys_unshare+0x10/0x10 [ 1417.396770][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.396792][ T39] __x64_sys_unshare+0x38/0x50 [ 1417.396812][ T39] do_syscall_64+0x174/0x580 [ 1417.396836][ T39] ? trace_irq_disable+0x3b/0x140 [ 1417.396917][ T39] ? clear_bhb_loop+0x40/0x90 [ 1417.396941][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.396960][ T39] RIP: 0033:0x7f9678c7e127 [ 1417.396985][ T39] RSP: 002b:00007ffe311717d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1417.397012][ T39] RAX: ffffffffffffffda RBX: 00007f9678ef5f40 RCX: 00007f9678c7e127 [ 1417.397026][ T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1417.397039][ T39] RBP: 00007f9678ef67b8 R08: 0000000000000000 R09: 0000000000000000 [ 1417.397051][ T39] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1417.397064][ T39] R13: 0000000000000003 R14: 00007ffe31171a18 R15: 0000000000000000 [ 1417.397093][ T39] [ 1417.397102][ T39] INFO: task syz-executor:12197 blocked for more than 144 seconds. [ 1417.397116][ T39] Not tainted syzkaller #0 [ 1417.397125][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1417.397134][ T39] task:syz-executor state:D stack:25720 pid:12197 tgid:12197 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1417.397179][ T39] Call Trace: [ 1417.397186][ T39] [ 1417.397197][ T39] __schedule+0x1709/0x5530 [ 1417.397223][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1417.397269][ T39] ? __pfx___schedule+0x10/0x10 [ 1417.397313][ T39] rt_mutex_schedule+0x76/0xf0 [ 1417.397339][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1417.397373][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1417.397395][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1417.397415][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1417.397445][ T39] ? ops_undo_list+0x28e/0x8d0 [ 1417.397473][ T39] ? ops_undo_list+0x28e/0x8d0 [ 1417.397501][ T39] ? ops_undo_list+0x28e/0x8d0 [ 1417.397522][ T39] mutex_lock_nested+0x168/0x1d0 [ 1417.397546][ T39] ops_undo_list+0x28e/0x8d0 [ 1417.397575][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 1417.397596][ T39] ? ops_init+0x46a/0x5d0 [ 1417.397627][ T39] setup_net+0x2f6/0x350 [ 1417.397651][ T39] ? __pfx_setup_net+0x10/0x10 [ 1417.397678][ T39] ? preinit_net+0x4b5/0x7d0 [ 1417.397702][ T39] copy_net_ns+0x4f9/0x720 [ 1417.397726][ T39] create_new_namespaces+0x3f0/0x6b0 [ 1417.397756][ T39] ? security_capable+0x7e/0x2c0 [ 1417.397787][ T39] unshare_nsproxy_namespaces+0x149/0x190 [ 1417.397817][ T39] ksys_unshare+0x57d/0xa00 [ 1417.397847][ T39] ? __pfx_ksys_unshare+0x10/0x10 [ 1417.397878][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.397899][ T39] __x64_sys_unshare+0x38/0x50 [ 1417.397919][ T39] do_syscall_64+0x174/0x580 [ 1417.397942][ T39] ? trace_irq_disable+0x3b/0x140 [ 1417.397965][ T39] ? clear_bhb_loop+0x40/0x90 [ 1417.397988][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.398007][ T39] RIP: 0033:0x7fc09377e127 [ 1417.398023][ T39] RSP: 002b:00007ffd53bc0a78 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1417.398042][ T39] RAX: ffffffffffffffda RBX: 00007fc0939f5f40 RCX: 00007fc09377e127 [ 1417.398056][ T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1417.398068][ T39] RBP: 00007fc0939f67b8 R08: 0000000000000000 R09: 0000000000000000 [ 1417.398081][ T39] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 1417.398093][ T39] R13: 0000000000000003 R14: 00007ffd53bc0cb8 R15: 0000000000000000 [ 1417.398122][ T39] [ 1417.398133][ T39] INFO: task syz-executor:12268 blocked for more than 144 seconds. [ 1417.398147][ T39] Not tainted syzkaller #0 [ 1417.398156][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1417.398165][ T39] task:syz-executor state:D stack:25800 pid:12268 tgid:12268 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1417.398213][ T39] Call Trace: [ 1417.398219][ T39] [ 1417.398230][ T39] __schedule+0x1709/0x5530 [ 1417.398280][ T39] ? __pfx___schedule+0x10/0x10 [ 1417.398324][ T39] rt_mutex_schedule+0x76/0xf0 [ 1417.398350][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1417.398384][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1417.398405][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1417.398426][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1417.398457][ T39] ? inet_rtm_newaddr+0x464/0x19e0 [ 1417.398483][ T39] ? inet_rtm_newaddr+0x464/0x19e0 [ 1417.398510][ T39] ? inet_rtm_newaddr+0x464/0x19e0 [ 1417.398527][ T39] mutex_lock_nested+0x168/0x1d0 [ 1417.398552][ T39] inet_rtm_newaddr+0x464/0x19e0 [ 1417.398571][ T39] ? unwind_get_return_address+0x4d/0x90 [ 1417.398665][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1417.398729][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1417.398767][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1417.398786][ T39] rtnetlink_rcv_msg+0x802/0xc00 [ 1417.398808][ T39] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 1417.398898][ T39] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1417.398921][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1417.398946][ T39] ? __lock_acquire+0x683/0x2ce0 [ 1417.398983][ T39] netlink_rcv_skb+0x226/0x4a0 [ 1417.399012][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1417.399042][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1417.399079][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1417.399105][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1417.399136][ T39] netlink_unicast+0x7f5/0x990 [ 1417.399170][ T39] netlink_sendmsg+0x813/0xb40 [ 1417.399205][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1417.399233][ T39] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1417.399333][ T39] ? aa_sock_msg_perm+0x122/0x200 [ 1417.399384][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1417.399409][ T39] sock_sendmsg_nosec+0x13a/0x180 [ 1417.399434][ T39] __sys_sendto+0x41e/0x5d0 [ 1417.399464][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 1417.399485][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 1417.399521][ T39] ? fput_close_sync+0x11f/0x240 [ 1417.399543][ T39] ? kmem_cache_free+0x526/0x6c0 [ 1417.399573][ T39] ? __pfx_fput_close_sync+0x10/0x10 [ 1417.399604][ T39] __x64_sys_sendto+0xde/0x100 [ 1417.399628][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.399648][ T39] do_syscall_64+0x174/0x580 [ 1417.399670][ T39] ? trace_irq_disable+0x3b/0x140 [ 1417.399693][ T39] ? clear_bhb_loop+0x40/0x90 [ 1417.399717][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.399735][ T39] RIP: 0033:0x7f22b95dd68e [ 1417.399752][ T39] RSP: 002b:00007ffff58e7288 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1417.399770][ T39] RAX: ffffffffffffffda RBX: 0000555585ee4500 RCX: 00007f22b95dd68e [ 1417.399786][ T39] RDX: 0000000000000028 RSI: 00007f22ba3c4670 RDI: 0000000000000003 [ 1417.399798][ T39] RBP: 0000000000000001 R08: 00007ffff58e7304 R09: 000000000000000c [ 1417.399810][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1417.399822][ T39] R13: 0000000000000000 R14: 00007f22ba3c4670 R15: 0000000000000000 [ 1417.399851][ T39] [ 1417.399860][ T39] INFO: task syz-executor:12273 blocked for more than 144 seconds. [ 1417.399874][ T39] Not tainted syzkaller #0 [ 1417.399883][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1417.399892][ T39] task:syz-executor state:D stack:25800 pid:12273 tgid:12273 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1417.399938][ T39] Call Trace: [ 1417.399945][ T39] [ 1417.399956][ T39] __schedule+0x1709/0x5530 [ 1417.400006][ T39] ? __pfx___schedule+0x10/0x10 [ 1417.400044][ T39] rt_mutex_schedule+0x76/0xf0 [ 1417.400069][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1417.400103][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1417.400124][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1417.400145][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1417.400175][ T39] ? inet_rtm_newaddr+0x464/0x19e0 [ 1417.400200][ T39] ? inet_rtm_newaddr+0x464/0x19e0 [ 1417.400223][ T39] ? inet_rtm_newaddr+0x464/0x19e0 [ 1417.400252][ T39] mutex_lock_nested+0x168/0x1d0 [ 1417.400278][ T39] inet_rtm_newaddr+0x464/0x19e0 [ 1417.400297][ T39] ? unwind_get_return_address+0x4d/0x90 [ 1417.400331][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1417.400365][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1417.400402][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1417.400422][ T39] rtnetlink_rcv_msg+0x802/0xc00 [ 1417.400445][ T39] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 1417.400469][ T39] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1417.400492][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1417.400516][ T39] ? __lock_acquire+0x683/0x2ce0 [ 1417.400553][ T39] netlink_rcv_skb+0x226/0x4a0 [ 1417.400579][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1417.400604][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1417.400642][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1417.400667][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1417.400697][ T39] netlink_unicast+0x7f5/0x990 [ 1417.400732][ T39] netlink_sendmsg+0x813/0xb40 [ 1417.400767][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1417.400793][ T39] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1417.400824][ T39] ? aa_sock_msg_perm+0x122/0x200 [ 1417.400850][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1417.400874][ T39] sock_sendmsg_nosec+0x13a/0x180 [ 1417.400897][ T39] __sys_sendto+0x41e/0x5d0 [ 1417.400926][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 1417.400978][ T39] ? do_user_addr_fault+0xc4a/0x1340 [ 1417.401039][ T39] __x64_sys_sendto+0xde/0x100 [ 1417.401063][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.401084][ T39] do_syscall_64+0x174/0x580 [ 1417.401107][ T39] ? trace_irq_disable+0x3b/0x140 [ 1417.401131][ T39] ? clear_bhb_loop+0x40/0x90 [ 1417.401154][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.401173][ T39] RIP: 0033:0x7fc8ce50d68e [ 1417.401189][ T39] RSP: 002b:00007ffea3dec0a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1417.401207][ T39] RAX: ffffffffffffffda RBX: 00005555694d0500 RCX: 00007fc8ce50d68e [ 1417.401221][ T39] RDX: 0000000000000028 RSI: 00007fc8cf2f4670 RDI: 0000000000000003 [ 1417.401234][ T39] RBP: 0000000000000001 R08: 00007ffea3dec124 R09: 000000000000000c [ 1417.401246][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1417.401258][ T39] R13: 0000000000000000 R14: 00007fc8cf2f4670 R15: 0000000000000000 [ 1417.401288][ T39] [ 1417.401321][ T39] [ 1417.401321][ T39] Showing all locks held in the system: [ 1417.401331][ T39] 1 lock held by ktimers/0/16: [ 1417.401353][ T39] #0: ffffffff8de591a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1417.401447][ T39] 1 lock held by rcub/0/19: [ 1417.401458][ T39] #0: ffffffff8dfc8c08 (rcu_state){+.+.}-{0:0}, at: rcu_boost_kthread+0x30d/0x4c0 [ 1417.401644][ T39] 1 lock held by khungtaskd/39: [ 1417.401655][ T39] #0: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1417.401726][ T39] 4 locks held by kworker/u8:6/160: [ 1417.401766][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.401857][ T39] #1: ffffc900038cfc60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.401901][ T39] #2: ffff88805f8808d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1417.401940][ T39] #3: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1417.401984][ T39] 9 locks held by kworker/u8:7/258: [ 1417.401994][ T39] #0: ffff88803aa43138 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.402046][ T39] #1: ffffc90003a5fc60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.402096][ T39] #2: ffffffff8de591a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1417.402137][ T39] #3: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1417.402174][ T39] #4: ffff88805dad8248 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 1417.402216][ T39] #5: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 1417.402248][ T39] #6: ffffffff8de591a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1417.402284][ T39] #7: ffffffff8dfc30a0 (rcu_read_lock_bh){....}-{1:3}, at: send6+0x255/0x920 [ 1417.402337][ T39] #8: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: ip6_route_output_flags+0x2e/0x5e0 [ 1417.402380][ T39] 3 locks held by kworker/u8:8/1173: [ 1417.402388][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.402425][ T39] #1: ffffc90005e77c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.402462][ T39] #2: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1417.402508][ T39] 6 locks held by kworker/u8:14/3383: [ 1417.402517][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.402554][ T39] #1: ffffc9000e02fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.402592][ T39] #2: ffff88803c71c310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1417.402626][ T39] #3: ffff88803d627d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1417.402657][ T39] #4: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1417.402689][ T39] #5: ffff8880b8736e90 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0 [ 1417.402831][ T39] 3 locks held by kworker/u8:18/4852: [ 1417.402842][ T39] #0: ffff888032590938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.402882][ T39] #1: ffffc900108afc60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.402926][ T39] #2: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1417.402972][ T39] 1 lock held by dhcpcd/5273: [ 1417.402982][ T39] #0: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 