last executing test programs: 48.852735003s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce) ioctl$PIO_SCRNMAP(r4, 0x4b52, &(0x7f0000000000)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000010280)={0x0, 0x9, 0x0, 0x5}, 0x10) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="02aaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000000000000000000000aa2c000002", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078"], 0x0) 47.765729751s ago: executing program 1 (id=7): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000000000000000000000030000000003000000050000000000000003000000000000af9d85c241e7f424fd9ff304c907000000000008000000000003000000000300000002000000000000000400000000000008020000000000000300000000"], 0x0, 0x66}, 0x20) r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0xc38, 0x10d, 0x5, "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"}, {0x10, 0x118, 0x6}], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}, [@typed={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x18, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 46.860682787s ago: executing program 1 (id=11): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000000, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 42.4411375s ago: executing program 1 (id=19): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) syz_usb_connect(0x4, 0x1a, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r6 = fcntl$dupfd(r5, 0x406, r5) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) write$P9_RXATTRWALK(r6, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80) write$cgroup_subtree(r6, 0x0, 0xfe1b) ioctl$EVIOCGLED(r4, 0x80284504, &(0x7f0000000000)=""/56) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa", 0xd}], 0x1}}, {{0x0, 0x2a, &(0x7f0000004080)=[{&(0x7f0000000f00)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7dba41558329699aacd3d1c7d97b9bf74caf8b7946647", 0xda}], 0x1}}], 0x2, 0x4) 39.529474953s ago: executing program 1 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000500000004"]) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r6, 0x851, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a0014080000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000000)=0xe8) setuid(r8) 38.431070978s ago: executing program 1 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async, rerun: 64) r6 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x2, {0x0, 0xf0, 0x3}, 0xfd}, 0x18) (async, rerun: 32) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0xd, 0x4) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b6411248000004b6", 0x9}], 0x1}, 0x4048001) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="8401", @ANYRES16, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001"], 0x184}}, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = syz_io_uring_setup(0x7, &(0x7f00000002c0)={0x0, 0x200002f, 0x400, 0x0, 0x100020d}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x1a}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 32) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) (rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) (async) r12 = syz_usb_connect$cdc_ecm(0x1, 0x72, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x4, 0x10, 0xc7, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "ff"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0xff, 0x9, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x4, 0xe9}, @ncm={0x6, 0x24, 0x1a, 0x101, 0x1}, @ncm={0x6, 0x24, 0x1a, 0xf6d4, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xa4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7f}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfd, 0x70}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x58, 0x84, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xfd, 0xf7, 0x80}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x34, 0x5, 0x4, 0xff, 0x8}, 0x5d, &(0x7f0000000480)={0x5, 0xf, 0x5d, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "2f3ab5162a91f47b674e51edd13d0e3d"}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "4675e1602ec8a2abe9aa4cf03db3a12d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x0, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0xca, 0x2, 0x0, 0xb6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0xf, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "6be55f936113a30a436fc11c4e9b7970"}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x443}}, {0xeb, &(0x7f0000000600)=@string={0xeb, 0x3, "3dc00706052e1d34d377de959567c5f970bc421042b7897dca97714ef96d89ae5a8884c97c0b516eb95fd7a774547b2323f4f8cf255455fc3ce6030c0989f492ec0aa0261cb80dc0206175d633e7899f2c71af2ef3ac00a4e5340e351183193695628d44f694b78a68972bb5f95a15dfd5a58fe1fd436071504fea0e14b63bb75ff66df6ba9e169d67e6b9cd1313ce15863a1e6bb2ef0ac2d30290740550f2dbf93825e998f2c130b74f7cf2b54d8303568221e74a63de640a8577c30b5b54a98c0c66115a336313e3c80739fae90db2bb6e31644b68aee1dec88c284163b3ba6e50bb121fef3af68a"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x843}}]}) syz_usb_control_io$cdc_ecm(r12, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9'], 0x2d, 0xfffffffffffffff9) (async, rerun: 64) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async, rerun: 64) syz_usb_control_io(r11, &(0x7f00000000c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="200f05"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r11, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 23.287103803s ago: executing program 32 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async, rerun: 64) r6 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x2, {0x0, 0xf0, 0x3}, 0xfd}, 0x18) (async, rerun: 32) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0xd, 0x4) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b6411248000004b6", 0x9}], 0x1}, 0x4048001) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="8401", @ANYRES16, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001"], 0x184}}, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = syz_io_uring_setup(0x7, &(0x7f00000002c0)={0x0, 0x200002f, 0x400, 0x0, 0x100020d}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x1a}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 32) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) (rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) (async) r12 = syz_usb_connect$cdc_ecm(0x1, 0x72, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x4, 0x10, 0xc7, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "ff"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0xff, 0x9, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x4, 0xe9}, @ncm={0x6, 0x24, 0x1a, 0x101, 0x1}, @ncm={0x6, 0x24, 0x1a, 0xf6d4, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xa4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7f}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfd, 0x70}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x58, 0x84, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xfd, 0xf7, 0x80}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x34, 0x5, 0x4, 0xff, 0x8}, 0x5d, &(0x7f0000000480)={0x5, 0xf, 0x5d, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "2f3ab5162a91f47b674e51edd13d0e3d"}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "4675e1602ec8a2abe9aa4cf03db3a12d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x0, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0xca, 0x2, 0x0, 0xb6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0xf, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "6be55f936113a30a436fc11c4e9b7970"}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x443}}, {0xeb, &(0x7f0000000600)=@string={0xeb, 0x3, "3dc00706052e1d34d377de959567c5f970bc421042b7897dca97714ef96d89ae5a8884c97c0b516eb95fd7a774547b2323f4f8cf255455fc3ce6030c0989f492ec0aa0261cb80dc0206175d633e7899f2c71af2ef3ac00a4e5340e351183193695628d44f694b78a68972bb5f95a15dfd5a58fe1fd436071504fea0e14b63bb75ff66df6ba9e169d67e6b9cd1313ce15863a1e6bb2ef0ac2d30290740550f2dbf93825e998f2c130b74f7cf2b54d8303568221e74a63de640a8577c30b5b54a98c0c66115a336313e3c80739fae90db2bb6e31644b68aee1dec88c284163b3ba6e50bb121fef3af68a"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x843}}]}) syz_usb_control_io$cdc_ecm(r12, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9'], 0x2d, 0xfffffffffffffff9) (async, rerun: 64) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async, rerun: 64) syz_usb_control_io(r11, &(0x7f00000000c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="200f05"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r11, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 