last executing test programs: 8.126153605s ago: executing program 0 (id=1): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x14080) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{0x0}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x7, 0x4) close(r2) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) syz_usb_connect(0x3, 0x64, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a240100000002010205240456"], 0x0) 7.399054237s ago: executing program 4 (id=5): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x14080) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x7, 0x4) close(r2) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) syz_usb_connect(0x3, 0x64, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a240100000002010205240456"], 0x0) 7.179121411s ago: executing program 2 (id=3): openat$kvm(0xffffff9c, &(0x7f0000000180), 0x4a000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffff9c, &(0x7f0000001740), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd\x00') memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xf) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) fstat(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00001e0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x22, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x80000005}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7ffd}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @call={0x85, 0x0, 0x0, 0xd}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x72}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xfffffff9, 0x84, &(0x7f0000001380)=""/132, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x9, 0xffffffff, 0x400}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001640)=[{0x3, 0x1, 0x8, 0x4}, {0x5, 0x4}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x6, 0x7}], 0x10, 0x100, @void, @value}, 0x94) 6.501938498s ago: executing program 1 (id=2): r0 = socket(0x1e, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) 6.283395277s ago: executing program 3 (id=4): openat$kvm(0xffffff9c, &(0x7f0000000180), 0x4a000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffff9c, &(0x7f0000001740), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd\x00') memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xf) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) fstat(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00001e0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x22, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x80000005}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7ffd}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @call={0x85, 0x0, 0x0, 0xd}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x72}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xfffffff9, 0x84, &(0x7f0000001380)=""/132, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x9, 0xffffffff, 0x400}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001640)=[{0x3, 0x1, 0x8, 0x4}, {0x5, 0x4}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x6, 0x7}], 0x10, 0x100, @void, @value}, 0x94) 6.156396798s ago: executing program 1 (id=6): unshare(0x2c020400) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x68882, 0x0) pread64(r0, 0x0, 0x0, 0x358) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000000)=0x5) r4 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f00000001c0)=0x2000, 0x4) 5.30108019s ago: executing program 0 (id=7): unshare(0x2c020400) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x68882, 0x0) pread64(r0, 0x0, 0x0, 0x358) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000000)=0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f00000001c0)=0x2000, 0x4) 5.090047487s ago: executing program 1 (id=8): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000080)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0x2, 0xe, 0x3, 0x6, 0x5, 0x0, 0x0, 0x615, 0x3, 0x4, 0x3e, 0xa, '\x00', 0x7, 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x1, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x8, 0xffffffffffffffff}, 0xfffffffe, 0x2000000}}, 0xb8}}, 0x4004) rmdir(&(0x7f0000000100)='./file0\x00') sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) socket$key(0xf, 0x3, 0x2) 4.56285523s ago: executing program 0 (id=9): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f0000000740), 0xff67) sendfile(r2, r3, &(0x7f0000000040), 0xffff) fcntl$addseals(r3, 0x409, 0x8) lseek(r3, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) syz_emit_vhci(0x0, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000000c0)={0x1, 0x2}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f700", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000140), 0x2, 0x0) 4.447107899s ago: executing program 1 (id=10): openat$kvm(0xffffff9c, &(0x7f0000000180), 0x4a000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffff9c, &(0x7f0000001740), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd\x00') memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xf) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x227d, 0x709, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x8, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x67}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) fstat(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00001e0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x22, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x80000005}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7ffd}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @call={0x85, 0x0, 0x0, 0xd}, @map_val={0x18, 0x4, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x72}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xfffffff9, 0x84, &(0x7f0000001380)=""/132, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x9, 0xffffffff, 0x400}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001640)=[{0x3, 0x1, 0x8, 0x4}, {0x5, 0x4}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x6, 0x7}], 0x10, 0x100, @void, @value}, 0x94) 3.635500849s ago: executing program 4 (id=11): umount2(&(0x7f0000000000)='./file0\x00', 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x9, 0x8, 0x8, 0x40, r0, 