1417.403029][ T39] 2 locks held by getty/5364: [ 1417.403038][ T39] #0: ffff88803620c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1417.403139][ T39] #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1417.403190][ T39] 5 locks held by kworker/0:8/6012: [ 1417.403200][ T39] #0: ffff88805f167d38 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.403249][ T39] #1: ffffc90005de7c60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.403314][ T39] #2: ffffffff8de591a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1417.403351][ T39] #3: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1417.403387][ T39] #4: ffffffff8dfc30a0 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_send_staged_packets+0x132/0x14f0 [ 1417.403432][ T39] 6 locks held by kworker/u8:19/7064: [ 1417.403441][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.403487][ T39] #1: ffffc9000df0fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.403536][ T39] #2: ffff88803f172310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1417.403580][ T39] #3: ffff88803cef2120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1417.403620][ T39] #4: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1417.403661][ T39] #5: ffff8880b8736e90 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0 [ 1417.403714][ T39] 3 locks held by kworker/0:0/10263: [ 1417.403724][ T39] #0: ffff88813fe4b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.403772][ T39] #1: ffffc9001061fc60 (rx_mode_work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.403820][ T39] #2: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x19/0x450 [ 1417.403864][ T39] 4 locks held by kworker/u8:20/10945: [ 1417.403874][ T39] #0: ffff88801b696138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.404465][ T39] #1: ffffc9001cd6fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.404521][ T39] #2: ffffffff8f378900 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1417.404567][ T39] #3: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1417.404614][ T39] 3 locks held by kworker/1:1/11926: [ 1417.404625][ T39] #0: ffff88813fe4b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.404673][ T39] #1: ffffc90006417c60 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.404722][ T39] #2: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1417.404770][ T39] 2 locks held by syz-executor/12183: [ 1417.404781][ T39] #0: ffffffff8f378900 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1417.404824][ T39] #1: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_notifier_net+0x87/0x2f0 [ 1417.404871][ T39] 2 locks held by syz-executor/12197: [ 1417.404881][ T39] #0: ffffffff8f378900 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1417.404922][ T39] #1: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1417.404966][ T39] 6 locks held by kworker/u8:25/12209: [ 1417.404976][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.405023][ T39] #1: ffffc90003dffc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.405072][ T39] #2: ffff88803c83e310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1417.405119][ T39] #3: ffff88803bdb3920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1417.405161][ T39] #4: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1417.405203][ T39] #5: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1417.405252][ T39] 6 locks held by kworker/u8:26/12210: [ 1417.405263][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.405319][ T39] #1: ffffc900048efc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.405370][ T39] #2: ffff88803cb78310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1417.405417][ T39] #3: ffff88805db1c520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1417.405460][ T39] #4: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1417.405502][ T39] #5: ffff8880b8736e90 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0 [ 1417.405549][ T39] 2 locks held by kworker/u8:27/12213: [ 1417.405560][ T39] #0: ffff888032852138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.405609][ T39] #1: ffffc90003d2fc60 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.405660][ T39] 6 locks held by kworker/u8:28/12216: [ 1417.405670][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.405719][ T39] #1: ffffc90003dafc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1417.405768][ T39] #2: ffff88801b390310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1417.405815][ T39] #3: ffff88802a693d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1417.405858][ T39] #4: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1417.405901][ T39] #5: ffff8880b8736e90 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0 [ 1417.405947][ T39] 1 lock held by syz-executor/12268: [ 1417.405957][ T39] #0: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1417.406001][ T39] 1 lock held by syz-executor/12273: [ 1417.406011][ T39] #0: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1417.406055][ T39] 1 lock held by syz-executor/12293: [ 1417.406065][ T39] #0: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1417.406109][ T39] 1 lock held by syz-executor/12306: [ 1417.406119][ T39] #0: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1417.406162][ T39] 1 lock held by syz-executor/12319: [ 1417.406172][ T39] #0: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1417.406214][ T39] 1 lock held by syz-executor/12327: [ 1417.406225][ T39] #0: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1417.406268][ T39] 1 lock held by syz-executor/12332: [ 1417.406279][ T39] #0: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1417.406328][ T39] 1 lock held by syz-executor/12340: [ 1417.406355][ T39] #0: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1417.406398][ T39] 1 lock held by syz-executor/12348: [ 1417.406407][ T39] #0: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1417.406452][ T39] 1 lock held by syz-executor/12358: [ 1417.406463][ T39] #0: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1417.406505][ T39] 1 lock held by syz-executor/12361: [ 1417.406516][ T39] #0: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1417.406558][ T39] 1 lock held by syz-executor/12363: [ 1417.406569][ T39] #0: ffffffff8f387f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1417.406613][ T39] 2 locks held by udevd/12373: [ 1417.406622][ T39] #0: ffff88802f72ba30 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1417.406744][ T39] #1: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: __vma_start_write+0xdc/0x290 [ 1417.406838][ T39] 5 locks held by syz-executor/12377: [ 1417.406849][ T39] #0: ffff888039f0ae48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1417.406894][ T39] #1: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1417.406961][ T39] #2: ffff888037ded898 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1417.407009][ T39] #3: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1417.407050][ T39] #4: ffffffff8dfc3040 (rcu_read_lock){....}-{1:3}, at: lruvec_stat_mod_folio+0x6e/0x3e0 [ 1417.407131][ T39] [ 1417.407136][ T39] ============================================= [ 1417.407136][ T39] [ 1417.407145][ T39] NMI backtrace for cpu 1 [ 1417.407173][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1417.407227][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1417.407237][ T39] Call Trace: [ 1417.407246][ T39] [ 1417.407253][ T39] dump_stack_lvl+0xe8/0x150 [ 1417.407280][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1417.407305][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1417.407385][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1417.407406][ T39] sys_info+0x135/0x170 [ 1417.407452][ T39] watchdog+0xfd7/0x1030 [ 1417.407538][ T39] ? watchdog+0x1c7/0x1030 [ 1417.407566][ T39] kthread+0x388/0x470 [ 1417.407589][ T39] ? __pfx_watchdog+0x10/0x10 [ 1417.407609][ T39] ? __pfx_kthread+0x10/0x10 [ 1417.407631][ T39] ret_from_fork+0x514/0xb70 [ 1417.407656][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1417.407679][ T39] ? __switch_to+0xc89/0x1420 [ 1417.407702][ T39] ? __pfx_kthread+0x10/0x10 [ 1417.407724][ T39] ret_from_fork_asm+0x1a/0x30 [ 1417.407762][ T39] [ 1417.407774][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1417.407809][ C0] NMI backtrace for cpu 0 [ 1417.407827][ C0] CPU: 0 UID: 0 PID: 12373 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1417.407845][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1417.407854][ C0] RIP: 0010:local_clock+0x0/0x30 [ 1417.407934][ C0] Code: 48 c7 c7 e0 52 e8 8d 48 89 de e8 7b d3 50 03 e9 3f ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 ff 05 95 d3 d7 10 e8 b0 17 93 09 65 ff 0d 89 d3 d7 [ 1417.407948][ C0] RSP: 0018:ffffc90003ddf540 EFLAGS: 00000293 [ 1417.407962][ C0] RAX: ffffffff82364858 RBX: 1ffffd4000333485 RCX: ffff888033030000 [ 1417.407973][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1417.407983][ C0] RBP: 0000000000000000 