last executing test programs: 17.57336463s ago: executing program 3 (id=78): setns(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40811}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15.201153523s ago: executing program 1 (id=81): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x200) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1f8, 0x20a, 0x278, 0x1f8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4917, 0xfffb, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x27, 0xe, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.703189111s ago: executing program 1 (id=85): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x9, {0x6, 0x8001, 0x5, 0x0, 0x9, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31ac", 0x25}], 0x1}, 0x0) 12.649881723s ago: executing program 0 (id=86): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40811}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 11.965620325s ago: executing program 3 (id=87): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000"], 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x2, {{0xa}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000009008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r10}, 0x18) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r11, 0x707, &(0x7f0000000200)={&(0x7f0000000740)=[{0x0, 0x6011, 0x0, 0x0}], 0x1}) 11.776928724s ago: executing program 2 (id=90): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000009008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r6}, 0x18) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000200)={&(0x7f0000000740)=[{0x0, 0x6011, 0x0, 0x0}], 0x1}) 11.542077746s ago: executing program 0 (id=91): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dbdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000000c0), 0x0, 0x40000, &(0x7f0000000340)={0x11, 0x10, r3, 0x1, 0x2, 0x6, @random="3b8a1c3c34a9"}, 0x14) 10.749333123s ago: executing program 2 (id=93): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x3, 0x25, 0x7, 0x67, 0xfffd, 0x3, 0x2, 0x0, @local, @private=0xa010101, {[@timestamp={0x44, 0x4, 0x16, 0x0, 0x6}]}}}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) 10.701392305s ago: executing program 4 (id=94): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000009008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r6}, 0x18) 9.718017401s ago: executing program 4 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e2200000600"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 9.630347136s ago: executing program 4 (id=96): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0x4, 0x7fff}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000780)={r2, @in6={{0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}, &(0x7f0000000840)=0x84) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x3, &(0x7f0000000080)={0x2, "1a9c66bf2f615e4200000000e200"}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0xff, 0x9, 0x2, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x7, 0x6, 0xa, 0xfe, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0x1000, 0xe403, 0x5e4b, 0xfff], [0x7, 0x7, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x84, 0x5, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x40004) sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400dd}, 0x4000080) sendmsg$nl_route_sched(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0xc}}]}}]}, 0x48}}, 0x4010) 7.809280962s ago: executing program 1 (id=97): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x6c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_clone(0xac201300, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c007fd715a2d85af2b4b1e9618dbea8a99e7902ae137a545a262ecad764aba0081a1bebb7598dcb31560a6c7fb23411ab2525ebd3d08c472e3dfb0011711136f980e671e3cf970709e2f7a18852cb42b43c60a097026b971af1d2d2f648ff93a142c5ccd3c8962272a3b84f9942f113f10defbb7cc1ee7f1c08f56e2c5f583e9ead515c454ec7db4c7b7fef373eadb1b39872a2d932e753c865879cfc5d159963230c39df43e5bc85603e0a8ced6c27da14f14840ad480bfa70706be4b9"]) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/1/root/var/run\x00', 0x1ff) socket$unix(0x1, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1', 0x1) 7.808922012s ago: executing program 0 (id=98): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040000) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x36f, 0x0, r4}}], 0x1, &(0x7f0000000340)={0x2e, 0x70, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 6.979713601s ago: executing program 4 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ffb}]}) fremovexattr(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x6) r2 = socket(0x1e, 0x4, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r3, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0xb, 0x0, 0x4, {0xa, 0x4e24, 0x2f2, @rand_addr=' \x01\x00', 0x6}}}, 0x80) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, 0x0, &(0x7f0000000780)) setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0x2, 0x3, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) 6.838649488s ago: executing program 3 (id=100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) uname(&(0x7f0000000180)=""/224) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="03", 0x12}], 0x1}, 0x20004014) 6.607840038s ago: executing program 2 (id=101): ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000580)={0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xfff5, 0x10}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 6.474046614s ago: executing program 1 (id=102): setns(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40811}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 6.473814835s ago: executing program 3 (id=103): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000009008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b700000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r6}, 0x18) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000200)={&(0x7f0000000740)=[{0x0, 0x6011, 0x0, 0x0}], 0x1}) 5.486190531s ago: executing program 3 (id=104): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x4800, 0x5dfbad83, 0x0, 0x8, 0x15, 0x9, 0x7}}]}}]}, 0x44}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x83, {0x71, 0x0, 0x0, {0xffffffff7ffffffd, 0xc83, 0x3, 0x0, 0x8, 0xffffffff, 0xda, 0x0, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0xfff7fffe, 0x4000003}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x80}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0xeeee8000, 0xeeee0000, 0xe, 0x9, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.438046054s ago: executing program 2 (id=105): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000009008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r6}, 0x18) 4.200228872s ago: executing program 0 (id=106): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() r2 = fsmount(0xffffffffffffffff, 0x0, 0x80) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x0, 0x0, 0xfffffffffffffd2c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002142, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$inet(0x2, 0x2, 0xb24) setsockopt$inet_mreqn(r7, 0x0, 0x20, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x5420, 0x0) 2.449260905s ago: executing program 2 (id=107): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x35, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xffff6775, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x46, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x47, 0x5, 0x3, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.424726016s ago: executing program 0 (id=108): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x60, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.205805076s ago: executing program 3 (id=109): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0x4, 0x7fff}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000780)={r2, @in6={{0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}, &(0x7f0000000840)=0x84) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x3, &(0x7f0000000080)={0x2, "1a9c66bf2f615e4200000000e200"}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0xff, 0x9, 0x2, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x7, 0x6, 0xa, 0xfe, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0x1000, 0xe403, 0x5e4b, 0xfff], [0x7, 0x7, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x84, 0x5, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x40004) sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400dd}, 0x4000080) sendmsg$nl_route_sched(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0xc}}]}}]}, 