last executing test programs: 6.782921422s ago: executing program 3 (id=220): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0xa7f084dd5657bbbf, 0x14}) syz_open_dev$tty1(0xc, 0x4, 0x1) 6.064896382s ago: executing program 3 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x9a, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010000, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0xf, 0x0, {0x1f, 0x4, 0x0, 0x3a, 0x584, 0x65, 0x9, 0x25, 0x16, 0x3313, @empty, @multicast2, {[@end, @generic={0x94, 0xf, "4fcf02d60e646404e8e478505e"}, @end, @noop, @cipso={0x86, 0x31, 0x3, [{0x1, 0x11, "97e3eedcb1b4f0f6c3fb95c6087f31"}, {0x5, 0xa, "2d3110a90aa230a1"}, {0x5e232c06587b5052, 0x10, "66079e88e964c34418c418a7ed5b"}]}, @rr={0x7, 0xb, 0x16, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1]}, @timestamp={0x44, 0x18, 0x84, 0x0, 0x4, [0x4, 0x0, 0x6, 0x1, 0x1]}]}}, "c819"}}}, 0xa8) 4.506529143s ago: executing program 3 (id=233): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8], 0x118) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') unshare(0x60000600) 4.011329755s ago: executing program 1 (id=238): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) 3.469202171s ago: executing program 1 (id=241): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x4) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9) 3.405453685s ago: executing program 3 (id=243): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) 3.154519373s ago: executing program 2 (id=244): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, 0x0, 0x118) 3.106248288s ago: executing program 1 (id=245): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="05"], 0x160}}, 0x0) 3.062794742s ago: executing program 3 (id=247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a0102"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.841816665s ago: executing program 2 (id=248): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.725368597s ago: executing program 1 (id=249): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 2.386836649s ago: executing program 4 (id=250): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000480)) 2.38262153s ago: executing program 1 (id=251): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) timer_settime(r4, 0x0, &(0x7f00000001c0), 0x0) 2.307923804s ago: executing program 0 (id=252): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{0x0, 0x16, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) 2.102978616s ago: executing program 1 (id=253): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000000d}, 0x10) 2.102360489s ago: executing program 0 (id=254): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd2a, 0x0, 0x70bd28}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc5}, 0x0) 1.974584996s ago: executing program 4 (id=255): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000140001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8018) 1.741839473s ago: executing program 2 (id=256): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') 1.601467499s ago: executing program 3 (id=257): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = dup(r3) copy_file_range(r3, 0x0, r4, 0x0, 0x3000, 0x0) 1.599746819s ago: executing program 4 (id=258): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, 0x0, 0x118) 880.698127ms ago: executing program 0 (id=259): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{0x0, 0x16, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendto$inet(r5, 0x0, 0x0, 0x1, 0x0, 0x0) 871.446959ms ago: executing program 2 (id=260): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000003c40)="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", 0x3b1}], 0x1}}], 0x1, 0x8014) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 870.480762ms ago: executing program 4 (id=261): syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0xc, 0x0, @opaque="75d00021"}}}}}, 0x0) 642.968817ms ago: executing program 4 (id=262): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r2, 0x0, 0x0) r5 = socket(0x10, 0x802, 0x0) write(r5, &(0x7f0000000000)="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", 0xfc) 601.664308ms ago: executing program 2 (id=263): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) 588.225575ms ago: executing program 0 (id=264): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) timer_settime(r4, 0x0, &(0x7f00000001c0), 0x0) 358.214234ms ago: executing program 4 (id=265): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0x80000002}) 325.61901ms ago: executing program 0 (id=266): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000480)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x4, 0xab, 0x804, 0x5, 0x6, 0x2, "c870f3e5"}}, 0x11c) 324.477389ms ago: executing program 2 (id=267): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=268): socket$pppoe(0x18, 0x1, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x101c41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts. [ 88.612546][ T5788] cgroup: Unknown subsys name 'net' [ 88.842492][ T5788] cgroup: Unknown subsys name 'cpuset' [ 88.896946][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.927574][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.230066][ T44] cfg80211: failed to load regulatory.db [ 99.969142][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.972636][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.973407][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.974407][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.975248][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.996723][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.997834][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.031609][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.033148][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.051662][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.052970][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.057209][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.058829][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.060573][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.061680][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.145717][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.155576][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.165134][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.178709][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.181673][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.224149][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.231434][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.233839][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.252485][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.253436][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.118996][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 