last executing test programs: 45.593841949s ago: executing program 2 (id=10): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r1 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2, 0x0, 0x4]}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) (async) sendfile(r0, r0, &(0x7f0000000080), 0x4d9b6eaf) (async) r2 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) ioctl$FITHAW(r2, 0xc0045878) 44.426473501s ago: executing program 2 (id=16): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x6020480) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) pwrite64(r0, &(0x7f0000000880)='u', 0xf7d, 0x83) connect$unix(r0, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0xe00097e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000380)="a555770aa565", 0x6}, {0x0}], 0x2}, 0x24004170) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000300), 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) readlinkat(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=""/77, 0x4d) syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 43.771796377s ago: executing program 4 (id=20): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) preadv(r5, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/12, 0xc}], 0x1, 0x7ff, 0x4f) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r7, 0x7}}, 0x48) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x45, 0x400100) fcntl$dupfd(r8, 0x0, r8) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x6, 0x7f, @buffer={0x2, 0x58, &(0x7f0000000240)=""/88}, &(0x7f0000000380)="e31ffffff200", 0x0, 0x0, 0x0, 0x1, 0x0}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6400000002060500000000aba3eebac288d7197ac090954b5469c5000000000000000007000000140007800800060000000007080013400000000505000500020000000900020073797a30000000001600030068617368"], 0x64}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) 42.931821926s ago: executing program 2 (id=27): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100194deaa404c05c1063e67010203010902240001000000070904"], 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x21e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xdd, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x10, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0xdc8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x8, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x2, 0x2, 0x8, 0x8, 0x3}, 0x49, &(0x7f00000000c0)={0x5, 0xf, 0x49, 0x1, [@generic={0x44, 0x10, 0x1, "3a6f27feeb810799fb63139333e7d1cd41f25f241a8115058b552a88a9719220802623c86465888704032f02ed133820e4434bbe180c644f23c2e78f72bcf28fc1"}]}, 0x4, [{0xb3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/468]}, {0xd3, &(0x7f0000000200)=@string={0xd3, 0x3, "7b4b67fb9f6f1381cc2ba6067f197297d3a0d982244517d5776e3db581e30269fe1484bbf68038b33d25c73658118277d66468f6e4c19b98fdfdb8521d765b6eeff6afac167cc30ca3bc4b29b03fec99ba269f39a222ee5b242c69bb38d56711d953a5b474accead03b462a8f49cb1952f5baf0796ff821b57c496d7511c03b36afdd60aa1e58c56902eb90c0087a32f87eb6a40031bece903cbbcfc60e630e5c8fe6485896406b6ecf052864ab3ff89b46854b658f60abcbe3c440aac2c673775b75ad28cc399c336cbfcd1cd15b5d6e4"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1004}}]}) 41.659357983s ago: executing program 1 (id=35): r0 = socket(0x11, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) (async, rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0xfffffffffffffffd) (async) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) splice(r6, 0x0, r9, 0x0, 0x39000, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) timer_settime(r10, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) splice(r8, 0x0, r7, 0x0, 0x408cd, 0x0) (async) write$binfmt_elf64(r7, &(0x7f0000000100)=ANY=[], 0xfffffe3e) (async) write$sequencer(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8101fc00f31700008108"], 0x10) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) (async, rerun: 32) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="02011400012918000e3590009f0001ff0000f7840600ac140430e0000003808a8972bd0b"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) (rerun: 32) 41.541808757s ago: executing program 1 (id=37): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffd, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1555a351d204", 0x0, 0xff, 0x10002, 0xfffffffd, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) unshare(0x40600) r1 = syz_open_dev$sndpcmc(&(0x7f0000000c00), 0x0, 0x2000) ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000140)=0x10000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x63, 0x1, {0x0, '\x00', 0xfffffff5, 0x6, 0x100, 0x2}}}}]}, 0x48}}, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="60102800ec54c3307d99a8b01582985a000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 40.328730807s ago: executing program 4 (id=41): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa0081, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x40, &(0x7f0000000240)={0x0, 0x5, 0xfffc, 0x6}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000120019"], 0x28}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x8, 0x0, {0x0}, {}, 0x2, 0x29}) syz_open_procfs(r2, &(0x7f0000000100)='attr/fscreate\x00') 39.485561949s ago: executing program 2 (id=42): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="fc", 0x1}], 0x1, &(0x7f0000001400)=[@ip_tos_int={{0x14, 0x12, 0x1, 0x8}}], 0x18}}], 0x1, 0x2404c0c0) 39.328970081s ago: executing program 4 (id=43): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) futex_waitv(&(0x7f0000000ec0)=[{0x3, 0x0, 0x82}, {0x3, 0x0, 0x104}, {0x5, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x800, 0x0, 0x82}, {0x80000001, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x10000, 0x0, 0x82}, {0x7, 0x0, 0x2}, {0xfffffffffffff801, 0x0, 0x2}, {0xffffffffffffffc0, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x81, 0x0, 0x2}, {0x7f, 0x0, 0x82}, {0xb3, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x1000, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x7ff, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x8, 0x0, 0x80}, {0x0, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x8452, 0x0, 0x82}, {0xe6c, 0x0, 0x82}, {0x8000000000000001, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x453f, 0x0, 0x2}, {0x400, 0x0, 0x82}, {0xfffffffffffffc00, 0x0, 0x82}, {0x8000000000000001, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0xe12c, 0x0, 0x2}, {0x8000, 0x0, 0x2}, {0xfffffffffffffff8, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0xa10, 0x0, 0x82}, {0x100, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x7985, 0x0, 0x2}, {0x2, 0x0, 0x82}], 0x36, 0x0, &(0x7f0000001440)={0x77359400}, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c000000000000041000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000040000000000000000000000000400000000000000000000000000000a0010000100000000000000"], 0xc4}}, 0x4c050) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000ea0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000001000000000044000500000000000000000000000000000000007eb2000033000000000000001840ffffffff0000000000000000000000000000000001"], 0xfc}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r6 = accept4(r2, &(0x7f00000002c0)=@pptp, &(0x7f0000000340)=0x80, 0x764527e0c8cf1b8) sendmmsg$unix(r6, &(0x7f00000bd000), 0x0, 0x14) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 39.221690275s ago: executing program 2 (id=44): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000780)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x82800) fcntl$setstatus(r1, 0x4, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb5, 0xb3, 0xa, 0x40, 0xc45, 0x60a8, 0xb555, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0xd1, 0x84}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x8000000, 0x5, 0x6, 0x100, 0x0, [{0x8, 0xb, 0xb, '\x00', 0x9}, {0x1, 0x1, 0x1, '\x00', 0x7}, {0x8, 0x4, 0x0, '\x00', 0x10}, {0x6, 0x1, 0x9, '\x00', 0x9}, {0x5, 0x5, 0x2, '\x00', 0xb6}, {0x3e, 0x2c, 0x6, '\x00', 0x1}, {0x1, 0x9, 0xc, '\x00', 0x77}, {0x74, 0x80, 0x4, '\x00', 0xe}, {0xfc, 0xb, 0x40}, {0x3, 0x0, 0x4, '\x00', 0x7}, {0x7, 0xa, 0x5, '\x00', 0x3}, {0x5, 0x6, 0x8, '\x00', 0x40}, {0x2, 0xd, 0x7, '\x00', 0x40}, {0x7, 0x7, 0x5, '\x00', 0x2}, {0xfe, 0xd0, 0xfa, '\x00', 0x2}, {0x2, 0x9, 0x3, '\x00', 0x5}, {0xa, 0xf, 0x7, '\x00', 0x4}, {0xe, 0x1, 0x67}, {0x7, 0x3, 0x6, '\x00', 0x4}, {0x8, 0xff, 0x4, '\x00', 0xd1}, {0x2, 0x7, 0x1, '\x00', 0x5}, {0x4, 0x1, 0x5, '\x00', 0xe5}, {0x5, 0x1, 0x8, '\x00', 0x1}, {0x3, 0xf7, 0x9, '\x00', 0x6b}]}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000540)={0x2f276950bd2d0cf2, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000740)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000700)=0x4}) fgetxattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'trusted.', '{$,,}+\x00'}, 0x0, 0x0) fsopen(&(0x7f0000000280)='erofs\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_trace', 0x10000, 0xb0) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 39.217156287s ago: executing program 1 (id=45): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x69) close(r0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000080)="ac", 0xfffd, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0xffffffff, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?'