last executing test programs: 9.746792402s ago: executing program 3 (id=24): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xc, 0xa}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b00010062726964676500001800"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8040) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.760136762s ago: executing program 3 (id=26): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/95, 0x5f) 7.892579202s ago: executing program 3 (id=27): socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = inotify_init1(0x800) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x3ff) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x0, 0x0, 0x0}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 7.179724889s ago: executing program 0 (id=29): openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5.982501686s ago: executing program 0 (id=30): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="010000"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xed}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88fb}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x9}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x108}}, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 4.771582614s ago: executing program 1 (id=34): epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10}, 0xfc00) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb0603000000000023010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) 4.671698492s ago: executing program 0 (id=35): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/95, 0x5f) 4.242097737s ago: executing program 3 (id=36): socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x8001, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340), &(0x7f0000000600)) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r3 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 3.909506264s ago: executing program 0 (id=37): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffffffd, [{0xa, 0x2, 0x3}]}, @func_proto]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x30, 0x61, 0x30, 0x61]}}, 0x0, 0x48}, 0x28) 3.796809273s ago: executing program 2 (id=38): ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000540)={{}, "9f4f79b37385967d6291bf7fec829c3f3e72b0b5ae305fb403ff7a0914dd8faf157a4b9b3b5c163df451e526361cd0698f50b2e325b964fdb0c0ca11bd67b817f3c9a52590d7bae0d5e1f8f6e6ca6c0bb08f300223b6f630c79d32ba07260220e065c1c603219144b10477f5d666da515aee2e0a4c7712840f0fd3ebd6f7a194c5b4e8cbe1e0e11b5a75beb7dbb498cbd4f82e253258ec50e9f83feec4ebd590340c096394ae52c9c0f80f21b78205127499da4d88150eb8a1b55edd74eb652947813338594bd6a2f08ad4bacda6acc7388bc43389b4720f2cc5c2b95a9081cbcd26abb502467d166d71b07163b10e30e83c822ce0e3d0ee22c46b1a3488af6ea103ab2ea1fa0d02f0b3d48bcefbe272c0f16728e04de34bc02371c54c509bcda73b9917d90e25419d168caa8ce85b668259b4068edc8bd042124e9fa749c7d4ba4bee54c0413ac0f62ce480101bf32ffaff5011da37407e02d2d39bba22d0573b0d266bb71af855bcfebbf82e67c42d8b26560fe572e2400781fe8198f054c4b1af6c0f6f43aa655f000aeb9c605830412e2407c74418003670ec79e7efc992a78e9c58669b06ddd7a8ece0bec68f2ac5224afd1d6e2fb6d4bbbe648ae3b641e02f9ede19a9de294d27f78eebc3d98db3e49c79627336184ca650d767a563698dc59012f198cdad7836ad5b6c5971e6466c803678430001a0e03fe6b0aaa8ae1bdd187586691b0b81632eece79529bc8454e286118264790a7a495618cad719c2e06f59117b234481909097a71abd159f94cd52ae31d179d59c2c2f41944a43af382f4b84d22e8d56985cb33cd538a03662918819532b262ea5c3ef5312fe927e73b3c49770b4a210c151bf1e56620ecaecc3d49b17cffc543707d0d6be16daa8d6c1916cfbb0d692eda8359e685ae414649391c8d4415a252a12c75255774cf9e753b5de8225eee22e67d34454fb7922d791bf0f5cccce7a0962f407c0e66f8f86e84e1fafb2e1ba4cb095ca643411300e3aea562c2ded382012cd868d579f429caf7e5a438f918e0b5e2b8cff713761bbebc36adde9b6a6b824714641eaa6f350cf14e4ca0cc1f9af02f769b6bc1d47f62aa08b9522bcc0e040a2d84cbf713db78d3cd1e8255403de3517fdc59110a58613f90d838a5009434aea2729e68b3c4a49d0982c483feb850e8fe050c5328032650f2e54c15152c1b2913beb43d9a3e291328226561cda033091ea3584bf83e69c93117abc74c581869d0fb9240a4a63039ce2c1586c13e1e294b8312498335cdd506df7cbf2e9e08c4f7e653d152f02b853d3039438860aab22e34584724c4af92dec1e0127c0b5ca21f614ac3787484249da08b289cd3602905bccee7295e595cec001f0ba62b9cd48861f29e6c09c1ea92e00918dee420caf2ddfbd99cd67a377c37344c5017a85461a559219c6fe14515f70bac05e9299e238d66bafc83d4ded821481e17db8138dda1ff79c4ce6d5444a69be6fe3b86e2c65b1da7356da31efaf080172fb54b69cbd602e1fd536990492da310386b79fb643990f2cf7bc81c214992ee8202b6cbe3989ffe11098a7eb794a6043b480ad992665a7c72d8668a3b5e7a060962459495bc24f469ff33fae0e34bf3d0555192eb8cdcfc39e17b5b2ceb43a2d083f1024290375d3d162a862239c85218a4693c825b7067378c18ad2a7fe2ac2dd4af9fe35e2d703e6ff0e919ea1c011e81274e878582276234a1cde60a90406c1d506d94e72a69748577601c970d882a80aee6cb0e1033d4a542ee77e6f5bb7b8010a5e04a52bb781201c82fae86126f4684dc99b16ceb4f057bd23ae2b3f35cac186a0a31f45fb35b18b6d9c35f53c2e2d4ddef10e3127ab86d02c707857f690f685f5babd511c1006588c323e998f7d5a7f429c2e9890dac1f903e27b91d7bbaa29e6f82e3f037cc7d1668c215b27972222d674f5a746d83a3933819b062123f52285e6e6d6e57ebac23a8bda3ba33fcc3b570fedd2f5cdb3ec4d329984c9814f4041579e580b0ee7e84edf16f326b316cef175ee36f5063672d7b7e4edd7e23dd7cfb46890a95609f40df8fd1a04c60edbe433b9a15be983931f0b5a1586926faf84a29d626cda26e6ff9fb81617e8a469bf0a730bd9f326a8e4f89562c262345a6dd1edf6324003a701ea12a7e2c26324eea3891777017a4e09a0fb0f22dcbe8a44dd474d56fd33a0982b60b50c6bcd51e26c9291dbe0cb7f4b6e8df057f5fc76d4fd1af5f1c3ca30fe2d020546399ca5b3d477571e83b47d1bff76039b0903a09a972f485e8eee1258749c3bf069548d61bc64dd0740cab4537a0e03d8dfabaffcf56c92f32dae7f839d3f0ae9d992228837c1592dbfb0a971438c4d37f7f569f9b83e0ca82b67b77e28639c0b81200584da67ca50c88fa9fce70dff135120d5087b74d0468dae22eb211727a15790d7fe355c2fbe30bfaca9f4995db128205737a68300414f2831a253cb971adbac9e68517160018490d8b5b4dae61f57f8c893c27f46dc3b9c88cc807eb6ed08f6fd7f24d8616ef4cbd54e0015d5852cbb6159d07b8cfe770f0cecaa610df83451a7039cffbe70a01a120042306776e171a6a0541229da3357cc49bc470f9862e46827b501584045f1b1af6e88babd4744faaa58002fd83fa0367804619df80357cc3cb066e338b54c12c084b3d106b1f0f53080025f13b8cc375189704a31052d8aa10b26933d7afddaf0fbf5369bdf5e87dc4588dd6933173cdcb0dd1bcb927737062850cee769246a99fab