last executing test programs: 2m18.302310818s ago: executing program 1 (id=86): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x110}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1", 0xa2}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="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", 0x11e}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0fcbe09cd9e34c6b9d641ba6fb677edede912815299a3313b02b4af73d57a5d0a7c01e400c4782", 0xb1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600e7", 0xec}, {&(0x7f0000000040)="7542473782798be019c27ed30b", 0xd}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965475953e2a028f7dd4a6ed8b33465fd161cd8dce309f6be32236cf8e07a5506acb719304ebc71b2a3756cb0832d928d432d1506d368e2b001a8b392dad3dc2916376732339a20db54405b716ea85c9a4d8f232138345947e47c80f23fcac5422ee2fcf8bf7ef306ed29b3045ee6f25c76fbc9e85a5bdf3be0a386a5afc9b5b11cece3aeed4bf8daf0394e72f5775c4916db082e98ad", 0xc4}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m15.779134455s ago: executing program 1 (id=89): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000380)={0x0, 0xd, 0x2, "e3a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000004c0)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m10.103402929s ago: executing program 1 (id=98): r0 = syz_open_dev$video(&(0x7f0000000580), 0x8001, 0x2000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@empty, 0x0, 0x0, 0x40, 0x0, [{}, {@empty}, {@local}, {@private}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x2c8a4ed31704d5db, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x164) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 2m8.46465553s ago: executing program 1 (id=101): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x1, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2ed, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m8.035522828s ago: executing program 1 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000002000000050005000a0000000500010007000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m4.948821634s ago: executing program 1 (id=106): r0 = syz_open_dev$video(&(0x7f0000000580), 0x8001, 0x2000) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000000c0)={'sit0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x2c8a4ed31704d5db, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x164) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 1m48.962027992s ago: executing program 32 (id=106): r0 = syz_open_dev$video(&(0x7f0000000580), 0x8001, 0x2000) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000000c0)={'sit0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x2c8a4ed31704d5db, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x164) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 1m21.354850171s ago: executing program 4 (id=155): getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xe8}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xffffff53}], 0x3}, 0x4009080) 1m15.794149986s ago: executing program 3 (id=159): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') 1m15.620003956s ago: executing program 4 (id=160): syz_open_dev$radio(0x0, 0x1, 0x2) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xe8}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xffffff53}], 0x3}, 0x4009080) 1m13.516879043s ago: executing program 3 (id=161): r0 = syz_open_dev$video(&(0x7f0000000580), 0x8001, 0x2000) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@empty, 0x0, 0x0, 0x40, 0x0, [{}, {@empty}, {@local}, {@private}]}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405"], 0x70}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x2c8a4ed31704d5db, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x164) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x8412060, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000}}, 0x50) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 1m11.262125285s ago: executing program 3 (id=163): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000"], 0x10b8}, 0x20000004) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1m10.324906906s ago: executing program 3 (id=164): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9", 0x38}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a", 0x69}, {&(0x7f0000001400)="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", 0x7e9}], 0x3, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m5.450478648s ago: executing program 3 (id=169): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000580)={0x20, 0xc70427ef357ad313}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m2.47993155s ago: executing program 0 (id=170): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') 1m1.342034057s ago: executing program 0 (id=172): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)={0x148, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x124, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xbc}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x148}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1m1.22671705s ago: executing program 4 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 57.918690677s ago: executing program 4 (id=174): syz_open_dev$radio(0x0, 0x1, 0x2) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {0x0}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xf}], 0x3}, 0x4009080) 57.918305167s ago: executing program 3 (id=175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bedd7888c1ef50d9de72e9b0e5287a0dd9a544c6c706469eca4d4c532cf7a9a601d84816936e3b42627788fab858f1041da4801a13aff75576c7febfed5dc7e13cc72be00500d1b99ee982d02ac62c0c49f8f6e0f8359b2b2efb0cb47163cab766c94882779a4b8190e165568e8923bad4195bf7309fe56542ffdc0a3fbcf8432b647c21ebf0a0ad3db5e8d0ebc6a05a2d3918f7cb3ec71e658e0f2a11685a60"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000920a", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990009000000440000000800020001000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d", 0x2b) 57.869276583s ago: executing program 0 (id=176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bedd7888c1ef50d9de72e9b0e5287a0dd9a544c6c706469eca4d4c532cf7a9a601d84816936e3b42627788fab858f1041da4801a13aff75576c7febfed5dc7e13cc72be00500d1b99ee982d02ac62c0c49f8f6e0f8359b2b2efb0cb47163cab766c94882779a4b8190e165568e8923bad4195bf7309fe56542ffdc0a3fbcf8432b647c21ebf0a0ad3db5e8d0ebc6a05a2d3918f7cb3ec71e658e0f2a11685a60"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000920a", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990009000000440000000800020001000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d", 0x2b) 53.754310577s ago: executing program 4 (id=179): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x404400, 0x112) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000b, 0x20010, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001ff5ee0725919350978758804983a25711d638b46a300ae73de9160fcbf2a87a82588454ee38b03cd890126c0313fe6408e58682319aeaf43f25350096a65d8739510163286d3a36c"], 0xac}}, 0x0) 52.837834689s ago: executing program 0 (id=180): rseq(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x86) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) openat$dir(0xffffffffffffff9c, 0x0, 0x40a00, 0x80) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) sendmmsg(r2, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) dup3(0xffffffffffffffff, r0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x100008, 0x321000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) syncfs(0xffffffffffffffff) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) 49.929108819s ago: executing program 4 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 42.897701572s ago: executing program 0 (id=183): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x14}], 0x1}, 0x0) 41.565697694s ago: executing program 33 (id=175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bedd7888c1ef50d9de72e9b0e5287a0dd9a544c6c706469eca4d4c532cf7a9a601d84816936e3b42627788fab858f1041da4801a13aff75576c7febfed5dc7e13cc72be00500d1b99ee982d02ac62c0c49f8f6e0f8359b2b2efb0cb47163cab766c94882779a4b8190e165568e8923bad4195bf7309fe56542ffdc0a3fbcf8432b647c21ebf0a0ad3db5e8d0ebc6a05a2d3918f7cb3ec71e658e0f2a11685a60"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000920a", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990009000000440000000800020001000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d", 0x2b) 41.565429285s ago: executing program 0 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000920a", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990009000000440000000800020001000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d", 0x2b) 34.286427876s ago: executing program 34 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 25.712236736s ago: executing program 35 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000920a", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990009000000440000000800020001000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d", 0x2b) 25.534658556s ago: executing program 2 (id=192): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xd, 0x412002) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000080)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x6c0}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 23.595400957s ago: executing program 2 (id=193): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f", 0xb3}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 22.761741176s ago: executing program 2 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1800000022000d0300000d1ca90275000008002e00e0000002e8d415"], 0x18}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0xc6, &(0x7f0000000380)=""/198, 0x41000}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 20.269631548s ago: executing program 2 (id=195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 19.034435802s ago: executing program 2 (id=196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb3}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) 17.413948816s ago: executing program 2 (id=197): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket(0x2a, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) sendto$packet(r1, &(0x7f0000000a40)="f2435f012742163000000085649283370b6493978c6bb9e0440a1e83fd2f685e1d65f87a6726572fbe7da1a252a1c162cd6ff3dc8793730b42fdcc63bb20a6", 