}, 0x5, 0x5}}}, 0x90) r4 = inotify_init1(0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x3c, r6, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x6, 0x401, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044800}, 0x8090) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe"], 0xd8}}, 0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 39.059030638s ago: executing program 1 (id=47): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000780)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x82800) fcntl$setstatus(r1, 0x4, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb5, 0xb3, 0xa, 0x40, 0xc45, 0x60a8, 0xb555, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0xd1, 0x84}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x8000000, 0x5, 0x6, 0x100, 0x0, [{0x8, 0xb, 0xb, '\x00', 0x9}, {0x1, 0x1, 0x1, '\x00', 0x7}, {0x8, 0x4, 0x0, '\x00', 0x10}, {0x6, 0x1, 0x9, '\x00', 0x9}, {0x5, 0x5, 0x2, '\x00', 0xb6}, {0x3e, 0x2c, 0x6, '\x00', 0x1}, {0x1, 0x9, 0xc, '\x00', 0x77}, {0x74, 0x80, 0x4, '\x00', 0xe}, {0xfc, 0xb, 0x40}, {0x3, 0x0, 0x4, '\x00', 0x7}, {0x7, 0xa, 0x5, '\x00', 0x3}, {0x5, 0x6, 0x8, '\x00', 0x40}, {0x2, 0xd, 0x7, '\x00', 0x40}, {0x7, 0x7, 0x5, '\x00', 0x2}, {0xfe, 0xd0, 0xfa, '\x00', 0x2}, {0x2, 0x9, 0x3, '\x00', 0x5}, {0xa, 0xf, 0x7, '\x00', 0x4}, {0xe, 0x1, 0x67}, {0x7, 0x3, 0x6, '\x00', 0x4}, {0x8, 0xff, 0x4, '\x00', 0xd1}, {0x2, 0x7, 0x1, '\x00', 0x5}, {0x4, 0x1, 0x5, '\x00', 0xe5}, {0x5, 0x1, 0x8, '\x00', 0x1}, {0x3, 0xf7, 0x9, '\x00', 0x6b}]}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000540)={0x2f276950bd2d0cf2, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000740)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000700)=0x4}) fgetxattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'trusted.', '{$,,}+\x00'}, 0x0, 0x0) fsopen(&(0x7f0000000280)='erofs\x00', 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_trace', 0x10000, 0xb0) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000000680)={0xb6, 0x0, 0x9}) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 38.91121585s ago: executing program 0 (id=49): syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x24, 0xa1, 0x71, 0x8, 0x5ac, 0x921d, 0xd3ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa6, 0x1, 0x2, 0x3, 0xe9, 0x0, 0x3, [], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0x8}}]}}]}}]}}, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) (rerun: 32) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x31) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='scalable', 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xff}, 0x0, 0x1}}]}}]}, 0x58}}, 0x40) (async) sendmmsg$inet(r1, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)="ce2a6a", 0x3}], 0x1}}], 0x1, 0xc0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)={r0}) (async, rerun: 32) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0xfffffff5, 0x0, 0x0) (async, rerun: 32) r4 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r5 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64) r6 = socket(0x2, 0x80805, 0x0) (async, rerun: 64) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) (async) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) (rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0x8, 0x200}}, 0x44) syz_usb_connect(0x3, 0x64, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003834a6b2099040d10a2840102030109025200010c2440070904b800018c8c02010a24010400000201020924030203030201a60d2408010700b4220bfadc18750824080600030924030605030303070905032b3b"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 38.81981412s ago: executing program 0 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x1) r1 = inotify_init() r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x4000140) inotify_add_watch(r1, &(0x7f0000000000)='./file0/file0\x00', 0x80000720) 38.713532171s ago: executing program 0 (id=51): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000013c0)={0x34, &(0x7f00000011c0), &(0x7f0000001200)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001240)={0x0, 0x8, 0x1, 0xec}, &(0x7f0000001280)={0x20, 0x0, 0xb0, {0xae, "39d3e5593c88f1073d0b0d9e7b50bd90bd90ed1dc8c1700196810d4b6f345be14a63b89506e2fd79a5d820c9d5ffb8ce38d22ed70e41a78c10e0f4f2bcfad192a81a0cac43d68b3ade1682b06e5268416791f789ae6f5a231e0cb5f3ce5798993873a93b920054893d216deb3be6105c177be5a53f94ced6961959cffb91e20065c4432ffff20c124907614dcf67ae358216531094842bcc9ee389f64649c6490a17220c1cd2e643f1d9c1b2af30"}}, &(0x7f0000001340)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000001380)={0x20, 0x0, 0x1, 0x5}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket(0x11, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r4}, &(0x7f0000000480), &(0x7f00000004c0)='%pB \x00'}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r6}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r7 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x5) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES8=r1, @ANYRES64=r5], 0x38}, 0x1, 0x0, 0x0, 0x44814}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r9 = syz_io_uring_setup(0x10f, &(0x7f0000000200)={0x0, 0x46ee, 0x400, 0xffffdffd, 0x136}, &(0x7f0000000140)=0x0, &(0x7f0000001080)=0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=ANY=[@ANYBLOB="00fb6d0840697f1f6f920c6cf0d9e96915094d0a0bb98a7ab168c04b8d86f3f5225c6546ee5631fff65c5113430d068353efde6f0af00c655cf246195835380fe6c34b19ea42f4da57abd8ae8880870dffc7e5dc5fd5babffde1dbc4ad1955f3aacf4f77c6af5e6f3c493de7455ea14a071f5b07e3dbc0c44b1c86d81de1abafe8ce7542182bc041b67002a7ce040077cd62c1d86fd0c4ea0b105df4519443839aaef0291626b381238f8b78edb6c03edc126a9565aeb43ab50bb5016c7837e5a58d3a3b80715d60b80d2d9761dc993bff7104c8148ea04576a3a35fbad31b8c313c7f677691445c969836d1e0"], 0xed, 0x7) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000680)={0x2, @pix={0xa42e, 0x4, 0x4c47504a, 0x0, 0x2, 0x4, 0x4, 0xffffff66, 0x0, 0x4, 0x2, 0x3}}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x3516, 0x67f, 0x64, 0x0, 0xf6ff) 38.245902519s ago: executing program 4 (id=52): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x5) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600014060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) 38.065638865s ago: executing program 4 (id=54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x5000aea5, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_clone(0x20304800, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r7, 0x84, 0x7f, 0x0, &(0x7f0000000000)) ptrace(0x10, r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r8, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xaece, 0x2) preadv(r11, &(0x7f00000000c0)=[{&(0x7f00000031c0)=""/166, 0xa6}], 0x1, 0x43a, 0x0) ptrace$peeksig(0x4209, r6, &(0x7f00000000c0)={0x8, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r12) sendmsg$TIPC_NL_PUBL_GET(r12, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r13, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) 37.98674901s ago: executing program 0 (id=56): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0xf8, 0xb002, 0x1c8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xd0, 0xf8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @broadcast, 0xffffffff, 0xff000000, 'vlan1\x00', 'macvlan1\x00', {}, {0xff}, 0x16, 0x0, 0x8}, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x4, 0x1}, {0x0, [0x4, 0x11, 0x5, 0x1, 0x5], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 37.714006324s ago: executing program 0 (id=57): r0 = socket$isdn(0x22, 0x2, 0x11) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) select(0x40, &(0x7f00000000c0)={0xc, 0x40, 0x800000000010001, 0x100000000, 0x0, 0x80000d, 0x6, 0x6a}, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x7ffffe}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x418}) close(r0) 36.897733275s ago: executing program 4 (id=60): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x8e, 0xa, 0x0, "dd48a4ea768a6dd5ee52dfda3163aafe4c60fb00373d3f0f0f35beda2cfe504d", 0x32344d59}) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r7 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}, 0xfd}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) 36.747673742s ago: executing program 0 (id=61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x48) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20ae3eda5a491320eec291785b8e54bed84eed"], 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r1], 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x1, 0xf, "075e9ca734a8e424627abc7978e2f6"}, 0x0}) r2 = socket$kcm(0x29, 0x2, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="8b", 0x1}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000001680), 0x0, 0x80041) write$dsp(r5, &(0x7f0000000000)="20d3ff89946ae3268c918942064fa3708f55f65134c8477ce10c634aaa10a9cc09d6bf14af39641ad961d2797abad1ee8a45a3c558d9ce7024fa1fd6873dafeb216f02541a0e59fa59f3c84ce061dcb4401147e2d1c056838311fcab4d907470a24f75f31278140528c924936e1ba9662cd1935dd4406d0e490ba63cb9b87657cd1ec94fb324a4844f9c206f1b27ca067f9342fdef02b8d0651ac471bf63845ab6d4e4c461c2fb5cee2ede0ae28ee248ef67cef639e9cd079cca05b1774125f2", 0xc0) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r6 = socket(0x80000000000000a, 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000580)={0x8, 0x0, [{0x80000000, 0x200, 0x3, 0x81, 0x6a6, 0x6, 0xfffffff7}, {0x80000019, 0xffff7fff, 0x6, 0x1, 0xd0de, 0x5, 0xb}, {0x40000000, 0x6, 0x1, 0xf4f, 0x9, 0x40, 0x8}, {0x80000007, 0x7, 0x0, 0x4, 0x2, 0x0, 0x1d}, {0xb, 0xfffffff0, 0x1, 0x0, 0x2, 0xfffffc01, 0xb}, {0x80000008, 0x9, 0x6, 0x9, 0x3c16, 0x1, 0x48}, {0x8000000f, 0xb, 0x4, 0xb9, 0x9, 0x2, 0x82ba}, {0x2, 0x9, 0x6, 0x4, 0x6, 0x24bb37c, 0x8001}]}) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_icmp_ICMP_FILTER(r8, 0x1, 0x1, &(0x7f00000001c0)={0x1}, 0x4) setsockopt$inet6_group_source_req(r8, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x5b79, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 36.680379329s ago: executing program 2 (id=62): socket$inet6(0xa, 0x4, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000080)={0xf, 0x0, 0x0, 'queue0\x00', 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc}) r3 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000007100)={0x2020}, 0x2020) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000010c0)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 36.401701455s ago: executing program 1 (id=63): syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000280)={0x0, 0x334e, 0x10, 0x2004, 0x1000030e}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 34.220278325s ago: executing program 1 (id=64): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x88380, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200200010ac05300240000102030109022400010103000009041e030905810320000a0400"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x62, &(0x7f0000000000)=@string={0x62, 0x3, "457b9aa8e73919c5d56ade367a9808974ab1c55dd40de62e92f7de1f0bb127f6594b6a58d4f048bd691a70598cb17308b89001c50f192a14d8546593c2b9816b2c4555868a2502bb84dc4426a36d14c372bdc94c5626797e2e15a979f66d4c45"}}, {0x3, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x411}}]}) 20.802631859s ago: executing program 32 (id=61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x48) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20ae3eda5a491320eec291785b8e54bed84eed"], 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r1], 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x1, 0xf, "075e9ca734a8e424627abc7978e2f6"}, 0x0}) r2 = socket$kcm(0x29, 0x2, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="8b", 0x1}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000001680), 0x0, 0x80041) write$dsp(r5, &(0x7f0000000000)="20d3ff89946ae3268c918942064fa3708f55f65134c8477ce10c634aaa10a9cc09d6bf14af39641ad961d2797abad1ee8a45a3c558d9ce7024fa1fd6873dafeb216f02541a0e59fa59f3c84ce061dcb4401147e2d1c056838311fcab4d907470a24f75f31278140528c924936e1ba9662cd1935dd4406d0e490ba63cb9b87657cd1ec94fb324a4844f9c206f1b27ca067f9342fdef02b8d0651ac471bf63845ab6d4e4c461c2fb5cee2ede0ae28ee248ef67cef639e9cd079cca05b1774125f2", 0xc0) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r6 = socket(0x80000000000000a, 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000580)={0x8, 0x0, [{0x80000000, 0x200, 0x3, 0x81, 0x6a6, 0x6, 0xfffffff7}, {0x80000019, 0xffff7fff, 0x6, 0x1, 0xd0de, 0x5, 0xb}, {0x40000000, 0x6, 0x1, 0xf4f, 0x9, 0x40, 0x8}, {0x80000007, 