last executing test programs: 5m44.878004731s ago: executing program 4 (id=115): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106"], 0x18}], 0x1}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000022008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) userfaultfd(0x80800) socket(0x2, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 5m37.480113478s ago: executing program 4 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0x24, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x3ff, 0x50565559, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x0, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x74, 0x3, 0x3, 0x300, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xaa}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xa8000000}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3e3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xb4e9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x255}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048000}, 0x24000800) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 5m35.398768479s ago: executing program 4 (id=138): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) landlock_create_ruleset(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) openat$cgroup_int(r0, &(0x7f0000000740)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) 5m26.002042025s ago: executing program 4 (id=171): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r2, 0x6a, 0x1, 0x0, 0x63) 5m25.871470416s ago: executing program 4 (id=173): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() inotify_init1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, r7, r6, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20000000) 5m25.398191099s ago: executing program 4 (id=174): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000780)={0x0, 0x0, '\x00', @raw_data=[0x2, 0x7, 0x8, 0x8, 0x80000000, 0xfffffff9, 0x7fffffff, 0x1000, 0x6, 0x5, 0x1, 0x7ec4, 0x200000a, 0x51, 0x6, 0x4, 0xfff, 0x7f, 0x6, 0x3, 0xf, 0xc26, 0x3, 0x6, 0x1, 0x6a1037d, 0x1000010, 0x92, 0x5170, 0x2, 0x4, 0xffff]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(0x0, 0x3) write$binfmt_elf64(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) capset(&(0x7f0000000000)={0x20080522}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="300000000000000084000000010000000a0000000600000000000000ffffffff070000000000000004000000", @ANYRES32=0x0], 0x30, 0x20004151}, 0x0) 5m9.889596256s ago: executing program 32 (id=174): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000780)={0x0, 0x0, '\x00', @raw_data=[0x2, 0x7, 0x8, 0x8, 0x80000000, 0xfffffff9, 0x7fffffff, 0x1000, 0x6, 0x5, 0x1, 0x7ec4, 0x200000a, 0x51, 0x6, 0x4, 0xfff, 0x7f, 0x6, 0x3, 0xf, 0xc26, 0x3, 0x6, 0x1, 0x6a1037d, 0x1000010, 0x92, 0x5170, 0x2, 0x4, 0xffff]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(0x0, 0x3) write$binfmt_elf64(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) capset(&(0x7f0000000000)={0x20080522}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="300000000000000084000000010000000a0000000600000000000000ffffffff070000000000000004000000", @ANYRES32=0x0], 0x30, 0x20004151}, 0x0) 4m40.831166921s ago: executing program 0 (id=289): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) open(0x0, 0x64942, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r1, 0x0, 0x2, 0x4}}, 0x20) 4m40.567672462s ago: executing program 0 (id=293): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup/cgroup.procs\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc34) socketpair(0xa, 0x1, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000240)={0x2, @pix={0x6, 0x8, 0x34343459, 0xc, 0x5, 0x9b, 0x3, 0x3, 0x0, 0x4, 0x2, 0x4}}) socket$nl_netfilter(0x10, 0x3, 0xc) 4m39.383034528s ago: executing program 0 (id=295): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 4m39.0074803s ago: executing program 0 (id=297): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a02, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x7, 0x0) 4m38.698753051s ago: executing program 0 (id=300): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000004e40)=0x4000, 0x4) 4m36.849938871s ago: executing program 0 (id=304): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x2) 4m21.841356345s ago: executing program 33 (id=304): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x2) 1m0.453871626s ago: executing program 6 (id=934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/anycast6\x00') pread64(r1, &(0x7f0000002240)=""/163, 0xa3, 0x1ff) 59.559347981s ago: executing program 6 (id=938): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x5}}}}]}, 0x30}}, 0x0) 59.301211492s ago: executing program 6 (id=939): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) 58.747930625s ago: executing program 6 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$packet(0x11, 0x2, 0x300) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0x101) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x800) mq_unlink(&(0x7f0000000340)='eth0\x00') 56.199075588s ago: executing program 6 (id=946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f0000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r5 = fsopen(&(0x7f0000000000)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) 54.087482099s ago: executing program 6 (id=950): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) listen(r0, 0x8) 38.59968774s ago: executing program 34 (id=950): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) listen(r0, 0x8) 8.128339948s ago: executing program 5 (id=1114): unshare(0x4000400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x15, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x3}, 0xe) 7.415466662s ago: executing program 5 (id=1119): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x103, 0x0, 0x0) 7.364025672s ago: executing program 5 (id=1120): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x100, r2, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x71, 0x3, "a56d2007325e9b13628fa69b4a8f36a613a0b04e7ceae7dcb3096c8097f3539f02202cef72f72609ac78ae4a29221aa2997e07447b066c9a0388e499a3d371c674b705dee3ad716d8a8af032d9178457a1a27db1fa3a72d89bf879bd09bc4a4ac042441312dc3e7e2a1b9d78fd"}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @local, 0x3a}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 6.459785607s ago: executing program 5 (id=1125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) socket$unix(0x1, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r5, 0x2285, 0x0) 3.86800484s ago: executing program 7 (id=1139): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000040)="26d63f074003008cb89e08f086dd5598ed5f851a3f263ec3c6525c940e2c56ea0f194b199db7d43d50ae9157253684b1a2875c4c4b6c", 0x0, 0x27, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.709307041s ago: executing program 7 (id=1141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x4, 0x8}, {0x6, 0xff, 0x6ef0}}}}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0x8000}, 0x80, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) 3.646645581s ago: executing program 2 (id=1142): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc4, &(0x7f0000000840)=""/196, 0x40f00, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5671, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10], 0x398}}, 0x0) 3.239147774s ago: executing program 3 (id=1144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 2.917542905s ago: executing program 2 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 2.693812626s ago: executing program 2 (id=1148): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.693432516s ago: executing program 3 (id=1149): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) splice(r0, 0x0, r2, 0x0, 0x10500, 0x0) 2.676179037s ago: executing program 7 (id=1150): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, &(0x7f0000000600)='u', 0x1) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f00000001c0)=']', 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000180)) 2.531580957s ago: executing program 1 (id=1151): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000040)="26d63f074003008cb89e08f086dd5598ed5f851a3f263ec3c6525c940e2c56ea0f194b199db7d43d50ae9157253684b1a2875c4c4b6c", 0x0, 0x27, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.531032997s ago: executing program 7 (id=1152): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000010a80)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x10}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @remote, @private}}}}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000540)={0x1f, @none}, 0x8) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) listen(r2, 0x0) r3 = accept(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x10004094) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x9c, 0x1, 0x9, 0x401, 0x0, 0x0, {}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_TUPLE={0x48, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x9c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c000780"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x54}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x43400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r7, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002311f335850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000200240002000c0002800500010a0000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000e0ff61114c000000000085000000190000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.503978647s ago: executing program 2 (id=1153): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) socket(0x2b, 0x2, 0x9d) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x303}, "1d2208f5ec265570", "95212f25baa0e3d5ec43e2f3c4f8ece4251050d3da0cc29bec584afd989f7996", "066a7ee0", "5203838ccb474782"}, 0x38) recvmmsg(r3, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) 2.477098177s ago: executing program 3 (id=1154): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106"], 0x18}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000022008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) userfaultfd(0x80800) socket(0x2, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 2.408078588s ago: executing program 1 (id=1155): r0 = openat(0xffffffffffffffff, 0x0, 0x400, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) pipe2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2001}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000"], 0x64}}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x9, 0x5, 0x35314241, 0x9, 0xa, 0x4cb5cf38, 0xf, 0x8001, 0x0, 0x8, 0x2, 0x2}}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtclass={0x24, 0x28, 0x305, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0x7, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r5) write$dsp(r0, &(0x7f00000004c0)="1431f753f9906851043edc464709495bec7f5dac317b116052a0f3d830f993e50d07f02bb2e82d33aa49f1fd4d3c289fe5cadeb300ac4eb46323e608eed51e2fb0557d77f5a26c82f3795eb723ba9fe510cd163d6d9240afeb77f98776dbbbbc1b59d69c2549084b832a31139470964cb7ffe2d0e47c81dbb2e2248402ad01b916744371b9388c91e979c0b7738d8a19b89e8782c6fbe1c81af0e8537d1a1094bae49cb88134ebdc28a3a1952b6e09708d7a50d9d553542d1cabc9a757a365298d42bbec8e4dd15b134735d207b31a65910b310be979ef197cb955a6566317635bd13af1f73dd5fd", 0xe8) 1.577057912s ago: executing program 2 (id=1156): unshare(0x22020600) unshare(0x2a020400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) 1.471979813s ago: executing program 7 (id=1157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001000000000067c1cfbb72d12704", @ANYRES32=0x0, @ANYBLOB="101007000000000014001680100001800c00070007000000faffffff08001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x10, &(0x7f0000000000), 0x4) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000180)=0xffff, &(0x7f0000000240)=0x4) getsockopt$inet6_buf(r7, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1fd44a8875f0ae37543675888c363a9d8bc0c53d19c7a46a32f48f4fcd886d41107ec2830a465e4ed2ef4c945efbaea16cf1ed334ad9b862a07ae5812ec4dd4934d291755e8cf2c9a1eba5a1c5ceaa2aa4789a9a1267104b217ad8d14c8a408cabb58b407230f692e2623359"], 0x44}}, 0x8000) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x0, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast1, 0x329}, 0x0, {[0x5a]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000140)=0xf, 0x4) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x2c, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000007"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.460668473s ago: executing program 3 (id=1158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0x24, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x3ff, 0x50565559, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x0, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x74, 0x3, 0x3, 0x300, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xaa}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xa8000000}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3e3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xb4e9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x255}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048000}, 0x24000800) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.434664183s ago: executing program 1 (id=1159): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 1.414034123s ago: executing program 5 (id=1160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x4, 0x8}, {0x6, 0xff, 0x6ef0}}}}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0x8000}, 0x80, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) 915.592846ms ago: executing program 1 (id=1161): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 294.673219ms ago: executing program 3 (id=1162): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0xffffffff}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}]}}}]}, 0x48}}, 0x0) 144.032319ms ago: executing program 5 (id=1163): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TCXONC(r1, 0x4b3a, 0x2) 95.58107ms ago: executing program 2 (id=1164): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x6, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 95.319ms ago: executing program 1 (id=1165): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000040)="26d63f074003008cb89e08f086dd5598ed5f851a3f263ec3c6525c940e2c56ea0f194b199db7d43d50ae9157253684b1a2875c4c4b6c", 0x0, 0x27, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 83.59753ms ago: executing program 3 (id=1166): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) socket(0x2b, 0x2, 0x9d) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x303}, "1d2208f5ec265570", "95212f25baa0e3d5ec43e2f3c4f8ece4251050d3da0cc29bec584afd989f7996", "066a7ee0", "5203838ccb474782"}, 0x38) recvmmsg(r3, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) 12.93662ms ago: executing program 7 (id=1167): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x4008001) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) 0s ago: executing program 1 (id=1168): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106"], 0x18}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000022008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) userfaultfd(0x80800) socket(0x2, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): [ 62.008495][ T4171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.019629][ T4171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.039886][ T4171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.053016][ T1422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.063106][ T1422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.089296][ T4165] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.113016][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.120230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.131723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.141116][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.148333][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.158278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.197797][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.216300][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.234585][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.244024][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.252963][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.260079][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.269767][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.277591][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.286410][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.295279][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.304024][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.312645][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.319797][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.328053][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.337414][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.345962][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.353083][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.362852][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.371631][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.395032][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.414451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.422599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.453976][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.482837][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.492616][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.501583][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.508832][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.517850][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.528069][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.537186][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.544578][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.552697][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.563356][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.572073][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.580976][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.591356][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.601407][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.610705][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.619510][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.627978][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.636921][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.648302][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.656651][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.664796][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.674026][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.682222][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.710450][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.721154][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.733475][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.746597][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.766662][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.777303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.786241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.795386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.804075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.815908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.825120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.845278][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.860289][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.876768][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.887222][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.897226][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.907351][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.914519][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.932904][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.942331][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.952034][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.963222][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.970360][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.978158][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.992779][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.014778][ T4175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.025295][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.043384][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.051569][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.060803][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.074888][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.084401][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.099576][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.108149][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.117823][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.126792][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.136120][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.144858][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.153642][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.170319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.181106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.189676][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.196727][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.205495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.214389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.223268][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.229324][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 63.230391][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.264888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.280279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.300009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.307962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.315995][ T4208] Bluetooth: hci1: command 0x041b tx timeout [ 63.329107][ T4208] Bluetooth: hci2: command 0x041b tx timeout [ 63.336369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.362982][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.385239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.393514][ T4208] Bluetooth: hci3: command 0x041b tx timeout [ 63.400152][ T4208] Bluetooth: hci4: command 0x041b tx timeout [ 63.401786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.419498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.429314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.438488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.447413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.457242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.466300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.475173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.484194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.492607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.502536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.510776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.528371][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.545297][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.566561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.574754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.583275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.592206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.602426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.611291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.646058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.657359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.667427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.683752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.697911][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.708156][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.722233][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.734986][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.787343][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.803654][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.839573][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.870281][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.879659][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.888190][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.898098][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.906643][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.915180][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.924017][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.940704][ T4169] device veth0_vlan entered promiscuous mode [ 63.948427][ T4165] device veth0_vlan entered promiscuous mode [ 63.976736][ T4169] device veth1_vlan entered promiscuous mode [ 64.021755][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.030574][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.043628][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.054929][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.063399][ T4165] device veth1_vlan entered promiscuous mode [ 64.082050][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.109095][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.117184][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.126036][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.136274][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.144897][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.153779][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.164629][ T4169] device veth0_macvtap entered promiscuous mode [ 64.175081][ T4169] device veth1_macvtap entered promiscuous mode [ 64.211421][ T4175] device veth0_vlan entered promiscuous mode [ 64.224703][ T4175] device veth1_vlan entered promiscuous mode [ 64.233276][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.243235][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.251577][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.260215][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.270458][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.278437][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.286206][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.294126][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.302259][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.319429][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.328087][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.365073][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.375687][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.385373][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.395783][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.408498][ T4165] device veth0_macvtap entered promiscuous mode [ 64.418703][ T4165] device veth1_macvtap entered promiscuous mode [ 64.433104][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.442088][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.450538][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.459939][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.480057][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.491577][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.507066][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.516417][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.525073][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.533908][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.543068][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.551754][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.563656][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.572877][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.587674][ T4175] device veth0_macvtap entered promiscuous mode [ 64.597161][ T4173] device veth0_vlan entered promiscuous mode [ 64.613968][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.626602][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.640069][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.659390][ T4173] device veth1_vlan entered promiscuous mode [ 64.671907][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.681442][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.690570][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.699776][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.711269][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.719901][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.727931][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.736707][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.747277][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.758594][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.770358][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.782546][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.813489][ T4175] device veth1_macvtap entered promiscuous mode [ 64.824309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.835582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.845978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.857823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.868786][ T4165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.877498][ T4165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.886750][ T4165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.896332][ T4165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.913396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.926683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.944514][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.955852][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.968410][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.979170][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.990517][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.014328][ T4173] device veth0_macvtap entered promiscuous mode [ 65.032068][ T1422] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.040654][ T1422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.050056][ T1422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.067866][ T4171] device veth0_vlan entered promiscuous mode [ 65.081404][ T4173] device veth1_macvtap entered promiscuous mode [ 65.093692][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.106332][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.116571][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.127560][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.139541][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.147228][ T1422] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.156479][ T1422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.165081][ T1422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.175729][ T1422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.184422][ T1422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.193248][ T1422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.201706][ T1422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.244878][ T4175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.260112][ T4175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.270167][ T4175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.279253][ T4175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.309412][ T4206] Bluetooth: hci0: command 0x040f tx timeout [ 65.320409][ T4171] device veth1_vlan entered promiscuous mode [ 65.327383][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.341412][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.351636][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.362652][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.372776][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.383519][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.389455][ T4203] Bluetooth: hci2: command 0x040f tx timeout [ 65.396146][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.404604][ T4203] Bluetooth: hci1: command 0x040f tx timeout [ 65.412191][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.427610][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.437531][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.448070][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.458059][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.469527][ T4203] Bluetooth: hci4: command 0x040f tx timeout [ 65.475651][ T4203] Bluetooth: hci3: command 0x040f tx timeout [ 65.475718][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.494057][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.516481][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.525362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.535362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.543062][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.555559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.564592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.573975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.582871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.591957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.607762][ T4173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.616612][ T4173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.625387][ T4173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.635602][ T4173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.672796][ T4171] device veth0_macvtap entered promiscuous mode [ 65.700634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.711009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.720010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.753782][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.765192][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.776258][ T4171] device veth1_macvtap entered promiscuous mode [ 65.797914][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.827476][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.836778][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.851264][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.856092][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.868474][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.881569][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.891691][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.905748][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.915918][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.926922][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.938253][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.967428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.976129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.986098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.997814][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.009676][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.019821][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.031225][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.041367][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.052268][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.062326][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.073061][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.084528][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.109438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.118217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.145491][ T4171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.156109][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.164943][ T4217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.173529][ T4217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.174265][ T4171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.181047][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.202301][ T4171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.219699][ T4171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.245885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.254161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.279396][ T1422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.287347][ T1422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.302261][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.325256][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.364626][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.380995][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.189092][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.200071][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.275566][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.286731][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.339261][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.389372][ T4237] Bluetooth: hci0: command 0x0419 tx timeout [ 67.527918][ T4237] Bluetooth: hci1: command 0x0419 tx timeout [ 67.566297][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.584848][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.605352][ T4237] Bluetooth: hci2: command 0x0419 tx timeout [ 67.615331][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 67.681244][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 67.690365][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 67.699416][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 67.708391][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 67.717399][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 67.726399][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 67.819088][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 67.828252][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 67.837348][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 68.505809][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.663298][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 68.664001][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.698891][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 69.402956][ T4280] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 70.258788][ T26] audit: type=1326 audit(1731902141.828:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4267 comm="syz.0.9" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4902d2a719 code=0x0 [ 72.095391][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.107099][ T4206] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.116380][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.498953][ T4206] usb 3-1: Using ep0 maxpacket: 32 [ 72.894258][ T4206] usb 3-1: device descriptor read/all, error -71 [ 73.880811][ T4301] tipc: Started in network mode [ 73.897395][ T4301] tipc: Node identity ac1414aa, cluster identity 4711 [ 73.927684][ T4303] ISOFS: Unable to identify CD-ROM format. [ 73.980230][ T4301] tipc: Enabled bearer , priority 10 [ 74.487650][ T4310] NILFS (loop0): device size too small [ 74.969905][ T4208] tipc: Node number set to 2886997162 [ 75.678346][ T4323] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18'. [ 77.012407][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 77.721385][ T4237] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.789581][ T4369] ======================================================= [ 79.789581][ T4369] WARNING: The mand mount option has been deprecated and [ 79.789581][ T4369] and is ignored by this kernel. Remove the mand [ 79.789581][ T4369] option from the mount to silence this warning. [ 79.789581][ T4369] ======================================================= [ 79.824948][ T4237] usb 4-1: Using ep0 maxpacket: 32 [ 80.676525][ T4237] usb 4-1: device descriptor read/all, error -71 [ 81.471318][ T1323] cfg80211: failed to load regulatory.db [ 82.281802][ T4394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 85.548849][ T1323] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.895186][ T4203] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.914073][ T4423] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 86.378750][ T4203] usb 3-1: Using ep0 maxpacket: 32 [ 86.494640][ T4425] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 86.507296][ T4203] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 86.552176][ T4203] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.568846][ T4425] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 86.775080][ T4203] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.168826][ T4203] usb 3-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 87.206631][ T4203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.245005][ T4203] usb 3-1: config 0 descriptor?? [ 87.323635][ T26] audit: type=1326 audit(1731902159.566:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.1.49" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75f4a00719 code=0x0 [ 87.792325][ T4203] wacom 0003:056A:00C4.0001: unknown main item tag 0x0 [ 88.066169][ T4203] wacom 0003:056A:00C4.0001: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.2-1/input0 [ 88.375750][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.433094][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.453794][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.533475][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.601644][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.619481][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.227737][ T4447] xt_addrtype: ipv6 does not support BROADCAST matching [ 89.273407][ T23] usb 3-1: USB disconnect, device number 4 [ 89.367980][ T4453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 90.823255][ T4463] netlink: 32 bytes leftover after parsing attributes in process `syz.2.59'. [ 90.888922][ T4206] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.858912][ T4206] usb 2-1: Using ep0 maxpacket: 16 [ 91.979981][ T4206] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 92.005963][ T4206] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 92.086157][ T4206] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 92.146950][ T4206] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 92.167420][ T4206] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 92.198972][ T4206] usb 2-1: config 0 has no interface number 0 [ 92.207841][ T4206] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 92.221172][ T4206] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 92.241431][ T4206] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.252425][ T4206] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.268217][ T4206] usb 2-1: config 0 interface 125 has no altsetting 0 [ 92.278384][ T4206] usb 2-1: config 0 interface 125 has no altsetting 2 [ 92.459020][ T4206] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 92.474241][ T4206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.485279][ T4206] usb 2-1: Product: syz [ 92.505514][ T4206] usb 2-1: Manufacturer: syz [ 92.511656][ T4206] usb 2-1: SerialNumber: syz [ 92.539744][ T4206] usb 2-1: config 0 descriptor?? [ 92.592153][ T4206] usb 2-1: selecting invalid altsetting 2 [ 93.048740][ C0] usb 2-1: async_complete: urb error -71 [ 93.054987][ C0] usb 2-1: async_complete: urb error -71 [ 93.060709][ C0] usb 2-1: async_complete: urb error -71 [ 93.066415][ C0] usb 2-1: async_complete: urb error -71 [ 93.073940][ T4206] get_1284_register: usb error -71 [ 93.080169][ T4206] uss720: probe of 2-1:0.125 failed with error -71 [ 93.221385][ T4206] usb 2-1: USB disconnect, device number 3 [ 94.583488][ T4502] netlink: 32 bytes leftover after parsing attributes in process `syz.2.70'. [ 94.848793][ T4206] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.344451][ T4511] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 96.906971][ T4511] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 96.928778][ T4206] usb 4-1: Using ep0 maxpacket: 32 [ 97.049091][ T4206] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 97.064654][ T4206] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.083496][ T4206] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.096060][ T4206] usb 4-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 97.105566][ T4206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.123462][ T4206] usb 4-1: config 0 descriptor?? [ 97.169789][ T4524] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 97.913669][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.950807][ T4206] wacom 0003:056A:00C4.0002: unknown main item tag 0x0 [ 97.956316][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.962730][ T4206] wacom 0003:056A:00C4.0002: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.3-1/input0 [ 98.022127][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.049851][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.057431][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.122819][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.273314][ T23] usb 4-1: USB disconnect, device number 5 [ 98.872903][ T4543] netlink: 32 bytes leftover after parsing attributes in process `syz.2.82'. [ 100.358662][ C1] sched: RT throttling activated [ 101.357232][ T4578] 9pnet: Insufficient options for proto=fd [ 103.009830][ T4591] netlink: 32 bytes leftover after parsing attributes in process `syz.2.96'. [ 107.179966][ T4621] 9pnet: Insufficient options for proto=fd [ 108.138396][ T4636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.108'. [ 108.630024][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.330707][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.395205][ T21] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 111.411192][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.425622][ T21] usb 3-1: config 0 descriptor?? [ 111.498887][ T21] usb 3-1: can't set config #0, error -71 [ 111.849525][ T21] usb 3-1: USB disconnect, device number 5 [ 112.749417][ T4671] 9pnet: Insufficient options for proto=fd [ 113.480116][ T4679] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.489022][ T4679] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.498607][ T4679] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.507447][ T4679] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.785224][ T4682] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 113.795108][ T4682] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 113.890850][ T4686] netlink: 32 bytes leftover after parsing attributes in process `syz.1.121'. [ 118.277045][ T4723] 9pnet: Insufficient options for proto=fd [ 118.415496][ T4729] netlink: 32 bytes leftover after parsing attributes in process `syz.2.132'. [ 121.494275][ T4758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 121.844938][ T4762] syz.3.141[4762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.845049][ T4762] syz.3.141[4762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.680289][ T4773] netlink: 32 bytes leftover after parsing attributes in process `syz.1.144'. [ 123.124760][ T4785] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 123.133790][ T4785] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 123.142658][ T4785] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 123.152299][ T4785] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 123.389553][ T4788] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 125.020493][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 125.459497][ T1106] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 126.530235][ T4820] netlink: 32 bytes leftover after parsing attributes in process `syz.1.158'. [ 126.603904][ T4824] netlink: 6 bytes leftover after parsing attributes in process `syz.1.160'. [ 126.631785][ T4824] bridge_slave_0: default FDB implementation only supports local addresses [ 126.654051][ T4824] netlink: 6 bytes leftover after parsing attributes in process `syz.1.160'. [ 126.670076][ T4824] bridge_slave_0: default FDB implementation only supports local addresses [ 126.687227][ T4824] Zero length message leads to an empty skb [ 126.953454][ T1106] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 127.070979][ T4834] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.079897][ T4834] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.088879][ T4834] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.097695][ T4834] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.238047][ T1106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.298963][ T1106] usb 4-1: string descriptor 0 read error: -71 [ 128.322642][ T1106] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 128.356476][ T1106] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 128.390267][ T1106] usb 4-1: config 0 descriptor?? [ 129.208840][ T1106] usb 4-1: can't set config #0, error -71 [ 129.219157][ T1106] usb 4-1: USB disconnect, device number 6 [ 130.297410][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'. [ 133.897973][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.904373][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.872924][ T4913] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 139.428309][ T4919] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 139.438292][ T4919] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 143.657261][ T4960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 143.967361][ T4963] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 143.977014][ T4963] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 149.017381][ T5006] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 149.027019][ T5006] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 149.915543][ T4998] chnl_net:caif_netlink_parms(): no params data found [ 150.268762][ T4237] Bluetooth: hci5: command 0x0409 tx timeout [ 150.268986][ T4998] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.327359][ T4998] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.356955][ T4998] device bridge_slave_0 entered promiscuous mode [ 150.384785][ T4998] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.400396][ T4998] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.408927][ T4998] device bridge_slave_1 entered promiscuous mode [ 150.451467][ T4998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.633109][ T4998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.761046][ T5032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.015326][ T4998] team0: Port device team_slave_0 added [ 151.024588][ T4998] team0: Port device team_slave_1 added [ 151.078846][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 151.108803][ T5037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 151.264476][ T4998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.298498][ T4998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.440372][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 151.527542][ T4998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.541325][ T4998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.548281][ T4998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.574387][ T4998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.579241][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.738894][ T4203] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 152.004806][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.015118][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 152.025256][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.067072][ T13] usb 4-1: config 0 descriptor?? [ 152.080833][ T4998] device hsr_slave_0 entered promiscuous mode [ 152.105413][ T4998] device hsr_slave_1 entered promiscuous mode [ 152.122833][ T4998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.140082][ T13] hub 4-1:0.0: USB hub found [ 152.158760][ T4998] Cannot create hsr debugfs directory [ 152.607517][ T4203] usb 2-1: Using ep0 maxpacket: 32 [ 152.619695][ T1323] Bluetooth: hci5: command 0x041b tx timeout [ 152.633865][ T5045] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 152.639029][ T13] hub 4-1:0.0: 1 port detected [ 152.644389][ T5045] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 152.752588][ T4203] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 152.776032][ T4203] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.826937][ T4203] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.835114][ T4203] usb 2-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 152.845856][ T4203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.857076][ T4203] usb 2-1: config 0 descriptor?? [ 153.054202][ T4245] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.698327][ T4245] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.744975][ T4245] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.804522][ T4245] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.808996][ T1323] hub 4-1:0.0: activate --> -90 [ 153.917791][ T4998] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.941614][ T4203] wacom 0003:056A:00C4.0003: unknown main item tag 0x0 [ 153.954342][ T4203] wacom 0003:056A:00C4.0003: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.1-1/input0 [ 153.996872][ T4245] tipc: Disabling bearer [ 154.004009][ T4245] tipc: Left network mode [ 154.004988][ T4998] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.050655][ T4998] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.087229][ T4998] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.143639][ T4205] usb 2-1: USB disconnect, device number 4 [ 154.356086][ T4998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.392526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.405545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.420619][ T4998] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.439713][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.450678][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.461050][ T4243] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.468176][ T4243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.476973][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.489076][ T1323] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 154.496533][ T23] usb 4-1: USB disconnect, device number 7 [ 154.509502][ T1323] usb 4-1-port1: cannot reset (err = -71) [ 154.515557][ T1323] usb 4-1-port1: Cannot enable. Maybe the USB cable is bad? [ 154.523625][ T1323] usb 4-1-port1: attempt power cycle [ 154.539818][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.549643][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.560644][ T4243] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.567748][ T4243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.576969][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.605193][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.637309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.647100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.657186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.666954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.678769][ T13] Bluetooth: hci5: command 0x040f tx timeout [ 154.699671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.721845][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.738380][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.779289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.793267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.821673][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.213285][ T5092] netlink: 'syz.1.232': attribute type 12 has an invalid length. [ 155.486475][ T4205] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.484647][ T5088] input: syz0 as /devices/virtual/input/input14 [ 156.816255][ T5111] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 156.825944][ T5111] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 157.023522][ T4206] Bluetooth: hci5: command 0x0419 tx timeout [ 157.125250][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.541279][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.568193][ T4998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.121125][ T4245] device hsr_slave_0 left promiscuous mode [ 159.140137][ T4245] device hsr_slave_1 left promiscuous mode [ 159.184332][ T5146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 159.215151][ T4245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.226768][ T4245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.259398][ T4245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.276368][ T4245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.315942][ T4245] device bridge_slave_1 left promiscuous mode [ 159.326020][ T4245] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.386329][ T4245] device bridge_slave_0 left promiscuous mode [ 159.393086][ T4245] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.081045][ T4245] device veth1_macvtap left promiscuous mode [ 160.103832][ T4245] device veth0_macvtap left promiscuous mode [ 160.178085][ T4245] device veth1_vlan left promiscuous mode [ 160.298389][ T4245] device veth0_vlan left promiscuous mode [ 161.194321][ T5166] syz.1.250 sent an empty control message without MSG_MORE. [ 161.408304][ T4245] team0 (unregistering): Port device team_slave_1 removed [ 161.425414][ T4245] team0 (unregistering): Port device team_slave_0 removed [ 161.493714][ T5174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 161.518141][ T4245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.576655][ T4245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.743339][ T4245] bond0 (unregistering): Released all slaves [ 161.829880][ T5140] device vlan2 entered promiscuous mode [ 161.836784][ T5140] device bond0 entered promiscuous mode [ 161.854643][ T5140] device bond_slave_0 entered promiscuous mode [ 161.867448][ T5140] device bond_slave_1 entered promiscuous mode [ 161.881963][ T5140] device bond0 left promiscuous mode [ 161.887561][ T5140] device bond_slave_0 left promiscuous mode [ 161.899541][ T5140] device bond_slave_1 left promiscuous mode [ 161.963604][ T5163] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 161.973558][ T5163] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 162.007628][ T5180] netlink: 'syz.1.254': attribute type 12 has an invalid length. [ 162.368739][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.879365][ T4203] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 163.148418][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.184391][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.792146][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.808477][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.945628][ T4998] device veth0_vlan entered promiscuous mode [ 164.013097][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.021337][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.033469][ T4998] device veth1_vlan entered promiscuous mode [ 164.038890][ T4203] usb 4-1: Using ep0 maxpacket: 32 [ 164.155902][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 164.358152][ T4203] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 164.412193][ T4203] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.575837][ T4203] usb 4-1: config 0 interface 0 has no altsetting 0 [ 164.669349][ T4203] usb 4-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 164.685205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.698537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.719625][ T4203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.762980][ T4998] device veth0_macvtap entered promiscuous mode [ 164.799655][ T4203] usb 4-1: config 0 descriptor?? [ 164.892874][ T4998] device veth1_macvtap entered promiscuous mode [ 165.000461][ T4998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.220649][ T5231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 165.670521][ T4203] wacom 0003:056A:00C4.0004: unknown main item tag 0x0 [ 165.680691][ T4998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.892834][ T4203] wacom 0003:056A:00C4.0004: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.3-1/input0 [ 165.918751][ T4998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.969998][ T4998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.024049][ T4203] usb 4-1: USB disconnect, device number 12 [ 166.061202][ T4998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.170686][ T4998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.228726][ T4998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.264722][ T4998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.307215][ T4998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.394154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.404577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.690630][ T5243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 166.709087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.806574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.139861][ T5244] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 167.149642][ T5244] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 167.317766][ T4998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.343424][ T4998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.524635][ T4998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.585219][ T4998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.846388][ T4998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.865104][ T4998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.887551][ T4998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.962643][ T4998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.020731][ T4998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.084389][ T4998] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.266721][ T4998] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.312949][ T4998] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.340159][ T4998] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.378095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.417712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.042435][ T4237] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.079807][ T5283] netlink: 'syz.1.273': attribute type 12 has an invalid length. [ 170.110631][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.142087][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.327390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.385609][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.434174][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.108231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.311213][ T7] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 171.339985][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 171.409211][ T7] Bluetooth: hci1: Injecting HCI hardware error event [ 171.479254][ T146] Bluetooth: hci1: hardware error 0x00 [ 172.016151][ T5313] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 172.025804][ T5313] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 172.842176][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 173.078693][ T4207] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 173.508889][ T4207] usb 6-1: Using ep0 maxpacket: 32 [ 174.468951][ T4207] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 174.514175][ T4207] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.323565][ T4207] usb 6-1: config 0 interface 0 has no altsetting 0 [ 175.330634][ T4207] usb 6-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 175.340624][ T4207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.354044][ T4207] usb 6-1: config 0 descriptor?? [ 175.553082][ T5365] netlink: 'syz.2.290': attribute type 12 has an invalid length. [ 175.870939][ T5368] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 176.069376][ T4205] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 176.186607][ T4207] usbhid 6-1:0.0: can't add hid device: -71 [ 176.765589][ T4207] usbhid: probe of 6-1:0.0 failed with error -71 [ 176.774557][ T4207] usb 6-1: USB disconnect, device number 2 [ 176.849476][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.294'. [ 177.181822][ T26] audit: type=1326 audit(1731902249.426:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4902d2a719 code=0x7ffc0000 [ 177.286319][ T26] audit: type=1326 audit(1731902249.486:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4902d2a719 code=0x7ffc0000 [ 177.381504][ T26] audit: type=1326 audit(1731902249.556:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4902d2a719 code=0x7ffc0000 [ 177.405638][ T26] audit: type=1326 audit(1731902249.566:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4902d2a719 code=0x7ffc0000 [ 177.528571][ T5399] program syz.5.296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.554701][ T5099] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 178.345602][ T26] audit: type=1326 audit(1731902249.566:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4902d2a719 code=0x7ffc0000 [ 178.558576][ T5409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 179.375107][ T26] audit: type=1326 audit(1731902249.566:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f4902d2a719 code=0x7ffc0000 [ 179.544156][ T26] audit: type=1326 audit(1731902249.566:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4902d2a719 code=0x7ffc0000 [ 179.638966][ T5099] usb 2-1: Using ep0 maxpacket: 32 [ 179.794674][ T26] audit: type=1326 audit(1731902249.566:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4902d2a719 code=0x7ffc0000 [ 180.115357][ T5099] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 180.204185][ T5099] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.551122][ T5099] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.706072][ T26] audit: type=1326 audit(1731902252.926:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.2.307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa84bb5c719 code=0x0 [ 180.816517][ T5099] usb 2-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 180.827891][ T5099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.853309][ T5099] usb 2-1: config 0 descriptor?? [ 180.938928][ T5099] usb 2-1: can't set config #0, error -71 [ 181.010886][ T5099] usb 2-1: USB disconnect, device number 8 [ 181.263939][ T5444] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 182.324752][ T5459] netlink: 'syz.2.312': attribute type 12 has an invalid length. [ 183.458095][ T5099] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 183.573579][ T5475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 185.034814][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.317'. [ 185.162401][ T4238] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 185.719911][ T5495] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 186.513031][ T4237] Bluetooth: hci3: command 0x0406 tx timeout [ 186.519443][ T4237] Bluetooth: hci0: command 0x0406 tx timeout [ 186.525724][ T4237] Bluetooth: hci2: command 0x0406 tx timeout [ 187.433854][ T4238] usb 4-1: Using ep0 maxpacket: 32 [ 187.547237][ T26] audit: type=1326 audit(1731902259.786:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.2.322" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa84bb5c719 code=0x0 [ 188.149007][ T4238] usb 4-1: device descriptor read/all, error -71 [ 188.511152][ T5518] syz.3.326 uses obsolete (PF_INET,SOCK_PACKET) [ 188.572232][ T5527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 190.180302][ T5535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'. [ 190.794164][ T5551] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 194.215661][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.279116][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.748253][ T5560] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 195.143803][ T5596] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 195.695438][ T5587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.343'. [ 197.507630][ T5620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.351'. [ 197.519026][ T4168] Bluetooth: hci4: sending frame failed (-49) [ 197.572419][ T5620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.351'. [ 199.580694][ T4204] Bluetooth: hci4: command 0x1003 tx timeout [ 199.890182][ T4168] Bluetooth: hci4: sending frame failed (-49) [ 199.980302][ T5645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'. [ 200.895036][ T4238] Bluetooth: hci6: command 0x0409 tx timeout [ 201.067634][ T5597] chnl_net:caif_netlink_parms(): no params data found [ 201.127709][ T4165] syz-executor (4165) used greatest stack depth: 18840 bytes left [ 201.155064][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.223254][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 201.329823][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.378437][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 201.949084][ T4207] Bluetooth: hci4: command 0x1001 tx timeout [ 201.968420][ T4168] Bluetooth: hci4: sending frame failed (-49) [ 201.994803][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.119550][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 202.422617][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.461645][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 202.672866][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.706209][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.815414][ T5597] device bridge_slave_0 entered promiscuous mode [ 203.001402][ T5099] Bluetooth: hci6: command 0x041b tx timeout [ 203.045382][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.251249][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.359171][ T5597] device bridge_slave_1 entered promiscuous mode [ 203.580477][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.646216][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.585175][ T21] Bluetooth: hci4: command 0x1009 tx timeout [ 205.662509][ T4207] Bluetooth: hci6: command 0x040f tx timeout [ 205.883194][ T5597] team0: Port device team_slave_0 added [ 205.930880][ T5597] team0: Port device team_slave_1 added [ 207.280578][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.309529][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.414243][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.427349][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.434486][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.460711][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.644020][ T5730] process 'syz.1.372' launched './file0' with NULL argv: empty string added [ 207.972172][ T5724] sctp: failed to load transform for md5: -2 [ 207.973159][ T4207] Bluetooth: hci6: command 0x0419 tx timeout [ 208.164450][ T5597] device hsr_slave_0 entered promiscuous mode [ 208.177428][ T5597] device hsr_slave_1 entered promiscuous mode [ 208.188141][ T5597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.264644][ T5597] Cannot create hsr debugfs directory [ 209.017315][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'. [ 209.686834][ T5597] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 209.698984][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 209.727547][ T5730] bad cache= option: no%e [ 209.727547][ T5730] [ 209.779150][ T5597] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 209.802742][ T5730] CIFS: VFS: bad cache= option: no%e [ 209.879762][ T5597] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 209.898706][ T21] usb 6-1: device descriptor read/64, error -71 [ 209.908067][ T5597] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 210.021080][ T144] device hsr_slave_0 left promiscuous mode [ 210.063015][ T144] device hsr_slave_1 left promiscuous mode [ 210.113663][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.138527][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.157347][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.165505][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.172927][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 210.196672][ T144] device bridge_slave_1 left promiscuous mode [ 210.208865][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.229519][ T144] device bridge_slave_0 left promiscuous mode [ 210.235769][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.259456][ T144] device veth1_macvtap left promiscuous mode [ 210.284045][ T144] device veth0_macvtap left promiscuous mode [ 210.293997][ T144] device veth1_vlan left promiscuous mode [ 210.323315][ T144] device veth0_vlan left promiscuous mode [ 210.388793][ T21] usb 6-1: device descriptor read/64, error -71 [ 210.528902][ T21] usb usb6-port1: attempt power cycle [ 210.821492][ T144] team0 (unregistering): Port device team_slave_1 removed [ 210.848777][ T144] team0 (unregistering): Port device team_slave_0 removed [ 210.871027][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.910525][ T5779] tmpfs: Unknown parameter 'usrquota' [ 210.968729][ T21] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 211.006449][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.110836][ T21] usb 6-1: device descriptor read/8, error -71 [ 211.194011][ T144] bond0 (unregistering): Released all slaves [ 212.679234][ T21] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 212.679295][ T5099] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 213.517529][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.549286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.557746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.606845][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.608824][ T5099] usb 4-1: Using ep0 maxpacket: 32 [ 213.652117][ T21] usb 6-1: device not accepting address 6, error -71 [ 213.675241][ T21] usb usb6-port1: unable to enumerate USB device [ 213.688930][ T1323] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 213.701355][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.720365][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.746342][ T4429] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.753516][ T4429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.761821][ T5099] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 213.770503][ T5099] usb 4-1: config 0 has no interface number 0 [ 213.797154][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.816312][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.855943][ T4429] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.863461][ T4429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.928905][ T1323] usb 2-1: Using ep0 maxpacket: 8 [ 214.021834][ T5597] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.067830][ T5597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.097147][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.114282][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.118883][ T5099] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 214.156147][ T5099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.625684][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.685249][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.695660][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.708819][ T1323] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 214.719985][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.728169][ T1323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.757727][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.766713][ T1323] usb 2-1: Product: syz [ 214.781088][ T1323] usb 2-1: Manufacturer: syz [ 214.790635][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.814778][ T5099] usb 4-1: Product: syz [ 214.819165][ T5099] usb 4-1: Manufacturer: syz [ 214.823779][ T5099] usb 4-1: SerialNumber: syz [ 214.838697][ T1323] usb 2-1: SerialNumber: syz [ 214.845434][ T5099] usb 4-1: config 0 descriptor?? [ 214.855690][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.867852][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.875027][ T1323] usb 2-1: config 0 descriptor?? [ 214.876767][ T5099] usb 4-1: can't set config #0, error -71 [ 214.909163][ T5099] usb 4-1: USB disconnect, device number 15 [ 214.923839][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.947311][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.980074][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.055170][ T5823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 215.490533][ T1323] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 216.264460][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.318947][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.341738][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.731160][ T1323] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 217.286051][ T13] usb 2-1: USB disconnect, device number 9 [ 217.506218][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.515608][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.607253][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.639671][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.651293][ T5597] device veth0_vlan entered promiscuous mode [ 217.669524][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.699432][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.724680][ T5597] device veth1_vlan entered promiscuous mode [ 218.036565][ T5874] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 218.739601][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.759071][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.992340][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.150290][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.399'. [ 219.281422][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.684440][ T5597] device veth0_macvtap entered promiscuous mode [ 219.755940][ T5597] device veth1_macvtap entered promiscuous mode [ 219.930465][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.944577][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.995623][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.026244][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.077592][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.097879][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.135701][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.152090][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.167074][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.232428][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.420929][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.436837][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.531041][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.638817][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.690367][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.725390][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.746413][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.843842][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.861027][ T5901] CUSE: DEVNAME unspecified [ 220.875825][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.896859][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.928790][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.952102][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.979634][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.031238][ T5597] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.065166][ T5597] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.097038][ T5597] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.242896][ T5597] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.298208][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.375550][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.418034][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.635898][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.696580][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.729882][ T5938] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 223.122684][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.021633][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 225.361643][ T5958] xt_hashlimit: max too large, truncated to 1048576 [ 225.784097][ T5975] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 225.827394][ T5987] tmpfs: Unknown parameter 'usrquota' [ 226.539012][ T5975] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 227.278048][ T6007] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 230.363038][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 231.292863][ T13] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 232.938829][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.978508][ T13] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 232.998142][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.026922][ T13] usb 2-1: config 0 descriptor?? [ 233.175486][ T6094] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 233.184473][ T6094] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 233.193341][ T6094] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 233.202221][ T6094] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 234.038765][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 234.048838][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 234.179028][ T13] usb 2-1: USB disconnect, device number 10 [ 235.338889][ T13] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 235.588728][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 235.709091][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.741611][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.778547][ T13] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 235.823668][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.876061][ T13] usb 2-1: config 0 descriptor?? [ 236.477978][ T13] qmi_wwan 2-1:0.0: bogus CDC Union: master=0, slave=64 [ 236.543898][ T13] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 236.588021][ T6152] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 236.618410][ T13] usb 2-1: USB disconnect, device number 11 [ 238.257820][ T6178] fuse: Unknown parameter '0x0000000000000005' [ 239.075867][ T5099] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 239.375092][ T5099] usb 6-1: Using ep0 maxpacket: 32 [ 239.393902][ T6186] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 239.404108][ T6186] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 239.413083][ T6186] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 239.421900][ T6186] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 240.371162][ T5099] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 240.405522][ T5099] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.436565][ T5099] usb 6-1: config 0 interface 0 has no altsetting 0 [ 240.450704][ T5099] usb 6-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 240.473695][ T5099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.515041][ T5099] usb 6-1: config 0 descriptor?? [ 240.730195][ T6201] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 240.739886][ T6201] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 241.334764][ T5099] wacom 0003:056A:00C4.0005: unknown main item tag 0x0 [ 241.360650][ T5099] wacom 0003:056A:00C4.0005: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.5-1/input0 [ 241.410486][ T5099] usb 6-1: USB disconnect, device number 7 [ 243.822262][ T1323] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 243.958722][ T4204] Bluetooth: hci6: command 0x0405 tx timeout [ 244.788824][ T1323] usb 7-1: device not accepting address 2, error -71 [ 246.609225][ T6242] netdevsim netdevsim6: Firmware load for '../file0' refused, path contains '..' component [ 249.201640][ T6257] netlink: 'syz.2.473': attribute type 4 has an invalid length. [ 250.565698][ T6288] tmpfs: Unknown parameter 'usrquota' [ 254.591790][ T6325] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 255.553707][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.561867][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.568821][ T13] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 255.578819][ T4205] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 255.968921][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 256.209301][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.246656][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.346527][ T13] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.560403][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.663722][ T13] usb 6-1: config 0 descriptor?? [ 256.719635][ T13] hub 6-1:0.0: USB hub found [ 256.778676][ T4205] usb 3-1: Using ep0 maxpacket: 8 [ 256.932652][ T13] hub 6-1:0.0: 4 ports detected [ 257.154947][ T13] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 257.167169][ T13] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 257.234478][ T4205] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 257.959441][ T13] usbhid 6-1:0.0: can't add hid device: -71 [ 257.965450][ T13] usbhid: probe of 6-1:0.0 failed with error -71 [ 258.480180][ T4205] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.539435][ T13] usb 6-1: USB disconnect, device number 8 [ 258.729149][ T4205] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.729389][ T4205] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.729580][ T4205] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.729968][ T4205] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 258.730153][ T4205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.769707][ T4205] usb 3-1: can't set config #16, error -71 [ 258.770926][ T4205] usb 3-1: USB disconnect, device number 8 [ 261.943798][ T13] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 262.099471][ T13] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 262.125757][ T13] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 262.784355][ T26] audit: type=1326 audit(1731902335.026:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f4a00719 code=0x7fc00000 [ 262.930278][ T26] audit: type=1326 audit(1731902335.046:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75f4a00719 code=0x7fc00000 [ 263.046962][ T26] audit: type=1326 audit(1731902335.066:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f4a00719 code=0x7fc00000 [ 263.111439][ T26] audit: type=1326 audit(1731902335.066:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f4a00719 code=0x7fc00000 [ 263.133541][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.970324][ T6462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.514'. [ 269.245869][ T6508] ppp0: PPP: VJ uncompressed error [ 269.793493][ T6521] tmpfs: Unknown parameter 'usrquota' [ 269.975547][ T6529] FAT-fs (nullb0): bogus number of reserved sectors [ 270.019070][ T6529] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 273.385533][ T4206] Bluetooth: hci5: command 0x0406 tx timeout [ 276.706777][ T6614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.638804][ T4206] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 278.010297][ T6627] delete_channel: no stack [ 278.056074][ T26] audit: type=1326 audit(1731902349.926:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742df96719 code=0x7ffc0000 [ 278.281632][ T26] audit: type=1326 audit(1731902349.926:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742df96719 code=0x7ffc0000 [ 278.353216][ T26] audit: type=1326 audit(1731902349.936:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f742df9866a code=0x7ffc0000 [ 278.548957][ T26] audit: type=1326 audit(1731902349.936:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f742df950b0 code=0x7ffc0000 [ 278.619543][ T26] audit: type=1326 audit(1731902349.946:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f742df951ff code=0x7ffc0000 [ 278.786655][ T4206] usb 2-1: Using ep0 maxpacket: 32 [ 278.901332][ T6638] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 279.618880][ T4206] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.627572][ T4206] usb 2-1: config 0 has no interface number 0 [ 279.658729][ T4206] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.718529][ T4206] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.778698][ T4206] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 279.857312][ T6646] netlink: 36 bytes leftover after parsing attributes in process `syz.5.550'. [ 279.867790][ T4206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.680157][ T4206] usb 2-1: config 0 descriptor?? [ 280.698878][ T4206] usb 2-1: can't set config #0, error -71 [ 280.709852][ T4206] usb 2-1: USB disconnect, device number 12 [ 281.342423][ T6670] No such timeout policy "syz0" [ 282.069064][ T4204] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 282.548743][ T4204] usb 7-1: unable to get BOS descriptor or descriptor too short [ 282.819108][ T4204] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.844021][ T4204] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.287760][ T4204] usb 7-1: config 1 has no interface number 0 [ 283.302614][ T4204] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.359952][ T6695] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 284.319413][ T4204] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 284.628747][ T4204] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.667669][ T4204] usb 7-1: Product: syz [ 285.232903][ T4204] usb 7-1: Manufacturer: syz [ 285.237517][ T4204] usb 7-1: SerialNumber: syz [ 285.250630][ T6709] netlink: 36 bytes leftover after parsing attributes in process `syz.1.563'. [ 285.382552][ T26] audit: type=1326 audit(1731902357.626:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.5.561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa175b2c719 code=0x0 [ 285.414524][ T4204] usb 7-1: can't set config #1, error -71 [ 285.431559][ T4204] usb 7-1: USB disconnect, device number 4 [ 285.547238][ T6723] device ip6gre1 entered promiscuous mode [ 286.725684][ T6745] No such timeout policy "syz0" [ 286.831913][ T6746] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 289.678708][ T4237] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 289.853333][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'. [ 290.083135][ T6782] netlink: 36 bytes leftover after parsing attributes in process `syz.5.580'. [ 290.858898][ T4237] usb 7-1: unable to get BOS descriptor or descriptor too short [ 290.939731][ T4237] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.966981][ T4237] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.001480][ T26] audit: type=1326 audit(1731902363.246:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.5.581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa175b2c719 code=0x0 [ 291.018653][ T4237] usb 7-1: config 1 has no interface number 0 [ 291.058679][ T4237] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.168772][ T4237] usb 7-1: string descriptor 0 read error: -71 [ 291.194752][ T4237] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.298553][ T4237] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.598923][ T4237] usb 7-1: can't set config #1, error -71 [ 291.609188][ T4237] usb 7-1: USB disconnect, device number 5 [ 293.003188][ T6811] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 293.712787][ T6814] No such timeout policy "syz0" [ 296.681302][ T4237] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 297.274572][ T26] audit: type=1326 audit(1731902369.516:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.3.596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec38f91719 code=0x0 [ 297.408932][ T4237] usb 6-1: unable to get BOS descriptor or descriptor too short [ 297.508992][ T4237] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.542699][ T4237] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.562179][ T4237] usb 6-1: config 1 has no interface number 0 [ 297.573863][ T4237] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.695575][ T6869] netlink: 'syz.2.598': attribute type 12 has an invalid length. [ 297.798858][ T4237] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.818180][ T4237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.842940][ T4237] usb 6-1: Product: syz [ 297.857457][ T4237] usb 6-1: Manufacturer: syz [ 297.871462][ T4237] usb 6-1: SerialNumber: syz [ 297.938688][ T4205] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 298.189016][ T4237] usb 6-1: USB disconnect, device number 9 [ 298.509004][ T6881] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 303.328655][ T4205] usb 3-1: device descriptor read/64, error -110 [ 303.937177][ T6933] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 303.946298][ T6933] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 303.955281][ T6933] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 303.964288][ T6933] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 304.967973][ T6944] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 308.359938][ T6968] tipc: Started in network mode [ 308.364848][ T6968] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 308.406791][ T6968] tipc: Enabled bearer , priority 0 [ 308.694563][ T6978] netlink: 'syz.3.620': attribute type 12 has an invalid length. [ 309.941715][ T4205] tipc: Node number set to 10136234 [ 309.965552][ T4237] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 310.345872][ T6997] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 313.803248][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.637'. [ 315.100225][ T7041] trusted_key: encrypted_key: insufficient parameters specified [ 317.117186][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.166398][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.668733][ T4237] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 318.218752][ T4237] usb 3-1: unable to get BOS descriptor or descriptor too short [ 319.024062][ T7078] netlink: 'syz.5.649': attribute type 12 has an invalid length. [ 319.048959][ T4237] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.909250][ T4237] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.918157][ T4237] usb 3-1: config 1 has no interface number 0 [ 319.928825][ T4237] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.982095][ T7087] trusted_key: encrypted_key: insufficient parameters specified [ 320.088777][ T13] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 320.098918][ T4237] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.107976][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.146729][ T4237] usb 3-1: Product: syz [ 320.164926][ T4237] usb 3-1: Manufacturer: syz [ 320.170598][ T4237] usb 3-1: SerialNumber: syz [ 320.358026][ T4237] usb 3-1: USB disconnect, device number 11 [ 322.995626][ T7116] netlink: 36 bytes leftover after parsing attributes in process `syz.2.661'. [ 323.825630][ T7125] No such timeout policy "syz0" [ 324.609244][ T4238] Bluetooth: hci6: command 0x0406 tx timeout [ 324.685990][ T7131] trusted_key: encrypted_key: insufficient parameters specified [ 327.586053][ T13] usb 6-1: device descriptor read/64, error -71 [ 328.313391][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 328.321081][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 328.330937][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.338464][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.346151][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.353787][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.564629][ T7166] netlink: 'syz.6.674': attribute type 12 has an invalid length. [ 328.646731][ T7169] No such timeout policy "syz0" [ 329.498777][ T4238] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 329.525732][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.677'. [ 335.376853][ T7217] capability: warning: `syz.6.688' uses deprecated v2 capabilities in a way that may be insecure [ 336.463375][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.692'. [ 337.918804][ T7] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 338.111476][ T7258] netlink: 'syz.3.698': attribute type 12 has an invalid length. [ 338.390160][ T4204] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 338.439810][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.456743][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.558932][ T7] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 338.578347][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 338.604050][ T7] usb 2-1: SerialNumber: syz [ 338.984669][ T7] usb 2-1: 0:2 : does not exist [ 338.998819][ T7] usb 2-1: unit 255 not found! [ 339.102017][ T7] usb 2-1: USB disconnect, device number 13 [ 339.205254][ T4236] udevd[4236]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.966937][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 342.076955][ T7321] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 343.238110][ T7332] trusted_key: encrypted_key: insufficient parameters specified [ 343.304344][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'. [ 346.152144][ T7355] netlink: 'syz.6.731': attribute type 12 has an invalid length. [ 346.168319][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'. [ 346.398854][ T4207] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 347.561992][ T7380] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 347.677411][ T7382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.739'. [ 349.762908][ T7408] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 351.911422][ T7420] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 351.975243][ T7423] netlink: 36 bytes leftover after parsing attributes in process `syz.1.751'. [ 355.018688][ T7456] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 355.767525][ T7460] netlink: 'syz.1.762': attribute type 12 has an invalid length. [ 357.606169][ T7470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.765'. [ 357.814556][ T4206] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 358.847326][ T7485] tipc: Started in network mode [ 358.859861][ T7485] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 358.899551][ T7485] tipc: Enabled bearer , priority 10 [ 359.048526][ T7488] team0: Device wg2 is of different type [ 359.085407][ T7488] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 359.299705][ T7488] syz.5.771 (7488) used greatest stack depth: 18520 bytes left [ 359.492080][ T7493] No such timeout policy "syz0" [ 359.579923][ T7498] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 360.302517][ T4237] tipc: Node number set to 8432298 [ 360.620869][ T7502] batman_adv: batadv0: Adding interface: macvlan2 [ 360.654151][ T7502] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.081124][ T7502] batman_adv: batadv0: Interface activated: macvlan2 [ 362.446675][ T7529] netlink: 'syz.6.785': attribute type 3 has an invalid length. [ 362.482256][ T7529] netlink: 32 bytes leftover after parsing attributes in process `syz.6.785'. [ 362.571732][ T7534] netlink: 20 bytes leftover after parsing attributes in process `syz.6.785'. [ 362.599028][ T7534] netlink: 10 bytes leftover after parsing attributes in process `syz.6.785'. [ 362.982830][ T7544] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 364.973640][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 365.013767][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.797'. [ 365.075331][ T7572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.129625][ T7577] netlink: 'syz.6.796': attribute type 12 has an invalid length. [ 365.467798][ T7584] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 366.228614][ T4207] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 366.900364][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 367.740941][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'. [ 368.396548][ T26] audit: type=1326 audit(1731902440.636:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.2.820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa84bb5c719 code=0x0 [ 368.418233][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.158636][ T4207] usb 7-1: device descriptor read/64, error -110 [ 372.390495][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 372.643309][ T4207] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 375.491356][ T7723] ip6gretap0 speed is unknown, defaulting to 1000 [ 375.502628][ T7723] ip6gretap0 speed is unknown, defaulting to 1000 [ 375.517627][ T7723] ip6gretap0 speed is unknown, defaulting to 1000 [ 375.535525][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.846'. [ 375.536782][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.847'. [ 375.585383][ T7723] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 375.650844][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.846'. [ 375.731488][ T7723] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 376.023770][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.846'. [ 376.843468][ T7723] ip6gretap0 speed is unknown, defaulting to 1000 [ 376.916850][ T7723] ip6gretap0 speed is unknown, defaulting to 1000 [ 376.939009][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.6.851'. [ 377.034602][ T7723] ip6gretap0 speed is unknown, defaulting to 1000 [ 377.084194][ T7723] ip6gretap0 speed is unknown, defaulting to 1000 [ 377.311018][ T7723] ip6gretap0 speed is unknown, defaulting to 1000 [ 377.984160][ T7752] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.502957][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 378.715427][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.715518][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.149905][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 380.203137][ T7791] No such timeout policy "syz0" [ 381.076503][ T7807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.194983][ T7831] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20002 [ 383.416117][ T7836] device bond_slave_0 entered promiscuous mode [ 383.416224][ T7836] device bond_slave_1 entered promiscuous mode [ 383.496829][ T7836] device bond_slave_0 left promiscuous mode [ 383.503386][ T7836] device bond_slave_1 left promiscuous mode [ 383.621425][ T7846] No such timeout policy "syz0" [ 383.690779][ T7844] dccp_invalid_packet: P.Data Offset(4) too small [ 386.748018][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 387.005551][ T7884] netem: change failed [ 389.821482][ T7938] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 389.831312][ T7938] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 393.187283][ T7964] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.928'. [ 395.025340][ T7976] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 395.035022][ T7976] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 399.686278][ T8010] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 399.695848][ T8010] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 400.201910][ T8020] netlink: 'syz.6.946': attribute type 12 has an invalid length. [ 402.383478][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.955'. [ 402.447408][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.955'. [ 402.464637][ T8048] netlink: 16 bytes leftover after parsing attributes in process `syz.5.955'. [ 402.570879][ T8048] netlink: 16 bytes leftover after parsing attributes in process `syz.5.955'. [ 404.508945][ T8052] netlink: 'syz.5.955': attribute type 10 has an invalid length. [ 404.668453][ T8052] team0: Device hsr_slave_0 failed to register rx_handler [ 404.787754][ T8070] netlink: 'syz.3.960': attribute type 12 has an invalid length. [ 409.172663][ T8115] ip6gretap0 speed is unknown, defaulting to 1000 [ 410.442229][ T8141] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 414.759435][ T8188] raw_sendmsg: syz.2.996 forgot to set AF_INET. Fix it! [ 416.029481][ T8203] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 420.189533][ T8253] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 420.287315][ T8247] ip6gretap0 speed is unknown, defaulting to 1000 [ 422.198800][ T4206] Bluetooth: hci0: command 0x0409 tx timeout [ 424.303792][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 424.627051][ T8247] chnl_net:caif_netlink_parms(): no params data found [ 425.348920][ T8297] sctp: failed to load transform for md5: -2 [ 426.370462][ T4206] Bluetooth: hci0: command 0x040f tx timeout [ 427.854001][ T8247] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.878379][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.439529][ T4206] Bluetooth: hci0: command 0x0419 tx timeout [ 428.627483][ T8247] device bridge_slave_0 entered promiscuous mode [ 428.679645][ T8247] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.806549][ T8357] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 428.846823][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.861001][ T8247] device bridge_slave_1 entered promiscuous mode [ 428.875322][ T8349] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1044'. [ 428.961807][ T8247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.003308][ T8247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.153464][ T8247] team0: Port device team_slave_0 added [ 429.187721][ T8247] team0: Port device team_slave_1 added [ 429.307567][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.454356][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.162997][ T8247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.271263][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.278239][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.304201][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.390834][ T8247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.636917][ T8247] device hsr_slave_0 entered promiscuous mode [ 430.670985][ T8247] device hsr_slave_1 entered promiscuous mode [ 430.702964][ T8247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.726313][ T8247] Cannot create hsr debugfs directory [ 433.040505][ T8247] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 433.113037][ T8247] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 433.148615][ T8247] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 433.209888][ T8247] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 433.668543][ C0] hrtimer: interrupt took 47906 ns [ 434.176286][ T8247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.216614][ T8247] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.270619][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 434.290627][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 434.327313][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 434.344008][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 434.352995][ T4429] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.360138][ T4429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.368926][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 434.392817][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 434.406508][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 434.459192][ T4429] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.466282][ T4429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.493316][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 434.517531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 434.578997][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 434.627804][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 434.669940][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 434.695611][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 434.734183][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 434.792868][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 435.476793][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 435.556160][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 435.616153][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.814154][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 435.940222][ T8429] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 436.584230][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 436.605023][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 436.653672][ T8247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.611719][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 439.647693][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 439.804438][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.878624][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 439.890731][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.897053][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.992006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 440.013413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 440.039937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 440.060520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 440.085682][ T8247] device veth0_vlan entered promiscuous mode [ 440.135044][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.173592][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 