0x3f, 0x1, &(0x7f00000004c0)={0x11, 0x0, r2}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 0s ago: executing program 36 (id=197): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket(0x2a, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) sendto$packet(r1, &(0x7f0000000a40)="f2435f012742163000000085649283370b6493978c6bb9e0440a1e83fd2f685e1d65f87a6726572fbe7da1a252a1c162cd6ff3dc8793730b42fdcc63bb20a6", 0x3f, 0x1, &(0x7f00000004c0)={0x11, 0x0, r2}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. [ 98.180430][ T31] cfg80211: failed to load regulatory.db [ 99.000469][ T5781] cgroup: Unknown subsys name 'net' [ 99.282197][ T5781] cgroup: Unknown subsys name 'cpuset' [ 99.346799][ T5781] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.412378][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 103.916278][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.939296][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.943102][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.944705][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.946620][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.963033][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.970595][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.974385][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.011047][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.011784][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.013531][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.013911][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.037921][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.038498][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.056493][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.124380][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.141105][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.142320][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.144963][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.169760][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.170287][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.171561][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.174286][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.174779][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.189033][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.207457][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 105.259359][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 105.274070][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 105.301902][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 105.386833][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 105.670786][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.671766][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.672192][ T5796] bridge_slave_0: entered allmulticast mode [ 105.674238][ T5796] bridge_slave_0: entered promiscuous mode [ 105.755097][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.755204][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.755355][ T5796] bridge_slave_1: entered allmulticast mode [ 105.762427][ T5796] bridge_slave_1: entered promiscuous mode [ 105.796450][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.796581][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.796764][ T5798] bridge_slave_0: entered allmulticast mode [ 105.798990][ T5798] bridge_slave_0: entered promiscuous mode [ 105.801215][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.801357][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.801574][ T5800] bridge_slave_0: entered allmulticast mode [ 105.803882][ T5800] bridge_slave_0: entered promiscuous mode [ 105.879709][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.879852][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.879983][ T5793] bridge_slave_0: entered allmulticast mode [ 105.881927][ T5793] bridge_slave_0: entered promiscuous mode [ 105.883715][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.883840][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.884026][ T5798] bridge_slave_1: entered allmulticast mode [ 105.906665][ T5798] bridge_slave_1: entered promiscuous mode [ 105.942745][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.942885][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.943981][ T5800] bridge_slave_1: entered allmulticast mode [ 105.946540][ T5800] bridge_slave_1: entered promiscuous mode [ 105.997966][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.998129][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.998307][ T5793] bridge_slave_1: entered allmulticast mode [ 106.000469][ T5793] bridge_slave_1: entered promiscuous mode [ 106.057604][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.057732][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.057923][ T5801] bridge_slave_0: entered allmulticast mode [ 106.060174][ T5801] bridge_slave_0: entered promiscuous mode [ 106.065440][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.097832][ T60] Bluetooth: hci2: command tx timeout [ 106.098215][ T60] Bluetooth: hci1: command tx timeout [ 106.098423][ T60] Bluetooth: hci0: command tx timeout [ 106.197211][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.197345][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.197610][ T5801] bridge_slave_1: entered allmulticast mode [ 106.199803][ T5801] bridge_slave_1: entered promiscuous mode [ 106.203899][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.251303][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.254684][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.256951][ T5794] Bluetooth: hci3: command tx timeout [ 106.257071][ T5794] Bluetooth: hci4: command tx timeout [ 106.313662][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.326258][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.330261][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.379500][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.432535][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.445554][ T5796] team0: Port device team_slave_0 added [ 106.496371][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.498437][ T5796] team0: Port device team_slave_1 added [ 106.527638][ T5798] team0: Port device team_slave_0 added [ 106.529990][ T5800] team0: Port device team_slave_0 added [ 106.569285][ T5793] team0: Port device team_slave_0 added [ 106.571572][ T5798] team0: Port device team_slave_1 added [ 106.573540][ T5800] team0: Port device team_slave_1 added [ 106.618226][ T5793] team0: Port device team_slave_1 added [ 106.653630][ T5801] team0: Port device team_slave_0 added [ 106.655500][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.655513][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.655532][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.739018][ T5801] team0: Port device team_slave_1 added [ 106.739755][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.739766][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.739785][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.805379][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.805397][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.805426][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.815272][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.815322][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.815389][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.902066][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.902089][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.902116][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.903350][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.903365][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.903394][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.915895][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.915907][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.915927][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.993327][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.993380][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.993461][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.083382][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.083405][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.083425][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.146444][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.146458][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.146478][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.233348][ T5796] hsr_slave_0: entered promiscuous mode [ 107.234548][ T5796] hsr_slave_1: entered promiscuous mode [ 107.724711][ T5798] hsr_slave_0: entered promiscuous mode [ 107.734203][ T5798] hsr_slave_1: entered promiscuous mode [ 107.735085][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 107.735180][ T5798] Cannot create hsr debugfs directory [ 107.759568][ T5800] hsr_slave_0: entered promiscuous mode [ 107.760595][ T5800] hsr_slave_1: entered promiscuous mode [ 107.761289][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 107.761307][ T5800] Cannot create hsr debugfs directory [ 107.802215][ T5793] hsr_slave_0: entered promiscuous mode [ 107.803239][ T5793] hsr_slave_1: entered promiscuous mode [ 107.803919][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 107.803937][ T5793] Cannot create hsr debugfs directory [ 107.874409][ T5801] hsr_slave_0: entered promiscuous mode [ 107.875398][ T5801] hsr_slave_1: entered promiscuous mode [ 107.887713][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 107.887733][ T5801] Cannot create hsr debugfs directory [ 108.177568][ T60] Bluetooth: hci0: command tx timeout [ 108.177599][ T5794] Bluetooth: hci1: command tx timeout [ 108.177627][ T5794] Bluetooth: hci2: command tx timeout [ 108.337449][ T5804] Bluetooth: hci3: command tx timeout [ 108.337551][ T60] Bluetooth: hci4: command tx timeout [ 