3.042544878s ago: executing program 4 (id=126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="29c128bd7000fddbdf256a00000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000000) 2.711604369s ago: executing program 2 (id=130): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="53e8b9cb00008c15a7b7b25cf73f5df946ab59118169", 0x16, 0x0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x80, 0x6, @random="6779cef9a21f"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) 2.558946117s ago: executing program 4 (id=131): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x2b, 'devices'}, {0x2d, 'hugetlb'}, {0x2d, 'devices'}, {0x2b, 'pids'}]}, 0x21) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={0x0}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) syz_emit_ethernet(0x25, 0x0, 0x0) 2.242694131s ago: executing program 2 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}]}]}, 0x58}}, 0x0) 2.187385188s ago: executing program 3 (id=136): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'ipvlan0\x00', 0x2}, 0x18) shutdown(0xffffffffffffffff, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 1.934581565s ago: executing program 2 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x5c, r1, 0x5, 0x400003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x33, 0x2a, [@mesh_chsw={0x76, 0x6, {0x5, 0xfd, 0x1b, 0x40}}, @mic={0x8c, 0x10, {0x61b, "a7b920a5c13b", @short="4dafea6afe86ef74"}}, @ibss={0x6, 0x2, 0x1dbe}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @gcr_ga={0xbd, 0x6, @device_b}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x80, 0xb, 0x1}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10800}, 0x24000000) 1.878944977s ago: executing program 3 (id=142): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x70bd28, 0x4, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x2c}}, 0x4000014) 1.768426912s ago: executing program 4 (id=143): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket(0x8, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 1.675332294s ago: executing program 3 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001700)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xf7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 1.481961967s ago: executing program 0 (id=146): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r1, &(0x7f0000000d00), 0x0, 0x4000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000100001042abd", @ANYRES32=0x0, @ANYBLOB="03010000bcb5f31a24001280110001006272696467655f736c617665000000"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040815}, 0x800) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x20000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000100)={r4, r4, 0xfffe, 0x0, 0x0, 0xc2, 0x85, 0x15c2, 0x5886, 0x6, 0x0, 0x0, 'syz0\x00'}) 1.451500618s ago: executing program 3 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) 1.347718717s ago: executing program 2 (id=148): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) 1.241474798s ago: executing program 3 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket(0x14, 0x2, 0x4) setsockopt$RDS_RECVERR(r2, 0x114, 0x42020054, 0x0, 0x0) 1.174274022s ago: executing program 5 (id=151): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x20008000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x14, 0x22, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) 1.015694367s ago: executing program 4 (id=152): r0 = socket(0x2a, 0x2, 0x0) ioctl(r0, 0x6, &(0x7f0000000300)="d436ae1abb9efc7724ea010131f4308969ad3d75b1e76dddd264d7c82711ebbe48e118af873fb3bc3e5466c11a1fa50a150e51c0637e522fc2324da7e8695ac8d050978a44382509e8e651f75aafb8b0e487467f1ab8083a15b146884bf5eb862fec1b8155f9ed9e3f45a84317301eedfe55df3719518989a92d6d89be39e939e47399047c6ac5672d61b45fbbb598048f117e29afe4cca77fe04ed32a03a648d2496e42650f43925511f65e2d179fbcc916ffee8a94bf9b9158fb4418a3f596849ef6b2fd648cbacca9812d1706ef8a94227c09760f24d6b59d9c26546d658bca79cfea185ab252254f2726c50e8525dbe32a0aeaad4b102d2f5befc97617adf47c3601241735a7918070ddd13fd1447aa315adcc154672140a8834aff47c3f451aca144fa6ccec85f53bebff122dc796d5774cf21895329312c082517a87ed46d880f122d4d22e5d172b4c66372a924256f2bf96c19e6322541507437a123815225f9010277598ed4ff3d73a4c3e10bb8e753d8716eb71bd5479e7c547ea08d4bcd64b7aee3cde02d5ca66606e1df3727d39e058fdaccffe7ab5bc2c4f0267b90d30a4ddce0c3817952e08aaf450d5f8b573735386cbb6d3020c1daae52a4b2fcb2890e3eb2c6b7d2b929e5da3b1e15774f33add3b7d32629e8e117ded302890e941b4d3d784f0727caaf2dd3920f93e1ab7a5bb7570c485dbd7975bf879d0470a34166c20e36139c5e543c6479bd449ff4ce17cbefdf615525e4aad0b1d64007425c96901b9db35dcb1984371d282f32acca2c827dca98aa8dbd8a522b0198cfde6dc72934d8c111bcabea389700006b76c02929e7ea0064d80d4237513ffc8f170ad5d9339c24d235547fb73037ce6529710787e0448fcc4181be8250b87f1d33dfc7c3bd329c6241694066b52ff16267d3acacc1eff114f7db3cfba36ed4409077e197e0694b550710f6be5ffe7ee008c4b5ce50821ea5e1d79fd967a7fc11437c96c40240bfc7c45244ec9d228a00f0241e26d74d599ebb450d847dd9555f1796fa4a2a3ab9416fd4ac616f1c03a0e13f099a07e03d1c050d5f68481f243ac5d1cb5ff07c5d57c3a04affab543e746f9bfaa2bbb75b93509fee6bcdd1f723fb149450978c9a0978076519d95b2877c7e9bd98ed76e78d1020505a8fc9cfcc314e4fc7a7902f9b2cfa0e72b488bfcb707d18abea47bbb6c0b9435ba37657d3db89019c8451020762a5214f5ba8ea3de9f3cc2a4054ecdd658053c77b34996b167e7b6456b8a3d38b0172d16eca15d69203014126e663c87a7670f8d5899d897189f0f9cfb7b173c9ce4ebfa4d794436c89e3fb7e129e8cb57b5897e1e140a4d919d73d27df671dd3558c63ca6350d3751bfdf58b2e25f76640b6b38d1a7e5775b7d301e4b76ab635115bef53a4f128fd1d16c5171a22549d32a99c97daace6bb3f0bea6d89698ffc9fbc9465a7aa8b620b0a281b5dbc8e29ae5eada45e40e0fd7dcaad79739a04cd367a1979e359466798e85c33bdb682fa9fe6482c6269bc93152735d7e4aeb23c4e03f25a23ab6b368d0596c3effddd0492a9960fc8f9630cd74f16d1fdd40a1afd2dbd18f8065c91e354f16be5b637fc0d85d3159bb02c8a7083e7c803a2b7e6e9c760efaa77462532f0f93eef5331811563ade2f799e434693c3629f808206454af17f8e5f504499aa3e8d3c02c99811bf5afef9166ab4e3263179792f4d3e1252298dfa0467a15d091b771a7aba89f91d7dd2c498094b33cefab2827907750a6a77bd38e8cd63b1254a4e1e5dc6291720cff5e37f581a0deb5073e627f297583e0f98b16baa5ab70fd6c7c8c2f4b679c69143c51c8fe0808df0c78cb2580d06e8aebd03e6f41151b9491ead3124559cacaf7e2cf4260dd51e31286fcff26579701455420135afb9cbf2f1614f0b3cf8ba65c118e5e713cf1dcf6132147b18d5f9244ea4e3d68ff078a0ade3d9134a9f968fb8f101c01613633ec8e05ff3e3f61275f3e4e1388064819616eaf80c2e84744572aaf76a894650a98895e7a802b9f88182692b30a615d05167de5aed8e9a7b0528e50b9c09d5b272849d5d78f3ea26b5148c9cf409f1a5cb37c74606a6444fcaddd790b5ce89134e860258b36ba126336a7421022a7c47e06919be00aedd19f8cf56107fe503c1c246ca369a620d021b1d6e27b521b94ca2329ccff24a4ce2bc2dadbbb93cf82ae254be39a02a0e40033879d353e09f5fe5a3a9eb28bc1971218064e85d4f8e82d895945994756a5ba1eace3f83f8df4270a3ca9419c590133992ff116ce89f7871cb88fa4ed437c200bf3cc19c07c3729f853cfaf616fdbfd36933b2f3ad6c9a5037e68325e7b2412d2ded856739a598277aa3488e9ce25a953c1980aa6ad3d7df1560d61bd00ec399e7ad60abd359a0bde88873b7f22c52597d12005cfe1a073e70451efc9d60764c94a84ad5ba3e24c931e000dd39cc48570ed08f659c122f224b72f2c57442ba5dc5844bf209fd98a73c7c3571c4c1db0462e3136548bd3faa80e99cc546f8ce99872fa755198f424eff4893ceac2267011433d8dc9848ebc51b61e90d059c7570b732145d174513a2fdcf78c399478b12c7d1821f86ae9a12671cb0613227902f5a68314c0f75d8d0f6f25b82ac963a508569265a90e330b656cabd2c7204a0acebfeaa6c23f87640398e7db0c89bc806c6dccba11c94b4392b389408fcfeab7cd65028c34567b5b8fd680ad8c19362bf592113933d58d7c0964995ae080cf7afd83d4e2f6435c5c940646c12148a7485b2cd94737bf12901effc038b8ceb51a1fd60e9904c77bab4214a59699b33f02e3d966861e81e7deca990d3e4d34b423b3bf00810ca1da9460c447f2049e8882d07bcefd43959a7213c2324372abd425e6e8e13b97a190ea788dad62a60c1fdf77e93cbb12acc02c6ec5cc087b9d2d77c8eb127e2cd3e14228d626790525467524847e8e2e62b949aa45582e464c07bf686e8d3ad9bce8f032c251c5f3e4c1f60866ae81750d0371f9b2c8dbd8faeb157beac1e4813dd85625325bd077855c1ce59a6b7e6644ddacafe732ea7be089e01809a2fab407c7957e3166050226e202ce1bfae7751c73f4b4d57fd7f421d354c8d99a50b7280c87a8b2b635b3f1b4689afe9aa36cfdda791523bb3414ad78b34c173699c37ed90af3deaf21a894cbfbbd4af5497fce6c7f29aa46f401cdc601d1cc3fda2078045f790f21f70c62ee17e54bc9a72e3a2fdbea7e3604f2f0d8270da6868c22ed9168fa9afdb17647d16bf716eeb12d381587feda7d6738bd60e929fc86886ef4f9534a6ec3af954012ae64c1d17c4f5fd605f958027dcd20cb12dd7943af1e07fd2d017d9c647a540c4ded9994d1c6adb780fecc8ea62570de5a78f2dc001a7921f36672ffb39e0f7afc68a9789b690fea3a1c43d33c3a4eec578006d03cf2c78f0d7997736c8ef4a1a65d203b9b659da8ee07494789377b29d7a94120cbded2a98353ea9d9a9167d6dbab5b4f335efa2361f454957d55fdfc731