last executing test programs: 7.526534279s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x8, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc050) read(r3, &(0x7f0000000380)=""/144, 0x90) syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000000)) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000180)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00400001332564aa11f6bbf44d00000000008984", 0x39}], 0x1) r8 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000040), 0x62000, 0x0) write$vga_arbiter(r8, &(0x7f0000000140), 0xf) r9 = io_uring_setup(0x1de0, &(0x7f0000001040)={0x0, 0x764, 0x2, 0xffffffff, 0x1d2}) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) pwrite64(r3, 0x0, 0x0, 0x4) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.358573802s ago: executing program 3 (id=4): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 6.494326138s ago: executing program 3 (id=6): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x64, r2, 0x9a2ea8ba8fb8e27f, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5421a57089fccc2f"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="824217ea84b94dcd8f5057cc7bb01bfe"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7a35f6c3ae3c7d6243ff4c6321daf2d34d6ffba2334add30a8f490e568b0293a"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44001}, 0x8c0) 6.494171379s ago: executing program 4 (id=5): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 6.218420445s ago: executing program 3 (id=8): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x4a, &(0x7f0000abaff9)={0x77359400}, 0x10) 5.847122226s ago: executing program 3 (id=11): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_create_resource$binfmt(0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x1, 0x4, 0x6, 0x9}, {0x10, 0x6, 0x0, 0x9, 0x7, 0x6, 0x0, 0x2, 0x1, 0x7, 0x7f, 0xfb, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x48, 0x4, 0x4, 0x68, 0x7, 0x0, 0x2, 0xd}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x20000, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x1, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x400200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.574333403s ago: executing program 2 (id=13): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d", 0x84}], 0x2}}], 0x1, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.468707446s ago: executing program 4 (id=14): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "9303"}, @global, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0xa, "3d9e85b0"}, @main=@item_4={0x3, 0x0, 0x8, "749e821c"}, @local=@item_4={0x3, 0x2, 0x0, "8b923659"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 5.306170597s ago: executing program 2 (id=15): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r0, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 5.138611239s ago: executing program 2 (id=16): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtaction={0x18, 0x31, 0x1, 0x20000000, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 5.014606146s ago: executing program 2 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff010000000500070000000000080009"], 0x3c}}, 0x0) 4.537847453s ago: executing program 2 (id=19): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000001500)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b0001000310030904580801196621"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) lgetxattr(0x0, 0x0, &(0x7f00000002c0)=""/203, 0xcb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) 4.515546454s ago: executing program 3 (id=20): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x3b2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x5}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040005}, 0x8800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x10, 0x40, 0x9, 0x1, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x67, 0x0, 0xe6, 0x29, 0x0, @broadcast, @multicast1}}}}) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.322494495s ago: executing program 4 (id=21): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.320412661s ago: executing program 0 (id=31): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.934740922s ago: executing program 1 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe00}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xeb5cf41713316147}, 0x80) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, 0x0, 0x800) 2.874972858s ago: executing program 0 (id=23): openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x5bf, 0x7f, 0x6, 0x46, 0xfffffff2, 0x5f, 0x2, 0x0, 0xffff2d3a, 0x1dd2, 0x6, 0x7, 0x4, 0x80000001, 0x7, 0xa, 0x3, 0x3c5b, 0x1, 0xfffffffc, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x4, 0xe661, 0x8, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x2, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x15, 0x0, 0x80, 0xfffffffc, 0x5, 0x5, 0x8, 0x0, 0x1, 0x3e], [0x10000007, 0x10002, 0x12b, 0x4734646, 0x9, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x1, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x1, 0xea0, 0xfffffff9, 0x4, 0x4, 0x80, 0x5, 0x400, 0xffffffff, 0x6, 0x400001, 0xff, 0x1005, 0x8007fe, 0x5f31, 0x4, 0xffffffff, 0x238, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x10000003, 0x8000, 0xffff, 0x2, 0x7f, 0x1, 0x8, 0x3, 0x7, 0x0, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x9, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x7f, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3d, 0x3, 0x200, 0x80, 0x3, 0x4, 0x0, 0x543, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x4fa, 0xfffff1d1, 0x4, 0x5], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x1, 0x7, 0x1, 0x51bf, 0x9, 0xce7, 0x1ff, 