last executing test programs: 3m21.396012891s ago: executing program 4 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x20}}, 0x18}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r3, 0x8}, &(0x7f00000001c0)=0x8) r4 = socket$key(0xf, 0x3, 0x2) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x20, 0x20, 0x3, 0x35e5, {{0xc, 0x4, 0x1, 0x7, 0x30, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @ssrr={0x89, 0x1b, 0x6c, [@remote, @empty, @local, @private=0xa010101, @multicast1, @rand_addr=0x64010100]}]}}}}}) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = getuid() quotactl_fd$Q_GETFMT(r7, 0xffffffff80000400, r8, &(0x7f00000000c0)) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in=@multicast2, @in6=@local, 0x4e24, 0x33b4, 0x4e21, 0x2, 0xa, 0xa0, 0x80, 0x51b41b4deab703f4, r6, r8}, {0x5, 0x6, 0x4, 0x8, 0x3, 0x9, 0xffffffffffffffff}, {0x6, 0xe, 0x3, 0x100}, 0x1, 0x0, 0x2, 0x0, 0x3}, {{@in=@local, 0x4d6, 0x6c}, 0xa, @in=@multicast2, 0x3502, 0x1, 0x1, 0xff, 0x6, 0x5, 0x7}}, 0xe8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r10, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r10, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r9, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r11, 0x0, 0x2fff, 0x2, &(0x7f0000000080)="f6b6", 0x5}) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="021800001b000000000000000000000005000500330000000a00000000000000fe8000000000000000000000000000aa0000000000000000080012000000e30b00000000000000000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000000000000000000000070019"], 0xd8}}, 0x0) 3m20.425566394s ago: executing program 4 (id=16): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000140)={{@host, 0xffffffff}, 0x1, 0x0, 0x1}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)="eefcf2b079315615b51fccff5850156641ae3c8b2de05e77718b9843b15bc4b0901b2980de3ee3d2cf62cd4c84f81037f9ef1afe7392a0639913b597bd0950a87e52a8a40c4e1caf63364c9a68bfff511c225caa248176a26bb960d2a463c87cc235c58ce816cf6804ee2e9dc1453a5bb81bfb8c479137f7123b16377fd81ed802a4760106cfc4142da3aa65a3f559fe3b826f993497b143a36d5bbc97db089082a765d768c7922f6d691e56de19394f376015c2b0ac70383c77c0d7aff947c7163f68d592e78ec0a960c8e372a38c6ada07db1372ee8889b192b02c94d2", 0xde, 0x1) chroot(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000400)=[{0x0, 0x0, {}, {0x0, 0x0, 0x4}}, {0x3, 0x0, {0x0, 0xff, 0x2}, {0x0, 0x1, 0x1}, 0x1, 0xff}, {0x1, 0x2, {0x2, 0x1, 0x2}, {0x1}, 0x1, 0xff}], 0x60) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x358, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502, {0x700}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) faccessat(0xffffffffffffffff, 0x0, 0x44) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x20000090) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100006c503b20b810a81ff957010203010902120001020010080904620000b63e7800"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000300)={0x20, 0x17, 0x1, 'N'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m18.469420375s ago: executing program 4 (id=27): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080500d004"]) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xe}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e20, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, 0x58b, 0x6, 0x714, 0xfffff9b3, 0x5, 0xa, 0xbc}, 0x9c) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x7, 0x7, 0xcfe064a, 0x4, 0x6a, "4fe60700000001ffffffffffffffea00", 0x7}) r6 = dup(r0) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) 3m3.439269479s ago: executing program 32 (id=27): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080500d004"]) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xe}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e20, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, 0x58b, 0x6, 0x714, 0xfffff9b3, 0x5, 0xa, 0xbc}, 0x9c) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x7, 0x7, 0xcfe064a, 0x4, 0x6a, "4fe60700000001ffffffffffffffea00", 0x7}) r6 = dup(r0) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) 3m0.508178841s ago: executing program 1 (id=107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}]}, 0x40}}, 0x0) 3m0.378002753s ago: executing program 0 (id=109): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) r1 = syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1f33, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m55.412371734s ago: executing program 3 (id=113): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{}, {}, 0x4, 0x5}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000001c0)={0x3, 0x8, 0x0, 0x0, @vifc_lcl_ifindex}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x300) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x7, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x8, 0x8, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) syz_open_dev$dri(0x0, 0xab, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m54.623770529s ago: executing program 1 (id=114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 14) 2m53.312773699s ago: executing program 0 (id=115): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x200001, 0x40, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, &(0x7f0000000140)) ioctl$SNDCTL_SEQ_SYNC(r7, 0x5101) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040)=0xc00) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0xfe, 0x2, @SEQ_CONTROLLER=0xfe, 0x5}) preadv(r8, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x2, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r11}, 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee000000000000ee004e2f9663a918fa1efd9b0b"}, 0x38}, 0xee}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000200)={0x0, 0x800, [0xd, 0xfffffffffffffff8, 0xdcb, 0x5, 0x2, 0x1]}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) 2m53.312468306s ago: executing program 1 (id=116): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x40000000000000, 0x0, 0xfffffffffffffffd, 0x10000}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff, 0x4000000}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) (fail_nth: 28) 2m51.39720519s ago: executing program 0 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000240001000000000000000000000000000600030000eb"], 0x1c}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000001700)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000001540)=[r4], &(0x7f0000001540), &(0x7f0000000300)=[r5], &(0x7f0000000340)}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700fe02000000000000000000000000000004001200", @ANYRES32=r9], 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15, 0x4, 0x4, 0x7, 0x0, r0, 0x0, '\x00', r9, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r10, r10, 0x0, 0x800000009) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r12, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x23, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0xc4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}], &(0x7f0000000000)='syzkaller\x00', 0x66c, 0x36, &(0x7f0000000200)=""/54, 0x41100, 0x20, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f0000000240)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)=[{0x0, 0x5, 0xa, 0xb}, {0x40000000, 0x2, 0xf, 0x2}, {0x1, 0x2, 0x10, 0x4}, {0x1, 0x1, 0xf, 0x7}, {0x4, 0x2, 0x8, 0x7}], 0x10, 0x5, @void, @value}, 0x94) 2m51.396908065s ago: executing program 1 (id=118): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x927) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x43000, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x10, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb5b4, 0x0, 0xfffffffe, "65366a50432b7ee2feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a26000"}}) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aac60400000000faffff"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r7, 0x0, 0x9) ioctl$SNDCTL_SEQ_SYNC(r7, 0x5101) timer_getoverrun(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r9}) r11 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r11) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r11}) 2m45.379082604s ago: executing program 0 (id=119): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 2m45.377242716s ago: executing program 1 (id=120): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x4) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000050a0300000000000000000002000000f6ff0240000000000053b9471600010073797a30000000000b00070066696c7465720000140000001100010000000000000000000000000a"], 0x60}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x11e0, 0x0, 0xffffffff, 0xffffffff, 0x12b8, 0x12b8, 0x12b8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x3}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x10) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x4}, 0x4) 2m45.358651706s ago: executing program 3 (id=122): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f00000000c0)=[r1], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)=0x14) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f00000000c0)=0x32) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r5, &(0x7f0000000080)="e9", 0x1, 0x40010, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000004c00)={0x0, @in6={{0xa, 0x4e22, 0x7ff, @mcast2, 0x4}}}, &(0x7f0000004cc0)=0x84) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008005, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000040)={0x0, 0x1c0, 0x3c0, &(0x7f0000000180)=[0x6bd1a313, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0xfffffffffffffffe, 0x4, 0x10000, 0x100, 0x1004, 0x2000000, 0x8, 0x5, 0x5, 0x9, 0x9, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x2000096, 0xf0, 0xffffffff00000000, 0x4, 0x3ff, 0x7, 0x239, 0x3, 0x2, 0x888f, 0xffffffff, 0x8, 0x6, 0x6, 