0x7, 0x0, 0x4, 0x2, 0x0, 0x1d}, {0xb, 0xfffffff0, 0x1, 0x0, 0x2, 0xfffffc01, 0xb}, {0x80000008, 0x9, 0x6, 0x9, 0x3c16, 0x1, 0x48}, {0x8000000f, 0xb, 0x4, 0xb9, 0x9, 0x2, 0x82ba}, {0x2, 0x9, 0x6, 0x4, 0x6, 0x24bb37c, 0x8001}]}) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_icmp_ICMP_FILTER(r8, 0x1, 0x1, &(0x7f00000001c0)={0x1}, 0x4) setsockopt$inet6_group_source_req(r8, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x5b79, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 20.482868451s ago: executing program 33 (id=62): socket$inet6(0xa, 0x4, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000080)={0xf, 0x0, 0x0, 'queue0\x00', 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc}) r3 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000007100)={0x2020}, 0x2020) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000010c0)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 19.068699793s ago: executing program 34 (id=60): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x8e, 0xa, 0x0, "dd48a4ea768a6dd5ee52dfda3163aafe4c60fb00373d3f0f0f35beda2cfe504d", 0x32344d59}) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r7 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}, 0xfd}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) 18.674977725s ago: executing program 35 (id=64): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x88380, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200200010ac05300240000102030109022400010103000009041e030905810320000a0400"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x62, &(0x7f0000000000)=@string={0x62, 0x3, "457b9aa8e73919c5d56ade367a9808974ab1c55dd40de62e92f7de1f0bb127f6594b6a58d4f048bd691a70598cb17308b89001c50f192a14d8546593c2b9816b2c4555868a2502bb84dc4426a36d14c372bdc94c5626797e2e15a979f66d4c45"}}, {0x3, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x411}}]}) 12.633181602s ago: executing program 3 (id=71): write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040961b09000000000000010902240001"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000002340)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.539221919s ago: executing program 3 (id=72): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634e250fb5b", 0x10}, {&(0x7f0000002400)="a18d55b6456bac655039b6a674900d579347393e35fdeed1fa8f68a4b05addbeeb0fbefbde6bcf26771ea0fdc771a23b3fb0462475833a25704ba4e839ef72c08766edbf2dafc979b1d9652f1c53fb2e2103f0a9f761bea9623c0673bd281cfce139ddb9aaa0c712059e85784fcd6fd8d48f99fc8147ef98dcc988d989d4c301", 0x80}], 0x2, 0x0, 0x0, 0x8000}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000880), 0x2) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x32000200, 0x0, 0x25, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x158, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff2}}, [@TCA_STAB={0x12c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x1, 0xd, 0x1ff, 0x1, 0x0, 0x9, 0x4}}, {0xc, 0x2, [0x0, 0xfffa, 0x8, 0x6]}}, {{0x1c, 0x1, {0x3, 0x8, 0x3, 0x1, 0x0, 0x4423907c, 0x3, 0x4}}, {0xc, 0x2, [0xfff9, 0x2, 0xf6, 0x8]}}, {{0x1c, 0x1, {0xd, 0x9, 0x0, 0x5, 0x1, 0x3, 0x9, 0x2}}, {0x8, 0x2, [0x7, 0x4]}}, {{0x1c, 0x1, {0xfe, 0x2, 0x8, 0x1ff, 0x2, 0x0, 0x5, 0xa}}, {0x18, 0x2, [0x9, 0x522, 0x3, 0xf53, 0x0, 0xfffe, 0x400, 0x2, 0x7, 0x8e]}}, {{0x1c, 0x1, {0xe, 0x1, 0xfff, 0x8, 0x2, 0xffffffff, 0xb, 0x3}}, {0xa, 0x2, [0x4, 0x101, 0x3]}}, {{0x1c, 0x1, {0x1, 0x2, 0xfffa, 0x7, 0x0, 0x40000000, 0x3a1, 0x8}}, {0x14, 0x2, [0x1, 0x800, 0xfff1, 0x2, 0x7, 0x400, 0x3ff, 0x0]}}, {{0x1c, 0x1, {0x4, 0x8, 0x9, 0x2b9, 0x0, 0x7fffffff, 0x2, 0x4}}, {0xc, 0x2, [0x6, 0x5, 0x0, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x730e}]}, 0x158}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002e00), 0x400, 0x0) poll(&(0x7f0000003080)=[{r6, 0x40}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x10}], 0x3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44884) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) shutdown(r9, 0x1) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') getdents(r10, 0x0, 0x48) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) 1.297851614s ago: executing program 3 (id=73): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x2f8, 0xffffffff, 0xf8, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x1100, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xd0, 0xf8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @broadcast, 0xffffffff, 0xff000000, 'vlan1\x00', 'macvlan1\x00', {}, {0xff}, 0x16, 0x0, 0x8}, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x4, 0x1}, {0x0, [0x4, 0x11, 0x5, 0x1, 0x5], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) 1.215406011s ago: executing program 3 (id=74): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002008e3400000000000000000000000002000100000000000000091600000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xa, 0xffff}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x41}, @TCA_CAKE_MPU={0x8, 0xe, 0x25}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$isdn(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r4}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 202.724414ms ago: executing program 3 (id=75): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000400)) socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x34) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x0, 0x5, 0x51, @private0={0xfc, 0x0, '\x00', 0x2}, @local, 0x20, 0x7, 0x3, 0x5}}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r4, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000840) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0x0, 0xfe, 0xfffffff9, 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000) 0s ago: executing program 3 (id=76): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x804) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x7, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x22240, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x340, 0x0, 0x43, 0xa0, 0x260, 0x98, 0x400, 0x178, 0x178, 0x400, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0_to_bond\x00'}, 0x12a, 0xa8, 0x108, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0xa, 0x7, 0x0, 0x2], 0x2, 0x6}, {0x1, [0x1, 0x1, 0x1, 0x4, 0x4, 0x7], 0x0, 0x2}}}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@mcast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv6=@loopback, [], 0x0, 0x0, 0x67}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f, {0x90000, 0x0, 0x0, 0x0, 0xfffffffc}}) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 68.094256][ T5816] cgroup: Unknown subsys name 'net' [ 68.227569][ T5816] cgroup: Unknown subsys name 'cpuset' [ 68.236656][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.609218][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.373387][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.384263][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.120682][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.132608][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.141131][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.155327][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.163704][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.164878][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.172182][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.186624][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.193945][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.194595][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.209384][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.213456][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.216993][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.224187][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.238367][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.246792][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.247688][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.254109][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.261533][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.270330][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.276530][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.282210][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.302112][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.364827][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.372493][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.920764][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 73.120130][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 73.170853][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 73.203453][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 73.256068][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 73.335965][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.343626][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.351485][ T5844] bridge_slave_0: entered allmulticast mode [ 73.358940][ T5844] bridge_slave_0: entered promiscuous mode [ 73.397391][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.404749][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.411873][ T5844] bridge_slave_1: entered allmulticast mode [ 73.419079][ T5844] bridge_slave_1: entered promiscuous mode [ 73.533153][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.540752][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.548297][ T5848] bridge_slave_0: entered allmulticast mode [ 73.555346][ T5848] bridge_slave_0: entered promiscuous mode [ 73.575072][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.584414][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.591608][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.599924][ T5847] bridge_slave_0: entered allmulticast mode [ 73.607227][ T5847] bridge_slave_0: entered promiscuous mode [ 73.629483][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.636735][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.644376][ T5848] bridge_slave_1: entered allmulticast mode [ 73.651315][ T5848] bridge_slave_1: entered promiscuous mode [ 73.684250][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.693708][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.701158][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.708765][ T5847] bridge_slave_1: entered allmulticast mode [ 73.716250][ T5847] bridge_slave_1: entered promiscuous mode [ 73.756498][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.763687][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.771216][ T5846] bridge_slave_0: entered allmulticast mode [ 73.778330][ T5846] bridge_slave_0: entered promiscuous mode [ 73.808151][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.815444][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.823001][ T5845] bridge_slave_0: entered allmulticast mode [ 73.830867][ T5845] bridge_slave_0: entered promiscuous