108.850909][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.886831][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.913219][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.964857][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.069835][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.113462][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.131143][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.198820][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.325861][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.371035][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.417338][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.469477][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.632973][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.676996][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.705857][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.758152][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.891324][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.908719][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.967304][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.019262][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.058340][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.141989][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.190630][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.191447][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.233714][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.250573][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.250685][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.256360][ T5794] Bluetooth: hci0: command tx timeout [ 110.256447][ T5804] Bluetooth: hci1: command tx timeout [ 110.257223][ T60] Bluetooth: hci2: command tx timeout [ 110.382225][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.415910][ T5804] Bluetooth: hci3: command tx timeout [ 110.416003][ T60] Bluetooth: hci4: command tx timeout [ 110.418253][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.457442][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.457697][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.501491][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.501585][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.568989][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.612983][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.615023][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.615176][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.682385][ T787] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.682524][ T787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.761601][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.799361][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.817586][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.818043][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.897541][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.897683][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.962174][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.008489][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.008715][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.064450][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.073279][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.244382][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.470039][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.505521][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.528934][ T5796] veth0_vlan: entered promiscuous mode [ 111.588248][ T5796] veth1_vlan: entered promiscuous mode [ 111.777094][ T5798] veth0_vlan: entered promiscuous mode [ 111.834498][ T5796] veth0_macvtap: entered promiscuous mode [ 111.861398][ T5798] veth1_vlan: entered promiscuous mode [ 111.877540][ T5796] veth1_macvtap: entered promiscuous mode [ 111.963804][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.993922][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.026021][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.047186][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.080472][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.099223][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.102979][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.104916][ T5798] veth0_macvtap: entered promiscuous mode [ 112.140292][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.161385][ T5798] veth1_macvtap: entered promiscuous mode [ 112.336194][ T5794] Bluetooth: hci0: command tx timeout [ 112.336259][ T5804] Bluetooth: hci1: command tx timeout [ 112.336298][ T60] Bluetooth: hci2: command tx timeout [ 112.398927][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.454434][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.496486][ T60] Bluetooth: hci4: command tx timeout [ 112.496520][ T60] Bluetooth: hci3: command tx timeout [ 112.531836][ T5801] veth0_vlan: entered promiscuous mode [ 112.532959][ T5800] veth0_vlan: entered promiscuous mode [ 112.548309][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.548331][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.588518][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.593206][ T5793] veth0_vlan: entered promiscuous mode [ 112.595651][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.635242][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.660704][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.689212][ T5801] veth1_vlan: entered promiscuous mode [ 112.691420][ T5800] veth1_vlan: entered promiscuous mode [ 112.754538][ T5793] veth1_vlan: entered promiscuous mode [ 112.769570][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.769593][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.076384][ T5801] veth0_macvtap: entered promiscuous mode [ 113.102448][ T5801] veth1_macvtap: entered promiscuous mode [ 113.165521][ T5800] veth0_macvtap: entered promiscuous mode [ 113.180602][ T300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.180632][ T300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.184427][ T5793] veth0_macvtap: entered promiscuous mode [ 113.242758][ T5800] veth1_macvtap: entered promiscuous mode [ 113.268237][ T5793] veth1_macvtap: entered promiscuous mode [ 113.300721][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.403233][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.405570][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.405588][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.493857][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.545025][ T300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.558863][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.560463][ T300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.598232][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.598313][ T300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.607536][ T300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.929891][ T993] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.931809][ T993] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.961064][ T993] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.747196][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.752520][ T993] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.151170][ T1172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.362450][ T1172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.497216][ T300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.517416][ T5919] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.561864][ T300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.595804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.596877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.597104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.995804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 116.075785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.119655][ T5925] hfs: unable to load iocharset "io#harset" [ 116.153781][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.153801][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.394768][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.394792][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.651144][ T787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.651160][ T787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.697621][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.697638][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.874384][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.874408][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.135805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.145815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.155785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.165783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.337752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.431617][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.431639][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.422620][ T854] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.674647][ T854] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 120.674671][ T854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.674685][ T854] usb 1-1: Product: syz [ 120.674695][ T854] usb 1-1: Manufacturer: syz [ 120.674706][ T854] usb 1-1: SerialNumber: syz [ 121.502146][ T854] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 121.502214][ T854] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 123.766344][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.963019][ T31] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 123.963052][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.963074][ T31] usb 5-1: Product: syz [ 123.963088][ T31] usb 5-1: Manufacturer: syz [ 123.963103][ T31] usb 5-1: SerialNumber: syz [ 124.002818][ T854] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 124.002891][ T854] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 124.059885][ T854] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 124.080341][ T31] usb 5-1: config 0 descriptor?? [ 124.148464][ T854] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 124.632782][ T5968] overlayfs: failed to resolve './file0': -2 [ 124.893914][ T854] usb 1-1: USB disconnect, device number 2 [ 125.961887][ T31] usb 5-1: Firmware version (0.0) predates our first public release. [ 125.961976][ T31] usb 5-1: Please update to version 0.2 or newer [ 126.855824][ T5864] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.103215][ T5864] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 127.103335][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.103356][ T5864] usb 2-1: Product: syz [ 127.103370][ T5864] usb 2-1: Manufacturer: syz [ 127.103384][ T5864] usb 2-1: SerialNumber: syz [ 127.375936][ T5804] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 127.502156][ T5956] usb 5-1: USB disconnect, device number 2 [ 127.853063][ T5864] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 127.853128][ T5864] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 129.155850][ T6001] process 'syz.2.25' launched './file2' with NULL argv: empty string added [ 129.956153][ T5864] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 129.956216][ T5864] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 129.957063][ T5864] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 130.013853][ T6005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.129127][ T5864] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 130.151296][ T5864] usb 2-1: USB disconnect, device number 2 [ 132.117753][ T6025] overlayfs: failed to resolve './file0': -2 [ 134.046170][ T36] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.260454][ T36] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 134.260478][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.285657][ T36] usb 5-1: config 0 descriptor?? [ 134.294034][ T36] cp210x 5-1:0.0: cp210x converter detected [ 136.953505][ T36] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 136.953543][ T36] cp210x 5-1:0.0: querying part number failed [ 137.371876][ T36] usb 5-1: cp210x converter now attached to ttyUSB0 [ 137.613012][ T36] usb 5-1: USB disconnect, device number 3 [ 137.693764][ T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.694634][ T36] cp210x 5-1:0.0: device disconnected [ 138.115841][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.290274][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 138.511717][ T31] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 138.511750][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.511770][ T31] usb 1-1: Product: syz [ 138.511785][ T31] usb 1-1: Manufacturer: syz [ 138.511799][ T31] usb 1-1: SerialNumber: syz [ 138.579538][ T31] usb 1-1: config 0 descriptor?? [ 138.831752][ T31] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 139.164521][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.165309][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.866020][ T36] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 142.045858][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 142.049049][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.049076][ T36] usb 3-1: config 0 has no interfaces? [ 142.053731][ T36] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 142.053769][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.053790][ T36] usb 3-1: Product: syz [ 142.053804][ T36] usb 3-1: Manufacturer: syz [ 142.053897][ T36] usb 3-1: SerialNumber: syz [ 142.167566][ T36] usb 3-1: config 0 descriptor?? [ 142.799577][ T31] gspca_sonixj: reg_w1 err -71 [ 143.096135][ T31] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 143.155376][ T31] usb 1-1: USB disconnect, device number 3 [ 144.371351][ T809] usb 3-1: USB disconnect, device number 2 [ 147.014360][ T36] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 147.635853][ T5864] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 147.939353][ T5864] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 147.939401][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.065933][ T5864] usb 2-1: config 0 descriptor?? [ 148.069890][ T5864] cp210x 2-1:0.0: cp210x converter detected [ 148.518433][ T5864] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 148.518465][ T5864] cp210x 2-1:0.0: querying part number failed [ 148.673657][ T6115] overlayfs: missing 'lowerdir' [ 148.989616][ T809] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 149.528672][ T5864] usb 2-1: cp210x converter now attached to ttyUSB0 [ 149.650030][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 149.652432][ T809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.652545][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.652575][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 149.652602][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 149.652624][ T809] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.672423][ T5864] usb 2-1: USB disconnect, device number 3 [ 149.727513][ T809] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 149.727546][ T809] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 149.727567][ T809] usb 1-1: Manufacturer: syz [ 149.779527][ T809] usb 1-1: config 0 descriptor?? [ 150.013469][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 150.014599][ T5864] cp210x 2-1:0.0: device disconnected [ 151.298588][ T809] rc_core: IR keymap rc-hauppauge not found [ 151.298610][ T809] Registered IR keymap rc-empty [ 151.299242][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.315852][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.340606][ T809] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 151.421843][ T809] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 151.546109][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.566041][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.587628][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.606005][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.633542][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.645857][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.667826][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.689182][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.706282][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.726801][ T809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.775859][ T5956] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 151.913545][ T809] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 151.913572][ T809] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 151.939371][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 152.007680][ T5956] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 152.007713][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.007732][ T5956] usb 3-1: Product: syz [ 152.007746][ T5956] usb 3-1: Manufacturer: syz [ 152.007761][ T5956] usb 3-1: SerialNumber: syz [ 152.057909][ T5956] usb 3-1: config 0 descriptor?? [ 152.070995][ T809] usb 1-1: USB disconnect, device number 4 [ 152.271405][ T5956] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 154.259981][ T5956] gspca_sonixj: i2c_w8 err -110 [ 154.380773][ T5956] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 156.871544][ T854] usb 3-1: USB disconnect, device number 3 [ 157.437892][ T5956] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 157.518460][ T5864] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 157.742110][ T5956] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 157.742144][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.742165][ T5956] usb 5-1: Product: syz [ 157.742180][ T5956] usb 5-1: Manufacturer: syz [ 157.742195][ T5956] usb 5-1: SerialNumber: syz [ 157.806060][ T5956] usb 5-1: config 0 descriptor?? [ 157.808125][ T5864] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 157.808157][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.808178][ T5864] usb 2-1: Product: syz [ 157.808193][ T5864] usb 2-1: Manufacturer: syz [ 157.808207][ T5864] usb 2-1: SerialNumber: syz [ 157.961867][ T5864] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 160.458270][ T5956] usb 5-1: Firmware version (0.0) predates our first public release. [ 160.458300][ T5956] usb 5-1: Please update to version 0.2 or newer [ 160.479482][ T5864] usb 2-1: USB disconnect, device number 4 [ 160.535873][ T854] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 160.731153][ T5864] usb 2-1: ath9k_htc: USB layer deinitialized [ 161.064406][ T5956] usb 5-1: USB disconnect, device number 4 [ 163.582133][ T6175] hfs: unable to load iocharset "io#harset" [ 163.635186][ T6191] netlink: 48 bytes leftover after parsing attributes in process `syz.3.77'. [ 163.958812][ T6193] Zero length message leads to an empty skb [ 164.510587][ T6195] Bluetooth: MGMT ver 1.23 [ 165.642516][ T6201] vivid-000: ================= START STATUS ================= [ 165.642652][ T6201] vivid-000: Generate PTS: true [ 165.642694][ T6201] vivid-000: Generate SCR: true [ 165.642720][ T6201] tpg source WxH: 320x240 (Y'CbCr) [ 165.642734][ T6201] tpg field: 1 [ 165.642742][ T6201] tpg crop: (0,0)/320x240 [ 165.642755][ T6201] tpg compose: (0,0)/320x240 [ 165.642767][ T6201] tpg colorspace: 8 [ 165.642775][ T6201] tpg transfer function: 0/0 [ 165.642785][ T6201] tpg Y'CbCr encoding: 0/0 [ 165.642795][ T6201] tpg quantization: 0/0 [ 165.642805][ T6201] tpg RGB range: 0/2 [ 165.642814][ T6201] vivid-000: ================== END STATUS ================== [ 167.566733][ T6214] vivid-000: ================= START STATUS ================= [ 167.567723][ T6214] vivid-000: Generate PTS: true [ 167.567846][ T6214] vivid-000: Generate SCR: true [ 167.567938][ T6214] tpg source WxH: 320x240 (Y'CbCr) [ 167.567985][ T6214] tpg field: 1 [ 167.568026][ T6214] tpg crop: (0,0)/320x240 [ 167.568064][ T6214] tpg compose: (0,0)/320x240 [ 167.568102][ T6214] tpg colorspace: 8 [ 167.568132][ T6214] tpg transfer function: 0/0 [ 167.568167][ T6214] tpg Y'CbCr encoding: 0/0 [ 167.568201][ T6214] tpg quantization: 0/0 [ 167.568235][ T6214] tpg RGB range: 0/2 [ 167.568268][ T6214] vivid-000: ================== END STATUS ================== [ 169.948928][ T6224] vivid-000: ================= START STATUS ================= [ 169.948996][ T6224] vivid-000: Generate PTS: true [ 169.949090][ T6224] vivid-000: Generate SCR: true [ 