R08: ffffea000199a437 R09: 1ffffd4000333486 [ 1417.407994][ C0] R10: dffffc0000000000 R11: fffff94000333487 R12: ffffea000199a400 [ 1417.408005][ C0] R13: 0000000000000000 R14: ffffea000199a400 R15: 0000000000000000 [ 1417.408015][ C0] FS: 0000000000000000(0000) GS:ffff888125ed4000(0000) knlGS:0000000000000000 [ 1417.408028][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1417.408039][ C0] CR2: 00007fab12b98040 CR3: 0000000038a92000 CR4: 00000000003526f0 [ 1417.408054][ C0] Call Trace: [ 1417.408060][ C0] [ 1417.408065][ C0] __reset_page_owner+0x1d/0x1f0 [ 1417.408108][ C0] free_unref_folios+0xd21/0x19f0 [ 1417.408154][ C0] folios_put_refs+0x815/0x920 [ 1417.408235][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1417.408256][ C0] ? free_swap_cache+0x109/0x300 [ 1417.408301][ C0] free_pages_and_swap_cache+0x2ba/0x490 [ 1417.408326][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1417.408347][ C0] ? free_pgd_range+0x1356/0x13c0 [ 1417.408377][ C0] ? __virt_addr_valid+0x137/0x390 [ 1417.408393][ C0] ? __virt_addr_valid+0x137/0x390 [ 1417.408418][ C0] tlb_flush_mmu+0x6d3/0xa30 [ 1417.408436][ C0] ? rwbase_write_lock+0x550/0x720 [ 1417.408459][ C0] tlb_finish_mmu+0xf4/0x220 [ 1417.408478][ C0] exit_mmap+0x4b2/0x9f0 [ 1417.408495][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1417.408509][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1417.408533][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1417.408556][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1417.408608][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 1417.408629][ C0] ? uprobe_clear_state+0x2af/0x3e0 [ 1417.408693][ C0] __mmput+0xcb/0x3e0 [ 1417.408738][ C0] exit_mm+0x186/0x240 [ 1417.408757][ C0] do_exit+0x6cd/0x2360 [ 1417.408774][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1417.408793][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1417.408818][ C0] ? reacquire_held_locks+0x104/0x190 [ 1417.408833][ C0] ? __pfx_do_exit+0x10/0x10 [ 1417.408850][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1417.408867][ C0] ? rt_spin_unlock+0x14f/0x200 [ 1417.408884][ C0] ? rt_spin_unlock+0x160/0x200 [ 1417.408900][ C0] do_group_exit+0x22d/0x2f0 [ 1417.408919][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.408935][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1417.408954][ C0] x64_sys_call+0x221a/0x2240 [ 1417.408973][ C0] do_syscall_64+0x174/0x580 [ 1417.408992][ C0] ? trace_irq_disable+0x3b/0x140 [ 1417.409009][ C0] ? clear_bhb_loop+0x40/0x90 [ 1417.409027][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.409041][ C0] RIP: 0033:0x7f1f666296c5 [ 1417.409054][ C0] Code: Unable to access opcode bytes at 0x7f1f6662969b. [ 1417.409093][ C0] RSP: 002b:00007fffa567b4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1417.409109][ C0] RAX: ffffffffffffffda RBX: 00005651c1b18d60 RCX: 00007f1f666296c5 [ 1417.409120][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1417.409131][ C0] RBP: 00005651c1b07910 R08: 0000000000000000 R09: 0000000000000000 [ 1417.409140][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1417.409150][ C0] R13: 00007fffa567b540 R14: 0000000000000000 R15: 0000000000000000 [ 1417.409168][ C0] [ 1417.409817][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1417.409835][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1417.409856][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1417.409866][ T39] Call Trace: [ 1417.409873][ T39] [ 1417.409881][ T39] vpanic+0x56c/0xa60 [ 1417.409905][ T39] ? __pfx___schedule+0x10/0x10 [ 1417.409927][ T39] ? __pfx_vpanic+0x10/0x10 [ 1417.409959][ T39] panic+0xc5/0xd0 [ 1417.409981][ T39] ? __pfx_panic+0x10/0x10 [ 1417.410002][ T39] ? preempt_schedule_common+0x82/0xd0 [ 1417.410024][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 1417.410044][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1417.410065][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1417.410088][ T39] watchdog+0x1030/0x1030 [ 1417.410116][ T39] ? watchdog+0x1c7/0x1030 [ 1417.410144][ T39] kthread+0x388/0x470 [ 1417.410167][ T39] ? __pfx_watchdog+0x10/0x10 [ 1417.410187][ T39] ? __pfx_kthread+0x10/0x10 [ 1417.410210][ T39] ret_from_fork+0x514/0xb70 [ 1417.410236][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1417.410259][ T39] ? __switch_to+0xc89/0x1420 [ 1417.410281][ T39] ? __pfx_kthread+0x10/0x10 [ 1417.410336][ T39] ret_from_fork_asm+0x1a/0x30 [ 1417.410374][ T39] [ 1417.410645][ T39] Kernel Offset: disabled