440.272785][ T8247] device veth1_vlan entered promiscuous mode [ 440.437446][ T8485] device syzkaller0 entered promiscuous mode [ 440.475334][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 440.494540][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 440.697170][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.707573][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 440.969736][ T8247] device veth0_macvtap entered promiscuous mode [ 441.011912][ T8247] device veth1_macvtap entered promiscuous mode [ 441.186644][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.212598][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 441.284692][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.297316][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.326218][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.346312][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.356553][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.367480][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.377700][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.388605][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.408159][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.419074][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.431054][ T8247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.438919][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 441.448187][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 441.456646][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 441.473707][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 441.489279][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.500578][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.513019][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.531326][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.546449][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.560111][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.575264][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.588795][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.605906][ T8247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.619436][ T8247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.640766][ T8247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.648775][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 441.666748][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 441.680477][ T8247] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.697074][ T8247] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.707027][ T8247] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.717469][ T8247] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.605337][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.616466][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.640629][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 442.872279][ T9] tipc: Disabling bearer [ 442.885278][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.895421][ T9] tipc: Left network mode [ 442.898678][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.964182][ T8530] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 444.124842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 444.308700][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 446.339577][ T8566] device vlan2 entered promiscuous mode [ 446.982022][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1109'. [ 447.280386][ T9] device hsr_slave_0 left promiscuous mode [ 447.312186][ T9] device hsr_slave_1 left promiscuous mode [ 447.354356][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.376268][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.405761][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.451317][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.531456][ T9] device bridge_slave_1 left promiscuous mode [ 447.567164][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.608884][ T9] device bridge_slave_0 left promiscuous mode [ 447.638817][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.689813][ T9] device veth1_macvtap left promiscuous mode [ 448.695916][ T9] device veth0_macvtap left promiscuous mode [ 448.728700][ T9] device veth1_vlan left promiscuous mode [ 448.734631][ T9] device veth0_vlan left promiscuous mode [ 449.313129][ T9] team0 (unregistering): Port device team_slave_1 removed [ 449.356780][ T9] team0 (unregistering): Port device team_slave_0 removed [ 449.378720][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.397860][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.532919][ T9] bond0 (unregistering): Released all slaves [ 449.629525][ T8621] ip6gretap0 speed is unknown, defaulting to 1000 [ 449.841244][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1124'. [ 451.519987][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'. [ 452.074907][ T8697] device vlan2 entered promiscuous mode [ 452.637758][ T8714] netlink: 892 bytes leftover after parsing attributes in process `syz.2.1142'. [ 452.969682][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 453.116445][ T8724] tap0: tun_chr_ioctl cmd 3223873039 [ 453.302290][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 453.705488][ T8748] IPv6: syztnl0: Disabled Multicast RS [ 453.793905][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1155'. [ 453.808867][ T8756] netlink: 'syz.7.1152': attribute type 1 has an invalid length. [ 453.851775][ T8756] netlink: 'syz.7.1152': attribute type 2 has an invalid length. [ 453.923961][ T8756] netlink: 'syz.7.1152': attribute type 1 has an invalid length. [ 454.028172][ T8764] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 454.037903][ T8764] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 454.770704][ T8772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.094264][ T8804] ------------[ cut here ]------------ [ 456.128657][ T8804] trace type BPF program uses run-time allocation [ 456.128792][ T8804] WARNING: CPU: 1 PID: 8804 at kernel/bpf/verifier.c:11726 check_map_prog_compatibility+0x720/0x8c0 [ 456.128850][ T8804] Modules linked in: [ 456.128895][ T8804] CPU: 1 PID: 8804 Comm: syz.2.1164 Not tainted 5.15.173-syzkaller #0 [ 456.128921][ T8804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 456.128935][ T8804] RIP: 0010:check_map_prog_compatibility+0x720/0x8c0 [ 456.128963][ T8804] Code: ed e9 ec fc ff ff e8 9f c2 ee ff 31 ed e9 e0 fc ff ff e8 93 c2 ee ff c6 05 7c 20 44 0c 01 48 c7 c7 00 38 91 8a e8 50 5e ba ff <0f> 0b e9 4a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4f f9 ff [ 456.128989][ T8804] RSP: 0018:ffffc90003217348 EFLAGS: 00010246 [ 456.129012][ T8804] RAX: 0e493a6c6e730000 RBX: 0000000000000011 RCX: 0000000000040000 [ 456.129030][ T8804] RDX: ffffc90003c2d000 RSI: 000000000000201b RDI: 000000000000201c [ 456.129047][ T8804] RBP: ffff88801eb96028 R08: ffffffff81669a1c R09: ffffed1017224f24 [ 456.129065][ T8804] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90001127038 [ 456.129081][ T8804] R13: ffff88801eb96000 R14: ffff8880519fc000 R15: dffffc0000000000 [ 456.129100][ T8804] FS: 00007fa849fd46c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 456.129121][ T8804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.129138][ T8804] CR2: 00007ffd8050dea8 CR3: 000000006452d000 CR4: 00000000003506e0 [ 456.129158][ T8804] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 456.129174][ T8804] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 456.129189][ T8804] Call Trace: [ 456.129198][ T8804] [ 456.129208][ T8804] ? __warn+0x15b/0x300 [ 456.129236][ T8804] ? check_map_prog_compatibility+0x720/0x8c0 [ 456.129261][ T8804] ? report_bug+0x1b7/0x2e0 [ 456.129294][ T8804] ? handle_bug+0x3d/0x70 [ 456.129318][ T8804] ? exc_invalid_op+0x16/0x40 [ 456.129341][ T8804] ? asm_exc_invalid_op+0x16/0x20 [ 456.129373][ T8804] ? __wake_up_klogd+0xcc/0x100 [ 456.129399][ T8804] ? check_map_prog_compatibility+0x720/0x8c0 [ 456.129427][ T8804] ? check_map_prog_compatibility+0x720/0x8c0 [ 456.129458][ T8804] resolve_pseudo_ldimm64+0x682/0x1240 [ 456.129496][ T8804] ? check_attach_btf_id+0xf20/0xf20 [ 456.129520][ T8804] ? __mark_reg_known+0x1a0/0x1a0 [ 456.129554][ T8804] bpf_check+0x433a/0x12d40 [ 456.129603][ T8804] ? validate_chain+0x112/0x5930 [ 456.129626][ T8804] ? unwind_next_frame+0x1437/0x1fa0 [ 456.129654][ T8804] ? reacquire_held_locks+0x660/0x660 [ 456.129685][ T8804] ? reacquire_held_locks+0x660/0x660 [ 456.129718][ T8804] ? bpf_get_btf_vmlinux+0x10/0x10 [ 456.129741][ T8804] ? mark_lock+0x98/0x340 [ 456.129767][ T8804] ? __lock_acquire+0x1295/0x1ff0 [ 456.129798][ T8804] ? mark_lock+0x98/0x340 [ 456.129823][ T8804] ? __lock_acquire+0x1295/0x1ff0 [ 456.129883][ T8804] ? ktime_get_with_offset+0x101/0x320 [ 456.129910][ T8804] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 456.129938][ T8804] ? print_irqtrace_events+0x210/0x210 [ 456.129969][ T8804] ? ktime_get_with_offset+0x101/0x320 [ 456.129993][ T8804] ? seqcount_lockdep_reader_access+0x153/0x220 [ 456.130019][ T8804] ? lockdep_hardirqs_on+0x94/0x130 [ 456.130047][ T8804] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 456.130072][ T8804] ? ktime_get_real_ts64+0x460/0x460 [ 456.130104][ T8804] ? __might_fault+0xb4/0x110 [ 456.130132][ T8804] ? memset+0x1f/0x40 [ 456.130153][ T8804] ? bpf_obj_name_cpy+0x186/0x1d0 [ 456.130181][ T8804] bpf_prog_load+0x12b3/0x1b60 [ 456.130212][ T8804] ? map_freeze+0x360/0x360 [ 456.130233][ T8804] ? __might_fault+0xb8/0x110 [ 456.130271][ T8804] ? __might_fault+0xb4/0x110 [ 456.130295][ T8804] ? bpf_lsm_bpf+0x5/0x10 [ 456.130328][ T8804] ? security_bpf+0x7d/0xa0 [ 456.130351][ T8804] __sys_bpf+0x343/0x670 [ 456.130396][ T8804] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 456.130435][ T8804] ? syscall_enter_from_user_mode+0x2e/0x240 [ 456.130461][ T8804] ? lockdep_hardirqs_on+0x94/0x130 [ 456.130487][ T8804] __x64_sys_bpf+0x78/0x90 [ 456.130512][ T8804] do_syscall_64+0x3b/0xb0 [ 456.130533][ T8804] ? clear_bhb_loop+0x15/0x70 [ 456.130555][ T8804] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 456.130581][ T8804] RIP: 0033:0x7fa84bb5c719 [ 456.130602][ T8804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.130624][ T8804] RSP: 002b:00007fa849fd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.130651][ T8804] RAX: ffffffffffffffda RBX: 00007fa84bd13f80 RCX: 00007fa84bb5c719 [ 456.130668][ T8804] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 456.130684][ T8804] RBP: 00007fa84bbcf75e R08: 0000000000000000 R09: 0000000000000000 [ 456.130700][ T8804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.130715][ T8804] R13: 0000000000000000 R14: 00007fa84bd13f80 R15: 00007fff21546f08 [ 456.130747][ T8804] [ 456.130768][ T8804] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 456.130780][ T8804] CPU: 1 PID: 8804 Comm: syz.2.1164 Not tainted 5.15.173-syzkaller #0 [ 456.130803][ T8804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 456.130816][ T8804] Call Trace: [ 456.130824][ T8804] [ 456.130832][ T8804] dump_stack_lvl+0x1e3/0x2d0 [ 456.130868][ T8804] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 456.130894][ T8804] ? panic+0x860/0x860 [ 456.130925][ T8804] ? check_map_prog_compatibility+0x700/0x8c0 [ 456.130952][ T8804] ? check_map_prog_compatibility+0x700/0x8c0 [ 456.130977][ T8804] panic+0x318/0x860 [ 456.131005][ T8804] ? __warn+0x16a/0x300 [ 456.131028][ T8804] ? fb_is_primary_device+0xd0/0xd0 [ 456.131067][ T8804] ? check_map_prog_compatibility+0x720/0x8c0 [ 456.131092][ T8804] __warn+0x2b2/0x300 [ 456.131118][ T8804] ? check_map_prog_compatibility+0x720/0x8c0 [ 456.131142][ T8804] report_bug+0x1b7/0x2e0 [ 456.131173][ T8804] handle_bug+0x3d/0x70 [ 456.131196][ T8804] exc_invalid_op+0x16/0x40 [ 456.131220][ T8804] asm_exc_invalid_op+0x16/0x20 [ 456.131243][ T8804] RIP: 0010:check_map_prog_compatibility+0x720/0x8c0 [ 456.131269][ T8804] Code: ed e9 ec fc ff ff e8 9f c2 ee ff 31 ed e9 e0 fc ff ff e8 93 c2 ee ff c6 05 7c 20 44 0c 01 48 c7 c7 00 38 91 8a e8 50 5e ba ff <0f> 0b e9 4a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4f f9 ff [ 456.131287][ T8804] RSP: 0018:ffffc90003217348 EFLAGS: 00010246 [ 456.131307][ T8804] RAX: 0e493a6c6e730000 RBX: 0000000000000011 RCX: 0000000000040000 [ 456.131323][ T8804] RDX: ffffc90003c2d000 RSI: 000000000000201b RDI: 000000000000201c [ 456.131339][ T8804] RBP: ffff88801eb96028 R08: ffffffff81669a1c R09: ffffed1017224f24 [ 456.131356][ T8804] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90001127038 [ 456.131372][ T8804] R13: ffff88801eb96000 R14: ffff8880519fc000 R15: dffffc0000000000 [ 456.131396][ T8804] ? __wake_up_klogd+0xcc/0x100 [ 456.131428][ T8804] ? check_map_prog_compatibility+0x720/0x8c0 [ 456.131457][ T8804] resolve_pseudo_ldimm64+0x682/0x1240 [ 456.131495][ T8804] ? check_attach_btf_id+0xf20/0xf20 [ 456.131520][ T8804] ? __mark_reg_known+0x1a0/0x1a0 [ 456.131553][ T8804] bpf_check+0x433a/0x12d40 [ 456.131600][ T8804] ? validate_chain+0x112/0x5930 [ 456.131622][ T8804] ? unwind_next_frame+0x1437/0x1fa0 [ 456.131648][ T8804] ? reacquire_held_locks+0x660/0x660 [ 456.131678][ T8804] ? reacquire_held_locks+0x660/0x660 [ 456.131711][ T8804] ? bpf_get_btf_vmlinux+0x10/0x10 [ 456.131733][ T8804] ? mark_lock+0x98/0x340 [ 456.131758][ T8804] ? __lock_acquire+0x1295/0x1ff0 [ 456.131788][ T8804] ? mark_lock+0x98/0x340 [ 456.131813][ T8804] ? __lock_acquire+0x1295/0x1ff0 [ 456.131868][ T8804] ? ktime_get_with_offset+0x101/0x320 [ 456.131894][ T8804] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 456.131920][ T8804] ? print_irqtrace_events+0x210/0x210 [ 456.131950][ T8804] ? ktime_get_with_offset+0x101/0x320 [ 456.131972][ T8804] ? seqcount_lockdep_reader_access+0x153/0x220 [ 456.131998][ T8804] ? lockdep_hardirqs_on+0x94/0x130 [ 456.132026][ T8804] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 456.132051][ T8804] ? ktime_get_real_ts64+0x460/0x460 [ 456.132082][ T8804] ? __might_fault+0xb4/0x110 [ 456.132107][ T8804] ? memset+0x1f/0x40 [ 456.132130][ T8804] ? bpf_obj_name_cpy+0x186/0x1d0 [ 456.132159][ T8804] bpf_prog_load+0x12b3/0x1b60 [ 456.132191][ T8804] ? map_freeze+0x360/0x360 [ 456.132212][ T8804] ? __might_fault+0xb8/0x110 [ 456.132252][ T8804] ? __might_fault+0xb4/0x110 [ 456.132278][ T8804] ? bpf_lsm_bpf+0x5/0x10 [ 456.132298][ T8804] ? security_bpf+0x7d/0xa0 [ 456.132325][ T8804] __sys_bpf+0x343/0x670 [ 456.132352][ T8804] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 456.132394][ T8804] ? syscall_enter_from_user_mode+0x2e/0x240 [ 456.132420][ T8804] ? lockdep_hardirqs_on+0x94/0x130 [ 456.132448][ T8804] __x64_sys_bpf+0x78/0x90 [ 456.132475][ T8804] do_syscall_64+0x3b/0xb0 [ 456.132496][ T8804] ? clear_bhb_loop+0x15/0x70 [ 456.132518][ T8804] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 456.132544][ T8804] RIP: 0033:0x7fa84bb5c719 [ 456.132564][ T8804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.132584][ T8804] RSP: 002b:00007fa849fd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.132608][ T8804] RAX: ffffffffffffffda RBX: 00007fa84bd13f80 RCX: 00007fa84bb5c719 [ 456.132625][ T8804] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 456.132640][ T8804] RBP: 00007fa84bbcf75e R08: 0000000000000000 R09: 0000000000000000 [ 456.132656][ T8804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.132670][ T8804] R13: 0000000000000000 R14: 00007fa84bd13f80 R15: 00007fff21546f08 [ 456.132701][ T8804] [ 456.133008][ T8804] Kernel Offset: disabled [ 457.059675][ T8804] Rebooting in 86400 seconds..