169.949191][ T6224] tpg source WxH: 320x240 (Y'CbCr) [ 169.949237][ T6224] tpg field: 1 [ 169.949268][ T6224] tpg crop: (0,0)/320x240 [ 169.949282][ T6224] tpg compose: (0,0)/320x240 [ 169.949318][ T6224] tpg colorspace: 8 [ 169.949349][ T6224] tpg transfer function: 0/0 [ 169.949383][ T6224] tpg Y'CbCr encoding: 0/0 [ 169.949417][ T6224] tpg quantization: 0/0 [ 169.949450][ T6224] tpg RGB range: 0/2 [ 169.949493][ T6224] vivid-000: ================== END STATUS ================== [ 170.406034][ T5965] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.701778][ T5965] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 170.701814][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.701835][ T5965] usb 2-1: Product: syz [ 170.701849][ T5965] usb 2-1: Manufacturer: syz [ 170.701864][ T5965] usb 2-1: SerialNumber: syz [ 171.222296][ T5965] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 171.222364][ T5965] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 171.317057][ T809] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 171.500781][ T809] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.501516][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 171.501547][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 171.501569][ T809] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.502327][ T809] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.502354][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.749053][ T809] usb 4-1: config 0 descriptor?? [ 172.771764][ T809] usbhid 4-1:0.0: can't add hid device: -71 [ 172.773365][ T809] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 172.820413][ T809] usb 4-1: USB disconnect, device number 3 [ 174.243937][ T5965] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 174.244001][ T5965] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 174.244022][ T5965] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 174.244790][ T5965] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 174.354908][ T5965] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 174.381958][ T5965] usb 2-1: USB disconnect, device number 5 [ 175.414937][ T6256] vivid-000: ================= START STATUS ================= [ 175.415006][ T6256] vivid-000: Generate PTS: true [ 175.415100][ T6256] vivid-000: Generate SCR: true [ 175.415191][ T6256] tpg source WxH: 320x240 (Y'CbCr) [ 175.415228][ T6256] tpg field: 1 [ 175.415258][ T6256] tpg crop: (0,0)/320x240 [ 175.415295][ T6256] tpg compose: (0,0)/320x240 [ 175.415333][ T6256] tpg colorspace: 8 [ 175.415363][ T6256] tpg transfer function: 0/0 [ 175.415398][ T6256] tpg Y'CbCr encoding: 0/0 [ 175.415432][ T6256] tpg quantization: 0/0 [ 175.415465][ T6256] tpg RGB range: 0/2 [ 175.415498][ T6256] vivid-000: ================== END STATUS ================== [ 176.498556][ T6262] random: crng reseeded on system resumption [ 181.119733][ T6284] vivid-000: ================= START STATUS ================= [ 181.119754][ T6284] vivid-000: Generate PTS: true [ 181.119778][ T6284] vivid-000: Generate SCR: true [ 181.119799][ T6284] tpg source WxH: 320x240 (Y'CbCr) [ 181.119812][ T6284] tpg field: 1 [ 181.119820][ T6284] tpg crop: (0,0)/320x240 [ 181.119833][ T6284] tpg compose: (0,0)/320x240 [ 181.119847][ T6284] tpg colorspace: 8 [ 181.119855][ T6284] tpg transfer function: 0/0 [ 181.119866][ T6284] tpg Y'CbCr encoding: 0/0 [ 181.119876][ T6284] tpg quantization: 0/0 [ 181.119886][ T6284] tpg RGB range: 0/2 [ 181.119895][ T6284] vivid-000: ================== END STATUS ================== [ 182.396241][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 182.755933][ T6242] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 182.926527][ T6242] usb 3-1: Using ep0 maxpacket: 8 [ 182.933782][ T6242] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 182.933815][ T6242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.933836][ T6242] usb 3-1: Product: syz [ 182.933851][ T6242] usb 3-1: Manufacturer: syz [ 182.933866][ T6242] usb 3-1: SerialNumber: syz [ 182.995489][ T6242] usb 3-1: config 0 descriptor?? [ 183.034384][ T6242] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 184.213340][ T6307] vivid-000: ================= START STATUS ================= [ 184.213362][ T6307] vivid-000: Generate PTS: true [ 184.213385][ T6307] vivid-000: Generate SCR: true [ 184.213404][ T6307] tpg source WxH: 320x240 (Y'CbCr) [ 184.213417][ T6307] tpg field: 1 [ 184.213424][ T6307] tpg crop: (0,0)/320x240 [ 184.213438][ T6307] tpg compose: (0,0)/320x240 [ 184.213451][ T6307] tpg colorspace: 8 [ 184.213459][ T6307] tpg transfer function: 0/0 [ 184.213469][ T6307] tpg Y'CbCr encoding: 0/0 [ 184.213479][ T6307] tpg quantization: 0/0 [ 184.213488][ T6307] tpg RGB range: 0/2 [ 184.213497][ T6307] vivid-000: ================== END STATUS ================== [ 184.292455][ T6242] gspca_sonixj: reg_r err -110 [ 184.292557][ T6242] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 186.172584][ T6322] vivid-000: ================= START STATUS ================= [ 186.172676][ T6322] vivid-000: Generate PTS: true [ 186.172792][ T6322] vivid-000: Generate SCR: true [ 186.172883][ T6322] tpg source WxH: 320x240 (Y'CbCr) [ 186.172920][ T6322] tpg field: 1 [ 186.172951][ T6322] tpg crop: (0,0)/320x240 [ 186.172989][ T6322] tpg compose: (0,0)/320x240 [ 186.173026][ T6322] tpg colorspace: 8 [ 186.173057][ T6322] tpg transfer function: 0/0 [ 186.173153][ T6322] tpg Y'CbCr encoding: 0/0 [ 186.173188][ T6322] tpg quantization: 0/0 [ 186.173222][ T6322] tpg RGB range: 0/2 [ 186.173255][ T6322] vivid-000: ================== END STATUS ================== [ 186.802779][ T6321] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 187.225899][ T1234] usb 3-1: USB disconnect, device number 4 [ 188.822743][ T6341] vivid-000: ================= START STATUS ================= [ 188.822834][ T6341] vivid-000: Generate PTS: true [ 188.822934][ T6341] vivid-000: Generate SCR: true [ 188.823023][ T6341] tpg source WxH: 320x240 (Y'CbCr) [ 188.823069][ T6341] tpg field: 1 [ 188.823100][ T6341] tpg crop: (0,0)/320x240 [ 188.823137][ T6341] tpg compose: (0,0)/320x240 [ 188.823174][ T6341] tpg colorspace: 8 [ 188.823205][ T6341] tpg transfer function: 0/0 [ 188.823248][ T6341] tpg Y'CbCr encoding: 0/0 [ 188.823282][ T6341] tpg quantization: 0/0 [ 188.823315][ T6341] tpg RGB range: 0/2 [ 188.823366][ T6341] vivid-000: ================== END STATUS ================== [ 192.138758][ T5900] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 193.053665][ T5900] usb 1-1: device not accepting address 5, error -71 [ 196.295802][ T1234] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 196.565892][ T1234] usb 4-1: Using ep0 maxpacket: 8 [ 196.639356][ T1234] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 196.639389][ T1234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.639410][ T1234] usb 4-1: Product: syz [ 196.639425][ T1234] usb 4-1: Manufacturer: syz [ 196.639440][ T1234] usb 4-1: SerialNumber: syz [ 196.942115][ T1234] usb 4-1: config 0 descriptor?? [ 197.280971][ T1234] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 198.588505][ T1234] gspca_sonixj: reg_r err -110 [ 198.723185][ T1234] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 199.147641][ T6367] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 199.682645][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 199.702691][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 199.713562][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 199.730356][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 199.732603][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.246805][ T854] usb 4-1: USB disconnect, device number 4 [ 200.725216][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.725293][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.225433][ T6385] vivid-000: ================= START STATUS ================= [ 202.225522][ T6385] vivid-000: Generate PTS: true [ 202.225632][ T6385] vivid-000: Generate SCR: true [ 202.225763][ T6385] tpg source WxH: 320x240 (Y'CbCr) [ 202.225801][ T6385] tpg field: 1 [ 202.225832][ T6385] tpg crop: (0,0)/320x240 [ 202.225869][ T6385] tpg compose: (0,0)/320x240 [ 202.225905][ T6385] tpg colorspace: 8 [ 202.225936][ T6385] tpg transfer function: 0/0 [ 202.225970][ T6385] tpg Y'CbCr encoding: 0/0 [ 202.226005][ T6385] tpg quantization: 0/0 [ 202.226038][ T6385] tpg RGB range: 0/2 [ 202.226071][ T6385] vivid-000: ================== END STATUS ================== [ 202.824200][ T5804] Bluetooth: hci5: command tx timeout [ 203.160491][ T1234] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 203.755775][ T1234] usb 3-1: Using ep0 maxpacket: 8 [ 203.761596][ T1234] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 203.761629][ T1234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.761650][ T1234] usb 3-1: Product: syz [ 203.761665][ T1234] usb 3-1: Manufacturer: syz [ 203.761680][ T1234] usb 3-1: SerialNumber: syz [ 203.916681][ T1234] usb 3-1: config 0 descriptor?? [ 203.922571][ T1234] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 204.005779][ T5956] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 204.238240][ T5956] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 204.238273][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.250240][ T5956] usb 5-1: config 0 descriptor?? [ 204.633895][ T5956] cp210x 5-1:0.0: cp210x converter detected [ 204.917820][ T5804] Bluetooth: hci5: command tx timeout [ 206.028228][ T5956] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 206.283702][ T5956] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 206.283729][ T5956] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 206.441283][ T5956] usb 5-1: cp210x converter now attached to ttyUSB0 [ 206.476506][ T5956] usb 5-1: USB disconnect, device number 5 [ 206.509851][ T5956] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 206.510690][ T5956] cp210x 5-1:0.0: device disconnected [ 206.959927][ T854] usb 3-1: USB disconnect, device number 5 [ 207.073787][ T5804] Bluetooth: hci5: command tx timeout [ 209.431510][ T5804] Bluetooth: hci5: command tx timeout [ 223.451936][ T6375] chnl_net:caif_netlink_parms(): no params data found [ 