93a58b5aa07feb2196a471799f5361d4334973673f64afe22bba881c7e1a38627384b977a16bde40c41ae79f2fa3884303c9c7e647767257978cef43b76633bd894186a1cedf506aa7d6ee86cdeb8cba701993625ea3e81f8754d13ad733fb06d55992adfc6b2e7b581b878e8d9ce4c1b199c9307a0951272d775810a2f1846c0e7a068e4d549a0ff6c99968719b2b858474f1b4b30b1135fec1c00dc3bc5de1f0972ccbc513a15ab349944edf39cc2156a7c216c329e34707731538da9d674138379b68e9baa84fdbce16c55e53e2039bf3cd303d362c212de3fde3818a6de79c8402e7c0188bc00185707abfc08f3013b6f3785125b549da7611db1333c53b47825ce3311cf3570ae5dd67b7ddf3636a9a4ad430cc4628f21ab12cced7045211b1342e670ecb69016e856004a7fe3911012ddb9024d7e3d39005e23643dc4d1683491e85d30a53221a335abba9ec6d8e3163970a0c85cd1fb46fe9268c6c5cabb52ba0b2e65b2513e03fb35999457d80fac2a01ddfb0e1773b2772491ce67a9cd41bceb3f471813b3269eb2ac82e3dedbc34c064c27bb0001f0296f3cce8d9f779e48e4def3315a3c27b888a8bb43940c1268ca3b7512761a2865193cf3b1979a973882c5021ac06fef415f795338810cb8ca5d9138a9426d5dfb7f56276e87b0a0ae79a42875ebec1297ab81d4edee112a2496a3b68915415e48b95a6a90adbf83b432306b5c8375e6015329379ef0ac7c7d9a6fc23519a964aae93c0192073c5b95a3738dc7c1a3da77491e76e090522141cc887c134ace90e631f04674192cf070649548d65ca76c189bff141be09cfaabc9ee858074198bc89f45b558013199c0406e52e2c71913e0f4c98609f962f2c6b1562c886dfabfcaddd91fbb9023a62640bfc2074fc5eda5715d16ffa4454ba5335264c091e1a7621516e85b78f645df3afc53d2396fea5c072708768e39aec4322260eba6a74fd52bc85929992e37f12e7c232b942f92103ee8880eca332e9fd918d874f136f0f97077c0141f21749ca0a7313816db04e515310f7fb5d7ccebdf2ab8886108eceed2715ff4f760dee676d0b862bdaf854c3b561c80fb2ae0efe6d064dbd3b4c974ab2a9d4b226a620a1944f3bff2fa15ba8f275d3b5244105e6805369fa501821290effdf0a8d0809d4254447d2ca1d63ce239e348af89637683c0e9e57dbdc41d4bd853c993066a2dbd9923f52fd1f006467e7beb02a5dedccd04d0e203722bdfcd650ea7250da4d9379d0cbd9e5650c0155cbcb1cca2005f298e3eff4150241009af22e767d9d7340263f896e23416531cb4ddc03f8e30b580025924cd7f6e7cc5ceecd331e1f3b9f298d4b22aa9a3856fc0203238455839cf2a8b3a9e46a6b7a20d5031dc0cf019de2031eb2817d5a3a6f35b9eefe26d7ae8c862323906057322e3bfaef7541fb0cad25b12c489c175978eb5f40009c9a922ece32f7ce5149f882f07b41b936363b4e9ea254ac2f528eeff621e57da35c09b51ee362d50f59510b695e5ecf3f28903907a228bb8982d9465ddeb02d2f51741f8de5abe8ae990974dca9107333d95a7ee1c6d5a64bf1847837643750f84059c7fce3d9e937cd943481183285d3a81505bcb9285deea74fe44459ffa464e7161b3b0568b2f3c82b15cd0d6ddbd1365f571649aa7ad69c0101eca03846185a12288e46cb06dfdb698d10cdff2d94f7023d2e4203de05f62464cd7e63524a8a4101f2042acea74805f8f7bb055de6c98f99131da008ceb1815b80cf57728b2236c43e1c2cccf79eaba8e4ed39534c2a7763c9a9ba223630c9b2b594ee7a51952d22abe02ba145eed3ef0b74e2238fbf7264517775e0ff65387103ed2e849323c7c8c5edc5b3bbc66a0ae138240cc77d567cd8a051131350bc71f364bbcb8ded2b4bb18dc2a78a76b9ff359d54ce1b96ce7f95b9b0943d725e6b4cdc5bbe82223660bc9f02224d96a43e4cf98add7199d4a8f3fc137b44d0b01a08463c738bca38786fa719408f17b64fb34ee6f7be491c6a630ddf7626b1ebb94a4805f41339625df56e2586ccbb59863e75e09ef8f423a467d133ea174433514bd0e84d0b51c75f4b5e89369c02dc755f3fcf4dafddf421cdcbf98fdab89dc1b404752563e95263791732b249df5c837a073ce4f5cb58764dac4f7e323969e974f8e61c5ea42aad060681b10a029da88fe8b2fdb5f0beaa6dce9ab5e99cead5e22f0947b72cb22b180b6be05c79860d8421aded963115dad7886f331de6259fb4d0265ad47609eca00c30b16a557ee86ce2d9fdb69a9a410cedd65eced3efa54e85adf158adb58cb28d7811de25f55ed69e8591e4cd70c513014b3174dc769a6032773e297b5ee39c56c112d495ec196867056bac2bf3401a986292c3585e042e737c16592258aa400ee67e1f2036c8526acb39cd6db84424cb147188512380ea75d6d8df52bc209841ca6ba7bb88b4797e56cbf52067841873bc67eddbe710df4ee43434c5e92f37368eed47f5ce6adf21d0465bc34078bd2382094e5ae14933a25d553f17f3d6cd18a32f59abb68ab764167b1360e158ef09e497a73e675b26e34afd77f6f2b0be989d31fdef85d290e78cf00136b5c548c8042a91edc516ccdba4291fcd0543f7045566d1b98f1a7cfe2372755be9c3865a3e76f23418248d4b6d3b82d3bd3621288f1c4da2b2fb1a30a92db0db021704287e777706a7093c052328b5bc8646b2d8c50707eed757d2944f3eab8ff83793ed79e4638107df8e14229358c767a4dddd3ffd198d579391733187bd17a1fe54009323e07d8b7394be294d6c03de64e336ed62082c8f708a75534872a40bb01cbbbd1f4c67c590faa5f1d2963d98d72b21b43b8f942baa6fc646927d41205c3d06bca5af33af18a2e515e38fbe2135e6e2ba5ec4a7d12fcf1431464962cc6bb7f0f2ca639cfd025b9fb121dceab03ca77840709a73a3c68af630fadb6"}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001a40)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f00000005c0), &(0x7f00000003c0)=""/79}, 0x20) 3.664110263s ago: executing program 0 (id=39): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) 3.243311078s ago: executing program 2 (id=40): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000000)={0xffffffff, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0x6a98047402e98331, 0x70bd21, 0xffa1}, 0x14}, 0x1, 0x0, 0x0, 0x24000044}, 0x4008800) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) close_range(r4, r4, 0x2) move_mount(r4, 0x0, r4, 0x0, 0x256) r5 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.780318485s ago: executing program 1 (id=41): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) gettid() r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x65) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x6d, 0x0, 0x8000000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000002b40), &(0x7f0000002b80)=0x30) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) sendto$inet(r2, &(0x7f0000000100)="ab", 0x1, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) openat$cgroup(r1, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newlink={0x15c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_VF_PORTS={0x134, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "652a899c5867de9b6e38d929726fe8f8"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1f538a5a71d982bb13b9323bf70b4ada"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff8}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "5932e3e269c3a03561758a975e44a44b"}, @IFLA_PORT_PROFILE={0x7, 0x2, '(&\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, '\'@\x04)*^\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "12ac5041327824499a8f38fe28f7bee7"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ca9fd52b3889dc814767bea955e8ef0f"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7ec594c4793e60c39d72758d9a37c9c6"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xba}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2adc5a4c3b0e4dc5e59035c07e7e8082"}, @IFLA_PORT_PROFILE={0xa, 