last executing test programs: 15.213375547s ago: executing program 4 (id=148): r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, 0x0) 14.159251751s ago: executing program 0 (id=149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 13.803057017s ago: executing program 2 (id=152): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xfffffff7}) 13.750590151s ago: executing program 4 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f0000000040)=0xa0, 0x4) 12.894662842s ago: executing program 4 (id=155): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) mremap(&(0x7f00007f5000/0x4000)=nil, 0x4000, 0xffff00000ad7e000, 0x3, &(0x7f0000ec0000/0x4000)=nil) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4000004) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x280, 0x150, 0x150, 0x280, 0xf8010000, 0x398, 0x238, 0x238, 0x398, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9], 0x0, [], 0x40000, 0x0, 0xa}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @private0, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000340)=[{0x5, 0x7, 0x0, 0x80, @tick=0xed, {0x83, 0x10}, {0x6, 0x9}, @quote={{0x40, 0xa}, 0x9, &(0x7f0000000040)={0x8b, 0x1, 0xfa, 0x9, @tick=0x1, {0x3, 0x6}, {0x3, 0xd}, @control={0x9, 0x85b, 0x101}}}}, {0x32, 0xf8, 0x9, 0x1, @tick=0xfffffff9, {0x1, 0x7e}, {0x5, 0x7}, @control={0x8, 0xf8e1, 0x5}}, {0x3, 0xfc, 0x8, 0x5, @tick=0x1, {0x3, 0xe}, {0x6, 0x5}, @raw32={[0x8, 0x1, 0x3]}}], 0x54) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000200), 0xfffffecc) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 12.560226939s ago: executing program 0 (id=156): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='afs_call_done\x00'}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000d042abd7000000000e9f6172cdd5c440000720000", @ANYRES32=0x0, @ANYBLOB="010000001e0900002400128009000100626f6e640000000014000280050001000500000008000200", @ANYRES32, @ANYBLOB], 0x44}}, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x702, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x802}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xffd, &(0x7f0000000600), 0x106, 0x4}}, 0x20) 11.760125087s ago: executing program 3 (id=157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='mm_collapse_huge_page\x00', r1, 0x0, 0x2}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x2, 0x3, 0xff) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) 10.638224211s ago: executing program 0 (id=158): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000001000000090001007eab7a300000000060000000160a01010000000000000000010000000900020073797a3000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x40000d4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r2 = syz_open_dev$video(&(0x7f00000000c0), 0x17b4b522, 0x80001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES8=r2], 0x0, 0x80000005, 0xcb, &(0x7f0000000400)=""/203, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0xfd9f, {0x2, 0x0, @rand_addr=0x40000000}}, 0x24) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r4, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, 0x0) 10.342870733s ago: executing program 4 (id=159): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000000)='./bus\x00') ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000000000)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f013b142424a2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x7a}], 0x1, 0x4, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x400000000000077, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 9.690119221s ago: executing program 3 (id=161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0xfffffffd, 0x0, 0x3f9, 0x0, 0x34}, 0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000a0a010100000000000000000200000808000640ec0000000800f43f0000003a08000440000000020981020073797a3000000000200011800d0001007379"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback, 0x1}, 0x1c) socket(0x10, 0x3, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x2) 8.437146486s ago: executing program 0 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioperm(0x0, 0x7, 0xffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) 7.762131955s ago: executing program 4 (id=163): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x20000000000000, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x67}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvfrom(0xffffffffffffffff, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1c9b) r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0x2, 0x10040) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x7) 6.303418047s ago: executing program 0 (id=165): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x15, 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}], 0x1, 0x15e, 0xb) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000440), &(0x7f00000004c0), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x9c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x54}, 0x4040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xf6, 0xf0, '\x00', 0x6}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, 0x0) 5.53646775s ago: executing program 3 (id=166): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 5.519367916s ago: executing program 1 (id=167): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079dff9d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 5.518802502s ago: executing program 2 (id=168): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='afs_call_done\x00'}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000d042abd7000000000e9f6172cdd5c440000720000", @ANYRES32=0x0, @ANYBLOB="010000001e0900002400128009000100626f6e640000000014000280050001000500000008000200", @ANYRES32, @ANYBLOB], 0x44}}, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x702, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x802}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xffd, &(0x7f0000000600), 0x106, 0x4}}, 0x20) 4.067176584s ago: executing program 1 (id=169): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0x8000000011d, 0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000080)=@fd={0x0, 0x1, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2e1379f1"}}) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, &(0x7f0000000140)) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000002200)={0x23, 0x0, 0x0, 0x1d}, 0x10) 3.822075219s ago: executing program 4 (id=170): openat$kvm(0xffffffffffffff9c, 0x0, 0x48100, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') 3.790462574s ago: executing program 0 (id=171): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.779478128s ago: executing program 2 (id=172): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 3.623094977s ago: executing program 3 (id=173): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000000)='./bus\x00') ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000000000)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f013b142424a2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x7a}], 0x1, 0x4, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x400000000000077, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.556557527s ago: executing program 1 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.505675818s ago: executing program 2 (id=175): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb", 0x8a}], 0x1}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.286076165s ago: executing program 1 (id=176): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) mremap(&(0x7f00007f5000/0x4000)=nil, 0x4000, 0xffff00000ad7e000, 0x3, &(0x7f0000ec0000/0x4000)=nil) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4000004) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x280, 0x150, 0x150, 0x280, 0xf8010000, 0x398, 0x238, 0x238, 0x398, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9], 0x0, [], 0x40000, 0x0, 0xa}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @private0, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000340)=[{0x5, 0x7, 0x0, 0x80, @tick=0xed, {0x83, 0x10}, {0x6, 0x9}, @quote={{0x40, 0xa}, 0x9, &(0x7f0000000040)={0x8b, 0x1, 0xfa, 0x9, @tick=0x1, {0x3, 0x6}, {0x3, 0xd}, @control={0x9, 0x85b, 0x101}}}}, {0x32, 0xf8, 0x9, 0x1, @tick=0xfffffff9, {0x1, 0x7e}, {0x5, 0x7}, @control={0x8, 0xf8e1, 0x5}}, {0x3, 0xfc, 0x8, 0x5, @tick=0x1, {0x3, 0xe}, {0x6, 0x5}, @raw32={[0x8, 0x1, 0x3]}}], 0x54) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[], 0x50) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200), 0xfffffecc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 1.69396273s ago: executing program 3 (id=177): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(0x0, &(0x7f0000000000)='./file0\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000003080108000000060000000000000000050003006d48703debb044f1300004800800"], 0x5c}}, 0x0) 1.639579026s ago: executing program 2 (id=178): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1}, 0x80, 0x0}, 0x80) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000800)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 1.593370983s ago: executing program 1 (id=179): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 359.259983ms ago: executing program 2 (id=180): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x20000000000000, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x67}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvfrom(0xffffffffffffffff, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1c9b) r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0x2, 0x10040) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x7) 357.782078ms ago: executing program 3 (id=181): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x15, 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}], 0x1, 0x15e, 0xb) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000440), &(0x7f00000004c0), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x9c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x54}, 0x4040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xf6, 0xf0, '\x00', 0x6}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, 0x0) 0s ago: executing program 1 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000000040)=0xa0, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. [ 58.394389][ T5810] cgroup: Unknown subsys name 'net' [ 58.480997][ T5810] cgroup: Unknown subsys name 'cpuset' [ 58.489472][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.871845][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.651527][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.662248][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.671672][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.679975][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.688046][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.698657][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.716797][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.725173][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.732811][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.735989][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.739888][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.755437][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.764905][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.765821][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.774118][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.779326][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.786337][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.794802][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.807749][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.817440][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.822004][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.833144][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.844207][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.847662][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.859022][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.859234][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.866895][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.873865][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.888948][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.896782][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.239541][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 64.341955][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 64.399362][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 64.451981][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 64.501121][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.508503][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.515959][ T5820] bridge_slave_0: entered allmulticast mode [ 64.525141][ T5820] bridge_slave_0: entered promiscuous mode [ 64.549699][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.556867][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.564378][ T5820] bridge_slave_1: entered allmulticast mode [ 64.571110][ T5820] bridge_slave_1: entered promiscuous mode [ 64.623078][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.632401][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 64.664449][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.683865][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.691300][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.700984][ T5829] bridge_slave_0: entered allmulticast mode [ 64.707831][ T5829] bridge_slave_0: entered promiscuous mode [ 64.743358][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.750598][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.758049][ T5829] bridge_slave_1: entered allmulticast mode [ 64.764690][ T5829] bridge_slave_1: entered promiscuous mode [ 64.782235][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.789365][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.796486][ T5832] bridge_slave_0: entered allmulticast mode [ 64.804128][ T5832] bridge_slave_0: entered promiscuous mode [ 64.849171][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.856352][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.864125][ T5832] bridge_slave_1: entered allmulticast mode [ 64.871010][ T5832] bridge_slave_1: entered promiscuous mode [ 64.900026][ T5820] team0: Port device team_slave_0 added [ 64.911119][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.922906][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.941765][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.953354][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.960896][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.968265][ T5828] bridge_slave_0: entered allmulticast mode [ 64.974831][ T5828] bridge_slave_0: entered promiscuous mode [ 64.983182][ T5820] team0: Port device team_slave_1 added [ 65.021276][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.030859][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.038182][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.045353][ T5828] bridge_slave_1: entered allmulticast mode [ 65.052888][ T5828] bridge_slave_1: entered promiscuous mode [ 65.076988][ T5829] team0: Port device team_slave_0 added [ 65.124191][ T5829] team0: Port device team_slave_1 added [ 65.141840][ T5832] team0: Port device team_slave_0 added [ 65.152131][ T5832] team0: Port device team_slave_1 added [ 65.164118][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.171524][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.197999][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.211379][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.218581][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.244835][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.256743][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.264072][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.271459][ T5822] bridge_slave_0: entered allmulticast mode [ 65.278619][ T5822] bridge_slave_0: entered promiscuous mode [ 65.309085][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.323207][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.330673][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.338133][ T5822] bridge_slave_1: entered allmulticast mode [ 65.344702][ T5822] bridge_slave_1: entered promiscuous mode [ 65.365779][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.372892][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.399085][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.411765][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.419142][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.445301][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.459147][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.490957][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.498230][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.524457][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.545405][ T5828] team0: Port device team_slave_0 added [ 65.553301][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.565004][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.574660][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.582019][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.608011][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.645755][ T5820] hsr_slave_0: entered promiscuous mode [ 65.653305][ T5820] hsr_slave_1: entered promiscuous mode [ 65.661813][ T5828] team0: Port device team_slave_1 added [ 65.727138][ T5832] hsr_slave_0: entered promiscuous mode [ 65.734330][ T5832] hsr_slave_1: entered promiscuous mode [ 65.740666][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.748852][ T5832] Cannot create hsr debugfs directory [ 65.754983][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.762206][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.788805][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.801653][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.809108][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.835345][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.849048][ T5822] team0: Port device team_slave_0 added [ 65.891740][ T5822] team0: Port device team_slave_1 added [ 65.899266][ T5841] Bluetooth: hci0: command tx timeout [ 65.899267][ T5837] Bluetooth: hci1: command tx timeout [ 65.915734][ T5829] hsr_slave_0: entered promiscuous mode [ 65.922231][ T5829] hsr_slave_1: entered promiscuous mode [ 65.928419][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.935990][ T5829] Cannot create hsr debugfs directory [ 65.963532][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.970598][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.996705][ T5841] Bluetooth: hci4: command tx timeout [ 65.996777][ T5837] Bluetooth: hci2: command tx timeout [ 66.002595][ T5841] Bluetooth: hci3: command tx timeout [ 66.013901][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.026388][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.033471][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.059595][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.106805][ T5828] hsr_slave_0: entered promiscuous mode [ 66.113151][ T5828] hsr_slave_1: entered promiscuous mode [ 