228.523291][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 228.523450][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 228.524113][ T5799] Bluetooth: hci4: command 0x0406 tx timeout [ 228.524134][ T5113] Bluetooth: hci3: command 0x0406 tx timeout [ 231.010146][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.012032][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.012290][ T6375] bridge_slave_0: entered allmulticast mode [ 231.345985][ T6375] bridge_slave_0: entered promiscuous mode [ 231.533976][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.534069][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.534261][ T6375] bridge_slave_1: entered allmulticast mode [ 231.595222][ T6375] bridge_slave_1: entered promiscuous mode [ 232.202397][ T6482] vivid-000: ================= START STATUS ================= [ 232.202471][ T6482] vivid-000: Generate PTS: true [ 232.202565][ T6482] vivid-000: Generate SCR: true [ 232.202666][ T6482] tpg source WxH: 320x240 (Y'CbCr) [ 232.202702][ T6482] tpg field: 1 [ 232.202733][ T6482] tpg crop: (0,0)/320x240 [ 232.202770][ T6482] tpg compose: (0,0)/320x240 [ 232.202807][ T6482] tpg colorspace: 8 [ 232.202838][ T6482] tpg transfer function: 0/0 [ 232.202872][ T6482] tpg Y'CbCr encoding: 0/0 [ 232.202922][ T6482] tpg quantization: 0/0 [ 232.202955][ T6482] tpg RGB range: 0/2 [ 232.202988][ T6482] vivid-000: ================== END STATUS ================== [ 233.854640][ T6375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.939295][ T6375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.558750][ T6375] team0: Port device team_slave_0 added [ 236.696199][ T6375] team0: Port device team_slave_1 added [ 238.358636][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.358657][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.358686][ T6375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.435312][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.435332][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.435361][ T6375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.950277][ T5945] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 241.998518][ T6375] hsr_slave_0: entered promiscuous mode [ 242.167881][ T6375] hsr_slave_1: entered promiscuous mode [ 242.182053][ T6375] debugfs: 'hsr0' already exists in 'hsr' [ 242.182082][ T6375] Cannot create hsr debugfs directory [ 242.225807][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 242.267045][ T5945] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 242.267079][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.267099][ T5945] usb 4-1: Product: syz [ 242.267114][ T5945] usb 4-1: Manufacturer: syz [ 242.267129][ T5945] usb 4-1: SerialNumber: syz [ 242.658055][ T5945] usb 4-1: config 0 descriptor?? [ 242.925399][ T5945] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 243.255790][ T854] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 243.258736][ T5945] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 243.985767][ T854] usb 3-1: Using ep0 maxpacket: 16 [ 243.988105][ T854] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.988142][ T854] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.989662][ T854] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 243.989691][ T854] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 243.989713][ T854] usb 3-1: Manufacturer: syz [ 244.221513][ T854] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 244.221542][ T854] usb 3-1: no configuration chosen from 1 choice [ 246.327056][ T5864] usb 4-1: USB disconnect, device number 5 [ 246.695865][ T5956] usb 3-1: USB disconnect, device number 6 [ 259.844685][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.873108][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.897968][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.930346][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.932408][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.151519][ T5806] Bluetooth: hci0: command tx timeout [ 262.154716][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.154790][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.177004][ T5806] Bluetooth: hci0: command tx timeout [ 266.255792][ T5806] Bluetooth: hci0: command tx timeout [ 266.844591][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.872636][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 266.876684][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 266.925977][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 266.934080][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 268.355759][ T60] Bluetooth: hci0: command tx timeout [ 269.075834][ T60] Bluetooth: hci5: command tx timeout [ 271.192525][ T60] Bluetooth: hci5: command tx timeout [ 273.218017][ T60] Bluetooth: hci5: command tx timeout [ 275.298774][ T60] Bluetooth: hci5: command tx timeout [ 275.438288][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.457887][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.481704][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.488450][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.489293][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.675992][ T5806] Bluetooth: hci1: command tx timeout [ 280.716137][ T6568] chnl_net:caif_netlink_parms(): no params data found [ 280.735811][ T5806] Bluetooth: hci1: command tx timeout [ 282.120183][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.139939][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.141375][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.142951][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.144014][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.242429][ T60] Bluetooth: hci1: command tx timeout [ 284.255977][ T60] Bluetooth: hci3: command tx timeout [ 285.275922][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 285.302583][ T60] Bluetooth: hci1: command tx timeout [ 286.408455][ T60] Bluetooth: hci3: command tx timeout [ 288.415750][ T60] Bluetooth: hci3: command tx timeout [ 290.495768][ T60] Bluetooth: hci3: command tx timeout [ 311.427238][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.432805][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.544188][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.554379][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.555293][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.735926][ T5806] Bluetooth: hci4: command tx timeout [ 315.775750][ T5806] Bluetooth: hci4: command tx timeout [ 317.855746][ T5806] Bluetooth: hci4: command tx timeout [ 319.936196][ T5806] Bluetooth: hci4: command tx timeout [ 322.986855][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.013073][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.023295][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.236582][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.241302][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.652665][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.667977][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.297913][ T60] Bluetooth: hci2: command tx timeout [ 327.385784][ T60] Bluetooth: hci2: command tx timeout [ 329.455739][ T60] Bluetooth: hci2: command tx timeout [ 329.873077][ T5806] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 329.912176][ T5806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 329.928222][ T5806] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 329.950591][ T5806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 329.969285][ T5806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 331.535801][ T60] Bluetooth: hci2: command tx timeout [ 332.175763][ T60] Bluetooth: hci6: command tx timeout [ 334.331236][ T60] Bluetooth: hci6: command tx timeout [ 336.525805][ T5794] Bluetooth: hci6: command tx timeout [ 336.534577][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.555968][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.629911][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.631025][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.631718][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.381948][ T6359] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.575815][ T5806] Bluetooth: hci6: command tx timeout [ 338.735796][ T5806] Bluetooth: hci0: command tx timeout [ 340.860700][ T5806] Bluetooth: hci0: command tx timeout [ 342.890931][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.896091][ T60] Bluetooth: hci0: command tx timeout [ 342.935371][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.945651][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.057846][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.058689][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.975749][ T60] Bluetooth: hci0: command tx timeout [ 345.135749][ T60] Bluetooth: hci5: command tx timeout [ 347.215696][ T60] Bluetooth: hci5: command tx timeout [ 349.295937][ T60] Bluetooth: hci5: command tx timeout [ 351.376147][ T60] Bluetooth: hci5: command tx timeout [ 370.388068][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.392222][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.393359][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.394870][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.411638][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 372.515772][ T60] Bluetooth: hci1: command tx timeout [ 374.625824][ T60] Bluetooth: hci1: command tx timeout [ 375.133156][ T6637] chnl_net:caif_netlink_parms(): no params data found [ 376.655818][ T60] Bluetooth: hci1: command tx timeout [ 378.740529][ T60] Bluetooth: hci1: command tx timeout [ 383.279874][ T6642] chnl_net:caif_netlink_parms(): no params data found [ 384.931855][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.931935][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.244303][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.253794][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.254912][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.414274][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.472470][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.970589][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 