0x2, '^\\,*{\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7e40a802c6d35f4ec6100dbdff0fdb36"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e6f54d30769d910a0d82beeb9a15d346"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd}]}]}, @IFLA_LINK={0x8}]}, 0x15c}, 0x1, 0x0, 0x0, 0xafb8a1a4416d9a34}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.487520169s ago: executing program 1 (id=42): syz_open_dev$vim2m(0x0, 0x1, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.379897538s ago: executing program 3 (id=43): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x1, 0x0, 0x3ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64030101}, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x1a}, {0xbd1, 0x0, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe4) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) 2.34657058s ago: executing program 2 (id=44): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000640)=""/140, 0x8c}}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x2, 0x40002103, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) writev(r0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 2.266665906s ago: executing program 1 (id=45): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/95, 0x5f) 2.10008134s ago: executing program 2 (id=46): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x576, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) prlimit64(0x0, 0x6, 0x0, 0x0) setreuid(0xee01, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) 1.61393081s ago: executing program 0 (id=47): mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000140)='devpts\x00', 0x208000, 0x0) open$dir(&(0x7f0000000000)='./cgroup/file0\x00', 0x80000, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x16, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0xfffffff9, 0x2, 0x0, 0x20b0, 0xffffffffffffffff, 0x40003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0xa}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x930}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x42) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.523316107s ago: executing program 1 (id=48): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}}, 0x10) 1.308252964s ago: executing program 1 (id=49): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e7000080000409053bcb936faf"], 0x0) 1.185766004s ago: executing program 2 (id=50): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) gettid() r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x65) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x6d, 0x0, 0x8000000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000002b40), &(0x7f0000002b80)=0x30) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) sendto$inet(r2, &(0x7f0000000100)="ab", 0x1, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) openat$cgroup(r1, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newlink={0x15c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_VF_PORTS={0x134, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "652a899c5867de9b6e38d929726fe8f8"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1f538a5a71d982bb13b9323bf70b4ada"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff8}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "5932e3e269c3a03561758a975e44a44b"}, @IFLA_PORT_PROFILE={0x7, 0x2, '(&\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, '\'@\x04)*^\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "12ac5041327824499a8f38fe28f7bee7"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ca9fd52b3889dc814767bea955e8ef0f"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7ec594c4793e60c39d72758d9a37c9c6"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xba}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2adc5a4c3b0e4dc5e59035c07e7e8082"}, @IFLA_PORT_PROFILE={0xa, 0x2, '^\\,*{\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7e40a802c6d35f4ec6100dbdff0fdb36"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e6f54d30769d910a0d82beeb9a15d346"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd}]}]}, @IFLA_LINK={0x8}]}, 0x15c}, 0x1, 0x0, 0x0, 0xafb8a1a4416d9a34}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 956.015573ms ago: executing program 2 (id=51): socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x8001, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340), &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) r2 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=52): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000000)={0xffffffff, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0x6a98047402e98331, 0x70bd21, 0xffa1}, 0x14}, 0x1, 0x0, 0x0, 0x24000044}, 0x4008800) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) close_range(r4, r4, 0x2) move_mount(r4, 0x0, r4, 0x0, 0x256) r5 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.9' (ED25519) to the list of known hosts. [ 81.690212][ T5777] cgroup: Unknown subsys name 'net' [ 81.832667][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.760808][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.546762][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.553921][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.561098][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.572278][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.573313][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.581496][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.590770][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.599793][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.605206][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.612886][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.620353][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.627438][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.643791][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.676625][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.677226][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.684956][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.693958][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.701439][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.714615][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.722094][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.731061][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.734836][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.750873][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.774038][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.256123][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 