0x3, 0x4, 0x20000000006, 0x8, 0x9, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xea, 0x200000000000101, 0x5, 0x9, 0x66, 0x3, 0x7, 0x0, 0x1, 0x47bc, 0xd, 0x2, 0xbbdc, 0x7fff, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0x2, 0x6, 0x0, 0x3403, 0xab8, 0x8, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x61d, 0x3, 0x7, 0xf6, 0x4, 0x5, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x4, 0x5, 0x0, 0xd, 0x2, 0x80000001, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0xd, 0x5, 0x8, 0x1, 0x9, 0xeb4, 0x3, 0xfffffffffffffffe, 0x200000000000b692, 0xcc, 0x8, 0x3]}) ioctl$KVM_CAP_HYPERV_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10}, {0xeeee0000, 0xeeee0000, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0x1, 0x9, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x38}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xe, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xf6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x1401b2, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 2m44.905376013s ago: executing program 0 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}]}, 0x40}}, 0x0) 2m42.448226336s ago: executing program 3 (id=126): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x98}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000), 0x0, 0x80800, 0x0, 0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={r4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e21, 0x7ff, @rand_addr=' \x01\x00', 0x6}}, [0x0, 0x9, 0xe, 0xffff, 0x7, 0x8000000000000001, 0x25, 0x7ff, 0xffffffffffff0001, 0x7, 0x6, 0xfffffffffffffffd, 0x3ff, 0x1]}, &(0x7f0000000000)=0x100) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', r0}, 0x7b) 2m42.218336905s ago: executing program 3 (id=127): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xfd, 0x1}, {0x5, 0x5}, {0x4}, {0x8c, 0x3}], "49b6770628d863a6"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "254ae56bdb04b339"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc050) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000900)=@broute={'broute\x00', 0x20, 0x5, 0x6f6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x14, 0x88be, 'xfrm0\x00', 'veth0_to_hsr\x00', 'wlan1\x00', 'bridge_slave_1\x00', @empty, [0xff, 0x0, 0x0, 0xff, 0x0, 0x1fe], @remote, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xde, 0xde, 0x12e, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x4, 0x2, 0x6, 0x2}}}, @connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x1b88}, {0x3d6}], 0x2, 0x2}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x8, {0x7f}}}}}, {0x3, 0x5b, 0x6003, 'netpci0\x00', 'syz_tun\x00', 'vlan1\x00', 'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, [0xff, 0xff, 0x0, 0x0, 0xff], 0xa6, 0xa6, 0x11e, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x7f, 0x5, 0xa}}}], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2, 0x400, 0x0, 0x1, 0x0, "ccc57a90bd399941e2d1dafe69b1230a471d10d6ea400ff496486dff88168ccf5153a2223a5ac0b1a5f136b7a7e54a0c4e1f6d043117b7ce187556470e3605d0"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x11, 0x19, 0x8863, 'virt_wifi0\x00', 'veth1_to_team\x00', 'bond_slave_0\x00', 'batadv0\x00', @empty, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0xff], 0x6e, 0xce, 0xfe, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x11, 0x21, 0x10, 'veth0_to_batadv\x00', 'dvmrp1\x00', 'syzkaller0\x00', 'nr0\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0x7f, 0xff, 0x0, 0x0, 0xff], 0x9e, 0x1fe, 0x236, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x6, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7521, 'system_u:object_r:sound_device_t:s0\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x9}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffe}}}}, {0x3, 0x40, 0x201, 'bridge_slave_0\x00', 'syz_tun\x00', 'virt_wifi0\x00', 'ip6gre0\x00', @broadcast, [0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xb6, 0xe6, [], [@common=@ERROR={'ERROR\x00', 0x20, {"1d003337d5e6ad45ca8b1a0b91075f8f7e218dcba1fe0f7c1b429e7ab66e"}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}]}, 0x76e) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f00000009c0)={0x280, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x6f, 0x2a, [@ht={0x2d, 0x1a, {0x300, 0x1, 0x0, 0x0, {0x95c1, 0x7b7, 0x0, 0xca, 0x0, 0x0, 0x0, 0x2}, 0x400, 0xffffff81, 0x4}}, @ht={0x2d, 0x1a, {0x2000, 0x1, 0x4, 0x0, {0x8, 0x5, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x1}, 0xc07, 0x9, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xb9, 0x8}}, @mesh_chsw={0x76, 0x6, {0x4, 0x80, 0x8, 0x40}}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x4, 0x0, {0xfffffffffffffffd, 0x62c, 0x0, 0x3, 0x0, 0x1, 0x1, 0x3}, 0x1, 0x27, 0x4}}, @peer_mgmt={0x75, 0x8, {0x0, 0x1ff, @val=0x4, @val=0x1b, @void}}]}, @NL80211_ATTR_SSID={0x23, 0x34, @random="fdca541310ca30d5b7f8ccc32eb45c826c611ebc92cf8651eecf168d3d7a88"}, @NL80211_ATTR_IE={0x1b7, 0x2a, [@measure_req={0x26, 0x7d, {0x7b, 0xcd, 0x8, "377db6919c469ab969ebb31c1081e555045a956d6237e27d0682d8a27d40ce8bd10310d279c729158d74e12b36c4758a5a137929f9f4d5e4674d7bc494ed6dc2222c75533a147a69fd5d29a41741865ba278c14583a1b64c0a630440410583d30d28af5e11510740bfb6899cbbe1a1fd89003993a36ae7194e51"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x3c, 0x5}}, @gcr_ga={0xbd, 0x6, @device_b}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @supported_rates={0x1, 0x7, [{0x30}, {0x9}, {0x48, 0x1}, {0x60}, {0x48, 0x1}, {0x6, 0x1}, {0x6, 0x1}]}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @mic={0x8c, 0x18, {0x347, "ced1d70f521d", @long="d1d4028bddda0c15a9b95b171ec8e68e"}}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x2, 0x0, {0x2, 0x8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x4, 0x8}}, @fast_bss_trans={0x37, 0xce, {0x3, 0x7, "0debf3ca62c4efdea428008c1dbae268", "3bc9c716eca9aab286d4d58099f639cb78d2aab3129ed4abe5e529b5e3c98ab2", "d7a617957f7048053cea086fbbdbaaa2cdc7fc5235cbb214d5dab8d411214fb6", [{0x3, 0x15, "8414f49c3446d7130e4e874bc742d21bc5902bd3f8"}, {0x1, 0x5, "a8e9b79375"}, {0x3, 0x17, "b5cb52512a6b700b119ff8934b2326f03200775ed8765f"}, {0x1, 0x16, "f9e9d53c1f0271d2c9055c65bfc65989b6caa178caaa"}, {0x3, 0x1a, "b00fa06e61f8710bc33e6d3cae76b29110ba1b11a342cb7554ad"}, {0x2, 0xd, "a309d1b0aa984c5de37c31b343"}, {0x3}]}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x10, 0x34, @random="511ec3bdae1c1a463f1815bd"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x280}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) write$binfmt_script(r0, &(0x7f0000000cc0)={'#! ', './file0', [{0x20, 'veth1_to_team\x00'}], 0xa, "9f92c4a1161a3c62e584ddc555f9200854"}, 0x2b) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000010c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000000d80)={0x2ec, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x2bc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2a0, 0xd, 0x0, 0x1, [{0xb0, 0x0, "fcf9e880aeb672d0fd3ed64685fb226304007da7b4567f5fbb19ab660bf2f7eef5b0988bd511c030af757fbbf714151d3dc6bc3158f3d9c9d59406556f33a5e0409f09ea0856ef0e827f9ad73abd89475dfdda6f6ba4758899a0d368e2590335496be9d7ad4eaf0d4513d7ed1b320328d7849bb70737449eed6659cb5ab11911b6664b526cd65252d83c344d06d218362b9766b32ba1b17290a1f7902c4e9514b9f70918f5fec32bc2951bd4"}, {0x7c, 0x0, "c2bb4a454a75eb9bd6581e4f559700ad32a628aba851898e36d28b3c4accd0e41b0d4016c47064cac214922c188f94d72ff4f737943a9b1770f81a6773bf04555d191d6c09fb2b7bb69f19a565e2ee2648b35d6adbb772ccef381b66e8f409ce92147d3cd1a664a51d56d2ef6fb2b6d9cb27b12b1782ce74"}, {0xda, 0x0, "4449196021a39d740a547cd39b6fedf88c74f6b326f8014d9f2e73195f0fc07d4d9fc916db28ec7928b913dee4599d94463f11fe76a519dc299aed5d60025b210a13d6b8cce149b811ed7b82c24ea0ad42bd43e827de827c8cf1937f341ca2691aa9c98344ee5c3d87fdea249918c937855cb583e44243250dc24611c7dca52ee22c53e05364d292d27c9f0eea6df2aedcf10d9308fb635a082c3e22f227f9980f3736334955cfcf555fc9d18e7d4125b4ace016d59dff8f298e4e6efa98c67ce1a8f9c724669da7756719eaa7da9490d69516f5efdd"}, {0x92, 0x0, "603b7cdefb5f02f67a4876cac9b40a7ace79dd7eb2f569ff7a2968a59c5f7e70c88f92b7e0791bae7ecdf039b359180ebac752786a2f875fda39b218b314a01a11630db4a7d7fc1345ce7a64abd8bc4bc9ef1c30d02a4999b2968adf5e4a25f7e9246a54c0f74b3f8fa52afc993be5b399c46bf4520fffc36e43a1f309e9c063fa3db963b5ca7f84001980d25c46"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001140)={'hsr0\x00', &(0x7f0000001100)=@ethtool_channels={0x3c, 0xef, 0x4, 0xad6fd0b, 0x7ff, 0x5, 0xbc2, 0x1e5, 0xfffffffa}}) r5 = accept4$inet6(r4, &(0x7f0000001180)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, &(0x7f00000011c0)=0x1c, 0x800) recvmmsg(r5, &(0x7f0000003040)=[{{&(0x7f0000001200)=@hci, 0x80, &(0x7f0000001640)=[{&(0x7f0000001280)=""/79, 0x4f}, {&(0x7f0000001300)=""/6, 0x6}, {&(0x7f0000001340)=""/197, 0xc5}, {&(0x7f0000001440)=""/133, 0x85}, {&(0x7f0000001500)=""/247, 0xf7}, {&(0x7f0000001600)=""/20, 0x14}], 0x6, &(0x7f00000016c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000026c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002740)=""/165, 0xa5}, {&(0x7f0000002800)=""/229, 0xe5}, {&(0x7f0000002900)=""/37, 0x25}, {&(0x7f0000002940)=""/220, 0xdc}, {&(0x7f0000002a40)=""/211, 0xd3}, {&(0x7f0000002b40)=""/194, 0xc2}, {&(0x7f0000002c40)=""/78, 0x4e}, {&(0x7f0000002cc0)=""/217, 0xd9}, {&(0x7f0000002dc0)=""/209, 0xd1}, {&(0x7f0000002ec0)=""/64, 0x40}], 0xa, &(0x7f0000002fc0)=""/104, 0x68}}], 0x2, 0x100, &(0x7f00000030c0)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x14, r6, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000003240), 0x442803, 0x0) getsockname$l2tp6(r0, &(0x7f0000003280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000032c0)=0x20) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000003340), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000003400)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x60000001}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x3c, r7, 