0x8, '\x00', r1, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0x9, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x67, 0x0}, 0x8) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x18, r2}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x1a, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0xe, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x1, 0x0, 0x9, 0x5, 0x50, 0xfffffffffffffff0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @ldst={0x3, 0x2, 0x5, 0x7, 0x5, 0x100, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8c8, 0x0, 0x0, 0x0, 0x8f8f}, @call={0x85, 0x0, 0x0, 0x56}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x1ff, 0xd, &(0x7f0000000300)=""/13, 0x40f00, 0x20, '\x00', r1, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x8, 0x2, 0x1}, 0x10, r3, r4, 0x3, 0x0, &(0x7f0000000480)=[{0x1, 0x1, 0xe}, {0x5, 0x5, 0x8, 0x3}, {0x1, 0x2, 0x3, 0xb}], 0x10, 0xa, @void, @value}, 0x94) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x10003, 0x1, 0x4000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000005c0)={0x2, 0x2, 0x1, 0x0, 0x0, [{{r5}, 0x7}]}) r7 = openat$kvm(0xffffff9c, &(0x7f0000000600), 0x44a000, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x7) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000640)={0x1, 0x0, @ioapic={0x8080000, 0x4, 0x3ff, 0x8, 0x0, [{0x8, 0x5b, 0x3, '\x00', 0xff}, {0x7, 0x8, 0x1, '\x00', 0x1}, {0x6, 0x8, 0x2, '\x00', 0x9}, {0x19, 0x47, 0x1, '\x00', 0x5}, {0xff, 0x6, 0xf4, '\x00', 0x2}, {0x3, 0x6, 0x1, '\x00', 0x7}, {0x4, 0x2, 0xf2, '\x00', 0xd}, {0x5, 0x3, 0x7, '\x00', 0x1}, {0x2, 0x0, 0x8, '\x00', 0x7}, {0x0, 0x3, 0x2, '\x00', 0x6}, {0x8, 0x56, 0x0, '\x00', 0x3}, {0x0, 0x51, 0x6b, '\x00', 0x8}, {0x3, 0xc3, 0x8, '\x00', 0x2}, {0xc, 0x10, 0x5, '\x00', 0x1c}, {0xf, 0x4, 0x2, '\x00', 0x40}, {0xff, 0x5, 0x3, '\x00', 0xd7}, {0x51, 0x3, 0x8, '\x00', 0x7}, {0x81, 0x7, 0x1, '\x00', 0x4}, {0x1, 0xe0, 0x7}, {0x3, 0x9f, 0x9, '\x00', 0x6}, {0x0, 0x6, 0x40}, {0x5, 0xc, 0x82, '\x00', 0xff}, {0x9, 0x4, 0xc, '\x00', 0x5}, {0xea, 0x3, 0x7, '\x00', 0xd}]}}) syz_open_dev$I2C(&(0x7f0000000880), 0x7, 0x101400) openat$tun(0xffffff9c, &(0x7f00000008c0), 0x581080, 0x0) r9 = openat$fuse(0xffffff9c, &(0x7f0000000900), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f0000000940)={0x30, 0x5, 0x0, {0x0, 0x2, 0x4, 0xdd6}}, 0x30) socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a00)={0xffffffffffffffff, 0x20, &(0x7f00000019c0)={&(0x7f0000000980)=""/32, 0x20, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}}, 0x10) r10 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001a40)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000001a80)=0x8, 0x12) r11 = fcntl$dupfd(r6, 0x0, r8) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000001ac0)=0x0) getpriority(0x2, r12) shutdown(0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x8, 0x0) pipe(&(0x7f0000001b00)) 3.419782774s ago: executing program 2 (id=12): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010401"], 0x14}}, 0x0) 3.231215543s ago: executing program 2 (id=13): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0xe, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x6, 0x8, 0x54, 0xff, 0x2}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000040)=0x9eb9, 0x4) bind$inet6(r3, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080)) r4 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x2, 0x100, 0x4, {0xf, 0x82, 0x1, 0x7}}) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r2], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b04000023dc5ad93c5c2b7b0000", @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005001600030000"], 0x44}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r8, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x25a982b1) ioctl$MON_IOCX_GETX(r8, 0x80089203, 0x0) 3.161988749s ago: executing program 4 (id=14): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x7, 0x0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0xb84, 0x0, 0x111, 0x4b4, 0x1d0, 0xd4feffff, 0xabc, 0x20a, 0x278, 0xabc, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {0xff}, {}, 0x6}, 0x7a, 0x1ac, 0x1d0, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x0, 0x1, [0x6, 0xf001, 0x8, 0x80, 0x7, 0x0, 0x2, 0xffff, 0x0, 0x7, 0x6, 0x7, 0x97, 0xdf5, 0x4d, 0x1], 0x3}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0x884, 0x8ec, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {}, {}, {}, {}, {}, {}, {[], [{}, {}, {0x0, 0x3}, {0xa3c}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[{}, {0x0, 0x2}]}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xbe0) r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000c40), 0x109000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x40045402, &(0x7f0000000c80)) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0xec, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x820, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in=@multicast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x8, 0x0, 0xffffffff, 0x2, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}}, 0xec}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x100000}}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) dup2(0xffffffffffffffff, r7) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005d00)=ANY=[@ANYRESDEC], 0x5a1c}, 0x1, 0x0, 0x0, 0x8008801}, 0x80) unshare(0x22020600) 2.824547822s ago: executing program 0 (id=15): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f09"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xbc}}, 0x20050800) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_io_uring_setup(0x1114, &(0x7f0000000200), &(0x7f00000001c0), &(0x7f0000000040)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d00010000"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="31032dbd7000fda600000b0000", @ANYRES64=r4], 0x1c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4004810) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000015c0)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x18, &(0x7f0000000140)={0x0, 0x22, 0x3c, {0x3c, 