0x3, 0x80000000, 0x5, 0x3, 0x104, 0x80000000, 0x3, 0x7fff, 0x8ffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x2, 0x1, 0x80000003, 0x5, 0x8, 0xff, 0x1000003, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x2, 0x6, 0x1, 0x10000, 0x3, 0x2, 0x2b91, 0xa20, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x1, 0x2, 0xb1c, 0x1, 0x200, 0x40fff, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 2.863140647s ago: executing program 3 (id=24): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000a40)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.83127163s ago: executing program 0 (id=25): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x43}, 0x1, 0x0, 0x0, 0x8800}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d4}, 0x4004880) 1.518157992s ago: executing program 1 (id=26): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001280)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff010000000000000000000000000001fe0000000000000092010000000000100f00ea0000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffe7f500000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c617465"], 0x140}, 0x1, 0x0, 0x0, 0x81}, 0x844) 1.446910917s ago: executing program 0 (id=27): socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.201979226s ago: executing program 4 (id=28): r0 = socket$kcm(0x2, 0xa, 0x2) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x48) splice(r1, 0x0, r0, 0x0, 0x3000, 0x2) 1.135090675s ago: executing program 1 (id=29): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2300, 0x0) r2 = syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}, 0x2020) write$FUSE_DIRENT(r4, &(0x7f0000002580)={0x1e0, 0x0, r5, [{0x1400000000000007, 0x1000000, 0x1b7, 0x0, '\x7f\xb4\xe4\xa3\xe8$I\x88\x8c\n}\xac\xa9\x0e\x92\x04\xbc\xd4\xba\xdb\xc6\xf9K\x0eS\x00\xbdu\xb9;\xcd\xeb\x1aL\xec?\x7f\\N\xe1E\x89\xc9f\xd1\x8ax\xf3\x81\x04KJ\v\xe9\x19H+\xdf\xe3\xdb\xa42Lh\xb8\xe4nL\xfe1\xd5`\x86Cc\xdd\xf2n\x0e\xa7\xf5\x86\x03\xee\xec8\xad\x06\xa8\xd70\xba\xa9\xae(\xc0\x063\xd5\xb6i\xeb\xae\xe2>f\xa1\xc7\xe8_\xd9\xae,\x8d\xb0\x01\xf0<\xd6_e\xa4F\x10\xc0\xc6\x10=\x17\x16\x1a\xd9\x8b\xafq\x1e_\xee \xbb\x92\x9f\x89\n\x1b\xaf\xa2DDi\xe4\x9begcv\xa1\xe4E\x8fs\x8e\xc6[.\x98\x0f;\xc3H5\xfb\x0e\xe8\xb2<>\r\xeb\x9b\f\xf6\x15\xf2\xc0&L\xec;\xca\xc0\xa3\xb6\x84\xc7h\x9c\x9d\xfdUY-o3\xce\x00\x003\x90\xdc\x9f\x95,\xb2\xa5\r\xcc\x98\xf5\x00\x00\x00\x00\x00\x00\x00\x00J\xf4\xa9\xd02S\fZ\xfb\xfc !e\x0e/\xeb\xc5\xfa\xe3\xf5\x9e\x91\xadJ\xbd+-n\xb4\xb8a4\xbc\xdf\x1d\xd8\xc1D\xff|G$\xf6\r\xf3\xad5O~\xa9q\t\xb4\x83\n\x06f\xf0\xb3\xa6\x04\xa7\xec\xfdz\xf3\xdaX\xc1SA\xe4x\xa1\xd9j\xaa\xbdT\xbe\xc7\x94\xa8\xe5w\x97\x11\b\f\xfc\xe6\x9ax\x11\x03R\x81\xc9\x90\x1fQ\xf7\xae(h\xd2\x8fj\tp\xf8VdY0\xa8\xc6|M?2J\x03\xff\xfaI\x9av\xf6^\x01R\xce@\xb4\xe5\b\x00!To\xdb}\xdd\x9d&|L+U\xb2\x10\xaeo\xe6\xf5\xcf\xb2\xb1\x10\x84\xd0\"\x96\xa8FstV\xb5:\xd7\x8cE\x95\x0e\fgJ\xba\xee\x17\x8b\xc2\xc1<@c\xc1\a\x17\b\x94\xb2\x06\xfb\x8e4\x0f\xcaT\xe1M\x98\x06M|\xa9\xb7\x9a\x82\xf4'}]}, 0x1e0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0xfffb}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010100}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) syz_clone(0xc0004000, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x800012, 0x0, @tid=r2}, &(0x7f0000000280)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}, 0xffffffff}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='J', 0x1}], 0x1, 0x0, 0x0, 0x40840}, 0x8081) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x30}, 0xc) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000004c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xc7}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x78}, 0x4000) 1.087415478s ago: executing program 0 (id=30): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_create_resource$binfmt(0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x1, 0x4, 0x6, 0x9}, {0x10, 0x6, 0x0, 0x9, 0x7, 0x6, 0x0, 0x2, 0x1, 0x7, 0x7f, 0xfb, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x48, 0x4, 0x4, 0x68, 0x7, 0x0, 0x2, 0xd}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x20000, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x1, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x400200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 950.207398ms ago: executing program 4 (id=32): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x463af000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="084002000100000008000100", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 810.343323ms ago: executing program 2 (id=33): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x8, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc050) read(r3, &(0x7f0000000380)=""/144, 0x90) syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000000)) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000180)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00400001332564aa11f6bbf44d00000000008984", 0x39}], 0x1) r8 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000040), 0x62000, 0x0) write$vga_arbiter(r8, &(0x7f0000000140), 0xf) r9 = io_uring_setup(0x1de0, &(0x7f0000001040)={0x0, 0x764, 0x2, 0xffffffff, 0x1d2}) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) pwrite64(r3, 0x0, 0x0, 0x4) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.183' (ED25519) to the list of known hosts. [ 78.989214][ T5814] cgroup: Unknown subsys name 'net' [ 79.107240][ T5814] cgroup: Unknown subsys name 'cpuset' [ 