0xd3b1e83c13028045, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x80) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000003440), &(0x7f0000003480)='./file0\x00', 0x8, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000034c0)={'veth0_to_team\x00', 0x4000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000035c0)={r0, 0x58, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000003600)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003700)={'gre0\x00', &(0x7f0000003640)={'tunl0\x00', 0x0, 0x7800, 0x80, 0x2, 0x1, {{0x1b, 0x4, 0x0, 0x28, 0x6c, 0x66, 0x0, 0x9f, 0x2b, 0x0, @broadcast, @broadcast, {[@noop, @generic={0x82, 0xa, "d74b0420a439d131"}, @timestamp_prespec={0x44, 0x4c, 0x15, 0x3, 0x4, [{@broadcast, 0x6}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@local, 0xc}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x7}, {@multicast2, 0x89}, {@loopback, 0xf587}, {@remote, 0x200}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000003840)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003800)={&(0x7f0000003740)={0xb0, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44844}, 0x10) getsockname$inet(r0, &(0x7f0000003880)={0x2, 0x0, @dev}, &(0x7f00000038c0)=0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003940), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000003a80)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003a40)={&(0x7f0000003980)={0x8c, r11, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffdfc2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x64}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4d}]}]}, 0x8c}}, 0xc0) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003b00), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000003bc0)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x1c, r12, 0x1d30471320947f3a, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2m39.907160061s ago: executing program 2 (id=129): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f0000000600)=""/49, 0x31}], 0x2}, 0x1}], 0x1, 0x40000000, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x68, 0x117, 0x2, 0x54, "e29c5e46e93b930ee8274337eddc271d11180cf7342e555dffcd8e32915dfae6d471970b4ac32b8b07fd944b3dc46e819c2ba28f7b5668d99f739ec416376cceac93644a8aa955da9e995e40edc8b8c2c953543d"}, @op={0x18}], 0x98, 0x20040051}, 0x20000055) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d1ed430000000000001090224"], 0x0) brk(0x20ff8000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r4, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000200)={0x0, 0x0, 0x3}) sendmsg$nl_route_sched_retired(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000dc0)=@newchain={0x24, 0x64, 0x8, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {0x1, 0x5}, {0x5, 0xb}}}, 0x24}}, 0x0) 2m37.682645702s ago: executing program 2 (id=130): add_key(0x0, 0x0, &(0x7f00000010c0)="cf", 0x1, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0xfff}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20010, r1, 0xbb080000) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x68, &(0x7f0000003a80)=0x2, 0x4) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) 2m37.488934946s ago: executing program 2 (id=131): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "bb91"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0xc, @local}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) open(&(0x7f0000000540)='./file0\x00', 0x60842, 0x2c8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x44042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r6, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}], {0x14}}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@delneigh={0x44, 0x1a, 0x401, 0x0, 0x0, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}, @NDA_CACHEINFO={0x14, 0x3, {0x7, 0x0, 0x0, 0x40000}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x20000800) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000001c0)={0x2, 0x2000, 0x8}) r7 = openat$dsp(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r7, &(0x7f0000000340)=""/71, 0x47) syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x2, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0xaa, 0x3, 0x2, 0x6, 0x0, 0x81, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7907b157, 0x4, 0x7ff, 0xf7}, [@mdlm_detail={0x4, 0x24, 0x13, 0x45}, @mdlm_detail={0x4, 0x24, 0x13, 0xb6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x30, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0xe1, 0x1}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 2m35.562398608s ago: executing program 2 (id=132): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0xb6, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0xd}, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x81}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9a7a}, @calipso={0x7, 0x10, {0x1, 0x2, 0x19, 0x7, [0x100000000]}}, @jumbo={0xc2, 0x4, 0x81}, @jumbo={0xc2, 0x4, 0x60}]}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x6, 0x3a, 0x773, 0xfffffffc, 0x1}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) syz_emit_ethernet(0x17b, &(0x7f0000000640)=ANY=[], 0x0) 2m35.388118714s ago: executing program 2 (id=133): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x180a}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000000)=0x2000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1000000000100000}, @ptr={0x70742a85, 0x800, 0x0}, @flat=@handle={0x73682a85, 0x1000}}, &(0x7f0000001280)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 2m35.209193627s ago: executing program 2 (id=134): r0 = io_uring_setup(0x2ee, &(0x7f00000003c0)={0x0, 0x3eef, 0x1, 0x2, 0x48}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000440)={0x2, 0x48, '\x00', 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e35b332002f2ee28d29c0000000109021200010d0000000904a90702e00103"], 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80100004800c000880"], 0x34}}, 0x0) io_setup(0xe7, &(0x7f0000000100)=0x0) io_pgetevents(r8, 0x2, 0x2, &(0x7f0000000140)=[{}, {}], 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="0a9c25661169e55082c3368df534f41add8f42a7696afc17a93ee084663d3e76aba7e7fac25aec323af0ed1335cd878093d1ca6f2c4a8d377609c4", 0x3b}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000000000001000000000000000000000034000000000000000000000007000000441052e000000001ffffa5d0e400000144149c10000001ff604c0fbd00000fcd000000090000000040000000000000000000000007000000890b61ac14142cac1414bb44240721e00000010000002ee0000001000000000a01010000000008ac1e010100000002001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="ac14140eac1414aa00000000110000000000000000000000010000000100000000000000640000000000000000000000070000008913b000000000e0000001ac1414bb000000008303520705e75a3b070bc97f000001ac1414aa830fece0000002e0000002ffffffff071f6cac1414bb7f000001ac1e01010a010101ffffffffffffffffac1414aa00000000140000000000000000000000010000000200000000000000110000000000000000000000010000000800000000000000140000000000000000000000010000008288a91000000000"], 0x178}, 0x20004040) io_destroy(r8) 2m30.723817806s ago: executing program 0 (id=135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) 2m30.698027352s ago: executing program 1 (id=136): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xda90) r1 = socket$netlink(0x10, 0x3, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x5, &(0x7f000001ae00)=""/102385, &(0x7f00000001c0)=0xffffffcc) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x1d0, 0x90, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 2m30.677633147s ago: executing program 3 (id=137): syz_pidfd_open(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000440)='K', 0x1}], 0x1) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000a"], 0x30}}, 0x10) 2m30.257272085s ago: executing program 3 (id=138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xee, &(0x7f0000000000), &(0x7f0000000300)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) 0s ago: executing program 33 (id=134): r0 = io_uring_setup(0x2ee, &(0x7f00000003c0)={0x0, 0x3eef, 0x1, 0x2, 0x48}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000440)={0x2, 0x48, '\x00', 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e35b332002f2ee28d29c0000000109021200010d0000000904a90702e00103"], 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80100004800c000880"], 0x34}}, 0x0) io_setup(0xe7, &(0x7f0000000100)=0x0) io_pgetevents(r8, 0x2, 0x2, &(0x7f0000000140)=[{}, {}], 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="0a9c25661169e55082c3368df534f41add8f42a7696afc17a93ee084663d3e76aba7e7fac25aec323af0ed1335cd878093d1ca6f2c4a8d377609c4", 0x3b}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000000000001000000000000000000000034000000000000000000000007000000441052e000000001ffffa5d0e400000144149c10000001ff604c0fbd00000fcd000000090000000040000000000000000000000007000000890b61ac14142cac1414bb44240721e00000010000002ee0000001000000000a01010000000008ac1e010100000002001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="ac14140eac1414aa00000000110000000000000000000000010000000100000000000000640000000000000000000000070000008913b000000000e0000001ac1414bb000000008303520705e75a3b070bc97f000001ac1414aa830fece0000002e0000002ffffffff071f6cac1414bb7f000001ac1e01010a010101ffffffffffffffffac1414aa00000000140000000000000000000000010000000200000000000000110000000000000000000000010000000800000000000000140000000000000000000000010000008288a91000000000"], 0x178}, 0x20004040) io_destroy(r8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. [ 55.388461][ T5815] cgroup: Unknown subsys name 'net' [ 55.506980][ T5815] cgroup: Unknown subsys name 