101.301459][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 101.465332][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 101.547512][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 101.556077][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 102.067910][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.069024][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.069484][ T5809] bridge_slave_0: entered allmulticast mode [ 102.071579][ T5809] bridge_slave_0: entered promiscuous mode [ 102.147840][ T5811] Bluetooth: hci2: command tx timeout [ 102.147993][ T5118] Bluetooth: hci1: command tx timeout [ 102.148114][ T5811] Bluetooth: hci0: command tx timeout [ 102.208480][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.208694][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.208848][ T5809] bridge_slave_1: entered allmulticast mode [ 102.210766][ T5809] bridge_slave_1: entered promiscuous mode [ 102.227877][ T5811] Bluetooth: hci3: command tx timeout [ 102.306417][ T5811] Bluetooth: hci4: command tx timeout [ 102.407510][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.407628][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.407769][ T5810] bridge_slave_0: entered allmulticast mode [ 102.409728][ T5810] bridge_slave_0: entered promiscuous mode [ 102.598017][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.598237][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.598437][ T5810] bridge_slave_1: entered allmulticast mode [ 102.600721][ T5810] bridge_slave_1: entered promiscuous mode [ 102.872275][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.067502][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.067637][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.067833][ T5822] bridge_slave_0: entered allmulticast mode [ 103.070105][ T5822] bridge_slave_0: entered promiscuous mode [ 103.077239][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.167352][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.167511][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.167703][ T5824] bridge_slave_0: entered allmulticast mode [ 103.169924][ T5824] bridge_slave_0: entered promiscuous mode [ 103.171706][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.171873][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.172057][ T5816] bridge_slave_0: entered allmulticast mode [ 103.174191][ T5816] bridge_slave_0: entered promiscuous mode [ 103.182138][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.182302][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.182546][ T5822] bridge_slave_1: entered allmulticast mode [ 103.185779][ T5822] bridge_slave_1: entered promiscuous mode [ 103.270492][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.270740][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.270872][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.271118][ T5824] bridge_slave_1: entered allmulticast mode [ 103.273305][ T5824] bridge_slave_1: entered promiscuous mode [ 103.275079][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.275172][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.275303][ T5816] bridge_slave_1: entered allmulticast mode [ 103.288271][ T5816] bridge_slave_1: entered promiscuous mode [ 103.521082][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.729170][ T5809] team0: Port device team_slave_0 added [ 103.960798][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.963089][ T5809] team0: Port device team_slave_1 added [ 104.040841][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.044454][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.049490][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.129163][ T5810] team0: Port device team_slave_0 added [ 104.132394][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.135013][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.227164][ T5118] Bluetooth: hci2: command tx timeout [ 104.227199][ T5118] Bluetooth: hci1: command tx timeout [ 104.227345][ T5811] Bluetooth: hci0: command tx timeout [ 104.279316][ T5810] team0: Port device team_slave_1 added [ 104.306408][ T5811] Bluetooth: hci3: command tx timeout [ 104.386364][ T5815] Bluetooth: hci4: command tx timeout [ 104.520086][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.520105][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.520132][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.959488][ T5822] team0: Port device team_slave_0 added [ 104.960677][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.960693][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.960720][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.079440][ T5824] team0: Port device team_slave_0 added [ 105.081775][ T5816] team0: Port device team_slave_0 added [ 105.085245][ T5822] team0: Port device team_slave_1 added [ 105.104323][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.104336][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.104355][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.114359][ T5824] team0: Port device team_slave_1 added [ 105.119030][ T5816] team0: Port device team_slave_1 added [ 