79.117880][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.782604][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.884583][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.897111][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.906440][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.925369][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.925736][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.933278][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.942065][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.949212][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.955353][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.963061][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.970215][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.976974][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.984264][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.991392][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.998570][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.013930][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.017738][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.029006][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.029122][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.045194][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.045913][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.061396][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.074075][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.082514][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.093710][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.736346][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 83.791382][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 83.870863][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 83.940180][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 84.001096][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 84.124526][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.132348][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.139801][ T5844] bridge_slave_0: entered allmulticast mode [ 84.147077][ T5844] bridge_slave_0: entered promiscuous mode [ 84.155866][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.163041][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.170680][ T5845] bridge_slave_0: entered allmulticast mode [ 84.178083][ T5845] bridge_slave_0: entered promiscuous mode [ 84.212325][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.219628][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.227457][ T5844] bridge_slave_1: entered allmulticast mode [ 84.234817][ T5844] bridge_slave_1: entered promiscuous mode [ 84.242556][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.250730][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.258194][ T5845] bridge_slave_1: entered allmulticast mode [ 84.265622][ T5845] bridge_slave_1: entered promiscuous mode [ 84.331038][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.338220][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.345440][ T5842] bridge_slave_0: entered allmulticast mode [ 84.352454][ T5842] bridge_slave_0: entered promiscuous mode [ 84.360871][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.368213][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.375460][ T5842] bridge_slave_1: entered allmulticast mode [ 84.382658][ T5842] bridge_slave_1: entered promiscuous mode [ 84.411744][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.419010][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.426500][ T5846] bridge_slave_0: entered allmulticast mode [ 84.433685][ T5846] bridge_slave_0: entered promiscuous mode [ 84.470908][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.481509][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.488753][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.496518][ T5846] bridge_slave_1: entered allmulticast mode [ 84.504523][ T5846] bridge_slave_1: entered promiscuous mode [ 84.513923][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.547902][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.570081][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.601592][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.639627][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.647013][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.654934][ T5847] bridge_slave_0: entered allmulticast mode [ 84.662930][ T5847] bridge_slave_0: entered promiscuous mode [ 84.675630][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.713245][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.724847][ T5845] team0: Port device team_slave_0 added [ 84.734263][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.741389][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.748804][ T5847] bridge_slave_1: entered allmulticast mode [ 84.755962][ T5847] bridge_slave_1: entered promiscuous mode [ 84.773083][ T5844] team0: Port device team_slave_0 added [ 84.781215][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.792626][ T5845] team0: Port device team_slave_1 added [ 84.814130][ T5842] team0: Port device team_slave_0 added [ 84.821786][ T5844] team0: Port device team_slave_1 added [ 84.860507][ T5842] team0: Port device team_slave_1 added [ 84.908528][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.941178][ T5846] team0: Port device team_slave_0 added [ 84.948139][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.955884][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.982321][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.996338][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.006214][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.013199][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.040001][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.051880][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.059259][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.064616][ T5839] Bluetooth: hci0: command tx timeout [ 85.085917][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.104556][ T5846] team0: Port device team_slave_1 added [ 85.111084][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.118154][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.133925][ T5148] Bluetooth: hci2: command tx timeout [ 85.150094][ T5148] Bluetooth: hci4: command tx timeout [ 85.150172][ T5832] Bluetooth: hci1: command tx timeout [ 85.156128][ T5839] Bluetooth: hci3: command tx timeout [ 85.167027][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.202531][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.209733][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.236468][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.248845][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.256298][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.282700][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.330551][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.337934][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.363950][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.395677][ T5847] team0: Port device team_slave_0 added [ 85.404850][ T5847] team0: Port device team_slave_1 added [ 85.427198][ T5844] hsr_slave_0: entered promiscuous mode [ 85.434220][ T5844] hsr_slave_1: entered promiscuous mode [ 85.442755][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.449999][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.476552][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.544980][ T5845] hsr_slave_0: entered promiscuous mode [ 85.551401][ T5845] hsr_slave_1: entered promiscuous mode [ 85.557948][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 85.563968][ T5845] Cannot create hsr debugfs directory [ 85.591142][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.598704][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.625093][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.674453][ T5842] hsr_slave_0: entered promiscuous mode [ 85.680973][ T5842] hsr_slave_1: entered promiscuous mode [ 85.687677][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 85.693884][ T5842] Cannot create hsr debugfs directory [ 85.700858][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.709289][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.736545][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.806917][ T5846] hsr_slave_0: entered promiscuous mode [ 85.814558][ T5846] hsr_slave_1: entered promiscuous mode [ 85.821315][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 85.828078][ T5846] Cannot create hsr debugfs directory [ 85.972427][ T5847] hsr_slave_0: entered promiscuous mode [ 85.979504][ T5847] hsr_slave_1: entered promiscuous mode [ 85.986324][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 85.992083][ T5847] Cannot create hsr debugfs directory [ 86.410034][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.446262][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.470476][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.480505][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.534901][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.546458][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.562952][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.586006][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.682253][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.705269][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.734801][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.746419][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.806873][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.847974][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.875155][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.888763][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.910867][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.932803][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.972410][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.979837][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.992602][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.999823][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.132011][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.139799][ T5839] Bluetooth: hci0: command tx timeout [ 87.158043][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.178076][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.213976][ T5148] Bluetooth: hci3: command tx timeout [ 87.214071][ T5832] Bluetooth: hci4: command tx timeout [ 87.219414][ T5148] Bluetooth: hci2: command tx timeout [ 87.231451][ T5839] Bluetooth: hci1: command tx timeout [ 87.231737][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.279599][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.342895][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.412989][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.428543][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.435930][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.478596][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.485832][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.501210][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.528209][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.546971][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.554190][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.563120][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.570312][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.673093][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.725518][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.742024][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.772543][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.779925][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.807866][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.815111][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.849150][ T5844] veth0_vlan: entered promiscuous mode [ 87.875456][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.900288][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.917678][ T5844] veth1_vlan: entered promiscuous mode [ 87.963247][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.972146][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.988619][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.995863][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.023243][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.030946][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.135780][ T5844] veth0_macvtap: entered promiscuous mode [ 88.168468][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.177856][ T5842] veth0_vlan: entered promiscuous mode [ 88.189854][ T5844] veth1_macvtap: entered promiscuous mode [ 88.227364][ T5845] veth0_vlan: entered promiscuous mode [ 88.251956][ T5842] veth1_vlan: entered promiscuous mode [ 88.267365][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.308728][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.334757][ T5845] veth1_vlan: entered promiscuous mode [ 88.359974][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.409109][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.422357][ T5842] veth0_macvtap: entered promiscuous mode [ 88.432442][ T3552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.442970][ T3552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.461302][ T5846] veth0_vlan: entered promiscuous mode [ 88.475984][ T3552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.485399][ T3552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.502501][ T5842] veth1_macvtap: entered promiscuous mode [ 88.526437][ T5845] veth0_macvtap: entered promiscuous mode [ 88.538994][ T5845] veth1_macvtap: entered promiscuous mode [ 88.549971][ T5846] veth1_vlan: entered promiscuous mode [ 88.615641][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.628904][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.657073][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.697089][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.722253][ T3552] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.741919][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.755141][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.764872][ T3552] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.775096][ T3552] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.791304][ T5847] veth0_vlan: entered promiscuous mode [ 88.810133][ T3552] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.822685][ T3552] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.832701][ T5846] veth0_macvtap: entered promiscuous mode [ 88.850126][ T3552] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.859251][ T3552] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.877980][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.887304][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.892712][ T5847] veth1_vlan: entered promiscuous mode [ 88.905522][ T3552] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.917096][ T5846] veth1_macvtap: entered promiscuous mode [ 89.055874][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.060207][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.087697][ T5847] veth0_macvtap: entered promiscuous mode [ 89.104819][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.112651][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.142713][ T5847] veth1_macvtap: entered promiscuous mode [ 89.167719][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.213893][ T5148] Bluetooth: hci0: command tx timeout [ 89.224100][ T1143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.246716][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.263389][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.281606][ T1143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.294822][ T5148] Bluetooth: hci4: command tx timeout [ 89.300278][ T5148] Bluetooth: hci2: command tx timeout [ 89.305762][ T5839] Bluetooth: hci3: command tx timeout [ 89.311200][ T5839] Bluetooth: hci1: command tx timeout [ 89.342570][ T1143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.357693][ T1143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.371246][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.393896][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.409177][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.430319][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.444061][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.489575][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.514048][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.644052][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.655754][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.693189][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.713916][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.739259][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.758473][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.815269][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.823247][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.028835][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.085590][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.471346][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.555535][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.812450][ T5911] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 91.066175][ T5911] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 91.091684][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 91.148788][ T5911] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.200272][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 91.213959][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 91.231756][ T5911] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 91.294567][ T5839] Bluetooth: hci0: command tx timeout [ 91.339055][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 91.375977][ T5839] Bluetooth: hci2: command tx timeout [ 91.381725][ T5148] Bluetooth: hci3: command tx timeout [ 91.381763][ T5832] Bluetooth: hci4: command tx timeout [ 91.387708][ T5834] Bluetooth: hci1: command tx timeout [ 91.406164][ T5944] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 91.441735][ T5911] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.519934][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 91.598814][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 91.665425][ T5911] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 91.692731][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 91.722120][ T5911] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.736890][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 91.749131][ T5911] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 91.787249][ T5911] usb 2-1: string descriptor 0 read error: -22 [ 91.793961][ T5911] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 91.806210][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.885804][ T5911] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 92.063706][ T5958] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.111543][ T1791] cfg80211: failed to load regulatory.db [ 92.129296][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 92.177270][ T5958] Zero length message leads to an empty skb [ 92.393979][ T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.647323][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 92.674410][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.687174][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.698544][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.790667][ T5974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'. [ 92.794668][ T47] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.812947][ T5970] syzkaller0: entered promiscuous mode [ 92.830612][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.856433][ T47] usb 5-1: config 0 descriptor?? [ 93.248433][ T5933] netlink: 'syz.1.2': attribute type 64 has an invalid length. [ 93.261536][ T5933] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.337225][ T47] microsoft 0003:045E:07DA.0001: unbalanced collection at end of report description [ 93.369723][ T47] microsoft 0003:045E:07DA.0001: parse failed [ 93.392413][ T9] usb 2-1: USB disconnect, device number 2 [ 93.482773][ T47] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 93.504403][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.580637][ T47] usb 5-1: USB disconnect, device number 2 [ 93.676264][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 93.689500][ T24] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 93.702375][ T24] usb 4-1: config 0 has no interface number 0 [ 93.712508][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 93.729233][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 93.741761][ T24] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.754114][ T24] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.768078][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 93.788211][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.808764][ T24] usb 4-1: config 0 descriptor?? [ 93.824443][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.825920][ T24] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 93.983593][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 93.994410][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 94.011896][ T9] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 94.033410][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.047123][ T9] usb 3-1: config 0 has no interface number 0 [ 94.053712][ T9] usb 3-1: config 0 interface 88 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.075195][ T5911] usb 4-1: USB disconnect, device number 2 [ 94.093307][ T5911] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 94.109714][ T9] usb 3-1: config 0 interface 88 has no altsetting 0 [ 94.201319][ T9] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 94.211778][ T9] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 94.223799][ T9] usb 3-1: Product: syz [ 94.384716][ T9] usb 3-1: Manufacturer: syz [ 94.391233][ T9] usb 3-1: SerialNumber: syz [ 94.404098][ T9] usb 3-1: config 0 descriptor?? [ 94.672703][ T5980] process 'syz.2.19' launched '/dev/fd/10' with NULL argv: empty string added [ 95.323375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.895907][ T1212] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 95.964683][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 95.976246][ T6000] vxcan1: entered promiscuous mode [ 95.981637][ T6000] vxcan1: entered allmulticast mode [ 96.077534][ T1212] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 96.088052][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.098552][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 96.140890][ T1212] usb 4-1: Product: syz [ 96.145836][ T1212] usb 4-1: Manufacturer: syz [ 96.152954][ T1212] usb 4-1: SerialNumber: syz [ 96.155623][ T6002] netlink: 84 bytes leftover after parsing attributes in process `syz.1.26'. [ 96.162850][ T1212] usb 4-1: config 0 descriptor?? [ 96.202618][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 96.436244][ T1212] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 96.494551][ T6009] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 96.519868][ T6009] CUSE: unknown device info "3ܟ,̘" [ 96.530948][ T6009] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 96.530948][ T6009] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 96.562213][ T6009] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 96.723637][ T9] usb 3-1: USB disconnect, device number 2 [ 96.753652][ T6009] CUSE: DEVNAME unspecified [ 97.455472][ T1212] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 97.646869][ T6030] netlink: 44 bytes leftover after parsing attributes in process `syz.4.32'. [ 97.674138][ T6030] ------------[ cut here ]------------ [ 97.679658][ T6030] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 97.691911][ T6030] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1da0/0x2720, CPU#1: syz.4.32/6030 [ 97.701600][ T6030] Modules linked in: [ 97.705725][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: syz.4.32 Not tainted syzkaller #0 PREEMPT(full) [ 97.714906][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.725052][ T6030] RIP: 0010:u32_change+0x1daf/0x2720 [ 97.730375][ T6030] Code: 3d 9e 1d 43 06 01 75 33 e8 de 1e 0d f8 eb 50 e8 d7 1e 0d f8 48 8d 3d 80 52 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 c0 9e e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 b2 1e 0d f8 eb 24 e8 ab 1e 0d f8 [ 97.746816][ T5919] usb 4-1: USB disconnect, device number 3 [ 97.750172][ T6030] RSP: 0018:ffffc900056def80 EFLAGS: 00010283 [ 97.762132][ T6030] RAX: ffffffff89b89019 RBX: ffff888034af9400 RCX: 0000000000000010 [ 97.771083][ T6030] RDX: ffffffff8ce19ec0 RSI: 0000000000000020 RDI: ffffffff9020e2a0 [ 97.779852][ T6030] RBP: ffffc900056df138 R08: 0000000000000dc0 R09: 00000000ffffffff [ 97.787948][ T6030] R10: dffffc0000000000 R11: fffffbfff2023997 R12: ffff88803664f0e8 [ 97.796088][ T6030] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 97.804136][ T6030] FS: 0000000000000000(0000) GS:ffff888125557000(0063) knlGS:00000000f546bb40 [ 97.813179][ T6030] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 97.819963][ T6030] CR2: 000000000c425d66 CR3: 00000000785f4000 CR4: 00000000003526f0 [ 97.828021][ T6030] Call Trace: [ 97.831335][ T6030] [ 97.834341][ T6030] ? __pfx_u32_change+0x10/0x10 [ 97.839289][ T6030] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 97.845181][ T6030] tc_new_tfilter+0xff8/0x1780 [ 97.850015][ T6030] ? __pfx_tc_new_tfilter+0x10/0x10 [ 97.860569][ T6030] ? __pfx_tc_new_tfilter+0x10/0x10 [ 97.865930][ T6030] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 97.871798][ T6030] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 97.877912][ T6030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.883508][ T6030] ? ref_tracker_free+0x693/0x840 [ 97.888664][ T6030] ? __copy_skb_header+0xa3/0x4a0 [ 97.893800][ T6030] ? __pfx_ref_tracker_free+0x10/0x10 [ 97.899287][ T6030] ? __skb_clone+0x63/0x7a0 [ 97.903917][ T6030] netlink_rcv_skb+0x232/0x4b0 [ 97.908722][ T6030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.914285][ T6030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.919627][ T6030] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.924950][ T6030] netlink_unicast+0x80f/0x9b0 [ 97.929856][ T6030] ? __pfx_netlink_unicast+0x10/0x10 [ 97.935245][ T6030] ? netlink_sendmsg+0x650/0xb40 [ 97.940225][ T6030] ? skb_put+0x11b/0x210 [ 97.944593][ T6030] netlink_sendmsg+0x813/0xb40 [ 97.949494][ T6030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.955075][ T6030] ? aa_sock_msg_perm+0xf1/0x1b0 [ 97.960065][ T6030] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 97.965462][ T6030] ____sys_sendmsg+0x972/0x9f0 [ 97.971165][ T6030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.977227][ T6030] ___sys_sendmsg+0x2a5/0x360 [ 97.982410][ T6030] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.987815][ T6030] ? preempt_schedule_thunk+0x16/0x30 [ 97.993254][ T6030] ? preempt_schedule_common+0x82/0xd0 [ 97.998862][ T6030] ? __fget_files+0x2a/0x420 [ 98.003538][ T6030] ? __fget_files+0x3a0/0x420 [ 98.008297][ T6030] __sys_sendmmsg+0x2e7/0x4e0 [ 98.013249][ T6030] ? __pfx___sys_sendmmsg+0x10/0x10 [ 98.019215][ T6030] ? __pfx_do_futex+0x10/0x10 [ 98.024014][ T6030] ? rcu_is_watching+0x15/0xb0 [ 98.028939][ T6030] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 98.034074][ T1212] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 98.034659][ T6030] __do_fast_syscall_32+0x20d/0x640 [ 98.047461][ T6030] ? lockdep_hardirqs_on+0x7a/0x110 [ 98.052716][ T6030] ? do_fast_syscall_32+0x33/0x70 [ 98.058458][ T6030] ? irqentry_exit+0x10e/0x620 [ 98.063435][ T6030] ? trace_irq_disable+0x3b/0x150 [ 98.068509][ T6030] do_fast_syscall_32+0x33/0x70 [ 98.074501][ T6030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.080976][ T6030] RIP: 0023:0xf70bef6c [ 98.085855][ T6030] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 98.106094][ T6030] RSP: 002b:00000000f546b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 98.114641][ T6030] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 