388.657732][ T5806] Bluetooth: hci4: command tx timeout [ 390.735808][ T5806] Bluetooth: hci4: command tx timeout [ 390.976036][ T6658] chnl_net:caif_netlink_parms(): no params data found [ 391.635156][ T60] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 391.667488][ T60] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 391.670986][ T60] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 391.672198][ T60] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 391.673035][ T60] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 392.815950][ T5806] Bluetooth: hci4: command tx timeout [ 394.176451][ T5806] Bluetooth: hci7: command tx timeout [ 394.895791][ T5806] Bluetooth: hci4: command tx timeout [ 396.256130][ T5806] Bluetooth: hci7: command tx timeout [ 397.558311][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 397.726697][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 397.745283][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 397.779530][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 397.794090][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.335803][ T5806] Bluetooth: hci7: command tx timeout [ 399.855729][ T5806] Bluetooth: hci2: command tx timeout [ 400.416102][ T5806] Bluetooth: hci7: command tx timeout [ 401.906801][ T6658] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 401.935720][ T5806] Bluetooth: hci2: command tx timeout [ 404.025771][ T5806] Bluetooth: hci2: command tx timeout [ 406.105780][ T5804] Bluetooth: hci2: command tx timeout [ 407.068796][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 407.330581][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 407.365775][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 407.405781][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 407.431996][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 407.591074][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 409.535731][ T5806] Bluetooth: hci0: command tx timeout [ 411.643049][ T5806] Bluetooth: hci0: command tx timeout [ 413.775698][ T5806] Bluetooth: hci0: command tx timeout [ 415.855793][ T5806] Bluetooth: hci0: command tx timeout [ 427.136067][ T38] INFO: task syz-executor:5796 blocked for more than 143 seconds. [ 427.136103][ T38] Tainted: G L syzkaller #0 [ 427.136116][ T38] Blocked by coredump. [ 427.136123][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 427.136133][ T38] task:syz-executor state:D stack:21536 pid:5796 tgid:5796 ppid:1 task_flags:0x40054c flags:0x00080003 [ 427.136214][ T38] Call Trace: [ 427.136223][ T38] [ 427.136239][ T38] __schedule+0x1553/0x5240 [ 427.136524][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 427.136551][ T38] ? __pfx___schedule+0x10/0x10 [ 427.136600][ T38] rt_mutex_schedule+0x76/0xf0 [ 427.136630][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 427.136677][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 427.136708][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 427.136737][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 427.136785][ T38] ? rcu_barrier+0x4c/0x580 [ 427.136821][ T38] ? rcu_barrier+0x4c/0x580 [ 427.136846][ T38] mutex_lock_nested+0x168/0x1d0 [ 427.136868][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 427.136902][ T38] rcu_barrier+0x4c/0x580 [ 427.136941][ T38] netdev_run_todo+0x2e0/0xde0 [ 427.137010][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 427.137032][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 427.137121][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 427.137188][ T38] ? netdev_state_change+0x1ca/0x220 [ 427.137224][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 427.137307][ T38] tun_chr_close+0x13f/0x1c0 [ 427.137341][ T38] __fput+0x461/0xa90 [ 427.137435][ T38] task_work_run+0x1d9/0x270 [ 427.137467][ T38] ? __pfx_task_work_run+0x10/0x10 [ 427.137495][ T38] ? kmem_cache_free+0x185/0x6b0 [ 427.137548][ T38] ? put_net+0x191/0x260 [ 427.137584][ T38] do_exit+0x70f/0x23c0 [ 427.137611][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 427.137674][ T38] ? __pfx_do_exit+0x10/0x10 [ 427.137696][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 427.137724][ T38] ? reacquire_held_locks+0x104/0x190 [ 427.137748][ T38] ? rt_spin_lock+0x1e0/0x400 [ 427.137789][ T38] do_group_exit+0x21b/0x2d0 [ 427.137816][ T38] ? rt_spin_unlock+0x160/0x200 [ 427.137847][ T38] get_signal+0x125c/0x1310 [ 427.137902][ T38] arch_do_signal_or_restart+0xbc/0x830 [ 427.137934][ T38] ? __pfx___x64_sys_wait4+0x10/0x10 [ 427.137960][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 427.138011][ T38] exit_to_user_mode_loop+0x86/0x480 [ 427.138046][ T38] ? rcu_is_watching+0x15/0xb0 [ 427.138075][ T38] do_syscall_64+0x32d/0xf80 [ 427.138144][ T38] ? trace_irq_disable+0x3b/0x150 [ 427.138170][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.138195][ T38] ? clear_bhb_loop+0x40/0x90 [ 427.138224][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.138248][ T38] RIP: 0033:0x7f738444cfce [ 427.138275][ T38] RSP: 002b:00007fffff8d7a58 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 427.138300][ T38] RAX: fffffffffffffe00 RBX: 000055558af7c500 RCX: 00007f738444cfce [ 427.138317][ T38] RDX: 0000000040000000 RSI: 00007fffff8d7afc RDI: ffffffffffffffff [ 427.138317][ T38] RDX: 0000000040000000 RSI: 00007fffff8d7afc RDI: ffffffffffffffff [ 427.138334][ T38] RBP: 00007fffff8d7afc R08: 0000000000000000 R09: 0000000000000000 [ 427.138356][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002a [ 427.138370][ T38] R13: 000055558af8f9f0 R14: 000000000003cd6e R15: 00007fffff8d7b50 [ 427.138407][ T38] [ 427.138485][ T38] [ 427.138485][ T38] Showing all locks held in the system: [ 427.138497][ T38] 7 locks held by kworker/u8:1/13: [ 427.138513][ T38] 4 locks held by rcuc/0/20: [ 427.138527][ T38] 1 lock held by khungtaskd/38: [ 427.138539][ T38] #0: ffffffff8ddcb8c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 427.138602][ T38] 5 locks held by kworker/u8:2/43: [ 427.138640][ T38] 2 locks held by jbd2/sda1-8/5125: [ 427.138654][ T38] 2 locks held by getty/5549: [ 427.138666][ T38] #0: ffff8880371f70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 427.138825][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 427.138877][ T38] 1 lock held by syz-executor/5796: [ 427.138889][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 427.138946][ T38] 1 lock held by syz-executor/5798: [ 427.138958][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 427.139015][ T38] 1 lock held by syz-executor/5801: [ 427.139027][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 427.139088][ T38] 3 locks held by kworker/1:5/5901: [ 427.139102][ T38] 6 locks held by kworker/u8:16/6359: [ 427.139115][ T38] #0: ffff88801aee1138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 427.139176][ T38] #1: ffffc90004497c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 427.139238][ T38] #2: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 427.139360][ T38] #3: ffff88805e8ec0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x117/0x3f0 [ 427.139448][ T38] #4: ffff888024a9a300 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x3f0 [ 427.139512][ T38] #5: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 427.139570][ T38] 1 lock held by syz-executor/6375: [ 427.139583][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 427.139640][ T38] 1 lock held by syz.4.182/6566: [ 427.139652][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 427.139709][ T38] 1 lock held by syz-executor/6568: [ 427.139721][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 427.139779][ T38] 1 lock held by syz-executor/6580: [ 427.139791][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 427.139846][ T38] 1 lock held by syz-executor/6597: [ 427.139858][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 427.139913][ T38] 2 locks held by syz-executor/6611: [ 427.139925][ T38] #0: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 427.139984][ T38] #1: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 427.140040][ T38] 1 lock held by syz-executor/6631: [ 427.140052][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 427.140109][ T38] 1 lock held by syz-executor/6637: [ 427.140121][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 427.140175][ T38] 1 lock held by syz-executor/6642: [ 427.140188][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 427.140243][ T38] 1 lock held by syz-executor/6653: [ 427.140255][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 427.140310][ T38] 1 lock held by syz-executor/6658: [ 427.140322][ T38] #0: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 427.140388][ T38] 2 locks held by syz-executor/6670: [ 427.140400][ T38] #0: ffffffff8f6a6368 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 427.140517][ T38] #1: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 427.140579][ T38] 1 lock held by syz-executor/6685: [ 427.140592][ T38] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 427.140651][ T38] 3 locks held by syz-executor/6689: [ 427.140665][ T38] 2 locks held by syz-executor/6696: [ 427.140678][ T38] #0: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 427.140737][ T38] #1: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 427.140788][ T38] 2 locks held by syz-executor/6706: [ 427.140801][ T38] #0: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 427.140859][ T38] #1: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 427.140912][ T38] [ 427.140918][ T38] ============================================= [ 427.140918][ T38] [ 427.140940][ T38] NMI backtrace for cpu 0 [ 427.140967][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 427.140995][ T38] Tainted: [L]=SOFTLOCKUP [ 427.141003][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.141016][ T38] Call Trace: [ 427.141025][ T38] [ 427.141035][ T38] dump_stack_lvl+0xe8/0x150 [ 427.141070][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 427.141126][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 427.141161][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 427.141192][ T38] sys_info+0x135/0x170 [ 427.141215][ T38] watchdog+0xfd9/0x1030 [ 427.141249][ T38] ? watchdog+0x21a/0x1030 [ 