875a55cd2e451ee01fcfeb7bdc13de52108c148530eb26bbe7d1f3ef1835c9950bfc7399feb29fc55ba47d30d37e9cba3f2f563bfbde41db4126a1277cbddeb9bba2ebffa8a96b3e2313f674daa492343d6fdbe3b458da068bad3b6702b51e14205bff37898e3579c9461072a67c044c28082a50a56d3c3fc57ad00e45963d66d6552ee1e29e446da414a171c55b39b9e9c669734a87a10ef43c11f005e79e336ded52c836788300eac3f34a245504643a5bdeebcda9590b9328b7b40cb7733d77b27a56f5a52130042ccd85170b410ec0e850eafac012942d1c5b9a886a40a14ea5b05584e9debb0691f3b6df971223e57d2a5c8e24493362cb666958c7d42c67d4fc0712750589440250d02b20ad21d73f41b91b090f1c534e77aa847b145eec40385501aa4309d24822155e3961aa55b974c5603dfded1c5824c04e08ca2a53e43bc8bbc459cc06a481e043c3478ea265d9badc4f3bbe79d755404c65d854a8a70b13d0440818f17ec7c4b4c170f2c474f2fb1e5080d01e38862c4e0799200f26ab31d1ea65cc31e4ea973c2615912271c81283df5deb500464d07e48cb14215189974c61164abecf53756d1ba710a258ff264a8ef870a7c0367f2032e8a42da2e2ce3a63ddfff8cd210bb6369ebf5b8e776f545505b6b12c08a091c93819a2fad93069cc912a6ef36401da4d491a3a9cc21a30fdf8ca84f0f44bc4c53ea251a57fd1efad5bb1635d054760078d5fc3f08b8d05b617c9c677c5f4bff099ad8fdb0e6d310be0a994891666f59ee1e661a6f6922f908bb79e4adb9ac8fbb4f6bd617661eff8733b96f5023b3dbbc280df471a2a6bf2e39e155e7ae0c00af4cfe8f73307fffa2f5b8d645331532ab8e9e1bd2c3cfef7fff0eae46ee0fa7d577bef370ef0adbe15db749c695aaaebc1d9506561a60f12c6a6f2d30c67551bdfd1340d7070bbef1d81ff46793e75117d0983fd353df02767a2f8f937552b8b30c86ba18f89b47f07c2b7b833ddfb257e10ac57f2873b77a2a37ac8db67a2f39c74158a70590e98c3a9ca529dcefbcb8322df0b6d24b70adb85667fe469e97980b6078d65f893b3fde28e773b18a0c82979fd2f904c7a48b9eed91a1212fed44505123e47803227e71bf594fcdd0000ff5996dfc5092e44a00ec6f0249fd136402f8b12fb7b7b0d4b91489101ba32db1f9973e7be0586392cd607fd5f5a0211e82a54dc4e2da0707b28a1662ea5016d2ccc0e2ab14f110f1783a9040fd7ac6889a42919122ee64101d2380cfacc1a5b27ad3464fc6e2eabab3234995cb762751515be8c2e1d6b69dfcc4b74b44f2a9ca982370dc84dbff6ad96585487c6a44d6625b08f100581f83f5821c0beeb179b7ef43d5e9caed9345026fb3ee582e495468e365888c371a143d4876560178eb785bfe6dd9cf3396c8413ad2f231c16c7e0a47469a3ba85ce559954b9f552859089220e07b3af868c24a5a3c4f75c4b886c571bdffecbb05848b1bbfb26c8489c94a19489ad9bd638dd9847fd348ea7391aa153700f2fd6bf6f0e012bf1feec1a507acc4e2c2b7874d8cf823cdcc580717e713ff2b8adb3e1ea90330c44c0629071ac1ae06954e3b739429f675bed969b1bbba71d97e35bf2b9ac0dc06b04768e4eeb4a20ab41be71f99f1d13a7c3c8ce51e50fabc6ec67a1e6412837d4997325f6f45cd8b699104f07f52ac65474591e6b92796a15c748ef523bfbab85dbf05c3747e2ddcb0ffc81e8293d8fa1b8686f176e2b4b4e4a6cef10c5c26498906da66f96f398ff98d6374736a793ccb5336e88bacc574d58e356ed835a276d982e93d064a2a9a793e2ed704e938b0f20deb559f5c49e90682f8e4edb5dd6a2f381ca9919ae0e673a4252fbc27a9763c9bce511a92c04e3bb3499e1a8eae5cc2f5a2b5cfaacc194c739b145d58ee595da776cd158083146c0df75566647bd557d8eaaea7ba0cf3f33f66cd0c4ab461f4394a89683ea61609c7bcad22ed79c445cee95f4b29a6c26c628fb007f9c315f3c3ab6bddafd469b274f0a0241301eced99ee767c5cccdb14c259477ee3f8792d7ab5b4f4bd1ab06") getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0x9, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x10, 0xfff3}, {}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x404c8e1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.015491939s ago: executing program 0 (id=153): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000280), 0x2, 0x0) read(r1, &(0x7f0000001c40)=""/4096, 0x1000) 976.024424ms ago: executing program 5 (id=154): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x421}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000007c0)=""/210, 0xd2}, {&(0x7f0000000440)=""/67, 0x43}], 0xa}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) 860.754292ms ago: executing program 2 (id=155): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee7}, 0x104}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/192, 0xc0}, {&(0x7f00000000c0)=""/238, 0xee}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000008c0)=""/4094, 0xffe}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f00000018c0)=""/264, 0x108}], 0x7}, 0x7ffffffd}], 0x4, 0x4022, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000008, 0x8032, 0xffffffffffffffff, 0x0) 779.518201ms ago: executing program 4 (id=156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 779.363465ms ago: executing program 0 (id=157): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @address_request}}}}, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 621.003286ms ago: executing program 0 (id=158): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 577.535091ms ago: executing program 5 (id=159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x6, 0x0, 0x0) 447.717998ms ago: executing program 5 (id=160): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) sendto$l2tp(r0, &(0x7f00000018c0)="eb1a25660544d4d9690be49421b00581b7fce4cfeb0b8cea993f20380dd26565da5c6e3f47b2d4a1b56ec3fb0de61b10449a778136782f6223fc6020d0f9ec1d75adf416f2150014566d70db87fd6b87ae8bc1e153f79b4cd57348fb8a4aefaa35ae", 0x62, 0x4084000, 0x0, 0x0) 408.78425ms ago: executing program 5 (id=161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000060a010e00000000000000000200ffff0900020073797a32000000000900010073797a30000000000c000640"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) 367.032206ms ago: executing program 0 (id=162): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x48, 0x0, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}], @NL80211_ATTR_MAC_HINT={0xa}]}, 0x48}}, 0x0) 248.396515ms ago: executing program 2 (id=163): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="2460cf4782a734649801d319bafbc635259b1466e91c886d832b19a016199327058bee4bee12e0a8", 0x28}], 0x1}}], 0x1, 0x24) 247.682552ms ago: executing program 0 (id=164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 183.480718ms ago: executing program 5 (id=165): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010043000400018010000280060001"], 0x28}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013001a800ca3488008000000000000000800038064"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 27.15187ms ago: executing program 3 (id=166): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x8, 0xfffffffb, 0x7}}}}]}, 0x48}}, 0xc0) 0s ago: executing program 4 (id=167): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x800, @loopback, 0x100}, 0x1c, 0x0}}], 0x1, 0x4000004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. [ 73.100960][ T5823] cgroup: Unknown subsys name 'net' [ 73.272007][ T5823] cgroup: Unknown subsys name 'cpuset' [ 73.281059][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.651969][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.187225][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.199366][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.208720][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.216318][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.225315][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.233381][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.240790][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.241074][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.250422][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.256601][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.263012][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.271823][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.289692][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.298776][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.307307][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.315673][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.323096][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.328645][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.331699][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.338218][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.345328][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.352159][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.359529][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.373316][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.381879][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.954623][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 78.098020][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 78.153556][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 78.250666][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.258602][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.266202][ T5835] bridge_slave_0: entered allmulticast mode [ 78.274886][ T5835] bridge_slave_0: entered promiscuous mode [ 78.324995][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.333913][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.341203][ T5835] bridge_slave_1: entered allmulticast mode [ 78.348219][ T5835] bridge_slave_1: entered promiscuous mode [ 78.360680][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 78.417246][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 78.512081][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.553153][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.561021][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.568197][ T5844] bridge_slave_0: entered allmulticast mode [ 78.575494][ T5844] bridge_slave_0: entered promiscuous mode [ 78.584840][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.637489][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.644992][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.652504][ T5844] bridge_slave_1: entered allmulticast mode [ 78.660834][ T5844] bridge_slave_1: entered promiscuous mode [ 78.678576][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.685756][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.693745][ T5845] bridge_slave_0: entered allmulticast mode [ 78.701226][ T5845] bridge_slave_0: entered promiscuous mode [ 78.710147][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.717323][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.724662][ T5845] bridge_slave_1: entered allmulticast mode [ 78.732882][ T5845] bridge_slave_1: entered promiscuous mode [ 78.776250][ T5835] team0: Port device team_slave_0 added [ 78.834116][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.845508][ T5835] team0: Port device team_slave_1 added [ 78.905374][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.912818][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.920106][ T5833] bridge_slave_0: entered allmulticast mode [ 78.927072][ T5833] bridge_slave_0: entered promiscuous mode [ 78.936298][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.961416][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.968469][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.994938][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.009940][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.023487][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.032958][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.040629][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.047805][ T5834] bridge_slave_0: entered allmulticast mode [ 79.055739][ T5834] bridge_slave_0: entered promiscuous mode [ 79.063618][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.071261][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.078795][ T5833] bridge_slave_1: entered allmulticast mode [ 79.085844][ T5833] bridge_slave_1: entered promiscuous mode [ 79.136138][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.143181][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.169740][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.193885][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.201490][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.208944][ T5834] bridge_slave_1: entered allmulticast mode [ 79.215967][ T5834] bridge_slave_1: entered promiscuous mode [ 79.239063][ T5844] team0: Port device team_slave_0 added [ 79.285378][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.299704][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.311029][ T5844] team0: Port device team_slave_1 added [ 79.329693][ T5155] Bluetooth: hci2: command tx timeout [ 79.329699][ T51] Bluetooth: hci0: command tx timeout [ 79.345907][ T5845] team0: Port device team_slave_0 added [ 79.407698][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.415232][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.415314][ T5155] Bluetooth: hci3: command tx timeout [ 79.446387][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.461124][ T5845] team0: Port device team_slave_1 added [ 79.467726][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.474751][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.488743][ T5155] Bluetooth: hci1: command tx timeout [ 79.500877][ T51] Bluetooth: hci4: command tx timeout [ 79.506556][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.524939][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.549543][ T5833] team0: Port device team_slave_0 added [ 79.575439][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.610208][ T5833] team0: Port device team_slave_1 added [ 79.624855][ T5835] hsr_slave_0: entered promiscuous mode [ 79.631487][ T5835] hsr_slave_1: entered promiscuous mode [ 79.652487][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.659576][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.686002][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.736370][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.743760][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.770195][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.781952][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.789440][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.816125][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.830756][ T5834] team0: Port device team_slave_0 added [ 79.862629][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.870021][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.896210][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.915528][ T5834] team0: Port device team_slave_1 added [ 79.961485][ T5844] hsr_slave_0: entered promiscuous mode [ 79.968044][ T5844] hsr_slave_1: entered promiscuous mode [ 79.974497][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.982250][ T5844] Cannot create hsr debugfs directory [ 80.045900][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.053373][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.079538][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.141282][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.148274][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.177607][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.215142][ T5833] hsr_slave_0: entered promiscuous mode [ 80.222158][ T5833] hsr_slave_1: entered promiscuous mode [ 80.228280][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.236733][ T5833] Cannot create hsr debugfs directory [ 80.262184][ T5845] hsr_slave_0: entered promiscuous mode [ 80.268930][ T5845] hsr_slave_1: entered promiscuous mode [ 80.275017][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.283023][ T5845] Cannot create hsr debugfs directory [ 80.439456][ T5834] hsr_slave_0: entered promiscuous mode [ 80.445822][ T5834] hsr_slave_1: entered promiscuous mode [ 80.452538][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.460144][ T5834] Cannot create hsr debugfs directory [ 80.919405][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.934414][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.954749][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.965902][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.025816][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.040286][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.052681][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.067806][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.165035][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.178180][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.203813][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.217142][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.302320][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.316543][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.346493][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.392422][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.409322][ T51] Bluetooth: hci2: command tx timeout [ 81.409425][ T5155] Bluetooth: hci0: command tx timeout [ 81.489020][ T5155] Bluetooth: hci3: command tx timeout [ 81.522312][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.533595][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.551149][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.565874][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.573342][ T5155] Bluetooth: hci1: command tx timeout [ 81.579131][ T51] Bluetooth: hci4: command tx timeout [ 