86.292833][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 86.374114][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 86.557405][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.567211][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.576671][ T5787] bridge_slave_0: entered allmulticast mode [ 86.586414][ T5787] bridge_slave_0: entered promiscuous mode [ 86.597721][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.605154][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.612952][ T5787] bridge_slave_1: entered allmulticast mode [ 86.621593][ T5787] bridge_slave_1: entered promiscuous mode [ 86.629572][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 86.669366][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.679155][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.687848][ T5788] bridge_slave_0: entered allmulticast mode [ 86.696168][ T5788] bridge_slave_0: entered promiscuous mode [ 86.739368][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.748063][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.757295][ T5788] bridge_slave_1: entered allmulticast mode [ 86.766458][ T5788] bridge_slave_1: entered promiscuous mode [ 86.789492][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.809578][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.817756][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.827148][ T5786] bridge_slave_0: entered allmulticast mode [ 86.835596][ T5786] bridge_slave_0: entered promiscuous mode [ 86.861032][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.885752][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.893431][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.902246][ T5786] bridge_slave_1: entered allmulticast mode [ 86.911804][ T5786] bridge_slave_1: entered promiscuous mode [ 86.984825][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.999867][ T5787] team0: Port device team_slave_0 added [ 87.011067][ T5787] team0: Port device team_slave_1 added [ 87.037547][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.098948][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.113155][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.149066][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.156759][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.165133][ T5789] bridge_slave_0: entered allmulticast mode [ 87.172564][ T5789] bridge_slave_0: entered promiscuous mode [ 87.181263][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.189165][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.197574][ T5789] bridge_slave_1: entered allmulticast mode [ 87.205736][ T5789] bridge_slave_1: entered promiscuous mode [ 87.228278][ T5788] team0: Port device team_slave_0 added [ 87.240796][ T5788] team0: Port device team_slave_1 added [ 87.248694][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.256331][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.287703][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.358897][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.366424][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.396071][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.429153][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.444701][ T5786] team0: Port device team_slave_0 added [ 87.452361][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.460112][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.488697][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.511174][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.535077][ T5786] team0: Port device team_slave_1 added [ 87.542335][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.550398][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.581063][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.656111][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.664883][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.694552][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.721405][ T5789] team0: Port device team_slave_0 added [ 87.745019][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.755031][ T5801] Bluetooth: hci3: command tx timeout [ 87.762077][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.793557][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.810988][ T5787] hsr_slave_0: entered promiscuous mode [ 87.819307][ T5787] hsr_slave_1: entered promiscuous mode [ 87.827313][ T5801] Bluetooth: hci0: command tx timeout [ 87.827372][ T5795] Bluetooth: hci1: command tx timeout [ 87.844457][ T5789] team0: Port device team_slave_1 added [ 87.874689][ T5788] hsr_slave_0: entered promiscuous mode [ 87.882941][ T5788] hsr_slave_1: entered promiscuous mode [ 87.890784][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.900422][ T5788] Cannot create hsr debugfs directory [ 87.907953][ T5795] Bluetooth: hci2: command tx timeout [ 87.943746][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.951667][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.981542][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.021393][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.030341][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.060531][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.121585][ T5786] hsr_slave_0: entered promiscuous mode [ 88.129207][ T5786] hsr_slave_1: entered promiscuous mode [ 88.136549][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.145671][ T5786] Cannot create hsr debugfs directory [ 88.231567][ T5789] hsr_slave_0: entered