427.141284][ T38] kthread+0x388/0x470 [ 427.141309][ T38] ? __pfx_watchdog+0x10/0x10 [ 427.141334][ T38] ? __pfx_kthread+0x10/0x10 [ 427.141369][ T38] ret_from_fork+0x51e/0xb90 [ 427.141403][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 427.141432][ T38] ? __switch_to+0xc7d/0x1450 [ 427.141465][ T38] ? __pfx_kthread+0x10/0x10 [ 427.141489][ T38] ret_from_fork_asm+0x1a/0x30 [ 427.141528][ T38] [ 427.141536][ T38] Sending NMI from CPU 0 to CPUs 1: [ 427.141570][ C1] NMI backtrace for cpu 1 [ 427.141588][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 427.141613][ C1] Tainted: [L]=SOFTLOCKUP [ 427.141620][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.141632][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 427.141703][ C1] RIP: 0010:unwind_next_frame+0x13b6/0x23c0 [ 427.141724][ C1] Code: b6 04 28 84 c0 0f 85 6c 0b 00 00 41 0f b6 04 2f 84 c0 0f 85 83 0b 00 00 0f b7 32 c1 ee 04 83 e6 0f 83 fe 04 0f 84 ae 04 00 00 <83> fe 01 0f 84 5d 04 00 00 85 f6 0f 85 40 06 00 00 48 8b 44 24 38 [ 427.141739][ C1] RSP: 0018:ffffc90000125cd8 EFLAGS: 00000293 [ 427.141754][ C1] RAX: 0000000000000000 RBX: ffffc90000125de0 RCX: 0000000000000000 [ 427.141766][ C1] RDX: ffffffff908b77d2 RSI: 0000000000000001 RDI: ffffc90000125e08 [ 427.141779][ C1] RBP: dffffc0000000000 R08: ffffc90000125e07 R09: 0000000000000000 [ 427.141792][ C1] R10: ffffc90000125df8 R11: fffff52000024bc1 R12: ffffc90000125df8 [ 427.141806][ C1] R13: 1ffff92000024bb7 R14: ffffc90000125da8 R15: 1ffffffff2116efa [ 427.141820][ C1] FS: 0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 427.141834][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.141853][ C1] CR2: 00007feccfc7dc74 CR3: 0000000035050000 CR4: 00000000003526f0 [ 427.141871][ C1] Call Trace: [ 427.141877][ C1] [ 427.141888][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 427.141905][ C1] ? cfg80211_wiphy_work+0x2ab/0x4a0 [ 427.141927][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 427.141953][ C1] arch_stack_walk+0x11b/0x150 [ 427.141974][ C1] ? process_scheduled_works+0xb6e/0x18c0 [ 427.141999][ C1] ? __alloc_skb+0x27d/0x7d0 [ 427.142069][ C1] stack_trace_save+0xa9/0x100 [ 427.142093][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 427.142119][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 427.142135][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 427.142160][ C1] kasan_save_track+0x3e/0x80 [ 427.142212][ C1] ? kasan_save_track+0x3e/0x80 [ 427.142236][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 427.142261][ C1] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 427.142308][ C1] ? __alloc_skb+0x27d/0x7d0 [ 427.142332][ C1] ? synproxy_send_client_synack+0x172/0xe30 [ 427.142386][ C1] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 427.142424][ C1] ? nft_synproxy_do_eval+0x305/0x580 [ 427.142440][ C1] ? nft_do_chain+0x45e/0x1990 [ 427.142476][ C1] ? nft_do_chain_inet+0x29d/0x380 [ 427.142524][ C1] ? nf_hook_slow+0xc5/0x220 [ 427.142584][ C1] ? NF_HOOK+0x21f/0x3c0 [ 427.142619][ C1] ? NF_HOOK+0x336/0x3c0 [ 427.142634][ C1] ? process_backlog+0x569/0xc60 [ 427.142658][ C1] ? __napi_poll+0xaf/0x580 [ 427.142678][ C1] ? net_rx_action+0x696/0xe00 [ 427.142700][ C1] ? handle_softirqs+0x1de/0x6f0 [ 427.142725][ C1] ? __local_bh_enable_ip+0x170/0x2b0 [ 427.142749][ C1] ? cfg80211_inform_single_bss_data+0x142a/0x1bd0 [ 427.142814][ C1] ? cfg80211_inform_bss_data+0x266/0x3c40 [ 427.142841][ C1] ? cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 427.142875][ C1] ? ieee80211_bss_info_update+0x794/0xa40 [ 427.142916][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1901/0x2cd0 [ 427.142984][ C1] ? ieee80211_iface_work+0x84e/0x1340 [ 427.143003][ C1] ? cfg80211_wiphy_work+0x2ab/0x4a0 [ 427.143042][ C1] __kasan_slab_alloc+0x6c/0x80 [ 427.143070][ C1] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 427.143097][ C1] ? __alloc_skb+0x27d/0x7d0 [ 427.143125][ C1] __alloc_skb+0x27d/0x7d0 [ 427.143153][ C1] synproxy_send_client_synack+0x172/0xe30 [ 427.143186][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 427.143213][ C1] ? nft_jhash_eval+0x70/0xa80 [ 427.143257][ C1] ? synproxy_pernet+0x45/0x270 [ 427.143277][ C1] nft_synproxy_eval_v4+0x34a/0x4e0 [ 427.143298][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 427.143318][ C1] ? nf_ip_checksum+0x13c/0x510 [ 427.143337][ C1] nft_synproxy_do_eval+0x305/0x580 [ 427.143355][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 427.143374][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 427.143400][ C1] nft_do_chain+0x45e/0x1990 [ 427.143425][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 427.143458][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 427.143478][ C1] nft_do_chain_inet+0x29d/0x380 [ 427.143506][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 427.143538][ C1] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 427.143566][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 427.143595][ C1] nf_hook_slow+0xc5/0x220 [ 427.143623][ C1] NF_HOOK+0x21f/0x3c0 [ 427.143641][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 427.143659][ C1] ? NF_HOOK+0x9e/0x3c0 [ 427.143675][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 427.143690][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 427.143710][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 427.143731][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 427.143750][ C1] NF_HOOK+0x336/0x3c0 [ 427.143765][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 427.143794][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 427.143811][ C1] ? NF_HOOK+0x9e/0x3c0 [ 427.143827][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 427.143844][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 427.143871][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 427.143887][ C1] ? process_backlog+0x271/0xc60 [ 427.143910][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 427.143927][ C1] process_backlog+0x569/0xc60 [ 427.143951][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1901/0x2cd0 [ 427.143981][ C1] ? cfg80211_wiphy_work+0x2ab/0x4a0 [ 427.144018][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 427.144040][ C1] __napi_poll+0xaf/0x580 [ 427.144060][ C1] ? skb_defer_free_flush+0x233/0x260 [ 427.144085][ C1] net_rx_action+0x696/0xe00 [ 427.144116][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 427.144139][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 427.144170][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 427.144200][ C1] handle_softirqs+0x1de/0x6f0 [ 427.144230][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 427.144256][ C1] ? cfg80211_inform_single_bss_data+0xbb7/0x1bd0 [ 427.144284][ C1] cfg80211_inform_single_bss_data+0x142a/0x1bd0 [ 427.144313][ C1] ? cfg80211_inform_single_bss_data+0xbb7/0x1bd0 [ 427.144346][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 427.144391][ C1] ? cfg80211_inform_bss_data+0x253/0x3c40 [ 427.144422][ C1] cfg80211_inform_bss_data+0x266/0x3c40 [ 427.144465][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 427.144515][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 427.144546][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 427.144578][ C1] ? ieee80211_bss_info_update+0x316/0xa40 [ 427.144598][ C1] ieee80211_bss_info_update+0x794/0xa40 [ 427.144619][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 427.144635][ C1] ? sta_info_get+0x4f/0x300 [ 427.144683][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2cd0 [ 427.144715][ C1] ieee80211_ibss_rx_queued_mgmt+0x1901/0x2cd0 [ 427.144745][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 427.144770][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 427.144786][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2cd0 [ 427.144816][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 427.144850][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 427.144882][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 427.144909][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 427.144936][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 427.144963][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 427.144984][ C1] ? rt_spin_lock+0x1e0/0x400 [ 427.145013][ C1] ? rt_spin_unlock+0x160/0x200 [ 427.145038][ C1] ieee80211_iface_work+0x84e/0x1340 [ 427.145064][ C1] cfg80211_wiphy_work+0x2ab/0x4a0 [ 427.145084][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 427.145110][ C1] process_scheduled_works+0xb6e/0x18c0 [ 427.145152][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 427.145181][ C1] ? assign_work+0x3d5/0x5e0 [ 427.145207][ C1] worker_thread+0xa53/0xfc0 [ 427.145247][ C1] kthread+0x388/0x470 [ 427.145265][ C1] ? __pfx_worker_thread+0x10/0x10 [ 427.145290][ C1] ? __pfx_kthread+0x10/0x10 [ 427.145308][ C1] ret_from_fork+0x51e/0xb90 [ 427.145335][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 427.145360][ C1] ? __switch_to+0xc7d/0x1450 [ 427.145383][ C1] ? __pfx_kthread+0x10/0x10 [ 427.145402][ C1] ret_from_fork_asm+0x1a/0x30 [ 427.145427][ C1] [ 427.463119][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 427.463147][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 427.463186][ T38] Tainted: [L]=SOFTLOCKUP [ 427.463194][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.463207][ T38] Call Trace: [ 427.463216][ T38] [ 427.463226][ T38] vpanic+0x56c/0xa60 [ 427.463267][ T38] ? __pfx___schedule+0x10/0x10 [ 427.463301][ T38] ? __pfx_vpanic+0x10/0x10 [ 427.463345][ T38] panic+0xc5/0xd0 [ 427.463378][ T38] ? __pfx_panic+0x10/0x10 [ 427.463415][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 427.463449][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 427.463482][ T38] watchdog+0x1023/0x1030 [ 427.463516][ T38] ? watchdog+0x21a/0x1030 [ 427.463553][ T38] kthread+0x388/0x470 [ 427.463577][ T38] ? __pfx_watchdog+0x10/0x10 [ 427.463603][ T38] ? __pfx_kthread+0x10/0x10 [ 427.463628][ T38] ret_from_fork+0x51e/0xb90 [ 427.463663][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 427.463695][ T38] ? __switch_to+0xc7d/0x1450 [ 427.463727][ T38] ? __pfx_kthread+0x10/0x10 [ 427.463752][ T38] ret_from_fork_asm+0x1a/0x30 [ 427.463790][ T38] [ 427.464418][ T38] Kernel Offset: disabled