81.623975][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.672936][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.689857][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.736854][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.769735][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.777066][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.817247][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.824489][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.864993][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.877022][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.907233][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.974348][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.981574][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.992886][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.000103][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.053314][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.060632][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.074014][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.081239][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.132359][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.196862][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.233187][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.240367][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.310482][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.317660][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.415016][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.533689][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.588375][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.595576][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.621839][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.629067][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.753886][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.900855][ T5844] veth0_vlan: entered promiscuous mode [ 82.940158][ T5844] veth1_vlan: entered promiscuous mode [ 83.001968][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.028139][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.117127][ T5844] veth0_macvtap: entered promiscuous mode [ 83.135304][ T5844] veth1_macvtap: entered promiscuous mode [ 83.244416][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.296601][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.342896][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.353080][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.362290][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.371341][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.394255][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.404368][ T5833] veth0_vlan: entered promiscuous mode [ 83.412981][ T5835] veth0_vlan: entered promiscuous mode [ 83.439780][ T5833] veth1_vlan: entered promiscuous mode [ 83.451105][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.480400][ T5835] veth1_vlan: entered promiscuous mode [ 83.494427][ T5155] Bluetooth: hci2: command tx timeout [ 83.494435][ T51] Bluetooth: hci0: command tx timeout [ 83.568594][ T5155] Bluetooth: hci3: command tx timeout [ 83.649396][ T5155] Bluetooth: hci1: command tx timeout [ 83.659970][ T5155] Bluetooth: hci4: command tx timeout [ 83.691916][ T5833] veth0_macvtap: entered promiscuous mode [ 83.727709][ T5834] veth0_vlan: entered promiscuous mode [ 83.743347][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.754350][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.761617][ T5833] veth1_macvtap: entered promiscuous mode [ 83.804279][ T5835] veth0_macvtap: entered promiscuous mode [ 83.840186][ T5834] veth1_vlan: entered promiscuous mode [ 83.865871][ T5835] veth1_macvtap: entered promiscuous mode [ 83.911145][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.923201][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.925867][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.946043][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.983541][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.011236][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.020488][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.029351][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.038136][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.061582][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.091260][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.103384][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.116798][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.122420][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.131110][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.201786][ T5845] veth0_vlan: entered promiscuous mode [ 84.224896][ T5834] veth0_macvtap: entered promiscuous mode [ 84.283912][ T5845] veth1_vlan: entered promiscuous mode [ 84.376014][ T5834] veth1_macvtap: entered promiscuous mode [ 84.444171][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.457091][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.492637][ T5845] veth0_macvtap: entered promiscuous mode [ 85.012844][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.021742][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.030555][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.040033][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.051772][ T5845] veth1_macvtap: entered promiscuous mode [ 85.141282][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.178762][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.203081][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.305767][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.335415][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.339571][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.396923][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.427980][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.461523][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.496451][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.505499][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.527122][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.569256][ T5155] Bluetooth: hci2: command tx timeout [ 85.578569][ T5155] Bluetooth: hci0: command tx timeout [ 85.599220][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.616628][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.648587][ T5155] Bluetooth: hci3: command tx timeout [ 85.701143][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.729335][ T5155] Bluetooth: hci4: command tx timeout [ 85.729379][ T51] Bluetooth: hci1: command tx timeout [ 85.748576][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.883314][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.931267][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.807313][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.879977][ T1211] cfg80211: failed to load regulatory.db [ 86.888442][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.086234][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.115272][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.173382][ T5982] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.262158][ T5984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 88.614974][ T5921] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.826906][ T5921] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 89.868274][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.240679][ T5921] usb 1-1: config 0 descriptor?? [ 90.248618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.257164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.265860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.274482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.283224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.293363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.302012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.311586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.316151][ T5921] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 91.346089][ T5921] [drm:udl_init] *ERROR* Selecting channel failed [ 91.478934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.487667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.934844][ T5921] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 92.059636][ T5921] [drm] Initialized udl on minor 2 [ 92.066986][ T5921] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 92.198165][ T5921] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 92.207338][ T5905] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 92.229023][ T5905] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 