promiscuous mode [ 88.240748][ T5789] hsr_slave_1: entered promiscuous mode [ 88.248747][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.257683][ T5789] Cannot create hsr debugfs directory [ 88.654024][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.673785][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.688397][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.700213][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.772305][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.796477][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.811131][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.823600][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.909986][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.930985][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.944219][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.977044][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.055607][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.068563][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.082383][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.109158][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.240465][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.317590][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.351775][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.360765][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.396742][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.405378][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.422790][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.459764][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.489578][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.499302][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.527339][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.551764][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.586059][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.593354][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.634890][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.652355][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.682426][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.691341][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.709682][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.740168][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.748219][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.767197][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.775039][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.817850][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.825306][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.838920][ T5795] Bluetooth: hci3: command tx timeout [ 89.904816][ T5795] Bluetooth: hci0: command tx timeout [ 89.913637][ T5795] Bluetooth: hci1: command tx timeout [ 89.983647][ T5795] Bluetooth: hci2: command tx timeout [ 90.014630][ T5786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.035162][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.089108][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.268933][ T5787] veth0_vlan: entered promiscuous mode [ 90.323073][ T5787] veth1_vlan: entered promiscuous mode [ 90.448619][ T5787] veth0_macvtap: entered promiscuous mode [ 90.501205][ T5787] veth1_macvtap: entered promiscuous mode [ 90.578990][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.614834][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.633100][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.651941][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.669426][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.680334][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.690658][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.700092][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.725187][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.921409][ T5788] veth0_vlan: entered promiscuous mode [ 90.951335][ T5789] veth0_vlan: entered promiscuous mode [ 90.958470][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.974810][ T5788] veth1_vlan: entered promiscuous mode [ 90.996237][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.005918][ T5786] veth0_vlan: entered promiscuous mode [ 91.033717][ T5789] veth1_vlan: entered promiscuous mode [ 91.067439][ T5786] veth1_vlan: entered promiscuous mode [ 91.100000][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.125909][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.126161][ T5786] veth0_macvtap: entered promiscuous mode [ 91.159878][ T5786] veth1_macvtap: entered promiscuous mode [ 91.213086][ T5789] veth0_macvtap: entered promiscuous mode [ 91.239215][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.258127][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.279899][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.307180][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.320266][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.336765][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.351142][ T5788] veth0_macvtap: entered promiscuous mode [ 91.394547][ T5789] veth1_macvtap: entered promiscuous mode [ 91.406420][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.432415][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.442588][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.455754][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.482161][ T5788] veth1_macvtap: entered promiscuous mode [ 91.545609][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.561253][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.574007][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.601279][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.626953][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.678431][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.692984][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.717042][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.729377][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.740898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.757745][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.770670][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.785086][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.792846][ T5881] Zero length message leads to an empty skb [ 91.813180][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.833447][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.853099][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.866509][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.906939][ T5795] Bluetooth: hci1: Malformed Event: 0x02 [ 91.909577][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.915007][ T5795] Bluetooth: hci3: command tx timeout [ 91.984163][ T5795] Bluetooth: hci1: command tx timeout [ 91.988045][ T5801] Bluetooth: hci0: command tx timeout [ 92.026886][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.056547][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.077297][ T5801] Bluetooth: hci2: command tx timeout [ 92.086998][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.099027][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.110627][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.124114][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.137964][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.175569][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.190012][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.200987][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.216228][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.257231][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.270279][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.282723][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.292973][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.338257][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.378893][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.437734][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.489165][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.734828][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.760902][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.776428][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.845110][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.933552][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.942782][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.101705][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.176914][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.583870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 93.703897][ T5793] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.937553][ T5793] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 93.983962][ T5801] Bluetooth: hci3: command tx timeout [ 93.987538][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.074527][ T5795] Bluetooth: hci1: command tx timeout [ 94.074548][ T5801] Bluetooth: hci0: command tx timeout [ 94.145017][ T5801] Bluetooth: hci2: command tx timeout [ 94.153706][ T5903] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 94.214015][ T5793] usb 4-1: Product: syz [ 94.224232][ T5793] usb 4-1: Manufacturer: syz [ 94.597326][ T5793] usb 4-1: SerialNumber: syz [ 94.759007][ T5793] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 94.827243][ T5906] syz.0.8[5906]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.907699][ T5907] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.980839][ T5906] loop0: detected capacity change from 0 to 1024 [ 95.015472][ T5906] ======================================================= [ 95.015472][ T5906] WARNING: The mand mount option has been deprecated and [ 95.015472][ T5906] and is ignored by this kernel. Remove the mand [ 95.015472][ T5906] option from the mount to silence this warning. [ 95.015472][ T5906] ======================================================= [ 95.420665][ T5906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.526956][ T5906] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.550840][ T5916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6'. [ 95.721929][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.777163][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.983531][ T5907] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 96.014234][ T5907] ath9k_htc: Failed to initialize the device [ 96.047961][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.073477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.084232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 96.144775][ T5907] usb 4-1: ath9k_htc: USB layer deinitialized [ 96.153688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.164781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.413823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.623551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.348444][ T23] usb 4-1: USB disconnect, device number 2 [ 97.584033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.584945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.975572][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.166995][ T969] cfg80211: failed to load regulatory.db [ 98.196727][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 98.210333][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 98.239162][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.254459][ T23] usb 4-1: Product: syz [ 98.262434][ T23] usb 4-1: Manufacturer: syz [ 98.263395][ T5837] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.281816][ T23] usb 4-1: SerialNumber: syz [ 98.307618][ T23] usb 4-1: config 0 descriptor?? [ 98.466902][ T5837] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 98.483419][ T5837] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.501612][ T5837] usb 2-1: config 0 has no interface number 0 [ 98.510004][ T5837] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 98.529416][ T5837] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.562290][ T5837] usb 2-1: config 0 interface 52 has no altsetting 0 [ 98.576128][ T23] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 98.580092][ T5837] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 98.604951][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 