98.122645][ T6030] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.130809][ T6030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.138864][ T6030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 98.146948][ T6030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.155258][ T6030] [ 98.158316][ T6030] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.165985][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: syz.4.32 Not tainted syzkaller #0 PREEMPT(full) [ 98.175213][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.185379][ T6030] Call Trace: [ 98.188662][ T6030] [ 98.191598][ T6030] vpanic+0x56c/0xa60 [ 98.195599][ T6030] ? __pfx__printk+0x10/0x10 [ 98.200194][ T6030] ? __pfx_vpanic+0x10/0x10 [ 98.204706][ T6030] ? is_bpf_text_address+0x292/0x2b0 [ 98.209998][ T6030] ? is_bpf_text_address+0x26/0x2b0 [ 98.215220][ T6030] panic+0xc5/0xd0 [ 98.218956][ T6030] ? __pfx_panic+0x10/0x10 [ 98.223495][ T6030] __warn+0x315/0x4f0 [ 98.227496][ T6030] ? u32_change+0x1da0/0x2720 [ 98.232192][ T6030] ? u32_change+0x1da0/0x2720 [ 98.236879][ T6030] __report_bug+0x29a/0x540 [ 98.241478][ T6030] ? ___sys_sendmsg+0x2a5/0x360 [ 98.246354][ T6030] ? __sys_sendmmsg+0x2e7/0x4e0 [ 98.251560][ T6030] ? __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 98.257473][ T6030] ? u32_change+0x1da0/0x2720 [ 98.262172][ T6030] ? __pfx___report_bug+0x10/0x10 [ 98.267408][ T6030] report_bug_entry+0x19a/0x290 [ 98.272283][ T6030] ? u32_change+0x1daf/0x2720 [ 98.277052][ T6030] ? u32_change+0x1db4/0x2720 [ 98.281736][ T6030] handle_bug+0xce/0x200 [ 98.285999][ T6030] exc_invalid_op+0x1a/0x50 [ 98.290603][ T6030] asm_exc_invalid_op+0x1a/0x20 [ 98.295464][ T6030] RIP: 0010:u32_change+0x1daf/0x2720 [ 98.300767][ T6030] Code: 3d 9e 1d 43 06 01 75 33 e8 de 1e 0d f8 eb 50 e8 d7 1e 0d f8 48 8d 3d 80 52 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 c0 9e e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 b2 1e 0d f8 eb 24 e8 ab 1e 0d f8 [ 98.320381][ T6030] RSP: 0018:ffffc900056def80 EFLAGS: 00010283 [ 98.326457][ T6030] RAX: ffffffff89b89019 RBX: ffff888034af9400 RCX: 0000000000000010 [ 98.334445][ T6030] RDX: ffffffff8ce19ec0 RSI: 0000000000000020 RDI: ffffffff9020e2a0 [ 98.342482][ T6030] RBP: ffffc900056df138 R08: 0000000000000dc0 R09: 00000000ffffffff [ 98.350560][ T6030] R10: dffffc0000000000 R11: fffffbfff2023997 R12: ffff88803664f0e8 [ 98.358803][ T6030] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 98.366970][ T6030] ? u32_change+0x1d99/0x2720 [ 98.372298][ T6030] ? __pfx_u32_change+0x10/0x10 [ 98.377188][ T6030] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 98.382862][ T6030] tc_new_tfilter+0xff8/0x1780 [ 98.387925][ T6030] ? __pfx_tc_new_tfilter+0x10/0x10 [ 98.393161][ T6030] ? __pfx_tc_new_tfilter+0x10/0x10 [ 98.398368][ T6030] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 98.403319][ T6030] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 98.408546][ T6030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.414190][ T6030] ? ref_tracker_free+0x693/0x840 [ 98.419247][ T6030] ? __copy_skb_header+0xa3/0x4a0 [ 98.424287][ T6030] ? __pfx_ref_tracker_free+0x10/0x10 [ 98.429752][ T6030] ? __skb_clone+0x63/0x7a0 [ 98.434276][ T6030] netlink_rcv_skb+0x232/0x4b0 [ 98.439048][ T6030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.444512][ T6030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.449809][ T6030] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.455021][ T6030] netlink_unicast+0x80f/0x9b0 [ 98.459806][ T6030] ? __pfx_netlink_unicast+0x10/0x10 [ 98.465106][ T6030] ? netlink_sendmsg+0x650/0xb40 [ 98.470049][ T6030] ? skb_put+0x11b/0x210 [ 98.474307][ T6030] netlink_sendmsg+0x813/0xb40 [ 98.479087][ T6030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.484386][ T6030] ? aa_sock_msg_perm+0xf1/0x1b0 [ 98.489342][ T6030] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 98.494644][ T6030] ____sys_sendmsg+0x972/0x9f0 [ 98.499428][ T6030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.504741][ T6030] ___sys_sendmsg+0x2a5/0x360 [ 98.509434][ T6030] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.514737][ T6030] ? preempt_schedule_thunk+0x16/0x30 [ 98.520121][ T6030] ? preempt_schedule_common+0x82/0xd0 [ 98.525613][ T6030] ? __fget_files+0x2a/0x420 [ 98.530228][ T6030] ? __fget_files+0x3a0/0x420 [ 98.534917][ T6030] __sys_sendmmsg+0x2e7/0x4e0 [ 98.539616][ T6030] ? __pfx___sys_sendmmsg+0x10/0x10 [ 98.544837][ T6030] ? __pfx_do_futex+0x10/0x10 [ 98.549543][ T6030] ? rcu_is_watching+0x15/0xb0 [ 98.554342][ T6030] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 98.560013][ T6030] __do_fast_syscall_32+0x20d/0x640 [ 98.565243][ T6030] ? lockdep_hardirqs_on+0x7a/0x110 [ 98.570459][ T6030] ? do_fast_syscall_32+0x33/0x70 [ 98.575586][ T6030] ? irqentry_exit+0x10e/0x620 [ 98.580374][ T6030] ? trace_irq_disable+0x3b/0x150 [ 98.585437][ T6030] do_fast_syscall_32+0x33/0x70 [ 98.590305][ T6030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.596900][ T6030] RIP: 0023:0xf70bef6c [ 98.600983][ T6030] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 98.620684][ T6030] RSP: 002b:00000000f546b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 98.629110][ T6030] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 98.637131][ T6030] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.645196][ T6030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.653175][ T6030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 98.661166][ T6030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.669355][ T6030] [ 98.672527][ T6030] Kernel Offset: disabled [ 98.676953][ T6030] Rebooting in 86400 seconds..