0x4, "37a15ea1fbdc08cba9b32a1788811bdd7604d28a9403617365cb8990b1a01e5bee59d4462bfbc4abc34ba27e2f04749057de70ba046ba97afdaf"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000000300)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x5, 0xd}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x2a, 0x4, 0x6, 0xf00, 0x3, [0x0, 0xc0c0, 0x3f00, 0xc0]}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc0, 0x0, 0x6, 0x35, "69a56cbe", "33b48082"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x5, 0x2, 0x5, 0x5, 0x441}}}, &(0x7f0000000980)={0x44, &(0x7f0000000580)={0x20, 0xc, 0xbc, "e0f8442f51ff6257e939a8eb992db83079b1623ddaea7f457241fbcec9c7fa31327bc8f6f3f363a63520ddfd049ef5a9b5a5946a2ead934ef2414738ad7f507394cd5f07bc1ec91cb15da9e66720aa9ce8bcc4041a4245a42e8deacc61c9a404241639a2947c663fd0a60d5230b6b06f0eb364623e2c658c6d4f3e8b7a3e64d7454040bb37e5959c0c0f19482fac75ca35a3b239e3f381dab71973f8194777c1ddf4398cd54c35926d5b0026f64dea42406a1174cfc79ce7b00746f3"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x8, 0x8, [0xf]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000740)={0x40, 0xb, 0x2, "a10e"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0xfe}, &(0x7f00000007c0)={0x40, 0x13, 0x6}, &(0x7f0000000800)={0x40, 0x17, 0x6, @random="01039f114eb2"}, &(0x7f0000000840)={0x40, 0x19, 0x2, "a49c"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0xfffa}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0xa3}, &(0x7f0000000900)={0x40, 0x1e, 0x1}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x4}}) 1.843776428s ago: executing program 3 (id=16): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000000)={0x500, 0x2, 'client1\x00', 0x6, '\x00', "89907bfee4ff8a6fd79677ccb3cb800de4d308008b30d2f0be902c11888700", 0x7, 0x10001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB="28000000010401030000000000000000010000030a000200000038ffd50000000500010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x40) 1.489846283s ago: executing program 3 (id=17): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x0, 0x1440, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) unshare(0x2a020400) r0 = socket(0x1e, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) 731.760073ms ago: executing program 3 (id=18): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 366.98837ms ago: executing program 1 (id=19): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x2e, 0x2, 0x7, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r2, 0x5501) fsmount(r1, 0x1, 0x2) close(r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013102000100"}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x38011, r1, 0x49057000) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x50, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000280)={&(0x7f0000000180)=""/208, 0xd0}) sendmsg$nl_route_sched(r4, &(0x7f000000c7c0)={0x0, 0x0, &(0x7f000000c780)={&(0x7f00000009c0)=@newtaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0x0) 0s ago: executing program 1 (id=20): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) socket(0x848000000015, 0x805, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e000000040002800800", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. [ 82.390347][ T5831] cgroup: Unknown subsys name 'net' [ 82.499638][ T5831] cgroup: Unknown subsys name 'cpuset' [ 82.509174][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.122277][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.633718][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.642262][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.650061][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.658711][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.676315][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.792591][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.800818][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.808466][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.816704][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.824398][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.905473][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.919148][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.947174][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.976233][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.986114][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.006983][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.014765][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.017829][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.031410][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.039351][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.070585][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.086653][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.094143][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.107975][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.118899][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.551577][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 87.842433][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.850121][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.857677][ T5844] bridge_slave_0: entered allmulticast mode [ 87.864902][ T5844] bridge_slave_0: entered promiscuous mode [ 87.897426][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 87.956746][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.963919][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.971157][ T5844] bridge_slave_1: entered allmulticast mode [ 87.979075][ T5844] bridge_slave_1: entered promiscuous mode [ 87.997218][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 88.102685][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.120858][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 88.138495][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 88.153708][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.285096][ T5844] team0: Port device team_slave_0 added [ 88.294719][ T5844] team0: Port device team_slave_1 added [ 88.396169][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.403401][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.410941][ T5847] bridge_slave_0: entered allmulticast mode [ 88.418825][ T5847] bridge_slave_0: entered promiscuous mode [ 88.428548][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.435981][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.443169][ T5847] bridge_slave_1: entered allmulticast mode [ 88.450665][ T5847] bridge_slave_1: entered promiscuous mode [ 88.475082][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.484744][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.492043][ T5854] bridge_slave_0: entered allmulticast mode [ 88.500569][ T5854] bridge_slave_0: entered promiscuous mode [ 88.563553][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.571433][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.580149][ T5854] bridge_slave_1: entered allmulticast mode [ 88.587585][ T5854] bridge_slave_1: entered promiscuous mode [ 88.595338][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.603060][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.629371][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.656760][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.663933][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.671290][ T5857] bridge_slave_0: entered allmulticast mode [ 88.679610][ T5857] bridge_slave_0: entered promiscuous mode [ 88.702996][ T5155] Bluetooth: hci0: command tx timeout [ 88.743183][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.750469][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.776457][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.795326][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.802792][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.810156][ T5857] bridge_slave_1: entered allmulticast mode [ 88.817952][ T5857] bridge_slave_1: entered promiscuous mode [ 88.828170][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.853663][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.863203][ T5155] Bluetooth: hci1: command tx timeout [ 88.870222][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.897846][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.998520][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.006227][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.013367][ T5859] bridge_slave_0: entered allmulticast mode [ 89.021167][ T5859] bridge_slave_0: entered promiscuous mode [ 89.037335][ T5844] hsr_slave_0: entered promiscuous mode [ 89.043705][ T5844] hsr_slave_1: entered promiscuous mode [ 89.064588][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.078195][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.090049][ T5847] team0: Port device team_slave_0 added [ 89.096782][ T5155] Bluetooth: hci3: command tx timeout [ 89.100057][ T5850] Bluetooth: hci2: command tx timeout [ 89.106959][ T5847] team0: Port device team_slave_1 added [ 89.128029][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.135226][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.143034][ T5859] bridge_slave_1: entered allmulticast mode [ 89.150513][ T5859] bridge_slave_1: entered promiscuous mode [ 89.175383][ T5854] team0: Port device team_slave_0 added [ 89.181426][ T5850] Bluetooth: hci4: command tx timeout [ 89.224578][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.232010][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.258407][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.285230][ T5854] team0: Port device team_slave_1 added [ 89.296904][ T5857] team0: Port device team_slave_0 added [ 89.316746][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.323749][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.351060][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.371049][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.395967][ T5857] team0: Port device team_slave_1 added [ 89.413549][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.512950][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.520128][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.547139][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.560455][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.567514][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.593656][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.605390][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.612610][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.638730][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.705588][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.712613][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.739276][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.769852][ T5847] hsr_slave_0: entered promiscuous mode [ 89.776825][ T5847] hsr_slave_1: entered promiscuous mode [ 89.784005][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.792052][ T5847] Cannot create hsr debugfs directory [ 89.800371][ T5859] team0: Port device team_slave_0 added [ 89.809718][ T5859] team0: Port device team_slave_1 added [ 89.921251][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.928553][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.954596][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.025458][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.032814][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.059156][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.102783][ T5854] hsr_slave_0: entered promiscuous mode [ 90.109212][ T5854] hsr_slave_1: entered promiscuous mode [ 90.115308][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.123943][ T5854] Cannot create hsr debugfs directory [ 90.170066][ T5857] hsr_slave_0: entered promiscuous mode [ 90.176510][ T5857] hsr_slave_1: entered promiscuous mode [ 90.182564][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.190824][ T5857] Cannot create hsr debugfs directory [ 90.427270][ T5859] hsr_slave_0: entered promiscuous mode [ 90.433647][ T5859] hsr_slave_1: entered promiscuous mode [ 90.440821][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.448438][ T5859] Cannot create hsr debugfs directory [ 90.509235][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.571782][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.618356][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.657836][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.774673][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.782374][ T5850] Bluetooth: hci0: command tx timeout [ 90.793586][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.825303][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.837333][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.929187][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.936159][ T5850] Bluetooth: hci1: command tx timeout [ 90.944934][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.957581][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.970463][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.087762][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.099658][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.113332][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.127385][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.176579][ T5155] Bluetooth: hci2: command tx timeout [ 91.182884][ T5850] Bluetooth: hci3: command tx timeout [ 91.256505][ T5850] Bluetooth: hci4: command tx timeout [ 91.273669][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.288855][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.300901][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.328018][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.337408][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.394807][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.422542][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.472051][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.479344][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.513557][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.520728][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.564990][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.611699][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.618992][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.638609][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.656829][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.664123][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.679455][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.752288][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.779052][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.791070][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.798277][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.822732][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.829913][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.890381][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.897583][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.909004][ T47] cfg80211: failed to load regulatory.db [ 91.914383][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.921823][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.031639][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.071821][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.107689][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.161072][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.182085][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.202522][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.209687][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.249152][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.256311][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.294120][ T5844] veth0_vlan: entered promiscuous mode [ 92.330258][ T5844] veth1_vlan: entered promiscuous mode [ 92.343630][ T5847] veth0_vlan: entered promiscuous mode [ 92.358723][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.382837][ T5847] veth1_vlan: entered promiscuous mode [ 92.461343][ T5844] veth0_macvtap: entered promiscuous mode [ 92.479448][ T5857] veth0_vlan: entered promiscuous mode [ 92.498436][ T5844] veth1_macvtap: entered promiscuous mode [ 92.543280][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.555464][ T5857] veth1_vlan: entered promiscuous mode [ 92.574491][ T5847] veth0_macvtap: entered promiscuous mode [ 92.584452][ T5854] veth0_vlan: entered promiscuous mode [ 92.608367][ T5847] veth1_macvtap: entered promiscuous mode [ 92.624652][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.643224][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.661424][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.670969][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.680182][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.689491][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.704634][ T5854] veth1_vlan: entered promiscuous mode [ 92.783476][ T5859] veth0_vlan: entered promiscuous mode [ 92.792703][ T5857] veth0_macvtap: entered promiscuous mode [ 92.816497][ T5859] veth1_vlan: entered promiscuous mode [ 92.828788][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.839488][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.850808][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.858421][ T5850] Bluetooth: hci0: command tx timeout [ 92.893378][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.909425][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.922014][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.933221][ T5857] veth1_macvtap: entered promiscuous mode [ 92.955239][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.964259][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.973440][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.982339][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.016503][ T5850] Bluetooth: hci1: command tx timeout [ 93.044978][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.053965][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.072338][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.087432][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.098003][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.108610][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.119799][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.132086][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.142811][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.153875][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.164424][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.176473][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.221988][ T5859] veth0_macvtap: entered promiscuous mode [ 93.222126][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.234310][ T5859] veth1_macvtap: entered promiscuous mode [ 93.242110][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.256823][ T5850] Bluetooth: hci3: command tx timeout [ 93.262265][ T5850] Bluetooth: hci2: command tx timeout [ 93.272281][ T5857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.290631][ T5857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.299850][ T5857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.309004][ T5857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.329489][ T5854] veth0_macvtap: entered promiscuous mode [ 93.336887][ T5850] Bluetooth: hci4: command tx timeout [ 93.372500][ T5854] veth1_macvtap: entered promiscuous mode [ 93.429284][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.447502][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.459487][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.470351][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.481270][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.492018][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.504682][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.520851][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.534633][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.534869][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.604476][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.615602][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.625674][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.640428][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.666886][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.694655][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.706136][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.720467][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.732445][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.754475][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.766585][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.778124][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.789293][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.799371][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.810443][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.822897][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.838909][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.850201][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.861687][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.873499][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.884343][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.895496][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.913186][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.924118][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.937876][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.995082][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.995954][ T5854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.013813][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.026087][ T5854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.034826][ T5854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.043859][ T5854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.068578][ T5859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.080163][ T5859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.093199][ T5859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.093705][ T5899] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 94.105173][ T5859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.148395][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.171699][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.289941][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.330653][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.447048][ T1207] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.480375][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.499047][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.535145][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.566022][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.629156][ T1207] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 94.686061][ T1207] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.708274][ T1207] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 94.734055][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.744566][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.765828][ T1207] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 94.779632][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.789374][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.798436][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.806968][ T1207] usb 1-1: Product: syz [ 94.811161][ T1207] usb 1-1: Manufacturer: syz [ 94.841821][ T1207] usb 1-1: SerialNumber: syz [ 94.864767][ T1207] usb 1-1: config 0 descriptor?? [ 94.916794][ T1207] usb-storage 1-1:0.0: USB Mass Storage device detected [ 94.941903][ T5850] Bluetooth: hci0: command tx timeout [ 95.014624][ T1207] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 95.101844][ T5850] Bluetooth: hci1: command tx timeout [ 95.174358][ T1207] usb 1-1: USB disconnect, device number 2 [ 95.207126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.215887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 95.260223][ T5896] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.302766][ T5912] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 95.338314][ T5850] Bluetooth: hci2: command tx timeout [ 95.344018][ T5155] Bluetooth: hci3: command tx timeout [ 95.417039][ T5155] Bluetooth: hci4: command tx timeout [ 95.546066][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 