98.633565][ T5837] usb 2-1: SerialNumber: syz [ 98.648563][ T5837] usb 2-1: config 0 descriptor?? [ 99.089579][ T5939] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.096962][ T5837] input: USB Synaptics Device 06cb:0003 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input5 [ 99.223733][ T5939] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 99.616708][ T23] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 99.709856][ T23] usb 4-1: USB disconnect, device number 3 [ 99.839257][ T5837] usb 2-1: USB disconnect, device number 2 [ 99.846680][ C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 99.978785][ T5943] loop2: detected capacity change from 0 to 1024 [ 100.055384][ T5943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.087355][ T5943] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.823942][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 100.913794][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 101.467513][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.952793][ T5972] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 104.469907][ T5981] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.740572][ T5990] loop2: detected capacity change from 0 to 1024 [ 105.811022][ T5990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.830337][ T5990] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.013432][ T5907] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 106.235627][ T5907] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 106.244824][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.259007][ T5907] usb 2-1: config 0 has no interface number 0 [ 106.271472][ T5907] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 106.292817][ T5907] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.317571][ T5907] usb 2-1: config 0 interface 52 has no altsetting 0 [ 106.338313][ T5907] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 106.357564][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 106.370359][ T5907] usb 2-1: SerialNumber: syz [ 106.398205][ T5907] usb 2-1: config 0 descriptor?? [ 106.562970][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.651681][ T5907] input: USB Synaptics Device 06cb:0003 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input6 [ 106.851188][ T5907] usb 2-1: USB disconnect, device number 3 [ 106.857567][ C1] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 108.321824][ T6026] loop2: detected capacity change from 0 to 1024 [ 108.397176][ T6026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.545733][ T6026] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.161292][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.393640][ T42] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.633832][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 109.666334][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 109.693358][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 109.737643][ T42] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x3B, skipping [ 109.800563][ T42] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 109.834217][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.858966][ T42] usb 2-1: Product: syz [ 109.884228][ T42] usb 2-1: Manufacturer: syz [ 109.903181][ T42] usb 2-1: SerialNumber: syz [ 109.926635][ T42] usb 2-1: config 0 descriptor?? [ 109.939417][ T6037] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.180496][ T969] usb 2-1: USB disconnect, device number 4 [ 110.890110][ C1] ------------[ cut here ]------------ [ 110.897318][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 110.907744][ C1] Modules linked in: [ 110.911849][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.102-syzkaller #0 [ 110.920178][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.932422][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 110.939289][ C1] Code: 24 4c 89 e7 e8 fe 37 d5 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 89 12 98 f7 0f 0b e9 f6 f7 ff ff e8 7d 12 98 f7 <0f> 0b e9 48 fb ff ff e8 71 12 98 f7 48 c7 c7 c0 00 24 8e 4c 89 e6 [ 110.961578][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 110.968070][ C1] RAX: ffffffff89ed78a3 RBX: ffffffff89ed66a6 RCX: ffff88801b273c00 [ 110.976968][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.985816][ C1] RBP: 0000000000000000 R08: ffff88801b273c00 R09: 0000000000000003 [ 110.995486][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805dbf63c0 [ 111.004499][ C1] R13: dffffc0000000000 R14: ffff88805dbf68b0 R15: ffff8880227ef424 [ 111.013495][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 111.023725][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.031043][ C1] CR2: 0000200000041000 CR3: 000000002fcd9000 CR4: 00000000003506e0 [ 111.041457][ C1] Call Trace: [ 111.045328][ C1] [ 111.048741][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 111.055143][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 111.061117][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 111.068601][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 111.074947][ C1] __iterate_interfaces+0x243/0x500 [ 111.080964][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 111.088535][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 111.098962][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 111.106582][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 111.115536][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 111.122085][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 111.128044][ C1] ? hw_scan_work+0xf40/0xf40 [ 111.132859][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 111.138400][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 111.145046][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 111.151919][ C1] handle_softirqs+0x280/0x820 [ 111.158431][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 111.164068][ C1] ? do_softirq+0x180/0x180 [ 111.168735][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 111.174492][ C1] __irq_exit_rcu+0xc7/0x190 [ 111.179751][ C1] ? irq_exit_rcu+0x20/0x20 [ 111.185056][ C1] irq_exit_rcu+0x9/0x20 [ 111.189510][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 