66.119372][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.126951][ T5828] Cannot create hsr debugfs directory [ 66.243856][ T5822] hsr_slave_0: entered promiscuous mode [ 66.251695][ T5822] hsr_slave_1: entered promiscuous mode [ 66.258027][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.265605][ T5822] Cannot create hsr debugfs directory [ 66.406125][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.449152][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.482826][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.512970][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.570146][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.581614][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.604362][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.614945][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.679145][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.688666][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.703409][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.714634][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.797128][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.823355][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.839363][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.852660][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.901324][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.915127][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.936632][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.947989][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.964473][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.040747][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.050683][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.071001][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.078339][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.089086][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.096213][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.181795][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.194754][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.201893][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.237713][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.244842][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.261939][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.283451][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.322337][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.367131][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.379826][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.412014][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.432759][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.439938][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.451884][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.459054][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.519758][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.526903][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.536224][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.543367][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.581096][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.588344][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.623056][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.630346][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.686594][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.760925][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.815701][ T5820] veth0_vlan: entered promiscuous mode [ 67.844547][ T5820] veth1_vlan: entered promiscuous mode [ 67.962488][ T5820] veth0_macvtap: entered promiscuous mode [ 67.978246][ T5830] Bluetooth: hci1: command tx timeout [ 67.983962][ T5841] Bluetooth: hci0: command tx timeout [ 68.001294][ T5832] veth0_vlan: entered promiscuous mode [ 68.013575][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.025499][ T5820] veth1_macvtap: entered promiscuous mode [ 68.049531][ T5832] veth1_vlan: entered promiscuous mode [ 68.057790][ T5830] Bluetooth: hci3: command tx timeout [ 68.063257][ T5830] Bluetooth: hci2: command tx timeout [ 68.070015][ T5841] Bluetooth: hci4: command tx timeout [ 68.117112][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.129855][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.144856][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.163386][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.190172][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.200627][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.214887][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.225306][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.272427][ T5832] veth0_macvtap: entered promiscuous mode [ 68.286178][ T5822] veth0_vlan: entered promiscuous mode [ 68.318550][ T5832] veth1_macvtap: entered promiscuous mode [ 68.365866][ T5822] veth1_vlan: entered promiscuous mode [ 68.379725][ T5829] veth0_vlan: entered promiscuous mode [ 68.417979][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.433008][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.444469][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.466100][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.478108][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.490143][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.516712][ T5829] veth1_vlan: entered promiscuous mode [ 68.551921][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.561799][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.571421][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.580430][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.603006][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.613054][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.641022][ T5822] veth0_macvtap: entered promiscuous mode [ 68.691086][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.702919][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.703265][ T5822] veth1_macvtap: entered promiscuous mode [ 68.724215][ T5828] veth0_vlan: entered promiscuous mode [ 68.747536][ T5828] veth1_vlan: entered promiscuous mode [ 68.761439][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.773129][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.790533][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.801303][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.813310][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.832610][ T5829] veth0_macvtap: entered promiscuous mode [ 68.851131][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.855994][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.866473][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.889182][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.901707][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.913354][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.931801][ T5829] veth1_macvtap: entered promiscuous mode [ 68.958126][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.966882][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.981531][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.991969][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.045907][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.061107][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.077436][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.092725][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.103211][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.122677][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.138555][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.370569][ T5828] veth0_macvtap: entered promiscuous mode [ 69.375533][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.385901][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.391167][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.408055][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.422229][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.432814][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.443819][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.492414][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.513773][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.292327][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.301484][ T5830] Bluetooth: hci1: command tx timeout [ 70.306901][ T5830] Bluetooth: hci0: command tx timeout [ 70.313373][ T5841] Bluetooth: hci2: command tx timeout [ 70.319132][ T5837] Bluetooth: hci4: command tx timeout [ 70.325084][ T5841] Bluetooth: hci3: command tx timeout [ 70.332641][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.352614][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.365339][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.380917][ T5828] veth1_macvtap: entered promiscuous mode [ 70.506935][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.524335][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.572431][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.588369][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.604822][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.624018][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.644344][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.655245][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.671710][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.683950][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.700777][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.790193][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.824343][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.835619][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.856480][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.874135][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.886075][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.901678][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.912888][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.934206][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.993518][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.013942][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.037724][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.067404][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.111840][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.123193][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.406475][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.423706][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.495709][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.532608][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.741404][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.751997][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.312853][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.574098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.617406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.938808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.013250][ T5830] Bluetooth: hci0: command tx timeout [ 73.014163][ T5844] Bluetooth: hci3: command tx timeout [ 73.021142][ T5830] Bluetooth: hci4: command tx timeout [ 73.024122][ T5837] Bluetooth: hci1: command tx timeout [ 73.040320][ T5841] Bluetooth: hci2: command tx timeout [ 73.064548][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.084389][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.127942][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.146498][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.237591][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.271842][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.597544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.618088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.626550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.635418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.700955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.746667][ T5937] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5'. [ 73.803141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.819683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.204903][ T5825] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.418393][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 75.494086][ T5825] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.555565][ T5825] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.923107][ T5825] usb 4-1: config 0 interface 0 has no altsetting 0 [ 76.932578][ T5825] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 76.943350][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.959951][ T5825] usb 4-1: config 0 descriptor?? [ 77.117775][ T5825] usb 4-1: can't set config #0, error -71 [ 77.207126][ T5825] usb 4-1: USB disconnect, device number 2 [ 83.078271][ T25] cfg80211: failed to load regulatory.db [ 86.477383][ T6024] warning: `syz.3.