mode [ 73.840468][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.850297][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.857547][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.865241][ T5846] bridge_slave_1: entered allmulticast mode [ 73.872151][ T5846] bridge_slave_1: entered promiscuous mode [ 73.892115][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.901942][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.909271][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.916906][ T5845] bridge_slave_1: entered allmulticast mode [ 73.923895][ T5845] bridge_slave_1: entered promiscuous mode [ 73.934983][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.970665][ T5844] team0: Port device team_slave_0 added [ 73.978930][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.027365][ T5844] team0: Port device team_slave_1 added [ 74.058125][ T5848] team0: Port device team_slave_0 added [ 74.067528][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.079411][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.113624][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.135603][ T5848] team0: Port device team_slave_1 added [ 74.154355][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.176489][ T5847] team0: Port device team_slave_0 added [ 74.193657][ T5845] team0: Port device team_slave_0 added [ 74.212037][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.219211][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.245524][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.259274][ T5847] team0: Port device team_slave_1 added [ 74.278761][ T5845] team0: Port device team_slave_1 added [ 74.296497][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.303472][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.330751][ T52] Bluetooth: hci1: command tx timeout [ 74.330758][ T5837] Bluetooth: hci0: command tx timeout [ 74.331547][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.363465][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.370849][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.396825][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.407525][ T52] Bluetooth: hci2: command tx timeout [ 74.407541][ T5837] Bluetooth: hci4: command tx timeout [ 74.418652][ T5837] Bluetooth: hci3: command tx timeout [ 74.421733][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.431780][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.458067][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.484889][ T5846] team0: Port device team_slave_0 added [ 74.527633][ T5846] team0: Port device team_slave_1 added [ 74.550885][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.558162][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.584356][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.597041][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.604104][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.630358][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.642071][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.649161][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.675164][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.687558][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.694585][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.720584][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.742804][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.749873][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.775866][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.836506][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.843484][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.869829][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.900046][ T5848] hsr_slave_0: entered promiscuous mode [ 74.907371][ T5848] hsr_slave_1: entered promiscuous mode [ 74.926144][ T5844] hsr_slave_0: entered promiscuous mode [ 74.932362][ T5844] hsr_slave_1: entered promiscuous mode [ 74.938806][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 74.944692][ T5844] Cannot create hsr debugfs directory [ 74.994816][ T5845] hsr_slave_0: entered promiscuous mode [ 75.001753][ T5845] hsr_slave_1: entered promiscuous mode [ 75.008132][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 75.014257][ T5845] Cannot create hsr debugfs directory [ 75.086719][ T5847] hsr_slave_0: entered promiscuous mode [ 75.093025][ T5847] hsr_slave_1: entered promiscuous mode [ 75.099773][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 75.105897][ T5847] Cannot create hsr debugfs directory [ 75.218428][ T5846] hsr_slave_0: entered promiscuous mode [ 75.225157][ T5846] hsr_slave_1: entered promiscuous mode [ 75.231176][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 75.237001][ T5846] Cannot create hsr debugfs directory [ 75.698248][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.713073][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.724535][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.735126][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.819829][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.830071][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.848409][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.858738][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.917213][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.929729][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.942482][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.953392][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.105455][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.115621][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.129832][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.141622][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.213344][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.280222][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.297351][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.308130][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.320282][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.327633][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.349091][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.359102][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.371822][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.379117][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.391202][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.404955][ T5837] Bluetooth: hci1: command tx timeout [ 76.412449][ T52] Bluetooth: hci0: command tx timeout [ 76.467598][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.484636][ T52] Bluetooth: hci2: command tx timeout [ 76.484773][ T5834] Bluetooth: hci4: command tx timeout [ 76.501265][ T5837] Bluetooth: hci3: command tx timeout [ 76.508207][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.517137][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.524312][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.563632][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.570812][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.625947][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.648050][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.655314][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.686757][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.693983][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.713061][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.736307][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.812784][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.849741][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.856899][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.876193][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.883338][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.932031][ T5844] veth0_vlan: entered promiscuous mode [ 76.949139][ T5844] veth1_vlan: entered promiscuous mode [ 76.986972][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.026729][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.051878][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.060454][ T5844] veth0_macvtap: entered promiscuous mode [ 77.076191][ T5844] veth1_macvtap: entered promiscuous mode [ 77.105299][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.138527][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.145668][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.156353][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.163444][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.186651][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.216439][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.242732][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.259769][ T5845] veth0_vlan: entered promiscuous mode [ 77.276273][ T3437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.309353][ T3437] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.319042][ T3437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.337646][ T5845] veth1_vlan: entered promiscuous mode [ 77.346343][ T3437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.377189][ T5847] veth0_vlan: entered promiscuous mode [ 77.401048][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.457881][ T5847] veth1_vlan: entered promiscuous mode [ 77.470358][ T5846] veth0_vlan: entered promiscuous mode [ 77.539197][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.548903][ T5846] veth1_vlan: entered promiscuous mode [ 77.559185][ T5845] veth0_macvtap: entered promiscuous mode [ 77.568267][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.579362][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.581414][ T5845] veth1_macvtap: entered promiscuous mode [ 77.632297][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.647952][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.682892][ T5847] veth0_macvtap: entered promiscuous mode [ 77.690568][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.700204][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.730450][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.739598][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.751560][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.762741][ T5846] veth0_macvtap: entered promiscuous mode [ 77.775358][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.788922][ T5847] veth1_macvtap: entered promiscuous mode [ 77.827110][ T5848] veth0_vlan: entered promiscuous mode [ 77.849827][ T5846] veth1_macvtap: entered promiscuous mode [ 77.883419][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.909652][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.941997][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.954596][ T5848] veth1_vlan: entered promiscuous mode [ 