111.195377][ C1] [ 111.198981][ C1] [ 111.203051][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.209833][ C1] RIP: 0010:tick_nohz_idle_exit+0x2df/0x3d0 [ 111.216462][ C1] Code: 0f 85 19 ff ff ff e8 a0 39 0c 00 49 bc 00 00 00 00 00 fc ff df eb 05 e8 8f 39 0c 00 e8 aa 9c 12 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 [ 111.237483][ C1] RSP: 0018:ffffc90000187d60 EFLAGS: 00000286 [ 111.244181][ C1] RAX: 0c3644b8a62b3a00 RBX: ffff8880b8f2c280 RCX: 0c3644b8a62b3a00 [ 111.253521][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0 [ 111.262225][ C1] RBP: ffffc90000187df0 R08: ffffffff8e4a882f R09: 1ffffffff1c95105 [ 111.271080][ C1] R10: dffffc0000000000 R11: fffffbfff1c95106 R12: dffffc0000000000 [ 111.282833][ C1] R13: 1ffff92000030fac R14: 00000019cc8fc460 R15: 0000000000000004 [ 111.312264][ C1] ? tick_nohz_restart_sched_tick+0x200/0x200 [ 111.319447][ C1] ? default_idle_call+0x8f/0xa0 [ 111.325708][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 111.331965][ C1] do_idle+0x49d/0x510 [ 111.336859][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 111.343396][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 111.350782][ C1] cpu_startup_entry+0x43/0x60 [ 111.356109][ C1] start_secondary+0xee/0xf0 [ 111.361598][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 111.368787][ C1] [ 111.372339][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.380225][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.102-syzkaller #0 [ 111.388940][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.400554][ C1] Call Trace: [ 111.404586][ C1] [ 111.407450][ C1] dump_stack_lvl+0x16c/0x230 [ 111.412714][ C1] ? show_regs_print_info+0x20/0x20 [ 111.418604][ C1] ? load_image+0x3b0/0x3b0 [ 111.423813][ C1] panic+0x2c0/0x710 [ 111.428746][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 111.434297][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 111.441886][ C1] __warn+0x2e0/0x470 [ 111.446475][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 111.452950][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 111.459593][ C1] report_bug+0x2be/0x4f0 [ 111.464897][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 111.471431][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 111.478017][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 111.484481][ C1] handle_bug+0xcf/0x120 [ 111.489808][ C1] exc_invalid_op+0x1a/0x50 [ 111.494980][ C1] asm_exc_invalid_op+0x1a/0x20 [ 111.502944][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 111.510367][ C1] Code: 24 4c 89 e7 e8 fe 37 d5 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 89 12 98 f7 0f 0b e9 f6 f7 ff ff e8 7d 12 98 f7 <0f> 0b e9 48 fb ff ff e8 71 12 98 f7 48 c7 c7 c0 00 24 8e 4c 89 e6 [ 111.532177][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 111.539334][ C1] RAX: ffffffff89ed78a3 RBX: ffffffff89ed66a6 RCX: ffff88801b273c00 [ 111.548498][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.557011][ C1] RBP: 0000000000000000 R08: ffff88801b273c00 R09: 0000000000000003 [ 111.567352][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805dbf63c0 [ 111.576582][ C1] R13: dffffc0000000000 R14: ffff88805dbf68b0 R15: ffff8880227ef424 [ 111.586693][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 111.592876][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 111.599400][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 111.605862][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 111.611974][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 111.618318][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 111.626815][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 111.633220][ C1] __iterate_interfaces+0x243/0x500 [ 111.639031][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 111.649173][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 111.657366][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 111.663821][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 111.672351][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 111.677768][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 111.683789][ C1] ? hw_scan_work+0xf40/0xf40 [ 111.689035][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 111.694339][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 111.701343][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 111.706853][ C1] handle_softirqs+0x280/0x820 [ 111.711958][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 111.717798][ C1] ? do_softirq+0x180/0x180 [ 111.722669][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 111.728150][ C1] __irq_exit_rcu+0xc7/0x190 [ 111.733390][ C1] ? irq_exit_rcu+0x20/0x20 [ 111.738864][ C1] irq_exit_rcu+0x9/0x20 [ 111.743404][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 111.750145][ C1] [ 111.753378][ C1] [ 111.756466][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.762881][ C1] RIP: 0010:tick_nohz_idle_exit+0x2df/0x3d0 [ 111.769716][ C1] Code: 0f 85 19 ff ff ff e8 a0 39 0c 00 49 bc 00 00 00 00 00 fc ff df eb 05 e8 8f 39 0c 00 e8 aa 9c 12 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 [ 111.792013][ C1] RSP: 0018:ffffc90000187d60 EFLAGS: 00000286 [ 111.799726][ C1] RAX: 0c3644b8a62b3a00 RBX: ffff8880b8f2c280 RCX: 0c3644b8a62b3a00 [ 111.809377][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0 [ 111.818656][ C1] RBP: ffffc90000187df0 R08: ffffffff8e4a882f R09: 1ffffffff1c95105 [ 111.827208][ C1] R10: dffffc0000000000 R11: fffffbfff1c95106 R12: dffffc0000000000 [ 111.836865][ C1] R13: 1ffff92000030fac R14: 00000019cc8fc460 R15: 0000000000000004 [ 111.846346][ C1] ? tick_nohz_restart_sched_tick+0x200/0x200 [ 111.852883][ C1] ? default_idle_call+0x8f/0xa0 [ 111.858281][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 111.863869][ C1] do_idle+0x49d/0x510 [ 111.868665][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 111.874420][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 111.881273][ C1] cpu_startup_entry+0x43/0x60 [ 111.886683][ C1] start_secondary+0xee/0xf0 [ 111.891567][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 111.898017][ C1] [ 111.901459][ C1] Kernel Offset: disabled [ 111.906962][ C1] Rebooting in 86400 seconds..