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.426278][ T6060] process 'syz.3.42' launched './file2' with NULL argv: empty string added [ 90.629925][ T6074] netlink: 44 bytes leftover after parsing attributes in process `syz.2.41'. [ 95.287722][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.617384][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 96.250278][ T25] usb 1-1: device descriptor read/all, error -71 [ 96.281510][ T6129] xt_hashlimit: size too large, truncated to 1048576 [ 97.457481][ T5877] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.761564][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 97.975420][ T5877] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 97.991565][ T5877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.018456][ T5877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.124095][ T5877] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.468771][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.559976][ T5877] usb 3-1: Product: syz [ 100.564647][ T5877] usb 3-1: Manufacturer: syz [ 100.646372][ T5877] usb 3-1: SerialNumber: syz [ 100.995155][ T5877] usb 3-1: can't set config #1, error -71 [ 101.020021][ T5877] usb 3-1: USB disconnect, device number 2 [ 103.525876][ T6192] ======================================================= [ 103.525876][ T6192] WARNING: The mand mount option has been deprecated and [ 103.525876][ T6192] and is ignored by this kernel. Remove the mand [ 103.525876][ T6192] option from the mount to silence this warning. [ 103.525876][ T6192] ======================================================= [ 106.561370][ T6221] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 106.866378][ T910] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.911086][ T5905] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.147315][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 107.337294][ T910] usb 2-1: Using ep0 maxpacket: 16 [ 107.488718][ T6238] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.504646][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 107.535807][ T910] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 107.578768][ T910] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.731099][ T910] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.911500][ T910] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.948103][ T910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.956175][ T910] usb 2-1: Product: syz [ 108.156227][ T5905] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 108.172233][ T910] usb 2-1: Manufacturer: syz [ 108.177787][ T910] usb 2-1: SerialNumber: syz [ 109.156214][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.758801][ T910] usb 2-1: 0:2 : does not exist [ 109.769818][ T6253] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.827126][ T910] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 109.867622][ T5905] usb 5-1: Product: syz [ 109.871906][ T5905] usb 5-1: Manufacturer: syz [ 109.876535][ T5905] usb 5-1: SerialNumber: syz [ 109.898765][ T5905] usb 5-1: config 0 descriptor?? [ 109.909685][ T5905] usb 5-1: can't set config #0, error -71 [ 109.928979][ T5905] usb 5-1: USB disconnect, device number 2 [ 110.229017][ T910] usb 2-1: USB disconnect, device number 2 [ 110.255979][ T6263] ip6tnl1: entered promiscuous mode [ 110.261928][ T6263] ip6tnl1: entered allmulticast mode [ 111.198538][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.500028][ T6332] sctp: failed to load transform for md5: -2 [ 116.307530][ T5835] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.560835][ T5835] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 116.609366][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.685795][ T5835] usb 5-1: Product: syz [ 116.720910][ T5835] usb 5-1: Manufacturer: syz [ 116.745526][ T5835] usb 5-1: SerialNumber: syz [ 116.840888][ T5835] usb 5-1: config 0 descriptor?? [ 116.911233][ T5835] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 117.788035][ T6391] netlink: 44 bytes leftover after parsing attributes in process `syz.0.106'. [ 117.803839][ T5835] usb 5-1: USB disconnect, device number 3 [ 118.128292][ T6400] netlink: 156 bytes leftover after parsing attributes in process `syz.3.111'. [ 122.295423][ T6432] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 122.295423][ T6432] z,@qJ#"h/.W1ȱnNC"C׈E)8+' [ 123.592441][ T6443] ip6tnl1: entered promiscuous mode [ 123.597836][ T6443] ip6tnl1: entered allmulticast mode [ 124.589914][ T6447] Device name cannot be null; rc = [-22] [ 126.465988][ T6456] capability: warning: `syz.1.126' uses deprecated v2 capabilities in a way that may be insecure [ 126.677744][ T6461] netlink: 288 bytes leftover after parsing attributes in process `syz.3.128'. [ 127.487160][ T29] audit: type=1800 audit(1737620977.503:2): pid=6465 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.128" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 127.918751][ T6465] capability: warning: `syz.3.128' uses 32-bit capabilities (legacy support in use) [ 128.231260][ T6471] netlink: 156 bytes leftover after parsing attributes in process `syz.2.130'. [ 133.470608][ T5911] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.481501][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.489720][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.649971][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.693448][ T5911] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 133.705752][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.721258][ T5911] usb 3-1: config 0 descriptor?? [ 133.735441][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 134.230288][ T5911] pwc: recv_control_msg error -32 req 02 val 2b00 [ 134.240484][ T5911] pwc: recv_control_msg error -32 req 02 val 2700 [ 134.249901][ T5911] pwc: recv_control_msg error -32 req 02 val 2c00 [ 134.258322][ T5911] pwc: recv_control_msg error -32 req 04 val 1000 [ 134.276072][ T5911] pwc: recv_control_msg error -32 req 04 val 1300 [ 134.284629][ T5911] pwc: recv_control_msg error -32 req 04 val 1400 [ 134.292899][ T5911] pwc: recv_control_msg error -32 req 02 val 2000 [ 134.307928][ T5911] pwc: recv_control_msg error -32 req 02 val 2100 [ 134.315778][ T5911] pwc: recv_control_msg