92.245200][ T5921] usb 1-1: USB disconnect, device number 2 [ 92.252265][ T5905] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 93.869135][ T5891] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 93.962871][ T6055] netlink: 104 bytes leftover after parsing attributes in process `syz.0.16'. [ 94.067374][ T5891] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 94.077435][ T5891] usb 3-1: can't read configurations, error -61 [ 95.183709][ T6060] veth0_macvtap: left promiscuous mode [ 95.383122][ T30] audit: type=1326 audit(1755150249.574:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6041 comm="syz.4.18" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f750c58ebe9 code=0x0 [ 95.548650][ T6066] process 'syz.1.22' launched './file0' with NULL argv: empty string added [ 95.587338][ T6066] netlink: 'syz.1.22': attribute type 1 has an invalid length. [ 96.319805][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 96.528482][ T6065] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET) [ 99.631667][ T5920] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.905367][ T5920] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 99.928868][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.937275][ T5920] usb 4-1: Product: syz [ 99.951487][ T5920] usb 4-1: Manufacturer: syz [ 99.956158][ T5920] usb 4-1: SerialNumber: syz [ 99.993107][ T5920] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 100.216329][ T5891] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 101.201568][ T30] audit: type=1326 audit(1755150255.514:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6106 comm="syz.2.33" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4935b8ebe9 code=0x0 [ 101.222200][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.500808][ T6121] /dev/nullb0: Can't open blockdev [ 101.578562][ T6121] capability: warning: `syz.4.35' uses deprecated v2 capabilities in a way that may be insecure [ 102.006773][ T5891] usb 4-1: Service connection timeout for: 256 [ 102.038189][ T5891] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 102.136477][ T5891] ath9k_htc: Failed to initialize the device [ 102.168859][ T5891] usb 4-1: ath9k_htc: USB layer deinitialized [ 103.733118][ T5921] usb 4-1: USB disconnect, device number 2 [ 103.906540][ T6141] netlink: 'syz.3.41': attribute type 21 has an invalid length. [ 103.914990][ T6141] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.133172][ T6141] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.894767][ T6150] netlink: 'syz.0.44': attribute type 10 has an invalid length. [ 104.951548][ T6150] team0: Device veth1_macvtap failed to register rx_handler [ 105.059605][ T6150] syz.0.44 (6150) used greatest stack depth: 19960 bytes left [ 105.208426][ T5891] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.368393][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 105.380443][ T5891] usb 4-1: config 0 has an invalid interface number: 169 but max is 0 [ 105.388758][ T5891] usb 4-1: config 0 has no interface number 0 [ 105.396058][ T5891] usb 4-1: config 0 interface 169 has no altsetting 0 [ 105.409683][ T5837] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.420770][ T5891] usb 4-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 105.438394][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.446477][ T5891] usb 4-1: Product: syz [ 105.458591][ T5891] usb 4-1: Manufacturer: syz [ 105.463282][ T5891] usb 4-1: SerialNumber: syz [ 105.472827][ T5891] usb 4-1: config 0 descriptor?? [ 105.493708][ T5891] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.569569][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 105.588839][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.610070][ T5837] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.627362][ T5837] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice= d.5e [ 105.644936][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.663926][ T5837] usb 1-1: Product: syz [ 105.668153][ T5837] usb 1-1: Manufacturer: syz [ 105.673739][ T5905] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.690668][ T5837] usb 1-1: SerialNumber: syz [ 105.704557][ T5837] usb 1-1: config 0 descriptor?? [ 105.744334][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 105.782963][ T5837] usb 4-1: USB disconnect, device number 3 [ 105.849501][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 105.860348][ T5905] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.888811][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 105.898057][ T5905] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 105.909482][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.922481][ T5891] usb 1-1: USB disconnect, device number 3 [ 105.932041][ T5905] hub 5-1:1.0: bad descriptor, ignoring hub [ 105.938050][ T5905] hub 5-1:1.0: probe with driver hub failed with error -5 [ 106.135882][ T6166] netlink: 'syz.2.50': attribute type 12 has an invalid length. [ 106.150967][ T30] audit: type=1326 audit(1755150260.464:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6165 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4935b8ebe9 code=0x7ffc0000 [ 106.172124][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.178755][ T30] audit: type=1326 audit(1755150260.464:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6165 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4935b8ebe9 code=0x7ffc0000 [ 106.200284][ T30] audit: type=1326 audit(1755150260.464:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6165 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f4935b8ebe9 code=0x7ffc0000 [ 106.221400][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.230110][ T30] audit: type=1326 audit(1755150260.464:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6165 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4935b8ebe9 code=0x7ffc0000 [ 106.255344][ T30] audit: type=1326 audit(1755150260.464:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6165 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4935b8d550 code=0x7ffc0000 [ 106.281716][ T30] audit: type=1326 audit(1755150260.464:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6165 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4935b8ebe9 code=0x7ffc0000 [ 106.304083][ T30] audit: type=1326 audit(1755150260.464:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6165 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f4935b8ebe9 code=0x7ffc0000 [ 106.336572][ T30] audit: type=1326 audit(1755150260.464:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6165 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4935b8ebe9 code=0x7ffc0000 [ 106.358739][ T30] audit: type=1326 audit(1755150260.464:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6165 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4935b8ebe9 code=0x7ffc0000 [ 106.406105][ T30] audit: type=1326 audit(1755150260.464:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6165 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4935b8ec23 code=0x7ffc0000 [ 106.440630][ T30] audit: type=1326 audit(1755150260.464:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6165 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4935b8ec23 code=0x7ffc0000 [ 106.464428][ T30] audit: type=1326 audit(1755150260.464:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6165 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4935b8ebe9 code=0x7ffc0000 [ 106.464472][ T5891] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 106.689603][ T30] audit: type=1326 audit(1755150260.464:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6165 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4935b8d550 code=0x7ffc0000 [ 107.478560][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.758736][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 107.830769][ T24] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 107.882094][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.891961][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 107.922279][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.943543][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.955787][ T6182] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001 [ 107.959576][ T24] usb 1-1: Product: syz [ 107.967105][ T24] usb 1-1: Manufacturer: syz [ 107.978280][ T24] usb 1-1: SerialNumber: syz [ 108.021247][ T5891] usb 5-1: USB disconnect, device number 2 [ 109.313039][ T24] usb 1-1: 0:2 : does not exist [ 109.472672][ T6195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.567076][ T24] usb 1-1: USB disconnect, device number 4 [ 110.252133][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.684379][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 111.253294][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.261774][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.864581][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.949298][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.338557][ T6211] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.388475][ T6211] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.419475][ T6211] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.446946][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.453771][ T6211] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.472096][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.480831][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.764459][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.779112][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.137649][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 113.148813][ T48] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.050456][ T6261] gre1: entered allmulticast mode [ 115.030211][ T5155] Bluetooth: hci5: command tx timeout [ 115.524626][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 115.534698][ T6271] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 115.542547][ T6271] netlink: 'syz.3.78': attribute type 2 has an invalid length. [ 115.550197][ T6271] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 115.559101][ T6271] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 115.615512][ T6276] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.79'. [ 116.408484][ T5837] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 116.554582][ T6293] netlink: 'syz.0.84': attribute type 3 has an invalid length. [ 116.568447][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.596225][ T6293] netlink: 'syz.0.84': attribute type 3 has an invalid length. [ 116.605131][ T5837] usb 4-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.625829][ T6238] chnl_net:caif_netlink_parms(): no params data found [ 117.100217][ T5155] Bluetooth: hci5: command tx timeout [ 117.408422][ T5837] usb 4-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 117.436815][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.451496][ T5837] usb 4-1: config 0 interface 0 has no altsetting 1 [ 117.465360][ T5837] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 117.481474][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.515354][ T6290] x_tables: duplicate underflow at hook 2 [ 117.541565][ T5837] usb 4-1: config 0 descriptor?? [ 117.568256][ T5837] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 117.578216][ T6301] Zero length message leads to an empty skb [ 118.834194][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.847401][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.861146][ T6238] bridge_slave_0: entered allmulticast mode [ 118.872449][ T6238] bridge_slave_0: entered promiscuous mode [ 119.169099][ T5155] Bluetooth: hci5: command tx timeout [ 119.597865][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.607810][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.615232][ T6238] bridge_slave_1: entered allmulticast mode [ 119.623307][ T6238] bridge_slave_1: entered promiscuous mode [ 119.641712][ T6314] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.663081][ T6314] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 119.865482][ T48] usb 4-1: USB disconnect, device number 4 [ 120.457041][ T6238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.513785][ T6238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.944258][ T6238] team0: Port device team_slave_0 added [ 120.978891][ T6238] team0: Port device team_slave_1 added [ 120.999352][ T5837] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.238463][ T5837] usb 3-1: Using ep0 maxpacket: 16 [ 121.289189][ T5155] Bluetooth: hci5: command tx timeout [ 121.300072][ T5837] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 121.338604][ T5837] usb 3-1: config 0 has no interface number 0 [ 121.387818][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.398912][ T5837] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 121.431463][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.447145][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.597464][ T6238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.044821][ T5837] usb 3-1: Product: syz [ 122.049983][ T5837] usb 3-1: Manufacturer: syz [ 122.050004][ T5837] usb 3-1: SerialNumber: syz [ 122.116737][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.130015][ T5837] usb 3-1: config 0 descriptor?? [ 122.153994][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.186767][ T6238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.222758][ T5837] hub 3-1:0.145: bad descriptor, ignoring hub [ 122.248903][ T5837] hub 3-1:0.145: probe with driver hub failed with error -5 [ 122.272193][ T6344] autofs: Unknown parameter './file0' [ 122.325009][ T5837] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input5 [ 122.469895][ T5905] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.615516][ T6238] hsr_slave_0: entered promiscuous mode [ 122.638698][ T5905] usb 5-1: New USB device found, idVendor=055f, idProduct=c24a, bcdDevice=b6.ac [ 122.649950][ T6238] hsr_slave_1: entered promiscuous mode [ 122.656376][ T6238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.762035][ T6238] Cannot create hsr debugfs directory [ 122.813506][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.147511][ T5905] usb 5-1: Product: syz [ 123.182471][ T5905] usb 5-1: Manufacturer: syz [ 123.192672][ T5905] usb 5-1: SerialNumber: syz [ 123.324762][ T5905] usb 5-1: config 0 descriptor?? [ 123.469125][ T6321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.526106][ T6321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.569704][ T5921] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 123.659596][ T5905] usb 3-1: USB disconnect, device number 4 [ 123.751042][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.759193][ T5921] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 123.769725][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 123.777373][ T5921] usb 4-1: can't read configurations, error -61 [ 123.808683][ T5891] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.869257][ T6238] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.879839][ T6238] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.891415][ T6238] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.903220][ T6238] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.918715][ T5921] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 123.970515][ T5891] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.981848][ T5891] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 123.997551][ T5891] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.008184][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.017367][ T5891] usb 1-1: Product: syz [ 124.021882][ T5891] usb 1-1: Manufacturer: syz [ 124.026529][ T5891] usb 1-1: SerialNumber: syz [ 124.027987][ T6238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.051237][ T5891] cdc_mbim 1-1:1.0: skipping garbage [ 124.070652][ T6238] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.084070][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.091410][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.103138][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.114312][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.121252][ T5921] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 124.121541][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.137555][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 124.146110][ T5921] usb 4-1: can't read configurations, error -61 [ 124.159734][ T5921] usb usb4-port1: attempt power cycle [ 124.245348][ T6361] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 124.498890][ T5921] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 124.538213][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.567675][ T5921] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 124.583481][ T6238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.599335][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 124.618818][ T5921] usb 4-1: can't read configurations, error -61 [ 124.768659][ T5921] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 