95.565689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.589805][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.653456][ T5896] usb 3-1: config 0 has no interfaces? [ 95.705692][ T5896] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 95.806880][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.841764][ T5896] usb 3-1: config 0 descriptor?? [ 95.911513][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.956151][ T5915] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.100646][ T5925] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.153623][ T5915] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 96.206201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.242619][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.255986][ T5853] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.294392][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 96.366314][ T5915] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 96.375530][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.410050][ T5915] usb 5-1: Product: syz [ 96.425292][ T5915] usb 5-1: Manufacturer: syz [ 96.440609][ T5853] usb 4-1: Using ep0 maxpacket: 16 [ 96.473355][ T5853] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.486367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.494665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.508173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.535000][ T5853] usb 4-1: config 0 has no interfaces? [ 96.543492][ T5853] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 96.562282][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.585902][ T5915] usb 5-1: SerialNumber: syz [ 96.622208][ T5915] usb 5-1: config 0 descriptor?? [ 96.627035][ T5853] usb 4-1: config 0 descriptor?? [ 96.667116][ T5915] usb-storage 5-1:0.0: USB Mass Storage device detected [ 96.709258][ T5915] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 96.920681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.987874][ T5915] usb 5-1: USB disconnect, device number 2 [ 96.996205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.066028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.131481][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 97.149835][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 97.796682][ T5942] misc userio: Invalid payload size [ 98.334114][ T5891] usb 3-1: USB disconnect, device number 2 [ 98.355728][ T5890] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.545895][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 98.588489][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.650908][ T5890] usb 2-1: config 0 has no interfaces? [ 98.671085][ T5890] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 98.706125][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.827220][ T5890] usb 2-1: config 0 descriptor?? [ 99.034343][ T5961] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 99.081714][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.090326][ T5891] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.147369][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.614839][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 99.742434][ T5915] usb 4-1: USB disconnect, device number 2 [ 99.885759][ T5855] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.932682][ T5891] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.951015][ T5891] usb 3-1: config 1 interface 0 has no altsetting 0 [ 100.031116][ T5891] usb 3-1: string descriptor 0 read error: -22 [ 100.042295][ T5891] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 100.109299][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.125918][ T5855] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.142730][ T5855] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.159292][ T5855] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 100.193861][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.411340][ T5855] usb 1-1: config 0 descriptor?? [ 100.533322][ T5968] ======================================================= [ 100.533322][ T5968] WARNING: The mand mount option has been deprecated and [ 100.533322][ T5968] and is ignored by this kernel. Remove the mand [ 100.533322][ T5968] option from the mount to silence this warning. [ 100.533322][ T5968] ======================================================= [ 100.585275][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 101.376461][ T24] usb 2-1: USB disconnect, device number 2 [ 101.461312][ T5915] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.593878][ T5977] input: syz0 as /devices/virtual/input/input5 [ 101.648227][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 101.668340][ T5915] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 101.688841][ T5915] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 101.734202][ T5977] Zero length message leads to an empty skb [ 101.782587][ T5915] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.830834][ T5915] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.894455][ T5915] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 101.924230][ T5982] netlink: 'syz.1.20': attribute type 16 has an invalid length. [ 101.968624][ T5982] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000055: 0000 [#1] SMP KASAN PTI [ 101.980570][ T5982] KASAN: null-ptr-deref in range [0x00000000000002a8-0x00000000000002af] [ 101.989028][ T5982] CPU: 1 UID: 0 PID: 5982 Comm: syz.1.20 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 102.000875][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.010962][ T5982] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 102.016678][ T5982] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 9a fe 3a f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 72 fe 3a f8 45 31 e4 48 83 7d 00 [ 102.026128][ T5915] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.036380][ T5982] RSP: 0018:ffffc9000b4fee50 EFLAGS: 00010206 [ 102.036409][ T5982] RAX: 0000000000000055 RBX: ffff88805f240008 RCX: 0000000000080000 [ 102.036423][ T5982] RDX: ffffc90004892000 RSI: 000000000000294c RDI: 000000000000294d [ 102.036437][ T5982] RBP: 00000000000002a8 R08: ffffffff89f28f69 R09: 