105.388121][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.388139][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.388158][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.645964][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.645980][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.646002][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.748076][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.748093][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.748112][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.749724][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.749740][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.749766][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.753462][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.753479][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.753505][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.918177][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.918196][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.918224][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.919413][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.919429][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.919447][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.945378][ T5809] hsr_slave_0: entered promiscuous mode [ 105.948273][ T5809] hsr_slave_1: entered promiscuous mode [ 106.283944][ T5810] hsr_slave_0: entered promiscuous mode [ 106.284954][ T5810] hsr_slave_1: entered promiscuous mode [ 106.285816][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 106.285914][ T5810] Cannot create hsr debugfs directory [ 106.306461][ T5815] Bluetooth: hci1: command tx timeout [ 106.306499][ T5815] Bluetooth: hci2: command tx timeout [ 106.306840][ T5811] Bluetooth: hci0: command tx timeout [ 106.386436][ T5811] Bluetooth: hci3: command tx timeout [ 106.466416][ T5811] Bluetooth: hci4: command tx timeout [ 106.564301][ T5822] hsr_slave_0: entered promiscuous mode [ 106.565369][ T5822] hsr_slave_1: entered promiscuous mode [ 106.566093][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 106.566116][ T5822] Cannot create hsr debugfs directory [ 106.754035][ T5824] hsr_slave_0: entered promiscuous mode [ 106.755280][ T5824] hsr_slave_1: entered promiscuous mode [ 106.755967][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 106.755990][ T5824] Cannot create hsr debugfs directory [ 106.772110][ T5816] hsr_slave_0: entered promiscuous mode [ 106.773745][ T5816] hsr_slave_1: entered promiscuous mode [ 106.775066][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 106.775095][ T5816] Cannot create hsr debugfs directory [ 108.386407][ T5118] Bluetooth: hci2: command tx timeout [ 108.386442][ T5118] Bluetooth: hci1: command tx timeout [ 108.386503][ T5811] Bluetooth: hci0: command tx timeout [ 108.455873][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.466347][ T5811] Bluetooth: hci3: command tx timeout [ 108.494782][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.532111][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.546418][ T5811] Bluetooth: hci4: command tx timeout [ 108.594775][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.703787][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.734812][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.777215][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.825269][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.955599][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.991591][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.031464][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.078408][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.224350][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.260367][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.299784][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.359134][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.503404][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.550205][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.583355][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.624476][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.633204][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.721110][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.750490][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.809567][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.810084][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.850559][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.852623][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.852775][ T4232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.893969][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.894169][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.925341][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.957251][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.957513][ T4232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.032760][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.069309][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.069482][ T4232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.092482][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.121790][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.121951][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.267112][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.301345][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.312575][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.314560][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.365579][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.365763][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.449618][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.503411][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.503643][ T4232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.554336][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.555833][ T4232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.763975][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.840722][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.059996][ T5809] veth0_vlan: entered promiscuous mode [ 111.141183][ T5809] veth1_vlan: entered promiscuous mode [ 111.192958][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.389850][ T5809] veth0_macvtap: entered promiscuous mode [ 111.430059][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.444946][ T5809] veth1_macvtap: entered promiscuous mode [ 111.479979][ T5822] veth0_vlan: entered promiscuous mode [ 111.539994][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.543120][ T5822] veth1_vlan: entered promiscuous mode [ 111.550930][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.588766][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.627678][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.632852][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.665069][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.699333][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.788822][ T5824] veth0_vlan: entered promiscuous mode [ 111.850170][ T5822] veth0_macvtap: entered promiscuous mode [ 111.931714][ T5822] veth1_macvtap: entered promiscuous mode [ 111.933471][ T5824] veth1_vlan: entered promiscuous mode [ 111.951654][ T5810] veth0_vlan: entered promiscuous mode [ 112.012809][ T5816] veth0_vlan: entered promiscuous mode [ 112.043060][ T5810] veth1_vlan: entered promiscuous mode [ 112.052490][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.052516][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.089538][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.113987][ T5816] veth1_vlan: entered promiscuous mode [ 112.153354][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.173460][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.173481][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.205158][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.221991][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.234926][ T5824] veth0_macvtap: entered promiscuous mode [ 112.253689][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.270277][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.290533][ T5824] veth1_macvtap: entered promiscuous mode [ 112.393552][ T5810] veth0_macvtap: entered promiscuous mode [ 112.489900][ T5816] veth0_macvtap: entered promiscuous mode [ 112.500812][ T5810] veth1_macvtap: entered promiscuous mode [ 112.514219][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.540537][ T5816] veth1_macvtap: entered promiscuous mode [ 112.572099][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.659039][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.661875][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.664416][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.668047][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.668071][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.693545][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.709592][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.722984][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.729096][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.760153][ T5923] fuseblk: Unknown parameter '0xffffffffffffffff' [ 112.867633][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.868236][ T4351] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.875628][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.884984][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.885094][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.885109][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.953570][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.987710][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.072944][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.143100][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.161166][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.521130][ T1731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.521152][ T1731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.820337][ T4232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.820358][ T4232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.309014][ T5935] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.936920][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.936943][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.021756][ T5943] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.240561][ T1731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.240583][ T1731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.334279][ T1731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.334300][ T1731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.446724][ T990] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.464426][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.628525][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 115.640038][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.640104][ T990] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 115.640131][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.651178][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.651217][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.651263][ T44] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 115.651290][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.728842][ T1731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.728864][ T1731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.734664][ T990] usb 4-1: config 0 descriptor?? [ 115.759282][ T44] usb 2-1: config 0 descriptor?? [ 116.490395][ T44] usbhid 2-1:0.0: can't add hid device: -71 [ 116.490533][ T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 116.533936][ T990] kye 0003:0458:501B.