77.969097][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.993673][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.019505][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.033286][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.086784][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.117124][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.128312][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.134778][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.137188][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.169366][ T5848] veth0_macvtap: entered promiscuous mode [ 78.177495][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.200595][ T5848] veth1_macvtap: entered promiscuous mode [ 78.209508][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.222862][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.251891][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.260970][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.304190][ T43] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 78.343134][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.387004][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.419374][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.444476][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.458369][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.462640][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.484800][ T5837] Bluetooth: hci1: command tx timeout [ 78.494553][ T5837] Bluetooth: hci0: command tx timeout [ 78.499917][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.499970][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 78.563127][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.564407][ T43] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 78.573932][ T5837] Bluetooth: hci3: command tx timeout [ 78.584681][ T5834] Bluetooth: hci4: command tx timeout [ 78.586823][ T5837] Bluetooth: hci2: command tx timeout [ 78.595887][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.598542][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.640023][ T43] usb 1-1: config 0 descriptor?? [ 78.668646][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.680828][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.682668][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.695186][ T43] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 78.707397][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.721927][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 78.776373][ T43] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 78.800718][ T43] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 78.819003][ T43] usb 1-1: media controller created [ 78.837162][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.876169][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.904263][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.924910][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 78.953432][ T43] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 78.982576][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 79.017531][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.053953][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.097240][ T43] dvb-usb: schedule remote query interval to 150 msecs. [ 79.136389][ T5929] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.186042][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.193869][ T43] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 79.204269][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.345281][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 79.367022][ T43] dvb-usb: error while querying for an remote control event. [ 79.464223][ T5942] syzkaller0: entered promiscuous mode [ 79.477678][ T5942] syzkaller0: entered allmulticast mode [ 79.543905][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 79.577772][ T43] dvb-usb: error while querying for an remote control event. [ 79.641133][ T5945] program syz.2.9 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.688470][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 79.716874][ T5945] netlink: 'syz.2.9': attribute type 23 has an invalid length. [ 79.754108][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 79.761015][ T5916] dvb-usb: error while querying for an remote control event. [ 79.823942][ T5915] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 79.954057][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 79.970461][ T5916] dvb-usb: error while querying for an remote control event. [ 79.995402][ T5915] usb 5-1: not running at top speed; connect to a high speed hub [ 80.023311][ T5915] usb 5-1: config 1 has an invalid interface number: 30 but max is 0 [ 80.120908][ T5915] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.143931][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 80.153864][ T10] usb 1-1: USB disconnect, device number 2 [ 80.198305][ T5915] usb 5-1: config 1 has no interface number 0 [ 80.226617][ T5916] dvb-usb: error while querying for an remote control event. [ 80.237282][ T5915] usb 5-1: config 1 interface 30 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 80.290401][ T5915] usb 5-1: config 1 interface 30 has no altsetting 0 [ 80.305667][ T5915] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 80.315871][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.324379][ T5915] usb 5-1: Product: syz [ 80.416783][ T5915] usb 5-1: SerialNumber: syz [ 80.436330][ T5956] fuse: Unknown parameter 'õü^ Ò_½¸°Ægroup_id' [ 80.454450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.462762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.494335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.502906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.567926][ T5837] Bluetooth: hci0: command tx timeout [ 80.568145][ T52] Bluetooth: hci1: command tx timeout [ 80.644990][ T52] Bluetooth: hci4: command tx timeout [ 80.648744][ T5837] Bluetooth: hci2: command tx timeout [ 80.682095][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 80.704480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.713070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.744993][ T5915] usb 5-1: USB disconnect, device number 2 [ 80.774166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.782913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.155026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.164270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.321792][ T5976] loop9: detected capacity change from 0 to 7 [ 81.386041][ T5979] process 'syz.0.15' launched './file1' with NULL argv: empty string added [ 81.424679][ T5976] Dev loop9: unable to read RDB block 7 [ 81.455082][ T5976] loop9: unable to read partition table [ 81.506963][ T5976] loop9: partition table beyond EOD, truncated [ 81.535848][ T5976] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 82.474934][ T856] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.684852][ T856] usb 5-1: config 0 has no interfaces? [ 82.712951][ T856] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 82.722758][ T856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.732152][ T856] usb 5-1: Product: syz [ 82.741352][ T856] usb 5-1: Manufacturer: syz [ 82.763605][ T856] usb 5-1: SerialNumber: syz [ 82.794086][ T30] audit: type=1326 audit(1763914285.015:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.2.27" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbdd38f749 code=0x0 [ 82.815499][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.822449][ T5907] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.840371][ T856] usb 5-1: config 0 descriptor?? [ 83.000187][ T5907] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 83.009488][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.049858][ T5907] usb 1-1: config 0 descriptor?? [ 83.066002][ T5907] cp210x 1-1:0.0: cp210x converter detected [ 83.128923][ T5994] netlink: 80 bytes leftover after parsing attributes in process `syz.4.20'. [ 83.145748][ T6018] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 83.152436][ T6018] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 83.480245][ T5907] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 83.487944][ T5907] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 83.503599][ T5907] usb 1-1: cp210x converter now attached to ttyUSB0 [ 83.537432][ T5907] usb 1-1: USB disconnect, device number 3 [ 83.566907][ T5907] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 83.582536][ T5907] cp210x 1-1:0.0: device disconnected [ 84.083073][ T6038] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.254817][ T6042] vivid-002: disconnect [ 84.262257][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.37'. [ 84.527243][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.683932][ T10] usb 4-1: device descriptor read/64, error -71 [ 84.983952][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.017377][ T5916] usb 5-1: USB disconnect, device number 3 [ 85.125495][ T10] usb 4-1: device descriptor read/64, error -71 [ 85.935060][ T6057] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.980797][ T10] usb usb4-port1: attempt power cycle [ 86.292434][ T6062] syz.4.43 uses obsolete (PF_INET,SOCK_PACKET) [ 86.333921][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.383968][ T10] usb 4-1: device descriptor read/8, error -71 [ 86.616362][ T6076] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 86.623888][ T5926] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.724824][ T984] cfg80211: failed to load regulatory.db [ 86.758448][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 86.764825][ T5907] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.771358][ T6082] netlink: 68 bytes leftover after parsing attributes in process `syz.0.51'. [ 86.785157][ T10] usb 4-1: device descriptor read/8, error -71 [ 86.795262][ T5926] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 86.804671][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.813277][ T5926] usb 3-1: Product: syz [ 86.822391][ T5926] usb 3-1: Manufacturer: syz [ 86.827374][ T5926] usb 3-1: SerialNumber: syz [ 86.835449][ T5926] usb 3-1: config 0 descriptor?? [ 86.845680][ T5926] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 86.904361][ T10] usb usb4-port1: unable to enumerate USB device [ 86.927355][ T5907] usb 2-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 86.936828][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.945084][ T5907] usb 2-1: Product: syz [ 86.949265][ T5907] usb 2-1: Manufacturer: syz [ 86.953976][ T5907] usb 2-1: SerialNumber: syz [ 86.961578][ T5907] usb 2-1: config 0 descriptor?? [ 86.971979][ T5907] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 87.258434][ T5926] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 87.276211][ T6042] vivid-002: reconnect [ 87.347204][ T6086] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.409988][ T5907] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 87.465757][ T5907] videodev: could not get a free minor [ 87.477880][ T5907] gspca_main: video_register_device err -23 [ 87.575816][ T5907] sonixb 2-1:0.0: probe with driver sonixb failed with error -23 [ 87.619827][ T6093] Cannot find del_set index 0 as target [ 88.154114][ T5907] usb 3-1: USB disconnect, device number 2 [ 88.476954][ T5907] usb 2-1: USB disconnect, device number 2 [ 88.689450][ T6098] delete_channel: no stack [ 88.843925][ T856] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.019743][ T856] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 89.043222][ T856] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 89.121985][ T5907] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.255051][ T856] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 90.887866][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.899098][ T856] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 90.918852][ T856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.933842][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.949469][ T856] usb 5-1: Product: syz [ 90.953683][ T856] usb 5-1: Manufacturer: syz [ 90.965474][ T5907] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 90.981782][ T856] usb 5-1: SerialNumber: syz [ 90.987797][ T5907] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 91.146133][ T856] usb 5-1: config 0 descriptor?? [ 91.157947][ T5907] usb 1-1: Manufacturer: syz [ 91.213046][ T6106] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 91.254216][ T5907] usb 1-1: config 0 descriptor?? [ 91.266112][ T6106] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 91.315021][ T856] usb 5-1: ucan: probing device on interface #0 [ 91.709888][ T5907] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 91.727144][ T5907] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 91.958871][ T6106] vcan0: tx address claim with dlc 0 [ 91.983962][ T5907] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 91.997138][ T6106] netlink: 'syz.4.60': attribute type 11 has an invalid length. [ 92.013866][ T5907] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 93.044427][ T856] usb 5-1: ucan: failed to retrieve device info [ 93.050729][ T856] usb 5-1: ucan: probe failed; try to update the device firmware [ 100.517738][ T5907] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 100.792807][ T5907] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 101.792603][ C0] sched: DL replenish lagged too much [ 103.457475][ T5907] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 103.594561][ T5907] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 104.885127][ T5907] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 104.892600][ T5907] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 105.832421][ T5907] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -71 [ 105.858498][ T5908] usb 5-1: USB disconnect, device number 4 [ 106.393985][ T5907] usb 1-1: USB disconnect, device number 4 [ 106.633948][ T5915] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.612464][ T6132] fido_id[6132]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 108.143420][ T5915] usb 4-1: device descriptor read/64, error -71 [ 112.644063][ T5915] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.975986][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.994454][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.043209][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.051523][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.062995][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.138053][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.147304][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.154391][ T5908] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 114.167806][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.349301][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.389473][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.088252][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.150348][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.158660][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.166966][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.202764][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.222000][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.254653][ T5908] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 115.263666][ T5908] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 115.314338][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.323158][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.337246][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.346512][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.355869][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.375468][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.406291][ T5908] usb 4-1: config 0 descriptor?? [ 117.125944][ T52] Bluetooth: hci6: command tx timeout [ 117.133195][ T52] Bluetooth: hci5: command tx timeout [ 117.524010][ T5837] Bluetooth: hci0: command tx timeout [ 117.530156][ T52] Bluetooth: hci1: command tx timeout [ 118.796951][ T3487] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.204071][ T5837] Bluetooth: hci5: command tx timeout [ 119.209526][ T5837] Bluetooth: hci6: command tx timeout [ 119.253521][ T3487] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.605556][ T52] Bluetooth: hci1: command tx timeout [ 119.611074][ T5837] Bluetooth: hci0: command tx timeout [ 119.631156][ T3487] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.283933][ T5837] Bluetooth: hci6: command tx timeout [ 121.289409][ T5837] Bluetooth: hci5: command tx timeout [ 121.426537][ T6152] chnl_net:caif_netlink_parms(): no params data found [ 121.519230][ T6148] chnl_net:caif_netlink_parms(): no params data found [ 121.687201][ T52] Bluetooth: hci1: command tx timeout [ 121.693322][ T5837] Bluetooth: hci0: command tx timeout [ 121.702961][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.710541][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.718267][ T6148] bridge_slave_0: entered allmulticast mode [ 121.727225][ T6148] bridge_slave_0: entered promiscuous mode [ 121.737136][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.744391][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.751631][ T6148] bridge_slave_1: entered allmulticast mode [ 121.760163][ T6148] bridge_slave_1: entered promiscuous mode [ 121.848748][ T6148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.864993][ T6148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.952597][ T6148] team0: Port device team_slave_0 added [ 121.962181][ T6148] team0: Port device team_slave_1 added [ 122.046643][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.053622][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.081521][ T6148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.094852][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.101843][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.134863][ T6148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.246482][ T6148] hsr_slave_0: entered promiscuous mode [ 122.254814][ T6148] hsr_slave_1: entered promiscuous mode [ 122.264825][ T6148] debugfs: 'hsr0' already exists in 'hsr' [ 122.270581][ T6148] Cannot create hsr debugfs directory [ 122.447720][ T3487] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.093634][ T6148] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.156043][ T6154] chnl_net:caif_netlink_parms(): no params data found [ 123.170339][ T6148] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.200616][ T6148] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.226988][ T6150] chnl_net:caif_netlink_parms(): no params data found [ 123.262392][ T6148] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.363992][ T52] Bluetooth: hci6: command tx timeout [ 123.369466][ T5837] Bluetooth: hci5: command tx timeout [ 123.498037][ T6152] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.506513][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.513993][ T6152] bridge_slave_0: entered allmulticast mode [ 123.521828][ T6152] bridge_slave_0: entered promiscuous mode [ 123.578847][ T6152] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.586430][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.593670][ T6152] bridge_slave_1: entered allmulticast mode [ 123.602413][ T6152] bridge_slave_1: entered promiscuous mode [ 123.621820][ T856] usb 4-1: USB disconnect, device number 8 [ 123.764313][ T52] Bluetooth: hci1: command tx timeout [ 123.769790][ T5837] Bluetooth: hci0: command tx timeout [ 124.282826][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.314044][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.321339][ T6154] bridge_slave_0: entered allmulticast mode [ 124.348948][ T6154] bridge_slave_0: entered promiscuous mode [ 124.430994][ T6152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.466268][ T6152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.478776][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 124.504067][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.515202][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.522479][ T6154] bridge_slave_1: entered allmulticast mode [ 124.529500][ T6201] netlink: 'syz.3.74': attribute type 14 has an invalid length. [ 124.563396][ T6154] bridge_slave_1: entered promiscuous mode [ 124.844847][ T6201] vxlan0: entered promiscuous mode [ 124.982012][ T6154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.998865][ T6150] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.006759][ T6150] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.024539][ T6150] bridge_slave_0: entered allmulticast mode [ 125.042699][ T6150] bridge_slave_0: entered promiscuous mode [ 125.107978][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.122104][ T6154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.175928][ T6150] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.187868][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.216133][ T6150] bridge_slave_1: entered allmulticast mode [ 125.235824][ T6150] bridge_slave_1: entered promiscuous mode [ 125.253746][ T6152] team0: Port device team_slave_0 added [ 125.308290][ T6152] team0: Port device team_slave_1 added [ 125.330890][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.601050][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.623410][ T6154] team0: Port device team_slave_0 added [ 125.660095][ T6154] team0: Port device team_slave_1 added [ 125.678893][ T6150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.411125][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.468452][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.882994][ T6215] usb usb8: usbfs: process 6215 (syz.3.76) did not claim interface 0 before use [ 126.897639][ T6152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.750294][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.764084][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.132673][ T3437] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.345278][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.359991][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.673738][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 247.680746][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6148/1:b..l P5880/2:b..l P6152/1:b..l [ 247.691280][ C1] rcu: (detected by 1, t=10503 jiffies, g=11721, q=571350 ncpus=2) [ 247.699285][ C1] task:syz-executor state:R running task stack:22552 pid:6152 tgid:6152 ppid:6130 task_flags:0x400140 flags:0x00080000 [ 247.713562][ C1] Call Trace: [ 247.716855][ C1] [ 247.719799][ C1] __schedule+0x1798/0x4cc0 [ 247.724367][ C1] ? __pfx___schedule+0x10/0x10 [ 247.729229][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 247.734441][ C1] ? __lock_acquire+0xab9/0xd20 [ 247.739304][ C1] ? __lock_acquire+0xab9/0xd20 [ 247.744166][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 247.749468][ C1] preempt_schedule_irq+0xb5/0x150 [ 247.754600][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 247.760336][ C1] ? __lock_acquire+0xab9/0xd20 [ 247.765210][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 247.771031][ C1] irqentry_exit+0x6f/0x90 [ 247.775474][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.781467][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 247.786760][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 5b 1d d1 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 247.806387][ C1] RSP: 0018:ffffc90003b3f578 EFLAGS: 00000206 [ 247.812469][ C1] RAX: 3eb469be9181a500 RBX: 0000000000000000 RCX: 3eb469be9181a500 [ 247.820448][ C1] RDX: 0000000000000000 RSI: ffffffff8d8f55ca RDI: ffffffff8bbf08e0 [ 247.828434][ C1] RBP: ffffffff81738c45 R08: 0000000000000000 R09: ffffffff81738c45 [ 247.836417][ C1] R10: ffffc90003b3f738 R11: ffffffff81ac2e10 R12: 0000000000000002 [ 247.844397][ C1] R13: ffffffff8df3d6e0 R14: 0000000000000000 R15: 0000000000000246 [ 247.852382][ C1] ? unwind_next_frame+0xa5/0x2390 [ 247.857508][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.863676][ C1] ? unwind_next_frame+0xa5/0x2390 [ 247.868818][ C1] ? unwind_next_frame+0xa5/0x2390 [ 247.873940][ C1] ? __reset_page_owner+0x71/0x1f0 [ 247.879068][ C1] ? unwind_next_frame+0xa5/0x2390 [ 247.884190][ C1] unwind_next_frame+0xc2/0x2390 [ 247.889137][ C1] ? unwind_next_frame+0xa5/0x2390 [ 247.894265][ C1] ? unwind_next_frame+0xa5/0x2390 [ 247.899385][ C1] ? save_stack+0xf5/0x1f0 [ 247.903818][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.909981][ C1] arch_stack_walk+0x11c/0x150 [ 247.914766][ C1] ? __reset_page_owner+0x71/0x1f0 [ 247.919902][ C1] stack_trace_save+0x9c/0xe0 [ 247.924594][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 247.929990][ C1] save_stack+0xf5/0x1f0 [ 247.934286][ C1] ? __pfx_save_stack+0x10/0x10 [ 247.939168][ C1] ? page_ext_put+0x97/0xc0 [ 247.943693][ C1] __reset_page_owner+0x71/0x1f0 [ 247.948640][ C1] __free_frozen_pages+0xbc4/0xd30 [ 247.953778][ C1] __slab_free+0x2e7/0x390 [ 247.958216][ C1] ? __phys_addr+0xd3/0x180 [ 247.962744][ C1] qlist_free_all+0x97/0x140 [ 247.967367][ C1] kasan_quarantine_reduce+0x148/0x160 [ 247.972848][ C1] __kasan_slab_alloc+0x22/0x80 [ 247.977721][ C1] __kmalloc_cache_noprof+0x36f/0x6f0 [ 247.983109][ C1] ? ref_tracker_alloc+0x133/0x460 [ 247.988234][ C1] ref_tracker_alloc+0x133/0x460 [ 247.993181][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 247.998662][ C1] ? sock_lock_init+0x41c/0x870 [ 248.003519][ C1] ? sk_prot_alloc+0x161/0x220 [ 248.008315][ C1] sk_alloc+0x1b1/0x370 [ 248.012486][ C1] unix_create1+0xb0/0x7d0 [ 248.016921][ C1] unix_create+0x16b/0x210 [ 248.021347][ C1] __sock_create+0x4b3/0x9f0 [ 248.025958][ C1] __sys_socket+0xd7/0x1b0 [ 248.030404][ C1] __x64_sys_socket+0x7a/0x90 [ 248.035093][ C1] do_syscall_64+0xfa/0xfa0 [ 248.039610][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.044832][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.050904][ C1] ? clear_bhb_loop+0x60/0xb0 [ 248.055590][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.061491][ C1] RIP: 0033:0x7f298fd91667 [ 248.065925][ C1] RSP: 002b:00007f299010f668 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 248.074345][ C1] RAX: ffffffffffffffda RBX: 00007f299010f9a0 RCX: 00007f298fd91667 [ 248.082319][ C1] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 248.090292][ C1] RBP: 00007f299010f680 R08: 0000000000000001 R09: 00315f6576616c73 [ 248.098267][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 248.106243][ C1] R13: 00007f2990b14620 R14: 0000000000000000 R15: 0000000000000000 [ 248.114248][ C1] [ 248.117281][ C1] task:kworker/1:3 state:R running task stack:24008 pid:5880 tgid:5880 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 248.130876][ C1] Workqueue: mld mld_dad_work [ 248.135583][ C1] Call Trace: [ 248.138869][ C1] [ 248.141809][ C1] __schedule+0x1798/0x4cc0 [ 248.146357][ C1] ? __pfx___schedule+0x10/0x10 [ 248.151226][ C1] ? __pfx_do_softirq+0x10/0x10 [ 248.156087][ C1] ? ipv6_skip_exthdr+0x5c3/0x690 [ 248.161134][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 248.166515][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.171731][ C1] ? preempt_schedule+0xae/0xc0 [ 248.176592][ C1] ? ip6t_do_table+0x1db/0x1560 [ 248.181464][ C1] preempt_schedule_common+0x83/0xd0 [ 248.186767][ C1] preempt_schedule+0xae/0xc0 [ 248.191460][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 248.196859][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 248.202940][ C1] preempt_schedule_thunk+0x16/0x30 [ 248.208157][ C1] __local_bh_enable_ip+0x13e/0x1c0 [ 248.213380][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 248.219114][ C1] ip6t_do_table+0x1376/0x1560 [ 248.223938][ C1] ? ip6t_do_table+0x1db/0x1560 [ 248.228830][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 248.233981][ C1] ? nf_nat_ipv6_local_fn+0x1f6/0x3a0 [ 248.239375][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 248.244517][ C1] nf_hook_slow+0xc5/0x220 [ 248.248958][ C1] NF_HOOK+0x24c/0x380 [ 248.253060][ C1] ? NF_HOOK+0x101/0x380 [ 248.257321][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 248.261931][ C1] ? __pfx_dst_output+0x10/0x10 [ 248.266803][ C1] ? icmp6_dst_alloc+0x3a5/0x420 [ 248.271764][ C1] ? icmp6_dst_alloc+0x3a5/0x420 [ 248.276725][ C1] mld_sendpack+0x8d4/0xe60 [ 248.281258][ C1] ? mld_sendpack+0x1e7/0xe60 [ 248.285936][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 248.291002][ C1] ? mld_send_initial_cr+0x352/0x550 [ 248.296298][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 248.302034][ C1] mld_dad_work+0x46/0x490 [ 248.306469][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 248.312198][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 248.317932][ C1] process_scheduled_works+0xae1/0x17b0 [ 248.323527][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 248.329541][ C1] worker_thread+0x8a0/0xda0 [ 248.334151][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 248.340510][ C1] ? __kthread_parkme+0x7b/0x200 [ 248.345472][ C1] kthread+0x711/0x8a0 [ 248.349557][ C1] ? __pfx_worker_thread+0x10/0x10 [ 248.354677][ C1] ? __pfx_kthread+0x10/0x10 [ 248.359283][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.364495][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.369720][ C1] ? __pfx_kthread+0x10/0x10 [ 248.374326][ C1] ret_from_fork+0x4bc/0x870 [ 248.378924][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 248.384059][ C1] ? __switch_to_asm+0x39/0x70 [ 248.388826][ C1] ? __switch_to_asm+0x33/0x70 [ 248.393593][ C1] ? __pfx_kthread+0x10/0x10 [ 248.398200][ C1] ret_from_fork_asm+0x1a/0x30 [ 248.402989][ C1] [ 248.406014][ C1] task:syz-executor state:R running task stack:21736 pid:6148 tgid:6148 ppid:6124 task_flags:0x400140 flags:0x00080001 [ 248.419706][ C1] Call Trace: [ 248.422999][ C1] [ 248.425949][ C1] __schedule+0x1798/0x4cc0 [ 248.430573][ C1] ? __lock_acquire+0xab9/0xd20 [ 248.435458][ C1] ? __pfx___schedule+0x10/0x10 [ 248.440332][ C1] ? __asan_memset+0x22/0x50 [ 248.444945][ C1] ? snmp6_fill_stats+0x395/0x8d0 [ 248.450000][ C1] ? __pfx_snmp6_fill_stats+0x10/0x10 [ 248.455387][ C1] ? preempt_schedule+0xae/0xc0 [ 248.460248][ C1] ? inet6_fill_ifla6_attrs+0x11aa/0x23e0 [ 248.466093][ C1] preempt_schedule_common+0x83/0xd0 [ 248.471402][ C1] preempt_schedule+0xae/0xc0 [ 248.476098][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 248.481489][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 248.487578][ C1] preempt_schedule_thunk+0x16/0x30 [ 248.492805][ C1] __local_bh_enable_ip+0x13e/0x1c0 [ 248.498016][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 248.503752][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 248.508798][ C1] inet6_fill_ifla6_attrs+0x11aa/0x23e0 [ 248.514371][ C1] ? __pfx_inet6_fill_ifla6_attrs+0x10/0x10 [ 248.520302][ C1] inet6_fill_link_af+0x9b/0x120 [ 248.525252][ C1] rtnl_fill_link_af+0x1c8/0x440 [ 248.530224][ C1] rtnl_fill_ifinfo+0x1cad/0x1fa0 [ 248.535271][ C1] ? __pfx_rtnl_fill_ifinfo+0x10/0x10 [ 248.540696][ C1] ? ___kmalloc_large_node+0x180/0x1b0 [ 248.546184][ C1] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 248.552789][ C1] ? __alloc_skb+0x142/0x2d0 [ 248.557401][ C1] rtmsg_ifinfo_build_skb+0x17d/0x260 [ 248.562802][ C1] rtmsg_ifinfo+0x8c/0x1a0 [ 248.567237][ C1] __dev_notify_flags+0xf4/0x2e0 [ 248.572189][ C1] ? __pfx___dev_notify_flags+0x10/0x10 [ 248.577744][ C1] ? __dev_change_flags+0x4cc/0x6d0 [ 248.582964][ C1] ? __pfx___dev_change_flags+0x10/0x10 [ 248.588533][ C1] netif_change_flags+0xe8/0x1a0 [ 248.593487][ C1] do_setlink+0xc55/0x41c0 [ 248.597908][ C1] ? rcu_is_watching+0x15/0xb0 [ 248.602688][ C1] ? __schedule+0x17ae/0x4cc0 [ 248.607379][ C1] ? __lock_acquire+0xab9/0xd20 [ 248.612245][ C1] ? __pfx_do_setlink+0x10/0x10 [ 248.617103][ C1] ? __lock_acquire+0xab9/0xd20 [ 248.621982][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 248.627932][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.633155][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 248.639064][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 248.645411][ C1] ? rcu_is_watching+0x15/0xb0 [ 248.650192][ C1] ? __mutex_lock+0xd3b/0x1350 [ 248.654972][ C1] ? __mutex_lock+0x5bb/0x1350 [ 248.659747][ C1] ? rtnl_newlink+0x8e9/0x1c80 [ 248.664520][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 248.669575][ C1] ? ns_capable+0x8a/0xf0 [ 248.673917][ C1] ? rtnl_link_get_net_capable+0x16a/0x350 [ 248.679741][ C1] rtnl_newlink+0x1619/0x1c80 [ 248.684438][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 248.689486][ C1] ? __lock_acquire+0xab9/0xd20 [ 248.694359][ C1] ? __lock_acquire+0xab9/0xd20 [ 248.699229][ C1] ? __lock_acquire+0xab9/0xd20 [ 248.704104][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 248.709316][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 248.714606][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 248.719826][ C1] ? __lock_acquire+0xab9/0xd20 [ 248.724707][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 248.729751][ C1] rtnetlink_rcv_msg+0x7cf/0xb70 [ 248.734707][ C1] ? __lock_acquire+0xab9/0xd20 [ 248.739567][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 248.744700][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.750197][ C1] netlink_rcv_skb+0x208/0x470 [ 248.754968][ C1] ? __lock_acquire+0xab9/0xd20 [ 248.759830][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.765310][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.770624][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 248.775916][ C1] netlink_unicast+0x82f/0x9e0 [ 248.780721][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 248.786040][ C1] ? netlink_sendmsg+0x642/0xb30 [ 248.790987][ C1] ? skb_put+0x11b/0x210 [ 248.795244][ C1] netlink_sendmsg+0x805/0xb30 [ 248.800031][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.805330][ C1] ? aa_sock_msg_perm+0xf1/0x1d0 [ 248.810291][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.815586][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.820883][ C1] __sock_sendmsg+0x21c/0x270 [ 248.825580][ C1] __sys_sendto+0x3bd/0x520 [ 248.830094][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 248.835146][ C1] ? fput_close_sync+0x119/0x200 [ 248.840105][ C1] ? kmem_cache_free+0x4b5/0x690 [ 248.845086][ C1] __x64_sys_sendto+0xde/0x100 [ 248.849872][ C1] do_syscall_64+0xfa/0xfa0 [ 248.854398][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.859617][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.865695][ C1] ? clear_bhb_loop+0x60/0xb0 [ 248.870392][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.876292][ C1] RIP: 0033:0x7f85bdb915dc [ 248.880714][ C1] RSP: 002b:00007f85bdf0f630 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 248.889265][ C1] RAX: ffffffffffffffda RBX: 00007f85be914620 RCX: 00007f85bdb915dc [ 248.897255][ C1] RDX: 0000000000000020 RSI: 00007f85be914670 RDI: 0000000000000003 [ 248.905245][ C1] RBP: 0000000000000000 R08: 00007f85bdf0f684 R09: 000000000000000c [ 248.913229][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 248.921211][ C1] R13: 0000000000000000 R14: 00007f85be914670 R15: 0000000000000000 [ 248.929226][ C1] [ 248.932255][ C1] rcu: rcu_preempt kthread starved for 2390 jiffies! g11721 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 248.943374][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 248.953358][ C1] rcu: RCU grace-period kthread stack dump: [ 248.959253][ C1] task:rcu_preempt state:R running task stack:26728 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 248.972770][ C1] Call Trace: [ 248.976067][ C1] [ 248.979011][ C1] __schedule+0x1798/0x4cc0 [ 248.983558][ C1] ? __pfx___schedule+0x10/0x10 [ 248.988448][ C1] ? schedule+0x91/0x360 [ 248.992716][ C1] schedule+0x165/0x360 [ 248.996890][ C1] schedule_timeout+0x12b/0x270 [ 249.001783][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 249.007171][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 249.013083][ C1] ? __pfx_process_timeout+0x10/0x10 [ 249.018391][ C1] ? prepare_to_swait_event+0x341/0x380 [ 249.023961][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 249.028856][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 249.035040][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 249.040334][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 249.045562][ C1] rcu_gp_kthread+0x99/0x390 [ 249.050170][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 249.055381][ C1] ? __kthread_parkme+0x7b/0x200 [ 249.060333][ C1] ? __kthread_parkme+0x1a1/0x200 [ 249.065373][ C1] kthread+0x711/0x8a0 [ 249.069460][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 249.074685][ C1] ? __pfx_kthread+0x10/0x10 [ 249.079290][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.084505][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.089717][ C1] ? __pfx_kthread+0x10/0x10 [ 249.094422][ C1] ret_from_fork+0x4bc/0x870 [ 249.099030][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 249.104162][ C1] ? __switch_to_asm+0x39/0x70 [ 249.108932][ C1] ? __switch_to_asm+0x33/0x70 [ 249.113697][ C1] ? __pfx_kthread+0x10/0x10 [ 249.118299][ C1] ret_from_fork_asm+0x1a/0x30 [ 249.123084][ C1] [ 249.126104][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 249.132461][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 249.141437][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.151502][ C1] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 249.156898][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 10 21 c8 10 db 6b a0 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 249.176951][ C1] RSP: 0018:ffffc90000a07e48 EFLAGS: 00000282 [ 249.183032][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88801ce9dac0 [ 249.191013][ C1] RDX: 0000000000000100 RSI: ffffc90000a07fc0 RDI: ffff888031a5a480 [ 249.198999][ C1] RBP: 0000000000000000 R08: ffff88801ce9dac0 R09: 0000000000000002 [ 249.206987][ C1] R10: 000000000000c0fe R11: 0000000000000100 R12: 0000000000000000 [ 249.214971][ C1] R13: ffff888031a5a480 R14: ffff888031a5a480 R15: ffffc90000a07fc0 [ 249.222958][ C1] FS: 0000000000000000(0000) GS:ffff888126239000(0000) knlGS:0000000000000000 [ 249.231896][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.238589][ C1] CR2: 00007fab0a049f0f CR3: 0000000030fc4000 CR4: 00000000003526f0 [ 249.246586][ C1] Call Trace: [ 249.249873][ C1] [ 249.252725][ C1] rcu_read_lock_held+0x15/0x50 [ 249.257600][ C1] l3mdev_link_scope_lookup+0x1c/0x1c0 [ 249.263083][ C1] ip6_route_output_flags+0xfb/0x5d0 [ 249.268386][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 249.273867][ C1] __nf_ip6_route+0x42/0xd0 [ 249.278389][ C1] synproxy_send_tcp_ipv6+0x252/0x700 [ 249.283778][ C1] ? __cookie_v6_init_sequence+0x2d9/0x520 [ 249.289611][ C1] ? __pfx___cookie_v6_init_sequence+0x10/0x10 [ 249.295791][ C1] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 249.301705][ C1] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 249.307089][ C1] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 249.313179][ C1] ? __build_skb_around+0x262/0x3f0 [ 249.318390][ C1] ? synproxy_send_client_synack_ipv6+0x34f/0xca0 [ 249.324816][ C1] ? skb_put+0x11b/0x210 [ 249.329075][ C1] synproxy_send_client_synack_ipv6+0x80e/0xca0 [ 249.335343][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 249.342120][ C1] ? nft_synproxy_eval_v6+0x144/0x560 [ 249.347511][ C1] ? synproxy_pernet+0x45/0x270 [ 249.352387][ C1] nft_synproxy_eval_v6+0x36e/0x560 [ 249.357615][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 249.363364][ C1] ? nf_ip_checksum+0x13c/0x510 [ 249.368338][ C1] nft_synproxy_do_eval+0x3d7/0x570 [ 249.373563][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 249.379302][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 249.384705][ C1] nft_do_chain+0x40c/0x1920 [ 249.389329][ C1] ? ip6t_do_table+0x1376/0x1560 [ 249.394291][ C1] ? nf_nat_inet_fn+0x924/0xba0 [ 249.399157][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 249.404190][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 249.409076][ C1] ? nf_nat_ipv6_fn+0x21d/0x2d0 [ 249.413949][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 249.419170][ C1] nft_do_chain_inet+0x25d/0x340 [ 249.424127][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 249.429605][ C1] ? nf_nat_ipv6_local_in+0x14f/0x650 [ 249.435200][ C1] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 249.440946][ C1] ? NF_HOOK+0x9a/0x3a0 [ 249.445119][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 249.450596][ C1] nf_hook_slow+0xc5/0x220 [ 249.455037][ C1] NF_HOOK+0x206/0x3a0 [ 249.459125][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 249.464502][ C1] ? NF_HOOK+0x9a/0x3a0 [ 249.468759][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 249.473365][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 249.478795][ C1] ip6_input+0x16a/0x270 [ 249.483046][ C1] ? ip6_input+0x23/0x270 [ 249.487390][ C1] NF_HOOK+0x30c/0x3a0 [ 249.491463][ C1] ? skb_orphan+0xaf/0xd0 [ 249.495805][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 249.501024][ C1] ? NF_HOOK+0x9a/0x3a0 [ 249.505205][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 249.509834][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 249.515064][ C1] __netif_receive_skb+0xd3/0x380 [ 249.520120][ C1] ? process_backlog+0x2d5/0x14f0 [ 249.525177][ C1] process_backlog+0x60e/0x14f0 [ 249.530078][ C1] ? __pfx_process_backlog+0x10/0x10 [ 249.535403][ C1] __napi_poll+0xc7/0x360 [ 249.539749][ C1] ? skb_defer_free_flush+0x229/0x250 [ 249.545141][ C1] net_rx_action+0x5f7/0xdf0 [ 249.549764][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 249.554935][ C1] handle_softirqs+0x286/0x870 [ 249.559712][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 249.564496][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 249.569801][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 249.575021][ C1] __irq_exit_rcu+0xca/0x1f0 [ 249.579626][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 249.584843][ C1] irq_exit_rcu+0x9/0x30 [ 249.589096][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 249.594743][ C1] [ 249.597681][ C1] [ 249.600614][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 249.606602][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 249.612349][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 91 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 249.632001][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 249.638088][ C1] RAX: 3d7fc4376259dd00 RBX: ffffffff81967b47 RCX: 3d7fc4376259dd00 [ 249.646074][ C1] RDX: 0000000000000001 RSI: ffffffff8d70e87c RDI: ffffffff8bbf08e0 [ 249.654061][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 249.662044][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cf070 [ 249.670038][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 249.678028][ C1] ? do_idle+0x1e7/0x510 [ 249.682302][ C1] default_idle+0x13/0x20 [ 249.686639][ C1] default_idle_call+0x73/0xb0 [ 249.691412][ C1] do_idle+0x1e7/0x510 [ 249.695498][ C1] ? __pfx_do_idle+0x10/0x10 [ 249.700111][ C1] cpu_startup_entry+0x44/0x60 [ 249.704886][ C1] start_secondary+0x101/0x110 [ 249.709682][ C1] common_startup_64+0x13e/0x147 [ 249.714675][ C1] [ 254.312379][ T5843] Bluetooth: hci6: command 0x0406 tx timeout [ 254.341778][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 254.372079][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 254.395227][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 254.401286][ T5841] Bluetooth: hci1: command 0x0406 tx timeout