'cpuset' [ 55.515361][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.861816][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.865243][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.878639][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.889155][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.897132][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.905926][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.913329][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.935405][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.955956][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.966113][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.974212][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.982047][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.989478][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.078111][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.086407][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.094486][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.109396][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.119348][ T5827] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.126651][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.151009][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.170747][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.188377][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.199453][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.207223][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.214961][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.275716][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.283994][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.292135][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.300498][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.308459][ T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.316707][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.385650][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 59.526177][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.534049][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.541536][ T5834] bridge_slave_0: entered allmulticast mode [ 59.548181][ T5834] bridge_slave_0: entered promiscuous mode [ 59.575880][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.583369][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.591403][ T5834] bridge_slave_1: entered allmulticast mode [ 59.598381][ T5834] bridge_slave_1: entered promiscuous mode [ 59.674117][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.714969][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.742537][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 59.752072][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 59.809584][ T5834] team0: Port device team_slave_0 added [ 59.822234][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 59.852693][ T5834] team0: Port device team_slave_1 added [ 59.932682][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 59.960770][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.967735][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.996329][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.019517][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.026671][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.034159][ T5841] bridge_slave_0: entered allmulticast mode [ 60.041339][ T5841] bridge_slave_0: entered promiscuous mode [ 60.048510][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.055962][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.082029][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.128417][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.136102][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.143455][ T5841] bridge_slave_1: entered allmulticast mode [ 60.150426][ T5841] bridge_slave_1: entered promiscuous mode [ 60.179282][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.186431][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.194336][ T5840] bridge_slave_0: entered allmulticast mode [ 60.201846][ T5840] bridge_slave_0: entered promiscuous mode [ 60.208802][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.216482][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.224196][ T5837] bridge_slave_0: entered allmulticast mode [ 60.231609][ T5837] bridge_slave_0: entered promiscuous mode [ 60.267535][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.275942][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.283246][ T5840] bridge_slave_1: entered allmulticast mode [ 60.291085][ T5840] bridge_slave_1: entered promiscuous mode [ 60.297420][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.304741][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.311935][ T5837] bridge_slave_1: entered allmulticast mode [ 60.318475][ T5837] bridge_slave_1: entered promiscuous mode [ 60.326682][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.338290][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.361636][ T5834] hsr_slave_0: entered promiscuous mode [ 60.367892][ T5834] hsr_slave_1: entered promiscuous mode [ 60.456486][ T5841] team0: Port device team_slave_0 added [ 60.471377][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.478448][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.486514][ T5844] bridge_slave_0: entered allmulticast mode [ 60.493487][ T5844] bridge_slave_0: entered promiscuous mode [ 60.501638][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.508741][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.515962][ T5844] bridge_slave_1: entered allmulticast mode [ 60.522895][ T5844] bridge_slave_1: entered promiscuous mode [ 60.532691][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.543899][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.557763][ T5841] team0: Port device team_slave_1 added [ 60.583511][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.603171][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.658025][ T5840] team0: Port device team_slave_0 added [ 60.666030][ T5837] team0: Port device team_slave_0 added [ 60.674965][ T5837] team0: Port device team_slave_1 added [ 60.681714][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.688680][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.718175][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.731971][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.738951][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.765248][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.782711][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.795162][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.806036][ T5840] team0: Port device team_slave_1 added [ 60.886258][ T5844] team0: Port device team_slave_0 added [ 60.893047][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.900182][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.926392][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.939249][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.946206][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.972221][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.984116][ T5831] Bluetooth: hci0: command tx timeout [ 60.992598][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.999636][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.025626][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.040336][ T5841] hsr_slave_0: entered promiscuous mode [ 61.046887][ T5841] hsr_slave_1: entered promiscuous mode [ 61.053396][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.061554][ T5841] Cannot create hsr debugfs directory [ 61.070215][ T5831] Bluetooth: hci1: command tx timeout [ 61.082611][ T5844] team0: Port device team_slave_1 added [ 61.093588][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.100601][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.126969][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.200099][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.207073][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.233591][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.234079][ T5831] Bluetooth: hci2: command tx timeout [ 61.246480][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.256962][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.284157][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.309232][ T5831] Bluetooth: hci3: command tx timeout [ 61.320374][ T5840] hsr_slave_0: entered promiscuous mode [ 61.326582][ T5840] hsr_slave_1: entered promiscuous mode [ 61.332733][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.340447][ T5840] Cannot create hsr debugfs directory [ 61.379958][ T5831] Bluetooth: hci4: command tx timeout [ 61.426490][ T5837] hsr_slave_0: entered promiscuous mode [ 61.433285][ T5837] hsr_slave_1: entered promiscuous mode [ 61.440369][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.447923][ T5837] Cannot create hsr debugfs directory [ 61.488760][ T5844] hsr_slave_0: entered promiscuous mode [ 61.497922][ T5844] hsr_slave_1: entered promiscuous mode [ 61.504457][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.512583][ T5844] Cannot create hsr debugfs directory [ 