error -32 req 04 val 1500 [ 134.326796][ T5911] pwc: recv_control_msg error -32 req 02 val 2500 [ 134.342483][ T5911] pwc: recv_control_msg error -32 req 02 val 2400 [ 134.356185][ T5911] pwc: recv_control_msg error -32 req 02 val 2600 [ 134.370993][ T5911] pwc: recv_control_msg error -32 req 02 val 2900 [ 134.382587][ T5911] pwc: recv_control_msg error -32 req 02 val 2800 [ 135.478185][ T5911] pwc: Registered as video103. [ 135.486096][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 135.577585][ T5911] usb 3-1: USB disconnect, device number 3 [ 147.790585][ T5914] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 148.368117][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 148.380605][ T5914] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.407706][ T5914] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.422535][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.435263][ T5914] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 148.453290][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.472784][ T5914] usb 1-1: config 0 descriptor?? [ 148.475811][ T6738] syz.2.175 uses obsolete (PF_INET,SOCK_PACKET) [ 149.290179][ T5914] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 149.309037][ T5914] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 150.297661][ T5914] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 150.316076][ T5914] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 150.514914][ T5914] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 150.590653][ T5914] hid-corsair-void 0003:1B1C:1B25.0001: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.0-1/input0 [ 150.659818][ T5914] usb 1-1: USB disconnect, device number 4 [ 150.714344][ T5914] ------------[ cut here ]------------ [ 150.720865][ T5914] ODEBUG: free active (active state 0) object: ffff8880304309a8 object type: timer_list hint: corsair_void_status_work_handler+0x0/0x190 [ 150.735848][ T5911] hid-corsair-void 0003:1B1C:1B25.0001: failed to request battery (reason: -19) [ 151.552959][ T5914] WARNING: CPU: 0 PID: 5914 at lib/debugobjects.c:615 debug_print_object+0x17a/0x1f0 [ 151.562614][ T5914] Modules linked in: [ 151.566560][ T5914] CPU: 0 UID: 0 PID: 5914 Comm: kworker/0:6 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 151.577272][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 151.587464][ T5914] Workqueue: usb_hub_wq hub_event [ 151.592532][ T5914] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 151.598493][ T5914] Code: e8 db 5c 3d fd 4c 8b 0b 48 c7 c7 80 4b 5f 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 5b 15 9a fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 58 4e 54 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 151.618176][ T5914] RSP: 0018:ffffc9000428eeb8 EFLAGS: 00010286 [ 151.624243][ T5914] RAX: 51e113415855c300 RBX: ffffffff8c0ca540 RCX: 0000000000100000 [ 151.632690][ T5914] RDX: ffffc9001a97a000 RSI: 000000000000b226 RDI: 000000000000b227 [ 151.641113][ T5914] RBP: ffffffff8c5f4d00 R08: ffffffff81603052 R09: fffffbfff1cfa638 [ 151.649144][ T5914] R10: dffffc0000000000 R11: fffffbfff1cfa638 R12: 0000000000000000 [ 151.657109][ T5914] R13: ffffffff8c5f4c18 R14: dffffc0000000000 R15: ffff8880304309a8 [ 151.665273][ T5914] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 151.674253][ T5914] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.680863][ T5914] CR2: 00007f314bb762d8 CR3: 000000000e738000 CR4: 00000000003526f0 [ 151.688884][ T5914] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.696847][ T5914] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.704874][ T5914] Call Trace: [ 151.708225][ T5914] [ 151.711151][ T5914] ? __warn+0x165/0x4d0 [ 151.715299][ T5914] ? debug_print_object+0x17a/0x1f0 [ 151.720658][ T5914] ? report_bug+0x2b3/0x500 [ 151.725167][ T5914] ? debug_print_object+0x17a/0x1f0 [ 151.731111][ T5914] ? handle_bug+0x60/0x90 [ 151.737010][ T5914] ? exc_invalid_op+0x1a/0x50 [ 151.741871][ T5914] ? asm_exc_invalid_op+0x1a/0x20 [ 151.746935][ T5914] ? __warn_printk+0x292/0x360 [ 151.751914][ T5914] ? debug_print_object+0x17a/0x1f0 [ 151.757229][ T5914] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 151.764038][ T5914] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 151.770927][ T5914] debug_check_no_obj_freed+0x45b/0x580 [ 151.776527][ T5914] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 151.782731][ T5914] ? kasan_quarantine_put+0xdc/0x230 [ 151.788130][ T5914] ? devres_release_group+0x328/0x350 [ 151.793546][ T5914] ? devres_release_group+0x328/0x350 [ 151.799032][ T5914] kfree+0x115/0x430 [ 151.802977][ T5914] devres_release_group+0x328/0x350 [ 151.808262][ T5914] ? __pfx_devres_release_group+0x10/0x10 [ 151.814067][ T5914] ? __pfx_corsair_void_remove+0x10/0x10 [ 151.819876][ T5914] ? kernfs_put+0x315/0x370 [ 151.824432][ T5914] ? sysfs_remove_group+0x242/0x2c0 [ 151.829728][ T5914] ? __pfx_corsair_void_remove+0x10/0x10 [ 151.836129][ T5914] hid_device_remove+0x250/0x370 [ 151.842481][ T5914] ? __pfx_hid_device_remove+0x10/0x10 [ 151.848058][ T5914] device_release_driver_internal+0x4a9/0x7c0 [ 151.854188][ T5914] bus_remove_device+0x34f/0x420 [ 151.859275][ T5914] device_del+0x57a/0x9b0 [ 151.863663][ T5914] ? __pfx_device_del+0x10/0x10 [ 151.868637][ T5914] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.875017][ T5914] hid_destroy_device+0x6a/0x1b0 [ 151.880075][ T5914] usbhid_disconnect+0x9e/0xc0 [ 151.884869][ T5914] usb_unbind_interface+0x25b/0x940 [ 151.890191][ T5914] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 151.895946][ T5914] ? __pfx_usb_unbind_interface+0x10/0x10 [ 151.901864][ T5914] device_release_driver_internal+0x503/0x7c0 [ 151.908075][ T5914] bus_remove_device+0x34f/0x420 [ 151.913057][ T5914] device_del+0x57a/0x9b0 [ 151.917475][ T5914] ? kobject_put+0x272/0x480 [ 151.922096][ T5914] ? __pfx_device_del+0x10/0x10 [ 151.926977][ T5914] ? kobject_put+0x44d/0x480 [ 151.931719][ T5914] usb_disable_device+0x3bf/0x850 [ 151.937515][ T5914] usb_disconnect+0x340/0x950 [ 151.942251][ T5914] hub_event+0x1ebc/0x5150 [ 151.946720][ T5914] ? debug_object_deactivate+0x2d5/0x390 [ 151.953151][ T5914] ? do_raw_spin_unlock+0x13c/0x8b0 [ 151.958547][ T5914] ? __pfx_hub_event+0x10/0x10 [ 151.963359][ T5914] ? __pfx_lock_acquire+0x10/0x10 [ 151.968498][ T5914] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 151.974511][ T5914] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.980962][ T5914] ? process_scheduled_works+0x976/0x1840 [ 151.986710][ T5914] process_scheduled_works+0xa66/0x1840 [ 151.992915][ T5914] ? __pfx_process_scheduled_works+0x10/0x10 [ 151.999038][ T5914] ? assign_work+0x364/0x3d0 [ 152.003671][ T5914] worker_thread+0x870/0xd30 [ 152.008356][ T5914] ? __kthread_parkme+0x169/0x1d0 [ 152.013405][ T5914] ? __pfx_worker_thread+0x10/0x10 [ 152.018651][ T5914] kthread+0x7a9/0x920 [ 152.022752][ T5914] ? __pfx_kthread+0x10/0x10 [ 152.027419][ T5914] ? __pfx_worker_thread+0x10/0x10 [ 152.032529][ T5914] ? __pfx_kthread+0x10/0x10 [ 152.037587][ T5914] ? __pfx_kthread+0x10/0x10 [ 152.042183][ T5914] ? __pfx_kthread+0x10/0x10 [ 152.046766][ T5914] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.052509][ T5914] ? lockdep_hardirqs_on+0x99/0x150 [ 152.057799][ T5914] ? __pfx_kthread+0x10/0x10 [ 152.062458][ T5914] ret_from_fork+0x4b/0x80 [ 152.066898][ T5914] ? __pfx_kthread+0x10/0x10 [ 152.071575][ T5914] ret_from_fork_asm+0x1a/0x30 [ 152.076382][ T5914] [ 152.079495][ T5914] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 152.086776][ T5914] CPU: 0 UID: 0 PID: 5914 Comm: kworker/0:6 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 152.097180][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 152.107252][ T5914] Workqueue: usb_hub_wq hub_event [ 152.112282][ T5914] Call Trace: [ 152.115563][ T5914] [ 152.118489][ T5914] dump_stack_lvl+0x241/0x360 [ 152.123166][ T5914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.128365][ T5914] ? __pfx__printk+0x10/0x10 [ 152.132958][ T5914] ? vscnprintf+0x5d/0x90 [ 152.137298][ T5914] panic+0x349/0x880 [ 152.141223][ T5914] ? __warn+0x174/0x4d0 [ 152.145396][ T5914] ? __pfx_panic+0x10/0x10 [ 152.149813][ T5914] ? ret_from_fork_asm+0x1a/0x30 [ 152.154749][ T5914] __warn+0x344/0x4d0 [ 152.158736][ T5914] ? debug_print_object+0x17a/0x1f0 [ 152.163959][ T5914] report_bug+0x2b3/0x500 [ 152.168313][ T5914] ? debug_print_object+0x17a/0x1f0 [ 152.173529][ T5914] handle_bug+0x60/0x90 [ 152.177692][ T5914] exc_invalid_op+0x1a/0x50 [ 152.182189][ T5914] asm_exc_invalid_op+0x1a/0x20 [ 152.187041][ T5914] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 152.192877][ T5914] Code: e8 db 5c 3d fd 4c 8b 0b 48 c7 c7 80 4b 5f 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 5b 15 9a fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 58 4e 54 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 152.212487][ T5914] RSP: 0018:ffffc9000428eeb8 EFLAGS: 00010286 [ 152.218563][ T5914] RAX: 51e113415855c300 RBX: ffffffff8c0ca540 RCX: 0000000000100000 [ 152.226530][ T5914] RDX: ffffc9001a97a000 RSI: 000000000000b226 RDI: 000000000000b227 [ 152.234496][ T5914] RBP: ffffffff8c5f4d00 R08: ffffffff81603052 R09: fffffbfff1cfa638 [ 152.242486][ T5914] R10: dffffc0000000000 R11: fffffbfff1cfa638 R12: 0000000000000000 [ 152.250470][ T5914] R13: ffffffff8c5f4c18 R14: dffffc0000000000 R15: ffff8880304309a8 [ 152.258455][ T5914] ? __warn_printk+0x292/0x360 [ 152.263236][ T5914] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 152.270028][ T5914] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 152.276805][ T5914] debug_check_no_obj_freed+0x45b/0x580 [ 152.282360][ T5914] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 152.288436][ T5914] ? kasan_quarantine_put+0xdc/0x230 [ 152.293731][ T5914] ? devres_release_group+0x328/0x350 [ 152.299098][ T5914] ? devres_release_group+0x328/0x350 [ 152.304473][ T5914] kfree+0x115/0x430 [ 152.308395][ T5914] devres_release_group+0x328/0x350 [ 152.313615][ T5914] ? __pfx_devres_release_group+0x10/0x10 [ 152.319344][ T5914] ? __pfx_corsair_void_remove+0x10/0x10 [ 152.324978][ T5914] ? kernfs_put+0x315/0x370 [ 152.329486][ T5914] ? sysfs_remove_group+0x242/0x2c0 [ 152.334693][ T5914] ? __pfx_corsair_void_remove+0x10/0x10 [ 152.340325][ T5914] hid_device_remove+0x250/0x370 [ 152.345274][ T5914] ? __pfx_hid_device_remove+0x10/0x10 [ 152.350740][ T5914] device_release_driver_internal+0x4a9/0x7c0 [ 152.356822][ T5914] bus_remove_device+0x34f/0x420 [ 152.361766][ T5914] device_del+0x57a/0x9b0 [ 152.366102][ T5914] ? __pfx_device_del+0x10/0x10 [ 152.370954][ T5914] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.377288][ T5914] hid_destroy_device+0x6a/0x1b0 [ 152.382233][ T5914] usbhid_disconnect+0x9e/0xc0 [ 152.386999][ T5914] usb_unbind_interface+0x25b/0x940 [ 152.392208][ T5914] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 152.397934][ T5914] ? __pfx_usb_unbind_interface+0x10/0x10 [ 152.403652][ T5914] device_release_driver_internal+0x503/0x7c0 [ 152.409733][ T5914] bus_remove_device+0x34f/0x420 [ 152.414678][ T5914] device_del+0x57a/0x9b0 [ 152.419013][ T5914] ? kobject_put+0x272/0x480 [ 152.423601][ T5914] ? __pfx_device_del+0x10/0x10 [ 152.428459][ T5914] ? kobject_put+0x44d/0x480 [ 152.433051][ T5914] usb_disable_device+0x3bf/0x850 [ 152.438079][ T5914] usb_disconnect+0x340/0x950 [ 152.442769][ T5914] hub_event+0x1ebc/0x5150 [ 152.447203][ T5914] ? debug_object_deactivate+0x2d5/0x390 [ 152.452860][ T5914] ? do_raw_spin_unlock+0x13c/0x8b0 [ 152.458068][ T5914] ? __pfx_hub_event+0x10/0x10 [ 152.462832][ T5914] ? __pfx_lock_acquire+0x10/0x10 [ 152.467860][ T5914] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 152.473841][ T5914] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.480177][ T5914] ? process_scheduled_works+0x976/0x1840 [ 152.485895][ T5914] process_scheduled_works+0xa66/0x1840 [ 152.491467][ T5914] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.497454][ T5914] ? assign_work+0x364/0x3d0 [ 152.502048][ T5914] worker_thread+0x870/0xd30 [ 152.506647][ T5914] ? __kthread_parkme+0x169/0x1d0 [ 152.511676][ T5914] ? __pfx_worker_thread+0x10/0x10 [ 152.516784][ T5914] kthread+0x7a9/0x920 [ 152.520854][ T5914] ? __pfx_kthread+0x10/0x10 [ 152.525443][ T5914] ? __pfx_worker_thread+0x10/0x10 [ 152.530555][ T5914] ? __pfx_kthread+0x10/0x10 [ 152.535141][ T5914] ? __pfx_kthread+0x10/0x10 [ 152.539731][ T5914] ? __pfx_kthread+0x10/0x10 [ 152.544319][ T5914] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.549523][ T5914] ? lockdep_hardirqs_on+0x99/0x150 [ 152.554718][ T5914] ? __pfx_kthread+0x10/0x10 [ 152.559314][ T5914] ret_from_fork+0x4b/0x80 [ 152.563729][ T5914] ? __pfx_kthread+0x10/0x10 [ 152.568319][ T5914] ret_from_fork_asm+0x1a/0x30 [ 152.573100][ T5914] [ 152.576257][ T5914] Kernel Offset: disabled [ 152.580627][ T5914] Rebooting in 86400 seconds..