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 116.693105][ T990] kye 0003:0458:501B.0001: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.3-1/input0 [ 116.693142][ T990] kye 0003:0458:501B.0001: tablet-enabling feature report not found [ 116.693157][ T990] kye 0003:0458:501B.0001: tablet enabling failed [ 116.828053][ T44] usb 2-1: USB disconnect, device number 2 [ 116.930321][ T990] usb 4-1: USB disconnect, device number 2 [ 118.255333][ T5980] netlink: 64 bytes leftover after parsing attributes in process `syz.2.23'. [ 120.251348][ T5789] hid-generic 00AB:0804:0005.0002: unknown main item tag 0x7 [ 120.251389][ T5789] hid-generic 00AB:0804:0005.0002: item fetching failed at offset 2/4 [ 120.252188][ T5789] hid-generic 00AB:0804:0005.0002: probe with driver hid-generic failed with error -22 [ 123.018563][ T6074] input: syz0 as /devices/virtual/input/input5 [ 123.504659][ T6081] input: syz1 as /devices/virtual/input/input6 [ 124.136246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.196216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.606234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.885819][ T38] audit: type=1326 audit(1763255976.658:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6100 comm="syz.2.72" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e0c32f6c9 code=0x0 [ 127.956350][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.058960][ T6187] fuse: Bad value for 'user_id' [ 128.058982][ T6187] fuse: Bad value for 'user_id' [ 128.110987][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.111051][ T44] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 128.111085][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.127500][ T44] usb 2-1: config 0 descriptor?? [ 128.170245][ T44] pwc: Askey VC010 type 2 USB webcam detected. [ 128.561650][ T44] pwc: recv_control_msg error -32 req 02 val 2b00 [ 128.567109][ T44] pwc: recv_control_msg error -32 req 02 val 2700 [ 128.573485][ T44] pwc: recv_control_msg error -32 req 02 val 2c00 [ 128.574599][ T44] pwc: recv_control_msg error -32 req 04 val 1000 [ 128.576562][ T44] pwc: recv_control_msg error -32 req 04 val 1300 [ 128.605422][ T44] pwc: recv_control_msg error -32 req 04 val 1400 [ 128.613787][ T44] pwc: recv_control_msg error -32 req 02 val 2000 [ 128.617968][ T44] pwc: recv_control_msg error -32 req 02 val 2100 [ 128.619444][ T44] pwc: recv_control_msg error -71 req 04 val 1500 [ 128.628442][ T44] pwc: recv_control_msg error -71 req 02 val 2500 [ 128.631144][ T44] pwc: recv_control_msg error -71 req 02 val 2400 [ 128.633589][ T44] pwc: recv_control_msg error -71 req 02 val 2600 [ 128.642920][ T44] pwc: recv_control_msg error -71 req 02 val 2900 [ 128.646616][ T44] pwc: recv_control_msg error -71 req 02 val 2800 [ 128.650898][ T44] pwc: recv_control_msg error -71 req 04 val 1100 [ 128.651477][ T44] pwc: recv_control_msg error -71 req 04 val 1200 [ 128.712969][ T44] pwc: Registered as video103. [ 128.779291][ T44] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 128.915054][ T44] usb 2-1: USB disconnect, device number 3 [ 133.226751][ T6286] fuse: Bad value for 'user_id' [ 133.226771][ T6286] fuse: Bad value for 'user_id' [ 135.286244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.604709][ T6346] fuse: Bad value for 'user_id' [ 135.604731][ T6346] fuse: Bad value for 'user_id' [ 138.331260][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.331362][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.396627][ T5791] hid-generic 00AB:0804:0005.0003: unknown main item tag 0x7 [ 139.396725][ T5791] hid-generic 00AB:0804:0005.0003: item fetching failed at offset 2/4 [ 139.397511][ T5791] hid-generic 00AB:0804:0005.0003: probe with driver hid-generic failed with error -22 [ 139.856318][ T5890] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.019022][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.019075][ T5890] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 140.019099][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.078600][ T5890] usb 5-1: config 0 descriptor?? [ 140.267020][ T6415] fuseblk: Unknown parameter '0xffffffffffffffff' [ 140.534177][ T5890] usbhid 5-1:0.0: can't add hid device: -71 [ 140.534316][ T5890] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 140.563229][ T5890] usb 5-1: USB disconnect, device number 2 [ 141.176224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.296220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.296766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.297923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.299215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.300388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 142.071373][ T6442] syz.3.226 uses obsolete (PF_INET,SOCK_PACKET) [ 142.074930][ T6441] syzkaller1: entered promiscuous mode [ 142.074955][ T6441] syzkaller1: entered allmulticast mode [ 142.188631][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 142.367587][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 142.369163][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.369221][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.369248][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.370694][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.370749][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.370776][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.373840][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.373906][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.373935][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.375667][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.375723][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.375750][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.473782][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.473854][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.473886][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.617287][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.617333][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.617351][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.637039][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.637114][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.637147][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.641895][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.641965][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.641997][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.822339][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 