61.539871][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.561937][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.608168][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.635140][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.782294][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.814042][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.840327][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.865308][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.900836][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.914269][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.923870][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.934431][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.990167][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.002532][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.014729][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.042893][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.125165][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.134130][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.147775][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.158007][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.172495][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.256792][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.293901][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.301226][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.324878][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.332027][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.347893][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.377019][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.410838][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.424490][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.442881][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.455491][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.462638][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.479645][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.492049][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.499178][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.523777][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.530880][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.548294][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.562400][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.569547][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.582683][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.589796][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.601914][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.609096][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.632961][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.679714][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.686845][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.725905][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.733080][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.757359][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.769152][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.850530][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.881130][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.915522][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.935902][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.998581][ T5840] veth0_vlan: entered promiscuous mode [ 63.014921][ T5834] veth0_vlan: entered promiscuous mode [ 63.047086][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.060661][ T5831] Bluetooth: hci0: command tx timeout [ 63.067620][ T5840] veth1_vlan: entered promiscuous mode [ 63.077714][ T5834] veth1_vlan: entered promiscuous mode [ 63.127116][ T5841] veth0_vlan: entered promiscuous mode [ 63.139626][ T5831] Bluetooth: hci1: command tx timeout [ 63.152588][ T5840] veth0_macvtap: entered promiscuous mode [ 63.171104][ T5840] veth1_macvtap: entered promiscuous mode [ 63.184034][ T5841] veth1_vlan: entered promiscuous mode [ 63.208004][ T5844] veth0_vlan: entered promiscuous mode [ 63.216125][ T5834] veth0_macvtap: entered promiscuous mode [ 63.230983][ T5837] veth0_vlan: entered promiscuous mode [ 63.247237][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.257518][ T5844] veth1_vlan: entered promiscuous mode [ 63.264948][ T5834] veth1_macvtap: entered promiscuous mode [ 63.281494][ T5837] veth1_vlan: entered promiscuous mode [ 63.298124][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.299462][ T5831] Bluetooth: hci2: command tx timeout [ 63.328500][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.337919][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.347146][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.359097][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.386629][ T5831] Bluetooth: hci3: command tx timeout [ 63.396083][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.407370][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.422707][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.436323][ T5844] veth0_macvtap: entered promiscuous mode [ 63.459332][ T5831] Bluetooth: hci4: command tx timeout [ 63.478284][ T5844] veth1_macvtap: entered promiscuous mode [ 63.486582][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.498432][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.509758][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.532369][ T5841] veth0_macvtap: entered promiscuous mode [ 63.550916][ T5841] veth1_macvtap: entered promiscuous mode [ 63.567788][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.580696][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.590929][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.602040][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.612953][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.632746][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.641825][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.651494][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.661029][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.680625][ T5837] veth0_macvtap: entered promiscuous mode [ 63.691879][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.704184][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.714521][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.725331][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.737142][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.760496][ T5837] veth1_macvtap: entered promiscuous mode [ 63.772690][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.782951][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.792019][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.801105][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.820262][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.831280][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.836790][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.850535][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.854753][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.861423][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.878471][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.890175][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.901068][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.948655][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.959350][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.969873][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.980411][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.990480][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.001417][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.012018][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.022987][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.034176][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.043704][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.055167][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.065177][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.075695][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.085882][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.096678][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.108498][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.119783][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.128492][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.137469][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.146472][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.157076][ T3002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.162487][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.169741][ T3002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.181468][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.192873][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.203391][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.214514][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.226335][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.236294][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.246935][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.258179][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.303346][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.318121][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.327965][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.337787][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.397792][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.448135][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.457995][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.552936][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.564942][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.581881][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.592962][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.641801][ T3002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.665730][ T3002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.700519][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.729213][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.750261][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.758522][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.803412][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.856914][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.924183][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.949329][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.140623][ T5831] Bluetooth: hci0: command tx timeout [ 65.225747][ T5831] Bluetooth: hci1: command tx timeout [ 65.246035][ T5874] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.253823][ T5897] input: syz1 as /devices/virtual/input/input5 [ 65.284536][ T5900] fuse: Unknown parameter 'default_permissions' [ 65.368266][ T5891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 65.385160][ T5831] Bluetooth: hci2: command tx timeout [ 65.402860][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 65.411890][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.424072][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.436027][ T5874] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 65.448119][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.463509][ T5831] Bluetooth: hci3: command tx timeout [ 65.470954][ T5874] usb 1-1: config 0 descriptor?? [ 65.539818][ T5831] Bluetooth: hci4: command tx timeout [ 65.582314][ T5907] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.739960][ T5875] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.901913][ T5874] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 65.915516][ T5874] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 65.923115][ T5874] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 65.930799][ T5874] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 65.938101][ T5874] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 65.948277][ T5874] appleir 0003:05AC:8241.0001: No inputs registered, leaving [ 65.969932][ T5874] appleir 0003:05AC:8241.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 65.988542][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.999803][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.011984][ T5918] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.020249][ T5875] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 66.033146][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 66.041916][ T5875] usb 4-1: SerialNumber: syz [ 66.064950][ T5876] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.080512][ T5875] usb 4-1: config 0 descriptor?? [ 66.174718][ T5913] usb 1-1: USB disconnect, device number 2 [ 66.221356][ T5921] Failed to get privilege flags for destination (handle=0x2:0xffffffff) [ 66.241059][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 66.247899][ T5876] usb 2-1: config index 0 descriptor too short (expected 801, got 595) [ 66.258939][ T5876] usb 2-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 66.289378][ T5876] usb 2-1: config 15 interface 0 altsetting 5 endpoint 0x6 has invalid wMaxPacketSize 0 [ 66.309391][ T5876] usb 2-1: config 15 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 66.344356][ T5876] usb 2-1: config 15 interface 0 has no altsetting 0 [ 66.355949][ T5875] usbhid 4-1:0.0: can't add hid device: -71 [ 66.364132][ T5876] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=73.23 [ 66.367650][ T5875] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 66.374785][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.412531][ T5875] usb 4-1: USB disconnect, device number 2 [ 66.416828][ T5876] usb 2-1: Product: syz [ 66.439046][ T5876] usb 2-1: Manufacturer: syz [ 66.449398][ T5876] usb 2-1: SerialNumber: syz [ 66.580283][ T5874] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.673434][ T5912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.695544][ T5912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.721012][ T5876] legousbtower 2-1:15.0: interrupt endpoints not found [ 66.739414][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 66.760656][ T5876] usb 2-1: USB disconnect, device number 2 [ 66.813564][ T5874] usb 5-1: config 2 has an invalid interface number: 98 but max is 0 [ 66.822382][ T5874] usb 5-1: config 2 has no interface number 0 [ 66.857121][ T5874] usb 5-1: New USB device found, idVendor=10b8, idProduct=1fa8, bcdDevice=57.f9 [ 66.866681][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.874935][ T5874] usb 5-1: Product: syz [ 66.879507][ T5874] usb 5-1: Manufacturer: syz [ 66.884128][ T5874] usb 5-1: SerialNumber: syz [ 66.956246][ T5929] Cannot find set identified by id 0 to match [ 67.096201][ T5874] dvb-usb: found a 'DiBcom NIM8096MD reference design' in warm state. [ 67.145159][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 67.219158][ T5831] Bluetooth: hci0: command tx timeout [ 67.269130][ T5829] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 67.298738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 67.311538][ T5831] Bluetooth: hci1: command tx timeout [ 67.353677][ T5874] dvbdev: DVB: registering new adapter (DiBcom NIM8096MD reference design) [ 67.369366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.378066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.387225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 67.435152][ T5829] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 67.448565][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.461571][ T5831] Bluetooth: hci2: command tx timeout [ 67.475077][ T5829] usb 4-1: config 0 descriptor?? [ 67.478521][ T5874] usb 5-1: media controller created [ 67.559296][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 67.567760][ T5831] Bluetooth: hci3: command tx timeout [ 67.580910][ T5939] binder: 5938:5939 ioctl c0306201 20000200 returned -22 [ 67.619452][ T5831] Bluetooth: hci4: command tx timeout [ 67.647506][ T5874] DVB: Unable to find symbol dib8000_attach() [ 67.655817][ T5874] dvb-usb: no frontend was attached by 'DiBcom NIM8096MD reference design' [ 67.664949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.674370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.683240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.701581][ T5932] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.776579][ T5874] rc_core: IR keymap rc-dib0700-rc5 not found [ 67.783150][ T5874] Registered IR keymap rc-empty [ 67.788816][ T5874] dvb-usb: could not initialize remote control. [ 67.827483][ T5874] dvb-usb: DiBcom NIM8096MD reference design successfully initialized and connected. [ 67.853672][ T5932] wg1: entered promiscuous mode [ 67.858921][ T5932] vlan2: entered promiscuous mode [ 67.870561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.886721][ T5874] usb 5-1: USB disconnect, device number 2 [ 67.960557][ T5874] dvb-usb: DiBcom NIM8096MD reference design successfully deinitialized and disconnected. [ 67.985281][ T5932] wg1: left promiscuous mode [ 68.202099][ T5829] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 68.211674][ T5829] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 68.230674][ T5829] [drm:udl_init] *ERROR* Selecting channel failed [ 68.279958][ T5829] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 68.305237][ T5829] [drm] Initialized udl on minor 2 [ 68.320647][ T5829] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 68.350611][ T5829] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 68.366631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 68.389099][ T5878] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.462108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.592392][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 68.639249][ T5829] usb 4-1: USB disconnect, device number 3 [ 68.668113][ T5878] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 68.763425][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.861966][ T5878] usb 3-1: config 0 descriptor?? [ 69.113020][ T5878] usbhid 3-1:0.0: can't add hid device: -71 [ 69.122586][ T5878] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 69.164394][ T5878] usb 3-1: USB disconnect, device number 2 [ 70.699387][ T5972] sctp: [Deprecated]: syz.2.32 (pid 5972) Use of int in max_burst socket option deprecated. [ 70.699387][ T5972] Use struct sctp_assoc_value instead [ 71.680720][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.688042][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.493230][ T5973] Zero length message leads to an empty skb [ 73.481840][ T5978] tipc: Enabling of bearer rejected, failed to enable media [ 74.020417][ T5986] ======================================================= [ 74.020417][ T5986] WARNING: The mand mount option has been deprecated and [ 74.020417][ T5986] and is ignored by this kernel. Remove the mand [ 74.020417][ T5986] option from the mount to silence this warning. [ 74.020417][ T5986] ======================================================= [ 74.608144][ T29] audit: type=1326 audit(1733566862.069:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.0.41" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f484937fed9 code=0x0 [ 74.692636][ T6002] tunl0: entered promiscuous mode [ 74.708053][ T6002] netlink: 'syz.0.41': attribute type 1 has an invalid length. [ 74.735665][ T6002] netlink: 9 bytes leftover after parsing attributes in process `syz.0.41'. [ 75.642481][ T6021] mmap: syz.1.48 (6021) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.224171][ T140] tipc: Subscription rejected, illegal request [ 77.570834][ T6038] netlink: 84 bytes leftover after parsing attributes in process `syz.3.55'. [ 78.598678][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 78.652411][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.62'. [ 78.751718][ T6055] vlan2: entered