1ffff9200169fdf6 [ 102.036451][ T5982] R10: dffffc0000000000 R11: fffff5200169fdf7 R12: ffff88805fa44080 [ 102.036467][ T5982] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805f240000 [ 102.049428][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.051562][ T5982] FS: 0000000000000000(0000) GS:ffff888125093000(0063) knlGS:00000000f5046b40 [ 102.051585][ T5982] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 102.051601][ T5982] CR2: 000000000c2fa745 CR3: 000000002a4fc000 CR4: 00000000003526f0 [ 102.122937][ T5982] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.130925][ T5982] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.138905][ T5982] Call Trace: [ 102.142198][ T5982] [ 102.145138][ T5982] rtnl_newlink_create+0x2f2/0xcb0 [ 102.150270][ T5982] ? __mutex_lock+0x380/0x10c0 [ 102.155096][ T5982] ? __pfx_aa_get_newest_label+0x10/0x10 [ 102.160748][ T5982] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 102.166397][ T5982] ? __pfx___mutex_lock+0x10/0x10 [ 102.171438][ T5982] ? ns_capable+0x8a/0xf0 [ 102.175780][ T5982] rtnl_newlink+0x18b0/0x1fe0 [ 102.180484][ T5982] ? stack_depot_save_flags+0x44/0x940 [ 102.185975][ T5982] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.191012][ T5982] ? __netlink_deliver_tap+0x561/0x7f0 [ 102.196490][ T5982] ? netlink_deliver_tap+0x19d/0x1b0 [ 102.201789][ T5982] ? netlink_unicast+0x7c6/0x9a0 [ 102.206738][ T5982] ? netlink_sendmsg+0x8c3/0xcd0 [ 102.211694][ T5982] ? __sock_sendmsg+0x221/0x270 [ 102.216561][ T5982] ? ____sys_sendmsg+0x523/0x860 [ 102.221542][ T5982] ? __sys_sendmsg+0x271/0x360 [ 102.226345][ T5982] ? __do_fast_syscall_32+0xb4/0x110 [ 102.231672][ T5982] ? do_fast_syscall_32+0x34/0x80 [ 102.236729][ T5982] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.243267][ T5982] ? kasan_quarantine_put+0xdc/0x230 [ 102.248573][ T5982] ? lockdep_hardirqs_on+0x9d/0x150 [ 102.253798][ T5982] ? nlmon_xmit+0xaf/0x100 [ 102.258234][ T5982] ? __local_bh_enable_ip+0x168/0x200 [ 102.263615][ T5982] ? lockdep_hardirqs_on+0x9d/0x150 [ 102.268826][ T5982] ? aa_get_newest_label+0x101/0x6f0 [ 102.274132][ T5982] ? __lock_acquire+0xad5/0xd80 [ 102.279007][ T5982] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.284049][ T5982] rtnetlink_rcv_msg+0x80f/0xd70 [ 102.289005][ T5982] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 102.294130][ T5982] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.299611][ T5982] ? ref_tracker_free+0x63e/0x7e0 [ 102.304643][ T5982] netlink_rcv_skb+0x208/0x480 [ 102.309422][ T5982] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.314890][ T5982] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.320190][ T5982] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.325404][ T5982] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.330615][ T5982] netlink_unicast+0x7f8/0x9a0 [ 102.335390][ T5982] ? __pfx_netlink_unicast+0x10/0x10 [ 102.340689][ T5982] ? skb_put+0x114/0x1f0 [ 102.344959][ T5982] netlink_sendmsg+0x8c3/0xcd0 [ 102.349795][ T5982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.355111][ T5982] ? __import_iovec+0x585/0x830 [ 102.359989][ T5982] ? aa_sock_msg_perm+0x91/0x160 [ 102.364957][ T5982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.370299][ T5982] __sock_sendmsg+0x221/0x270 [ 102.374997][ T5982] ____sys_sendmsg+0x523/0x860 [ 102.379792][ T5982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.385089][ T5982] __sys_sendmsg+0x271/0x360 [ 102.389684][ T5982] ? __pfx_futex_wake+0x10/0x10 [ 102.394539][ T5982] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.399710][ T5982] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 102.406321][ T5982] ? lockdep_hardirqs_on+0x9d/0x150 [ 102.411546][ T5982] __do_fast_syscall_32+0xb4/0x110 [ 102.416670][ T5982] ? exc_page_fault+0x5f8/0x920 [ 102.421617][ T5982] do_fast_syscall_32+0x34/0x80 [ 102.426481][ T5982] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.432820][ T5982] RIP: 0023:0xf73bd579 [ 102.436909][ T5982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 102.456527][ T5982] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 102.464983][ T5982] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000800000c0 [ 102.473135][ T5982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.481145][ T5982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.489123][ T5982] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 102.497103][ T5982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.505086][ T5982] [ 102.508115][ T5982] Modules linked in: [ 102.513311][ T5982] ---[ end trace 0000000000000000 ]--- [ 102.528367][ T5915] usbtmc 4-1:16.0: bulk endpoints not found [ 102.598022][ T5982] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 102.603958][ T5982] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 9a fe 3a f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 72 fe 3a f8 45 31 e4 48 83 7d 00 [ 102.647778][ T5891] usbhid 3-1:1.0: can't add hid device: -71 [ 102.656157][ T5891] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 102.672591][ T5891] usb 3-1: USB disconnect, device number 3 [ 102.685024][ T5982] RSP: 0018:ffffc9000b4fee50 EFLAGS: 00010206 [ 102.700797][ T5982] RAX: 0000000000000055 RBX: ffff88805f240008 RCX: 0000000000080000 [ 102.710502][ T5982] RDX: ffffc90004892000 RSI: 000000000000294c RDI: 000000000000294d [ 102.719888][ T5982] RBP: 00000000000002a8 R08: ffffffff89f28f69 R09: 1ffff9200169fdf6 [ 102.729214][ T5982] R10: dffffc0000000000 R11: fffff5200169fdf7 R12: ffff88805fa44080 [ 102.748804][ T5982] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805f240000 [ 102.758373][ T5982] FS: 0000000000000000(0000) GS:ffff888124f93000(0063) knlGS:00000000f5046b40 [ 102.767396][ T5982] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 102.774018][ T5982] CR2: 000000000c348438 CR3: 000000002a4fc000 CR4: 00000000003526f0 [ 102.782399][ T5982] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.790847][ T5982] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.798998][ T5982] Kernel panic - not syncing: Fatal exception [ 102.805401][ T5982] Kernel Offset: disabled [ 102.809731][ T5982] Rebooting in 86400 seconds..