142.822371][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 142.822392][ T9] usb 5-1: Product: syz [ 142.822407][ T9] usb 5-1: Manufacturer: syz [ 142.822422][ T9] usb 5-1: SerialNumber: syz [ 142.880296][ T9] usb 5-1: config 0 descriptor?? [ 143.095324][ T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 143.190070][ T9] usb 5-1: USB disconnect, device number 3 [ 143.232856][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 143.826733][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 143.978911][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.978944][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.983883][ T44] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 143.983913][ T44] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 143.983933][ T44] usb 1-1: Manufacturer: syz [ 144.055305][ T44] usb 1-1: config 0 descriptor?? [ 144.078524][ T6472] input: syz0 as /devices/virtual/input/input8 [ 144.916856][ T44] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 144.916930][ T44] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 144.916949][ T44] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 144.917006][ T44] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 144.917119][ T44] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 144.997681][ T44] usb 1-1: USB disconnect, device number 2 [ 145.094782][ T38] audit: type=1326 audit(1763255996.868:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6493 comm="syz.2.248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e0c32f6c9 code=0x0 [ 147.103046][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.726064][ T5895] hid-generic 00AB:0804:0005.0005: unknown main item tag 0x7 [ 147.726103][ T5895] hid-generic 00AB:0804:0005.0005: item fetching failed at offset 2/4 [ 147.732862][ T5895] hid-generic 00AB:0804:0005.0005: probe with driver hid-generic failed with error -22 [ 147.971402][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.006124][ T5815] 1024-page vmalloc region starting at 0xffffc9000e6e5000 allocated at kcov_ioctl+0x58/0x650 [ 148.007012][ T5815] list_del corruption. next->prev should be ffffc9001b410000, but was 0000000000000000. (next=ffffc9000e6e5000) [ 148.007718][ T5815] ------------[ cut here ]------------ [ 148.007727][ T5815] kernel BUG at lib/list_debug.c:67! [ 148.007782][ T5815] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 148.007821][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.007866][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.007881][ T5815] Workqueue: hci0 hci_rx_work [ 148.007912][ T5815] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 148.007944][ T5815] Code: dc b9 7d fd 43 80 3c 2c 00 74 08 4c 89 ff e8 7d be 9d fd 49 8b 56 08 48 c7 c7 00 e3 3d 8b 48 89 de 4c 89 f1 e8 27 8e a4 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 148.007962][ T5815] RSP: 0018:ffffc90004b9f958 EFLAGS: 00010246 [ 148.007979][ T5815] RAX: 000000000000006d RBX: ffffc9001b410000 RCX: 7cbdaf193e2c8600 [ 148.007995][ T5815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.008007][ T5815] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 148.008019][ T5815] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92001cdca01 [ 148.008034][ T5815] R13: dffffc0000000000 R14: ffffc9000e6e5000 R15: ffffc9000e6e5008 [ 148.008050][ T5815] FS: 0000000000000000(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 148.008066][ T5815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.008080][ T5815] CR2: 00007f5c7ed66d00 CR3: 000000003d246000 CR4: 00000000003526f0 [ 148.008098][ T5815] Call Trace: [ 148.008107][ T5815] [ 148.008117][ T5815] kcov_remote_start+0x2b0/0x6f0 [ 148.008152][ T5815] hci_rx_work+0x130/0xe80 [ 148.008180][ T5815] ? process_scheduled_works+0x9ef/0x17b0 [ 148.008218][ T5815] process_scheduled_works+0xae1/0x17b0 [ 148.008258][ T5815] ? __pfx_process_scheduled_works+0x10/0x10 [ 148.008294][ T5815] worker_thread+0x8a0/0xda0 [ 148.008322][ T5815] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 148.008360][ T5815] ? __kthread_parkme+0x7b/0x200 [ 148.008398][ T5815] kthread+0x711/0x8a0 [ 148.008433][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 148.008466][ T5815] ? __pfx_kthread+0x10/0x10 [ 148.008494][ T5815] ? rt_spin_unlock+0x150/0x200 [ 148.008521][ T5815] ? rt_spin_unlock+0x161/0x200 [ 148.008542][ T5815] ? __pfx_kthread+0x10/0x10 [ 148.008573][ T5815] ret_from_fork+0x4bc/0x870 [ 148.008600][ T5815] ? __pfx_ret_from_fork+0x10/0x10 [ 148.008629][ T5815] ? __switch_to_asm+0x39/0x70 [ 148.008650][ T5815] ? __switch_to_asm+0x33/0x70 [ 148.008670][ T5815] ? __pfx_kthread+0x10/0x10 [ 148.008702][ T5815] ret_from_fork_asm+0x1a/0x30 [ 148.008730][ T5815] [ 148.008738][ T5815] Modules linked in: [ 148.008760][ T5815] ---[ end trace 0000000000000000 ]--- [ 148.008770][ T5815] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 148.008800][ T5815] Code: dc b9 7d fd 43 80 3c 2c 00 74 08 4c 89 ff e8 7d be 9d fd 49 8b 56 08 48 c7 c7 00 e3 3d 8b 48 89 de 4c 89 f1 e8 27 8e a4 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 148.008818][ T5815] RSP: 0018:ffffc90004b9f958 EFLAGS: 00010246 [ 148.008834][ T5815] RAX: 000000000000006d RBX: ffffc9001b410000 RCX: 7cbdaf193e2c8600 [ 148.008849][ T5815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.008861][ T5815] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 148.008874][ T5815] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92001cdca01 [ 148.008890][ T5815] R13: dffffc0000000000 R14: ffffc9000e6e5000 R15: ffffc9000e6e5008 [ 148.008906][ T5815] FS: 0000000000000000(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 148.008922][ T5815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.008936][ T5815] CR2: 00007f5c7ed66d00 CR3: 000000003d246000 CR4: 00000000003526f0 [ 148.008956][ T5815] Kernel panic - not syncing: Fatal exception [ 148.009102][ T5815] Kernel Offset: disabled