allmulticast mode [ 78.767785][ T6055] bond0: entered allmulticast mode [ 78.799840][ T6055] bond_slave_0: entered allmulticast mode [ 78.836523][ T6055] bond_slave_1: entered allmulticast mode [ 80.502774][ T29] audit: type=1800 audit(1733566867.969:3): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.71" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 80.674920][ T6085] netlink: 36 bytes leftover after parsing attributes in process `syz.0.73'. [ 80.950254][ T29] audit: type=1326 audit(1733566868.419:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fff7fed9 code=0x7ffc0000 [ 80.974773][ T6094] FAULT_INJECTION: forcing a failure. [ 80.974773][ T6094] name failslab, interval 1, probability 0, space 0, times 0 [ 80.988086][ T29] audit: type=1326 audit(1733566868.439:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fff7fed9 code=0x7ffc0000 [ 81.010990][ T6094] CPU: 0 UID: 0 PID: 6094 Comm: syz.3.78 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 81.021534][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.031634][ T6094] Call Trace: [ 81.034939][ T6094] [ 81.037897][ T6094] dump_stack_lvl+0x241/0x360 [ 81.042616][ T6094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.047848][ T6094] ? __pfx__printk+0x10/0x10 [ 81.052474][ T6094] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 81.057880][ T6094] ? __pfx___might_resched+0x10/0x10 [ 81.063193][ T6094] should_fail_ex+0x3b0/0x4e0 [ 81.067905][ T6094] should_failslab+0xac/0x100 [ 81.072614][ T6094] __kmalloc_node_noprof+0xe1/0x4d0 [ 81.077850][ T6094] ? lockdep_hardirqs_on+0x99/0x150 [ 81.083078][ T6094] ? alloc_slab_obj_exts+0x3a/0xa0 [ 81.088225][ T6094] alloc_slab_obj_exts+0x3a/0xa0 [ 81.093194][ T6094] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 81.099126][ T6094] ? kasan_unpoison+0x46/0x70 [ 81.103839][ T6094] __kmalloc_noprof+0x305/0x4c0 [ 81.108719][ T6094] ? __d_alloc+0xb3/0x700 [ 81.113085][ T6094] __d_alloc+0xb3/0x700 [ 81.117273][ T6094] d_alloc+0x4b/0x190 [ 81.121286][ T6094] lookup_one_qstr_excl+0xce/0x260 [ 81.126435][ T6094] filename_create+0x297/0x540 [ 81.131233][ T6094] ? __pfx_filename_create+0x10/0x10 [ 81.136546][ T6094] ? __might_fault+0xaa/0x120 [ 81.141270][ T6094] do_mknodat+0x18b/0x5b0 [ 81.145641][ T6094] ? __pfx_do_mknodat+0x10/0x10 [ 81.150519][ T6094] ? getname_flags+0x1e3/0x540 [ 81.155318][ T6094] __x64_sys_mknod+0x8c/0xa0 [ 81.159937][ T6094] do_syscall_64+0xf3/0x230 [ 81.164473][ T6094] ? clear_bhb_loop+0x35/0x90 [ 81.169173][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.175100][ T6094] RIP: 0033:0x7f09fff7fed9 [ 81.179550][ T6094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.199212][ T6094] RSP: 002b:00007f0a00e70058 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 81.207668][ T6094] RAX: ffffffffffffffda RBX: 00007f0a00145fa0 RCX: 00007f09fff7fed9 [ 81.215764][ T6094] RDX: 0000000000000707 RSI: 0000000000000000 RDI: 0000000020000000 [ 81.223790][ T6094] RBP: 00007f0a00e700a0 R08: 0000000000000000 R09: 0000000000000000 [ 81.231805][ T6094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.239827][ T6094] R13: 0000000000000000 R14: 00007f0a00145fa0 R15: 00007f0a0026fa38 [ 81.247853][ T6094] [ 81.253467][ T29] audit: type=1326 audit(1733566868.439:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09fff7e840 code=0x7ffc0000 [ 81.275537][ T29] audit: type=1326 audit(1733566868.439:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09fff7e98f code=0x7ffc0000 [ 81.297535][ T29] audit: type=1326 audit(1733566868.439:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f09fff7fed9 code=0x7ffc0000 [ 81.320058][ T29] audit: type=1326 audit(1733566868.719:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f09fff7e8ec code=0x7ffc0000 [ 81.342480][ T29] audit: type=1326 audit(1733566868.719:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09fff7e98f code=0x7ffc0000 [ 81.372103][ T29] audit: type=1326 audit(1733566868.719:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f09fff7eb3a code=0x7ffc0000 [ 81.394059][ T29] audit: type=1326 audit(1733566868.719:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fff7fed9 code=0x7ffc0000 [ 81.708536][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 81.805832][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.81'. [ 81.817880][ T6106] netlink: 284 bytes leftover after parsing attributes in process `syz.0.84'. [ 82.046601][ T6114] syz.1.81 uses obsolete (PF_INET,SOCK_PACKET) [ 82.140354][ T6103] sctp: failed to load transform for md5: -2 [ 83.103018][ T5837] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 83.135991][ T974] cfg80211: failed to load regulatory.db [ 83.454531][ T6130] sctp: [Deprecated]: syz.0.88 (pid 6130) Use of int in maxseg socket option. [ 83.454531][ T6130] Use struct sctp_assoc_value instead [ 83.678489][ T140] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.851264][ T140] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.010544][ T140] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.227231][ T140] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.456512][ T140] bridge_slave_1: left allmulticast mode [ 84.478849][ T140] bridge_slave_1: left promiscuous mode [ 84.508920][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.568911][ T140] bridge_slave_0: left allmulticast mode [ 84.595658][ T140] bridge_slave_0: left promiscuous mode [ 84.620974][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.613061][ T16] sched: DL replenish lagged too much [ 91.511331][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.562128][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.628267][ T140] bond0 (unregistering): Released all slaves [ 91.740653][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.0.109'. [ 91.824752][ T6204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.109'. [ 91.921531][ T6200] syz.0.109 (6200) used greatest stack depth: 18000 bytes left [ 92.029971][ T6204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.109'. [ 93.477276][ T6227] FAULT_INJECTION: forcing a failure. [ 93.477276][ T6227] name failslab, interval 1, probability 0, space 0, times 0 [ 93.556924][ T6227] CPU: 1 UID: 0 PID: 6227 Comm: syz.1.116 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 93.567574][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 93.577657][ T6227] Call Trace: [ 93.580956][ T6227] [ 93.583907][ T6227] dump_stack_lvl+0x241/0x360 [ 93.588612][ T6227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.593835][ T6227] ? __pfx__printk+0x10/0x10 [ 93.598453][ T6227] ? nf_hook+0x9e/0x450 [ 93.602637][ T6227] ? __pfx_lock_release+0x10/0x10 [ 93.607686][ T6227] should_fail_ex+0x3b0/0x4e0 [ 93.612387][ T6227] should_failslab+0xac/0x100 [ 93.617091][ T6227] ? dst_alloc+0x12b/0x190 [ 93.621522][ T6227] kmem_cache_alloc_noprof+0x70/0x380 [ 93.626924][ T6227] dst_alloc+0x12b/0x190 [ 93.631185][ T6227] ? __pfx_nf_hook+0x10/0x10 [ 93.635798][ T6227] rt_dst_clone+0x52/0x650 [ 93.640233][ T6227] ip_mc_finish_output+0xbe/0x5a0 [ 93.645277][ T6227] ip_mc_output+0x279/0x5c0 [ 93.649800][ T6227] ip_send_skb+0x74/0x100 [ 93.654148][ T6227] udp_send_skb+0xab6/0x1630 [ 93.658768][ T6227] udp_sendmsg+0x1c09/0x2a50 [ 93.663393][ T6227] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 93.668962][ T6227] ? __pfx_udp_sendmsg+0x10/0x10 [ 93.673952][ T6227] ? inet_sendmsg+0x2ba/0x390 [ 93.678650][ T6227] __sock_sendmsg+0x1a6/0x270 [ 93.683352][ T6227] ____sys_sendmsg+0x52a/0x7e0 [ 93.688142][ T6227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.693445][ T6227] ? __fget_files+0x2a/0x410 [ 93.698058][ T6227] ? __sys_sendmmsg+0x392/0x720 [ 93.702930][ T6227] ? __might_fault+0xaa/0x120 [ 93.707627][ T6227] __sys_sendmmsg+0x36a/0x720 [ 93.712336][ T6227] ? __pfx___sys_sendmmsg+0x10/0x10 [ 93.717565][ T6227] ? __pfx_lock_release+0x10/0x10 [ 93.722611][ T6227] ? kstrtouint_from_user+0x128/0x190 [ 93.728029][ T6227] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 93.733947][ T6227] ? ksys_write+0x22a/0x2b0 [ 93.738469][ T6227] ? __pfx_lock_release+0x10/0x10 [ 93.743516][ T6227] ? vfs_write+0x730/0xd30 [ 93.747965][ T6227] ? __mutex_unlock_slowpath+0x21e/0x790 [ 93.753644][ T6227] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 93.759648][ T6227] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.765996][ T6227] ? do_syscall_64+0x100/0x230 [ 93.770791][ T6227] __x64_sys_sendmmsg+0xa0/0xb0 [ 93.775679][ T6227] do_syscall_64+0xf3/0x230 [ 93.780204][ T6227] ? clear_bhb_loop+0x35/0x90 [ 93.784896][ T6227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.790827][ T6227] RIP: 0033:0x7fba9597fed9 [ 93.795258][ T6227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.814888][ T6227] RSP: 002b:00007fba967e8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 93.823333][ T6227] RAX: ffffffffffffffda RBX: 00007fba95b45fa0 RCX: 00007fba9597fed9 [ 93.831329][ T6227] RDX: 0400000000000077 RSI: 0000000020000180 RDI: 0000000000000003 [ 93.839319][ T6227] RBP: 00007fba967e80a0 R08: 0000000000000000 R09: 0000000000000000 [ 93.847305][ T6227] R10: 0000000000007600 R11: 0000000000000246 R12: 0000000000000002 [ 93.855290][ T6227] R13: 0000000000000000 R14: 00007fba95b45fa0 R15: 00007fba95c6fa38 [ 93.863297][ T6227] [ 95.304468][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 100.095982][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.144800][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.915362][ T6277] netlink: 36 bytes leftover after parsing attributes in process `syz.1.120'. [ 144.120550][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.136704][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.221232][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 230.819274][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 