0x48}}, 0x4010) 2.172272148s ago: executing program 1 (id=110): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.209003853s ago: executing program 1 (id=111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x3, 0x25, 0x7, 0x67, 0xfffd, 0x3, 0x2, 0x0, @local, @private=0xa010101, {[@timestamp={0x44, 0x4, 0x16, 0x0, 0x6}]}}}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) 437.36591ms ago: executing program 4 (id=112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) uname(&(0x7f0000000180)=""/224) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="03", 0x12}], 0x1}, 0x20004014) 139.385914ms ago: executing program 2 (id=113): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000"], 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x0, 0x2, {{0xa}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000009008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r10}, 0x18) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r11, 0x707, &(0x7f0000000200)={&(0x7f0000000740)=[{0x0, 0x6011, 0x0, 0x0}], 0x1}) 41.295418ms ago: executing program 0 (id=114): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000009008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b700000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r6}, 0x18) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000200)={&(0x7f0000000740)=[{0x0, 0x6011, 0x0, 0x0}], 0x1}) 0s ago: executing program 4 (id=115): ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000580)={0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xfff5, 0x10}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 59.157827][ T4259] cgroup: Unknown subsys name 'net' [ 59.298516][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.559621][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.976182][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.984498][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.992072][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.993080][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.000474][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.007677][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.014850][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.021276][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.027649][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.035205][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.041856][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.055747][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.056353][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.063024][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.070321][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.084595][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.091684][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.099751][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.100200][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.106919][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.121465][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.121694][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.128582][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.136100][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.143016][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.150053][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.164878][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.173683][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.203850][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.211912][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.540607][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 62.585726][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 62.671012][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 62.785479][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 62.795666][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.803152][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.812624][ T4272] device bridge_slave_0 entered promiscuous mode [ 62.827671][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.834822][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.842797][ T4272] device bridge_slave_1 entered promiscuous mode [ 62.857212][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 62.880385][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.889680][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.897493][ T4273] device bridge_slave_0 entered promiscuous mode [ 62.915334][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.922468][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.930669][ T4276] device bridge_slave_0 entered promiscuous mode [ 62.948106][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.957553][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.964985][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.972664][ T4273] device bridge_slave_1 entered promiscuous mode [ 62.993363][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.000560][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.008867][ T4276] device bridge_slave_1 entered promiscuous mode [ 63.017918][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.068222][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.091331][ T4272] team0: Port device team_slave_0 added [ 63.099837][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.117658][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.127966][ T4272] team0: Port device team_slave_1 added [ 63.157748][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.191791][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.198914][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.224899][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.247448][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.254957][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.281279][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.294809][ T4273] team0: Port device team_slave_0 added [ 63.306572][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.314108][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.321803][ T4275] device bridge_slave_0 entered promiscuous mode [ 63.329352][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.337231][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.345109][ T4274] device bridge_slave_0 entered promiscuous mode [ 63.359687][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.366815][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.375222][ T4274] device bridge_slave_1 entered promiscuous mode [ 63.384297][ T4273] team0: Port device team_slave_1 added [ 63.402651][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.410140][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.418347][ T4275] device bridge_slave_1 entered promiscuous mode [ 63.440350][ T4276] team0: Port device team_slave_0 added [ 63.472037][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.482694][ T4276] team0: Port device team_slave_1 added [ 63.496781][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.503809][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.529979][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.545203][ T4272] device hsr_slave_0 entered promiscuous mode [ 63.552361][ T4272] device hsr_slave_1 entered promiscuous mode [ 63.560687][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.571262][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.596202][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.603153][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.629296][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.642633][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.668151][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.675148][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.701209][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.719868][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.726901][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.755914][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.812046][ T4275] team0: Port device team_slave_0 added [ 63.820751][ T4274] team0: Port device team_slave_0 added [ 63.835957][ T4275] team0: Port device team_slave_1 added [ 63.844462][ T4273] device hsr_slave_0 entered promiscuous mode [ 63.851194][ T4273] device hsr_slave_1 entered promiscuous mode [ 63.857962][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.865845][ T4273] Cannot create hsr debugfs directory [ 63.879296][ T4274] team0: Port device team_slave_1 added [ 63.936360][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.943331][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.969427][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.981065][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.988414][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.015300][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.032111][ T4276] device hsr_slave_0 entered promiscuous mode [ 64.039246][ T4276] device hsr_slave_1 entered promiscuous mode [ 64.046008][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.053726][ T4276] Cannot create hsr debugfs directory [ 64.065853][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.072800][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.098781][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.110269][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.120128][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.146486][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.223273][ T4274] device hsr_slave_0 entered promiscuous mode [ 64.230557][ T4274] device hsr_slave_1 entered promiscuous mode [ 64.237950][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.246205][ T4274] Cannot create hsr debugfs directory [ 64.274453][ T4275] device hsr_slave_0 entered promiscuous mode [ 64.281015][ T4275] device hsr_slave_1 entered promiscuous mode [ 64.287580][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.295193][ T4275] Cannot create hsr debugfs directory [ 64.304809][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 64.304820][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 64.311008][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 64.317055][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 64.317177][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 64.558165][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.571199][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.585848][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.598778][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.649053][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.665749][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.679002][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.706489][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.761660][ T4276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.773405][ T4276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.802524][ T4276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.827434][ T4276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.850264][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.881366][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.904720][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.913335][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.932967][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.951267][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.962007][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.974434][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.983755][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.010354][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.019407][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.032145][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.041304][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.050251][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.057518][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.066890][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.085116][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.106578][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.116388][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.125160][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.132211][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.174109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.188494][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.211651][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.231226][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.241434][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.250655][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.260812][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.271594][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.281010][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.307915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.316922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.326372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.334876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.353177][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.364670][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.373719][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.384998][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.405250][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.415565][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.424018][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.431290][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.440688][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.449395][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.458192][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.465328][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.472959][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.481769][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.498674][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.507661][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.519561][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.526747][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.549520][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.557980][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.568366][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.576934][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.587276][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.608600][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.639331][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.648408][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.658072][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.665223][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.676039][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.684890][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.693218][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.701924][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.711591][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.720297][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.729049][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.738798][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.748251][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.757199][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.765995][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.775900][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.784453][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.792416][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.811060][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.819550][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.841249][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.855976][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.871042][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.889554][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.909906][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.928850][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.946049][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.964407][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.004314][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.025631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.034899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.054716][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.061855][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.083872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.099204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.125095][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.132222][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.154528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.177677][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.205617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.224512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.244128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.265388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.284420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.294437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.314445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.321969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.331156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.361975][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.380555][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.388140][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 