124.810903][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.834210][ T5921] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 124.861741][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 124.878929][ T5921] usb 4-1: can't read configurations, error -61 [ 124.893492][ T6361] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 124.914270][ T5921] usb usb4-port1: unable to enumerate USB device [ 125.147706][ T6361] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 125.168274][ T6383] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 125.250468][ T6238] veth0_vlan: entered promiscuous mode [ 125.258986][ T5891] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 125.291468][ T6238] veth1_vlan: entered promiscuous mode [ 125.433294][ T6238] veth0_macvtap: entered promiscuous mode [ 125.449620][ T5921] usb 5-1: USB disconnect, device number 3 [ 125.509138][ T6238] veth1_macvtap: entered promiscuous mode [ 125.658961][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.697083][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.722987][ T6238] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.753504][ T6238] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.782445][ T6238] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.803448][ T6238] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.756271][ T5891] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 126.770763][ T5891] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 126.810952][ T5891] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 126.848974][ T5891] wwan wwan0: port wwan0mbim0 attached [ 126.946753][ T5891] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 26:74:39:51:c6:ae [ 127.065213][ T5891] usb 1-1: USB disconnect, device number 6 [ 127.125904][ T5891] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 127.560598][ T5891] wwan wwan0: port wwan0mbim0 disconnected [ 129.164822][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.209907][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.414535][ T6003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.438276][ T6003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.681951][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 129.946504][ T6433] netlink: 'syz.3.114': attribute type 1 has an invalid length. [ 130.058615][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 131.500095][ T6467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.123'. [ 131.666767][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 131.907447][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 131.982843][ T6476] !: renamed from dummy0 (while UP) [ 132.014134][ T6484] warning: `syz.5.129' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.178930][ T6487] batman_adv: batadv0: Adding interface: dummy0 [ 132.233718][ T6487] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.264340][ T6487] batman_adv: batadv0: Interface activated: dummy0 [ 132.529341][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 132.619788][ T6504] IPVS: Unknown mcast interface: ipvlan0 [ 132.906260][ T6511] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.945457][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.952154][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.376149][ T6531] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 133.927115][ T6553] tipc: Started in network mode [ 133.950863][ T6553] tipc: Node identity 2a3cda385d9b, cluster identity 4711 [ 133.997379][ T6553] tipc: Enabled bearer , priority 0 [ 134.078554][ T6558] syzkaller0: entered promiscuous mode [ 134.104482][ T6558] syzkaller0: entered allmulticast mode [ 134.135360][ T6553] tipc: Resetting bearer [ 134.244365][ T6552] tipc: Resetting bearer [ 134.383353][ T6552] tipc: Disabling bearer [ 134.500251][ T6576] netlink: 'syz.5.165': attribute type 1 has an invalid length. [ 134.518176][ T6576] netlink: 140 bytes leftover after parsing attributes in process `syz.5.165'. [ 134.549524][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.597954][ T6574] tipc: Started in network mode [ 134.607960][ T6574] tipc: Node identity , cluster identity 4711 [ 134.620112][ T6577] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 134.654261][ T6574] tipc: Failed to obtain node identity [ 134.665418][ T6577] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 6577, name: syz.2.163 [ 134.698646][ T6574] tipc: Enabling of bearer rejected, failed to enable media [ 134.700502][ T6577] 2 locks held by syz.2.163/6577: [ 134.718566][ T6577] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: rawv6_send_hdrinc+0xc09/0x1790 [ 134.728902][ T6577] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 134.737885][ T6577] CPU: 1 UID: 0 PID: 6577 Comm: syz.2.163 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 134.737911][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.737930][ T6577] Call Trace: [ 134.737941][ T6577] [ 134.737951][ T6577] dump_stack_lvl+0x189/0x250 [ 134.737981][ T6577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.738010][ T6577] ? print_lock_name+0xde/0x100 [ 134.738038][ T6577] __cant_migrate+0x238/0x2e0 [ 134.738064][ T6577] ? __pfx___cant_migrate+0x10/0x10 [ 134.738082][ T6577] ? __local_bh_enable_ip+0x12d/0x1c0 [ 134.738103][ T6577] ? ip6table_mangle_hook+0x2a2/0x6c0 [ 134.738133][ T6577] ? nf_nat_ipv6_fn+0xe7/0x2d0 [ 134.738157][ T6577] nf_hook_run_bpf+0x8f/0x1f0 [ 134.738176][ T6577] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 134.738204][ T6577] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 134.738224][ T6577] ? nf_nat_ipv6_out+0x21d/0x380 [ 134.738244][ T6577] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 134.738264][ T6577] nf_hook_slow+0xc5/0x220 [ 134.738305][ T6577] nf_hook+0x217/0x380 [ 134.738333][ T6577] ? nf_hook+0x9d/0x380 [ 134.738357][ T6577] ? __pfx_nf_hook+0x10/0x10 [ 134.738384][ T6577] ? __pfx_ip6_finish_output+0x10/0x10 [ 134.738410][ T6577] ? rawv6_send_hdrinc+0xc09/0x1790 [ 134.738431][ T6577] ip6_output+0x27d/0x3e0 [ 134.738451][ T6577] ? __pfx_ip6_finish_output+0x10/0x10 [ 134.738478][ T6577] ? rawv6_send_hdrinc+0xc09/0x1790 [ 134.738500][ T6577] rawv6_send_hdrinc+0xda3/0x1790 [ 134.738535][ T6577] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 134.738559][ T6577] ? __pfx_dst_output+0x10/0x10 [ 134.738578][ T6577] ? ip6_dst_hoplimit+0x96/0x350 [ 134.738599][ T6577] ? ip6_dst_hoplimit+0x96/0x350 [ 134.738627][ T6577] rawv6_sendmsg+0x12b0/0x17f0 [ 134.738660][ T6577] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 134.738685][ T6577] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 134.738711][ T6577] ? rcu_is_watching+0x15/0xb0 [ 134.738733][ T6577] ? trace_sched_exit_tp+0x38/0x120 [ 134.738778][ T6577] ? sock_rps_record_flow+0x19/0x410 [ 134.738801][ T6577] ? inet_sendmsg+0x2f4/0x370 [ 134.738818][ T6577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.738840][ T6577] __sock_sendmsg+0x19c/0x270 [ 134.738864][ T6577] ____sys_sendmsg+0x52d/0x830 [ 134.738899][ T6577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.738938][ T6577] ? import_iovec+0x74/0xa0 [ 134.738966][ T6577] ___sys_sendmsg+0x21f/0x2a0 [ 134.738993][ T6577] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.739054][ T6577] ? __fget_files+0x2a/0x420 [ 134.739072][ T6577] ? __fget_files+0x3a0/0x420 [ 134.739101][ T6577] __sys_sendmmsg+0x227/0x430 [ 134.739133][ T6577] ? __pfx___sys_sendmmsg+0x10/0x10 [ 134.739156][ T6577] ? do_futex+0x333/0x420 [ 134.739185][ T6577] ? __sys_connect+0x38d/0x440 [ 134.739226][ T6577] ? rcu_is_watching+0x15/0xb0 [ 134.739251][ T6577] __x64_sys_sendmmsg+0xa0/0xc0 [ 134.739287][ T6577] do_syscall_64+0xfa/0x3b0 [ 134.739305][ T6577] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.739323][ T6577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.739340][ T6577] ? clear_bhb_loop+0x60/0xb0 [ 134.739362][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.739378][ T6577] RIP: 0033:0x7f4935b8ebe9 [ 134.739403][ T6577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.739418][ T6577] RSP: 002b:00007f4936a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 134.739436][ T6577] RAX: ffffffffffffffda RBX: 00007f4935db5fa0 RCX: 00007f4935b8ebe9 [ 134.739449][ T6577] RDX: 0000000000000001 RSI: 0000200000001cc0 RDI: 0000000000000005 [ 134.739460][ T6577] RBP: 00007f4935c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 134.739471][ T6577] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 134.739481][ T6577] R13: 00007f4935db6038 R14: 00007f4935db5fa0 R15: 00007ffce96b6ab8 [ 134.739510][ T6577]