230.825356][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 245.305502][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.322332][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.509931][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.516293][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.889609][ T30] INFO: task kworker/u8:5:140 blocked for more than 156 seconds. [ 272.897403][ T30] Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 272.952317][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.629106][ T30] task:kworker/u8:5 state:D stack:22576 pid:140 tgid:140 ppid:2 flags:0x00004000 [ 277.869108][ T30] Workqueue: netns cleanup_net [ 277.873956][ T30] Call Trace: [ 277.877246][ T30] [ 278.029128][ T30] __schedule+0x1850/0x4c30 [ 278.033733][ T30] ? __pfx___schedule+0x10/0x10 [ 278.038618][ T30] ? __pfx_lock_release+0x10/0x10 [ 278.239865][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 278.245833][ T30] ? kthread_data+0x52/0xd0 [ 278.329322][ T30] ? schedule+0x90/0x320 [ 278.333643][ T30] ? wq_worker_sleeping+0x66/0x240 [ 278.338796][ T30] ? schedule+0x90/0x320 [ 278.412943][ T30] schedule+0x14b/0x320 [ 278.417172][ T30] schedule_preempt_disabled+0x13/0x30 [ 278.474328][ T30] __mutex_lock+0x7e7/0xee0 [ 278.478905][ T30] ? __mutex_lock+0x5ef/0xee0 [ 278.519263][ T30] ? wiphy_unregister+0x236/0xb00 [ 278.524349][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 278.589218][ T30] ? __up_read+0x2c2/0x6b0 [ 278.593714][ T30] ? __pfx___up_read+0x10/0x10 [ 278.598519][ T30] wiphy_unregister+0x236/0xb00 [ 278.699081][ T30] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 278.705051][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 278.754386][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 278.796106][ T30] ? kfree+0x196/0x430 [ 278.819086][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 278.824780][ T30] ieee80211_unregister_hw+0x1e2/0x2c0 [ 278.879093][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 278.884726][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 278.939090][ T30] hwsim_exit_net+0x5c1/0x670 [ 278.965273][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 279.008498][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 279.065152][ T30] cleanup_net+0x802/0xcc0 [ 279.069785][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 279.074772][ T30] ? process_scheduled_works+0x976/0x1840 [ 279.134393][ T30] process_scheduled_works+0xa66/0x1840 [ 279.179233][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.185303][ T30] ? assign_work+0x364/0x3d0 [ 279.233365][ T30] worker_thread+0x870/0xd30 [ 279.238032][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 279.289056][ T30] ? __kthread_parkme+0x169/0x1d0 [ 279.294149][ T30] ? __pfx_worker_thread+0x10/0x10 [ 279.349071][ T30] kthread+0x2f0/0x390 [ 279.353975][ T30] ? __pfx_worker_thread+0x10/0x10 [ 279.393291][ T30] ? __pfx_kthread+0x10/0x10 [ 279.397960][ T30] ret_from_fork+0x4b/0x80 [ 279.430339][ T30] ? __pfx_kthread+0x10/0x10 [ 279.434997][ T30] ret_from_fork_asm+0x1a/0x30 [ 279.489255][ T30] [ 279.499866][ T30] INFO: task dhcpcd:5498 blocked for more than 163 seconds. [ 279.507296][ T30] Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 279.559649][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.568400][ T30] task:dhcpcd state:D stack:20248 pid:5498 tgid:5498 ppid:5497 flags:0x00000002 [ 279.739506][ T30] Call Trace: [ 279.742854][ T30] [ 279.745809][ T30] __schedule+0x1850/0x4c30 [ 279.809507][ T30] ? __pfx___schedule+0x10/0x10 [ 279.814434][ T30] ? __pfx_lock_release+0x10/0x10 [ 279.869471][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 279.875450][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 279.953366][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 279.999538][ T30] ? schedule+0x90/0x320 [ 280.003854][ T30] schedule+0x14b/0x320 [ 280.008045][ T30] schedule_preempt_disabled+0x13/0x30 [ 280.070032][ T30] __mutex_lock+0x7e7/0xee0 [ 280.074624][ T30] ? __mutex_lock+0x5ef/0xee0 [ 280.119562][ T30] ? rtnl_dumpit+0x99/0x200 [ 280.124130][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 280.173650][ T30] ? __build_skb_around+0x245/0x3d0 [ 280.178917][ T30] ? __alloc_skb+0x28f/0x440 [ 280.239511][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 280.244525][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 280.305039][ T30] rtnl_dumpit+0x99/0x200 [ 280.349474][ T30] netlink_dump+0x64d/0xe10 [ 280.354052][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 280.399599][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 280.404737][ T30] __netlink_dump_start+0x5a2/0x790 [ 280.459518][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 280.464964][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 280.511001][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.516534][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 280.569461][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 280.574921][ T30] netlink_rcv_skb+0x1e3/0x430 [ 280.639486][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.645023][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.699527][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.704807][ T30] netlink_unicast+0x7f6/0x990 [ 280.759497][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 280.764852][ T30] ? __virt_addr_valid+0x183/0x530 [ 280.819464][ T30] ? __check_object_size+0x48e/0x900 [ 280.829514][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 280.834333][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.909656][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 280.914671][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.969497][ T30] __sock_sendmsg+0x221/0x270 [ 280.974247][ T30] __sys_sendto+0x363/0x4c0 [ 280.978780][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 281.059709][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.065759][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.119522][ T30] ? exc_page_fault+0x590/0x8b0 [ 281.124447][ T30] __x64_sys_sendto+0xde/0x100 [ 281.169215][ T30] do_syscall_64+0xf3/0x230 [ 281.173784][ T30] ? clear_bhb_loop+0x35/0x90 [ 281.178485][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.259535][ T30] RIP: 0033:0x7f10e9d71ad7 [ 281.264017][ T30] RSP: 002b:00007ffcad8b94b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 281.319476][ T30] RAX: ffffffffffffffda RBX: 00007ffcad8ba5e0 RCX: 00007f10e9d71ad7 [ 281.327516][ T30] RDX: 0000000000000014 RSI: 00007ffcad8ba500 RDI: 0000000000000018 [ 281.423167][ T30] RBP: 00007ffcad8ba570 R08: 00007ffcad8ba4e4 R09: 000000000000000c [ 281.469453][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 281.477498][ T30] R13: 00007ffcad8ba4e4 R14: 00007ffcad8ba500 R15: 0000000000000105 [ 281.529522][ T30] [ 281.532658][ T30] INFO: task syz.2.134:6309 blocked for more than 165 seconds. [ 281.650601][ T30] Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 281.658281][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.789493][ T30] task:syz.2.134 state:D stack:26944 pid:6309 tgid:6307 ppid:5841 flags:0x00000004 [ 281.839621][ T30] Call Trace: [ 281.842955][ T30] [ 281.845904][ T30] __schedule+0x1850/0x4c30 [ 281.884549][ T30] ? __pfx___schedule+0x10/0x10 [ 281.929482][ T30] ? __pfx_lock_release+0x10/0x10 [ 281.934583][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 281.989655][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 281.995613][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 282.049688][ T30] ? schedule+0x90/0x320 [ 282.053993][ T30] schedule+0x14b/0x320 [ 282.058180][ T30] schedule_preempt_disabled+0x13/0x30 [ 282.116255][ T30] __mutex_lock+0x7e7/0xee0 [ 282.179136][ T30] ? __mutex_lock+0x5ef/0xee0 [ 282.183883][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 282.232975][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 282.238090][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 282.289182][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 282.294378][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.339198][ T30] ? ref_tracker_free+0x643/0x7e0 [ 282.344302][ T30] netlink_rcv_skb+0x1e3/0x430 [ 282.389343][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.394887][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.454442][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 282.479056][ T30] netlink_unicast+0x7f6/0x990 [ 282.483907][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 282.528301][ T30] ? __virt_addr_valid+0x183/0x530 [ 282.549365][ T30] ? __check_object_size+0x48e/0x900 [ 282.554719][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 282.619133][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.624490][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 282.652373][ T6308] team_slave_0: entered promiscuous mode [ 282.658321][ T6308] team_slave_1: entered promiscuous mode [ 282.670516][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.689176][ T30] __sock_sendmsg+0x221/0x270 [ 282.693930][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 282.698731][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.709483][ T6308] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 282.742446][ T30] ? __fget_files+0x2a/0x410 [ 282.747108][ T30] ? __fget_files+0x2a/0x410 [ 282.749574][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 282.784620][ T30] __sys_sendmsg+0x269/0x350 [ 282.804659][ T30] ? __pfx_futex_wake+0x10/0x10 [ 282.836801][ T30] ? get_signal+0x16b2/0x1750 [ 282.853276][ T30] ? __pfx_get_signal+0x10/0x10 [ 282.858203][ T30] ? arch_do_signal_or_restart+0x96/0x860 [ 282.899240][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 282.905475][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780