66.394249][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 66.400484][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 66.407253][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 66.413283][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 66.432183][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.442796][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.469761][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.480923][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.498950][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.511528][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.541447][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.563283][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.576962][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.585573][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.592974][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.635065][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.644849][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.653380][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.660543][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.676446][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.689447][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.699672][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.711964][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.722374][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.759819][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.770559][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.782917][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.799269][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.806434][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.831965][ T4272] device veth0_vlan entered promiscuous mode [ 66.849845][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.866816][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.887451][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.897442][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.908373][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.917195][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.926323][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.934952][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.971507][ T4272] device veth1_vlan entered promiscuous mode [ 66.980438][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.988957][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.998098][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.009786][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.018234][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.043282][ T4273] device veth0_vlan entered promiscuous mode [ 67.050410][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.058762][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.069892][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.077813][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.086258][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.094836][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.103488][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.112045][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.121080][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.129793][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.154801][ T4275] device veth0_vlan entered promiscuous mode [ 67.172413][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.183141][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.193136][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.201703][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.210944][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.225992][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.235928][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.244817][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.253246][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.262369][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.271755][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.282329][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.292864][ T4272] device veth0_macvtap entered promiscuous mode [ 67.301921][ T4273] device veth1_vlan entered promiscuous mode [ 67.311706][ T4275] device veth1_vlan entered promiscuous mode [ 67.328615][ T4272] device veth1_macvtap entered promiscuous mode [ 67.407153][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.415953][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.426067][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.444712][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.467871][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.476625][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.490358][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.501036][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.517480][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.530235][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.541499][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.563161][ T4273] device veth0_macvtap entered promiscuous mode [ 67.580831][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.611088][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.639489][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.648726][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.658088][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.668373][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.684511][ T4273] device veth1_macvtap entered promiscuous mode [ 67.692846][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.708626][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.719584][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.729685][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.741543][ T4275] device veth0_macvtap entered promiscuous mode [ 67.796889][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.809472][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.829374][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.841315][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.850845][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.860296][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.869409][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.879481][ T4275] device veth1_macvtap entered promiscuous mode [ 67.899432][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.923824][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.960426][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.970956][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.979906][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.989714][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.998457][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.038168][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.049337][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.072299][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.083428][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.094541][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.105099][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.116851][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.151906][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.161810][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.170516][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.179491][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.187478][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.197627][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.211958][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.222077][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.234593][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.245843][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.270042][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.279681][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.289389][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.298286][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.307252][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.315591][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.334958][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.342926][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.361457][ T4276] device veth0_vlan entered promiscuous mode [ 68.370401][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.379942][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.389617][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.398355][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.414136][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.422852][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.431997][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.459260][ T4276] device veth1_vlan entered promiscuous mode [ 68.465554][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 68.465816][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 68.471547][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 68.477610][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 68.477674][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 68.520937][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.532056][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.574460][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.582294][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.592177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.606551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.614665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.646809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.658627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.668062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.716197][ T4276] device veth0_macvtap entered promiscuous mode [ 68.733379][ T4274] device veth0_vlan entered promiscuous mode [ 68.752853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.771951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.780582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.790947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.791259][ T4352] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.800290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.828868][ T4276] device veth1_macvtap entered promiscuous mode [ 68.836313][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.844566][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.892595][ T4274] device veth1_vlan entered promiscuous mode [ 68.904310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.976461][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.005255][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.012551][ T4274] device veth0_macvtap entered promiscuous mode [ 69.015763][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.034524][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.049272][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.060285][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.070794][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.082039][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.094961][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.112258][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.120972][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.130654][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.144763][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.159815][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.180148][ T4274] device veth1_macvtap entered promiscuous mode [ 69.195468][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.213299][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.224777][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.236797][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.246909][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.257605][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.269515][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.280734][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.288434][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.302824][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.303830][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.312964][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.332670][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.350384][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.373422][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.392123][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.399809][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 69.402169][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.424581][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.467220][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.492567][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.513866][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.533460][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.544073][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.554633][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.565079][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.583694][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.608086][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.620993][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.632367][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.730542][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.742418][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.753623][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.776276][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.916381][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.020138][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.179479][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.596740][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 70.603420][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 70.613686][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 70.619711][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 70.630699][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 70.657719][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.699696][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.771173][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.834254][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.861991][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.890825][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.095578][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.103431][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.153818][ T4316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.182203][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.221919][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.353888][ T4316] usb 3-1: Using ep0 maxpacket: 16 [ 71.400382][ T4316] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 71.436374][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.468454][ T4316] usb 3-1: Product: syz [ 71.493534][ C0] sched: RT throttling activated [ 71.495823][ T4316] usb 3-1: Manufacturer: syz [ 71.509215][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.515817][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.527955][ T4316] usb 3-1: SerialNumber: syz [ 71.613863][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.655430][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.685743][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.714255][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.807522][ T4316] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 71.842233][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.854003][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.887618][ T4316] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 71.898039][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.964360][ T4316] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 71.983153][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.001180][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.020301][ T4316] usb 3-1: media controller created [ 72.054240][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.065048][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 72.133288][ T4316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.218177][ T4316] zl10353_read_register: readreg error (reg=127, ret==-32) [ 72.336960][ T4415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 72.864180][ T4432] ======================================================= [ 72.864180][ T4432] WARNING: The mand mount option has been deprecated and [ 72.864180][ T4432] and is ignored by this kernel. Remove the mand [ 72.864180][ T4432] option from the mount to silence this warning. [ 72.864180][ T4432] ======================================================= [ 72.966127][ T4316] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 72.994815][ T4434] device syzkaller0 entered promiscuous mode [ 73.050057][ T4316] usb 3-1: USB disconnect, device number 2 [ 73.061580][ T4436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 73.149167][ T4436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 73.662238][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 74.048134][ T4476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 74.500966][ T4493] device syzkaller0 entered promiscuous mode [ 74.811791][ T4501] device syzkaller0 entered promiscuous mode [ 74.843488][ T27] audit: type=1326 audit(1789379536.921:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.2.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734af9e159 code=0x7ffc0000 [ 74.907358][ T27] audit: type=1326 audit(1789379536.961:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.2.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f734af9e159 code=0x7ffc0000 [ 74.989154][ T27] audit: type=1326 audit(1789379536.961:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.2.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734af9e159 code=0x7ffc0000 [ 75.091366][ T27] audit: type=1326 audit(1789379536.961:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.2.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f734af9e159 code=0x7ffc0000 [ 75.124018][ T4317] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.159832][ T4519] FAULT_INJECTION: forcing a failure. [ 75.159832][ T4519] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 75.170774][ T27] audit: type=1326 audit(1789379536.961:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.2.38" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734af9e159 code=0x7ffc0000 [ 75.178059][ T4519] CPU: 0 PID: 4519 Comm: syz.3.43 Not tainted syzkaller #0 [ 75.204156][ T4519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 75.214244][ T4519] Call Trace: [ 75.217547][ T4519] [ 75.220498][ T4519] dump_stack_lvl+0x188/0x24e [ 75.225226][ T4519] ? show_regs_print_info+0x12/0x12 [ 75.230445][ T4519] ? load_image+0x410/0x410 [ 75.234954][ T4519] ? __lock_acquire+0x7c40/0x7c40 [ 75.240008][ T4519] ? __lock_acquire+0x138a/0x7c40 [ 75.245071][ T4519] should_fail_ex+0x390/0x4c0 [ 75.249777][ T4519] prepare_alloc_pages+0x1e1/0x5b0 [ 75.254932][ T4519] __alloc_pages+0x130/0x4f0 [ 75.259557][ T4519] ? zone_statistics+0x170/0x170 [ 75.264529][ T4519] ? __lock_acquire+0x1465/0x7c40 [ 75.269588][ T4519] ? verify_lock_unused+0x140/0x140 [ 75.274828][ T4519] __folio_alloc+0xe/0x30 [ 75.279183][ T4519] vma_alloc_folio+0x499/0x900 [ 75.283961][ T4519] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 75.289808][ T4519] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 75.295573][ T4519] ? shmem_replace_folio+0xdc0/0xdc0 [ 75.300916][ T4519] ? xas_load+0x127/0x140 [ 75.305285][ T4519] ? __filemap_get_folio+0x10f/0xde0 [ 75.310602][ T4519] ? __filemap_get_folio+0xb43/0xde0 [ 75.315925][ T4519] ? __filemap_get_folio+0x10f/0xde0 [ 75.321331][ T4519] ? page_cache_prev_miss+0x380/0x380 [ 75.326736][ T4519] ? _raw_spin_lock_irq+0xb7/0xf0 [ 75.331789][ T4519] ? _raw_spin_unlock_irq+0x1f/0x40 [ 75.337012][ T4519] ? lockdep_hardirqs_on+0x94/0x140 [ 75.342240][ T4519] shmem_get_folio_gfp+0x1439/0x35e0 [ 75.347628][ T4519] shmem_write_begin+0xee/0x3f0 [ 75.352530][ T4519] generic_perform_write+0x2fa/0x5c0 [ 75.357868][ T4519] ? generic_file_direct_write+0x330/0x330 [ 75.363707][ T4519] ? __file_remove_privs+0x5f0/0x5f0 [ 75.369019][ T4519] ? rwsem_write_trylock+0x135/0x1c0 [ 75.374332][ T4519] ? clear_nonspinnable+0x60/0x60 [ 75.379391][ T4519] ? generic_write_checks_count+0x363/0x440 [ 75.385311][ T4519] __generic_file_write_iter+0x148/0x2a0 [ 75.390995][ T4519] generic_file_write_iter+0xab/0x2e0 [ 75.396404][ T4519] vfs_write+0x482/0x9a0 [ 75.400685][ T4519] ? file_end_write+0x250/0x250 [ 75.405574][ T4519] ? __fget_files+0x3fc/0x460 [ 75.410288][ T4519] ? __fdget_pos+0x1d4/0x360 [ 75.414907][ T4519] ? ksys_write+0x70/0x260 [ 75.419357][ T4519] ksys_write+0x14d/0x260 [ 75.423730][ T4519] ? __ia32_sys_read+0x80/0x80 [ 75.428526][ T4519] ? lockdep_hardirqs_on+0x94/0x140 [ 75.433750][ T4519] do_syscall_64+0x4c/0xa0 [ 75.438194][ T4519] ? clear_bhb_loop+0x60/0xb0 [ 75.442902][ T4519] ? clear_bhb_loop+0x60/0xb0 [ 75.447610][ T4519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.453528][ T4519] RIP: 0033:0x7f315e75e98e [ 75.457980][ T4519] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 75.478043][ T4519] RSP: 002b:00007f315f5e9da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.486485][ T4519] RAX: ffffffffffffffda RBX: 00007f315f5ea6c0 RCX: 00007f315e75e98e [ 75.494475][ T4519] RDX: 0000000000020000 RSI: 00007f31545f7000 RDI: 0000000000000004 [ 75.502553][ T4519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.510585][ T4519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 75.518626][ T4519] R13: 00007f315f5e9ee0 R14: 00007f315f5e9ea0 R15: 00007f31545f7000 [ 75.526650][ T4519] [ 75.643666][ T4317] usb 1-1: Using ep0 maxpacket: 16 [ 75.652614][ T4317] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 75.679177][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.700071][ T4317] usb 1-1: Product: syz [ 75.714870][ T4317] usb 1-1: Manufacturer: syz [ 75.730786][ T4317] usb 1-1: SerialNumber: syz [ 75.964343][ T4317] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 76.006833][ T4317] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 76.020367][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 76.026072][ T4317] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 76.040014][ T4317] usb 1-1: media controller created [ 76.070519][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 76.080138][ T4548] device syzkaller0 entered promiscuous mode [ 76.168727][ T4317] zl10353_read_register: readreg error (reg=127, ret==-32) [ 76.614202][ T4557] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 76.626409][ T4557] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 76.638398][ T4317] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 76.664077][ T4317] usb 1-1: USB disconnect, device number 2 [ 78.141051][ T4599] device syzkaller0 entered promiscuous mode [ 78.703539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.743534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 78.773530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 78.833534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 79.113265][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 79.311098][ T4613] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.409645][ T4617] Zero length message leads to an empty skb [ 79.447664][ T4613] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.477376][ T4617] device syzkaller0 entered promiscuous mode [ 79.573729][ T4316] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 79.600166][ T4613] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.621897][ T4621] device syzkaller0 entered promiscuous mode [ 79.748230][ T4613] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.775417][ T4316] usb 1-1: config 0 has no interfaces? [ 79.791650][ T4316] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.827881][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 79.843623][ T4316] usb 1-1: Product: syz [ 79.854142][ T4316] usb 1-1: Manufacturer: syz [ 79.863625][ T4316] usb 1-1: SerialNumber: syz [ 79.889691][ T4316] usb 1-1: config 0 descriptor?? [ 80.006817][ T4613] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.021350][ T4613] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.063758][ T4321] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.284323][ T4321] usb 5-1: Using ep0 maxpacket: 16 [ 80.357937][ T4321] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 80.516949][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.617279][ T4613] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.646846][ T4321] usb 5-1: Product: syz [ 80.656230][ T4613] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.666806][ T4321] usb 5-1: Manufacturer: syz [ 80.671448][ T4321] usb 5-1: SerialNumber: syz [ 80.679959][ T4315] usb 1-1: USB disconnect, device number 3 [ 81.003400][ T4321] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 81.016716][ T4321] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 81.043747][ T4321] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 81.073693][ T4321] usb 5-1: media controller created [ 81.091376][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.218640][ T4321] zl10353_read_register: readreg error (reg=127, ret==-32) [ 81.517164][ T14] cfg80211: failed to load regulatory.db [ 83.283532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 83.303538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 83.313542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 83.323539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 83.333540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 83.343539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 85.046928][ T4321] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 85.125132][ T4321] usb 5-1: USB disconnect, device number 2 [ 85.155904][ T4680] xt_HMARK: spi-set and port-set can't be combined [ 85.976241][ T4688] device syzkaller0 entered promiscuous mode [ 86.044672][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 86.740805][ T4694] device syzkaller0 entered promiscuous mode [ 88.805695][ T4317] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 88.904543][ T14] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 89.097969][ T14] usb 3-1: config 0 has no interfaces? [ 89.108248][ T4317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.118605][ T4317] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 89.128370][ T4317] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 89.138054][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.146753][ T14] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 89.156762][ T14] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 89.165840][ T4317] usb 4-1: config 0 descriptor?? [ 89.171535][ T14] usb 3-1: Product: syz [ 89.176145][ T14] usb 3-1: Manufacturer: syz [ 89.181773][ T14] usb 3-1: SerialNumber: syz [ 89.202104][ T14] usb 3-1: config 0 descriptor?? [ 89.344986][ T4317] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.195702][ T4317] usb 5-1: Using ep0 maxpacket: 16 [ 90.211661][ T4317] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 90.221277][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.229640][ T4317] usb 5-1: Product: syz [ 90.234142][ T4317] usb 5-1: Manufacturer: syz [ 90.238838][ T4317] usb 5-1: SerialNumber: syz [ 90.479559][ T4317] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 90.497437][ T4317] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 90.514172][ T4317] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 90.524089][ T4317] usb 5-1: media controller created [ 90.538718][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.674987][ T4725] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.685775][ T4317] zl10353_read_register: readreg error (reg=127, ret==-32) [ 90.828859][ T4725] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.937428][ T4754] 9pnet_fd: Insufficient options for proto=fd [ 90.944452][ T4317] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 90.965532][ T4725] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.977600][ T4317] usb 5-1: USB disconnect, device number 3 [ 91.072104][ T4725] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.634078][ T4725] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.680317][ T4725] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.710638][ T4725] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.752140][ T4725] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.792045][ T4671] usb 4-1: USB disconnect, device number 2 [ 91.814841][ T27] audit: type=1326 audit(1789379553.901:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.99" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0899e159 code=0x7ffc0000 [ 91.846985][ T27] audit: type=1326 audit(1789379553.901:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.99" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0899e159 code=0x7ffc0000 [ 91.926003][ T4763] device syzkaller0 entered promiscuous mode [ 91.940341][ T4319] usb 3-1: USB disconnect, device number 3 [ 91.987650][ T27] audit: type=1326 audit(1789379553.931:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.99" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f5b0899e159 code=0x7ffc0000 [ 92.088185][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 92.120318][ T27] audit: type=1326 audit(1789379553.931:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.99" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0899e159 code=0x7ffc0000 [ 92.355454][ T27] audit: type=1326 audit(1789379553.931:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.99" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0899e159 code=0x7ffc0000 [ 92.396595][ T27] audit: type=1326 audit(1789379553.931:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.99" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5b0899e159 code=0x7ffc0000 [ 93.168116][ T27] audit: type=1326 audit(1789379553.931:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.99" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0899e159 code=0x7ffc0000 [ 93.636127][ T27] audit: type=1326 audit(1789379553.931:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.99" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0899e159 code=0x7ffc0000 [ 93.966947][ T27] audit: type=1326 audit(1789379553.931:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.99" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5b0899e159 code=0x7ffc0000 [ 94.192368][ T27] audit: type=1326 audit(1789379553.931:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.99" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0899e159 code=0x7ffc0000 [ 96.106982][ T4786] tipc: Started in network mode [ 96.112165][ T4786] tipc: Node identity 7f000001, cluster identity 4711 [ 96.120024][ T4786] tipc: Enabled bearer , priority 10 [ 96.127119][ T4787] netlink: 'syz.0.106': attribute type 4 has an invalid length. [ 96.161867][ T4788] netlink: 'syz.0.106': attribute type 4 has an invalid length. [ 96.907393][ T4804] overlayfs: failed to resolve './bus': -2 [ 97.821062][ T4806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.984705][ T4671] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.157328][ T4806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.180841][ T4318] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.209498][ T14] tipc: Node number set to 2130706433 [ 98.270090][ T4671] usb 2-1: config 0 has no interfaces? [ 98.282542][ T4671] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.316127][ T4671] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 98.324622][ T4671] usb 2-1: Product: syz [ 98.329746][ T4671] usb 2-1: Manufacturer: syz [ 98.339219][ T4671] usb 2-1: SerialNumber: syz [ 98.345813][ T4671] usb 2-1: config 0 descriptor?? [ 98.384334][ T4318] usb 4-1: Using ep0 maxpacket: 16 [ 98.396265][ T4318] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 98.411529][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.413222][ T4806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.419841][ T4318] usb 4-1: Product: syz [ 98.435830][ T4318] usb 4-1: Manufacturer: syz [ 98.440466][ T4318] usb 4-1: SerialNumber: syz [ 98.461034][ T4815] device syzkaller0 entered promiscuous mode [ 98.590388][ T4806] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.686286][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 98.756367][ T4318] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 98.777459][ T4318] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 98.791010][ T4318] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 98.799663][ T4318] usb 4-1: media controller created [ 98.878599][ T4824] ------------[ cut here ]------------ [ 98.884319][ T4824] usb 4-1: BOGUS control dir, pipe 80000380 doesn't match bRequestType c0 [ 98.893650][ T4824] WARNING: CPU: 1 PID: 4824 at drivers/usb/core/urb.c:413 usb_submit_urb+0x1178/0x18d0 [ 98.903334][ T4824] Modules linked in: [ 98.907390][ T4824] CPU: 1 PID: 4824 Comm: syz.0.114 Not tainted syzkaller #0 [ 98.914766][ T4824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 98.924889][ T4824] RIP: 0010:usb_submit_urb+0x1178/0x18d0 [ 98.930724][ T4824] Code: df 0f b6 44 05 00 84 c0 0f 85 5e 06 00 00 45 0f b6 45 00 48 c7 c7 60 f2 2e 8b 48 8b 74 24 08 4c 89 e2 44 89 f1 e8 28 48 22 fb <0f> 0b 49 bf 00 00 00 00 00 fc ff df e9 b3 f3 ff ff 89 e9 80 e1 07 [ 98.950611][ T4824] RSP: 0018:ffffc90002fa77d8 EFLAGS: 00010246 [ 98.956771][ T4824] RAX: 3d413ffcbc0b2200 RBX: ffff88801e794c00 RCX: 0000000000080000 [ 98.964859][ T4824] RDX: ffffc9001040d000 RSI: 0000000000006539 RDI: 000000000000653a [ 98.973700][ T4824] RBP: 1ffff110038cdf1d R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 98.981694][ T4824] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: ffff88814d899e88 [ 98.990148][ T4824] R13: ffff88801c66f8e8 R14: 0000000080000380 R15: dffffc0000000000 [ 98.998178][ T4824] FS: 00007f16994876c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 99.007190][ T4824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.013817][ T4824] CR2: 000000110c369d2f CR3: 0000000027114000 CR4: 00000000003506e0 [ 99.021805][ T4824] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.029825][ T4824] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.037837][ T4824] Call Trace: [ 99.041125][ T4824] [ 99.044102][ T4824] usb_start_wait_urb+0x13c/0x580 [ 99.049159][ T4824] ? usb_api_blocking_completion+0xb0/0xb0 [ 99.055042][ T4824] usb_control_msg+0x231/0x3e0 [ 99.059863][ T4824] ? mark_lock+0x94/0x320 [ 99.064252][ T4824] gl861_ctrl_msg+0x211/0x3d0 [ 99.068966][ T4824] ? lock_chain_count+0x20/0x20 [ 99.073873][ T4824] ? gl861_i2c_functionality+0x10/0x10 [ 99.079350][ T4824] ? entry_SYSCALL_64_after_hwframe+0x9c/0xd2 [ 99.085479][ T4824] ? lockdep_hardirqs_on+0x94/0x140 [ 99.090700][ T4824] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 99.096397][ T4824] gl861_i2c_master_xfer+0x430/0x640 [ 99.101714][ T4824] ? gl861_init+0x40/0x40 [ 99.106100][ T4824] __i2c_transfer+0x88d/0x2290 [ 99.110902][ T4824] ? i2c_cmd+0x110/0x110 [ 99.115204][ T4824] ? i2c_transfer+0x117/0x3a0 [ 99.119900][ T4824] i2c_transfer+0x25d/0x3a0 [ 99.124455][ T4824] ? __i2c_transfer+0x2290/0x2290 [ 99.129496][ T4824] ? __might_fault+0xc2/0x120 [ 99.134221][ T4824] ? __might_fault+0xa6/0x120 [ 99.138914][ T4824] ? _copy_from_user+0x10b/0x170 [ 99.143901][ T4824] i2cdev_ioctl_rdwr+0x3dc/0x6c0 [ 99.148869][ T4824] i2cdev_ioctl+0x610/0x7b0 [ 99.153391][ T4824] ? i2cdev_write+0x120/0x120 [ 99.158135][ T4824] ? bpf_lsm_file_free_security+0x10/0x10 [ 99.163911][ T4824] ? bpf_lsm_file_ioctl+0x5/0x10 [ 99.168876][ T4824] ? security_file_ioctl+0x7c/0xa0 [ 99.174054][ T4824] ? i2cdev_write+0x120/0x120 [ 99.176761][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.178750][ T4824] __se_sys_ioctl+0xfa/0x170 [ 99.191719][ T4824] do_syscall_64+0x4c/0xa0 [ 99.196207][ T4824] ? clear_bhb_loop+0x60/0xb0 [ 99.199375][ T4806] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.200907][ T4824] ? clear_bhb_loop+0x60/0xb0 [ 99.200943][ T4824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.216582][ T4806] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.220126][ T4824] RIP: 0033:0x7f169859e159 [ 99.220148][ T4824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.252418][ T4824] RSP: 002b:00007f1699487028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.253753][ T4317] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 99.260873][ T4824] RAX: ffffffffffffffda RBX: 00007f1698826180 RCX: 00007f169859e159 [ 99.276399][ T4824] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000009 [ 99.284445][ T4824] RBP: 00007f169863503b R08: 0000000000000000 R09: 0000000000000000 [ 99.292436][ T4824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.300487][ T4824] R13: 00007f1698826218 R14: 00007f1698826180 R15: 00007ffc32c13988 [ 99.308546][ T4824] [ 99.311586][ T4824] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 99.318549][ T4806] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.327011][ T4824] CPU: 1 PID: 4824 Comm: syz.0.114 Not tainted syzkaller #0 [ 99.334310][ T4824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 99.344372][ T4824] Call Trace: [ 99.347664][ T4824] [ 99.350604][ T4806] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.350607][ T4824] dump_stack_lvl+0x188/0x24e [ 99.360497][ T2169] usb 2-1: USB disconnect, device number 2 [ 99.369258][ T4824] ? memcpy+0x3c/0x60 [ 99.373260][ T4824] ? show_regs_print_info+0x12/0x12 [ 99.378485][ T4824] ? load_image+0x410/0x410 [ 99.383026][ T4824] panic+0x2d3/0x710 [ 99.386949][ T4824] ? bpf_jit_dump+0xd0/0xd0 [ 99.391473][ T4824] __warn+0x2f8/0x4f0 [ 99.395470][ T4824] ? usb_submit_urb+0x1178/0x18d0 [ 99.400493][ T4824] ? usb_submit_urb+0x1178/0x18d0 [ 99.405521][ T4824] report_bug+0x2ba/0x4f0 [ 99.409849][ T4824] ? usb_submit_urb+0x1178/0x18d0 [ 99.414874][ T4824] handle_bug+0x3a/0x70 [ 99.419043][ T4824] exc_invalid_op+0x16/0x40 [ 99.423550][ T4824] asm_exc_invalid_op+0x16/0x20 [ 99.428406][ T4824] RIP: 0010:usb_submit_urb+0x1178/0x18d0 [ 99.434038][ T4824] Code: df 0f b6 44 05 00 84 c0 0f 85 5e 06 00 00 45 0f b6 45 00 48 c7 c7 60 f2 2e 8b 48 8b 74 24 08 4c 89 e2 44 89 f1 e8 28 48 22 fb <0f> 0b 49 bf 00 00 00 00 00 fc ff df e9 b3 f3 ff ff 89 e9 80 e1 07 [ 99.453728][ T4824] RSP: 0018:ffffc90002fa77d8 EFLAGS: 00010246 [ 99.459796][ T4824] RAX: 3d413ffcbc0b2200 RBX: ffff88801e794c00 RCX: 0000000000080000 [ 99.467773][ T4824] RDX: ffffc9001040d000 RSI: 0000000000006539 RDI: 000000000000653a [ 99.475744][ T4824] RBP: 1ffff110038cdf1d R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 99.483716][ T4824] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: ffff88814d899e88 [ 99.491722][ T4824] R13: ffff88801c66f8e8 R14: 0000000080000380 R15: dffffc0000000000 [ 99.499703][ T4824] ? usb_submit_urb+0x1178/0x18d0 [ 99.504743][ T4824] usb_start_wait_urb+0x13c/0x580 [ 99.509769][ T4824] ? usb_api_blocking_completion+0xb0/0xb0 [ 99.515600][ T4824] usb_control_msg+0x231/0x3e0 [ 99.520363][ T4824] ? mark_lock+0x94/0x320 [ 99.524704][ T4824] gl861_ctrl_msg+0x211/0x3d0 [ 99.529387][ T4824] ? lock_chain_count+0x20/0x20 [ 99.534241][ T4824] ? gl861_i2c_functionality+0x10/0x10 [ 99.539721][ T4824] ? entry_SYSCALL_64_after_hwframe+0x9c/0xd2 [ 99.545798][ T4824] ? lockdep_hardirqs_on+0x94/0x140 [ 99.551005][ T4824] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 99.556650][ T4824] gl861_i2c_master_xfer+0x430/0x640 [ 99.561961][ T4824] ? gl861_init+0x40/0x40 [ 99.566290][ T4824] __i2c_transfer+0x88d/0x2290 [ 99.571064][ T4824] ? i2c_cmd+0x110/0x110 [ 99.575306][ T4824] ? i2c_transfer+0x117/0x3a0 [ 99.579998][ T4824] i2c_transfer+0x25d/0x3a0 [ 99.584553][ T4824] ? __i2c_transfer+0x2290/0x2290 [ 99.589596][ T4824] ? __might_fault+0xc2/0x120 [ 99.594282][ T4824] ? __might_fault+0xa6/0x120 [ 99.598971][ T4824] ? _copy_from_user+0x10b/0x170 [ 99.603916][ T4824] i2cdev_ioctl_rdwr+0x3dc/0x6c0 [ 99.609041][ T4824] i2cdev_ioctl+0x610/0x7b0 [ 99.613553][ T4824] ? i2cdev_write+0x120/0x120 [ 99.618260][ T4824] ? bpf_lsm_file_free_security+0x10/0x10 [ 99.624016][ T4824] ? bpf_lsm_file_ioctl+0x5/0x10 [ 99.628993][ T4824] ? security_file_ioctl+0x7c/0xa0 [ 99.634116][ T4824] ? i2cdev_write+0x120/0x120 [ 99.638811][ T4824] __se_sys_ioctl+0xfa/0x170 [ 99.643440][ T4824] do_syscall_64+0x4c/0xa0 [ 99.647867][ T4824] ? clear_bhb_loop+0x60/0xb0 [ 99.652545][ T4824] ? clear_bhb_loop+0x60/0xb0 [ 99.657231][ T4824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.663127][ T4824] RIP: 0033:0x7f169859e159 [ 99.667537][ T4824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.687143][ T4824] RSP: 002b:00007f1699487028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.695554][ T4824] RAX: ffffffffffffffda RBX: 00007f1698826180 RCX: 00007f169859e159 [ 99.703525][ T4824] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000009 [ 99.711490][ T4824] RBP: 00007f169863503b R08: 0000000000000000 R09: 0000000000000000 [ 99.719460][ T4824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.727426][ T4824] R13: 00007f1698826218 R14: 00007f1698826180 R15: 00007ffc32c13988 [ 99.735409][ T4824] [ 99.738673][ T4824] Kernel Offset: disabled [ 99.743058][ T4824] Rebooting in 86400 seconds..