last executing test programs: 17.364554556s ago: executing program 4 (id=59): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @null]}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802ae2e97cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f8fbd71ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) syz_usb_disconnect(0xffffffffffffffff) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0xa010102}}, 0x80, 0x0, 0x0, &(0x7f0000000100)}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, 0x0, 0x77) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) 14.976763294s ago: executing program 4 (id=70): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) fchmodat(0xffffffffffffff9c, 0x0, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000040)='smaps\x00') execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) 14.618255412s ago: executing program 0 (id=72): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 13.312913063s ago: executing program 0 (id=74): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x84, 0x81, 0x0, &(0x7f0000000080)) 13.265463479s ago: executing program 2 (id=76): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0xcc, 0xc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r0, 0x0, 0x0}, 0x10) 12.659480264s ago: executing program 0 (id=78): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="850000002f000000d4d77100100000001387dec652dfd6bf01af4f8a6c047a9ebb825045ae49f6247fed5675c5d30031bb2374cd9661b7ea223c1cc9306e474aff66c001db28"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@host, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x4, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa389", 0x4a}, {&(0x7f0000000900)="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", 0x3ee}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="06c634ee2784e625a0576cb24d274f4ab4362f5b70c7d67185d68c976bb97db8926b38ca4e8d81e7392ef87d52446bed29ba727754d6c2e355ccb073ee921936412daddad9b3fc3ceba0f153a3930700"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) signalfd4(r4, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 12.063697643s ago: executing program 2 (id=79): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(0xffffffffffffffff, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 7.762676368s ago: executing program 4 (id=81): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0xfffffffffffffe08, 0x0}, 0x10) 7.288865345s ago: executing program 3 (id=82): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe) connect$inet(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) 7.288466721s ago: executing program 0 (id=83): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0], 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000700)="1a589880094221163118c20ba67edecc8e404446a08a220bc228fdded14097f1bccd9ad61925bf16c950493dcbfa6ab0c9b15be904473944ae117dc771d96adb8d73784dfe7e94e74e3174a167769327c0d80ba8284629876a30092ed1a239694a89b84b0e057116bce4937d0f2b278462dba4d09bef9ee19a611b9da53fc371d514278562c24ebdcef5464924a301983232d7b3a5095fae5db44de0b2cb8c", 0x9f}], 0x1) r4 = dup(r3) ioctl$PPPIOCSCOMPRESS(r1, 0x400c744d) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0cc5604, &(0x7f00000005c0)={0x1, @pix={0x0, 0x3, 0x30313953, 0x4, 0x7ff, 0x53ed, 0x3, 0x0, 0x0, 0x7, 0x0, 0x8}}) syz_io_uring_setup(0x6921, &(0x7f0000000300)={0x0, 0x3530, 0x2000, 0xfffffffb, 0x122, 0x0, r1}, &(0x7f00000001c0), &(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x8, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x210, 0x400000a, 0x0, 0x0, 0xb}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x5, 0x1c, 0x3, 0x0, 0x9, 0x101}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x90) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a31000000"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) connect$llc(r5, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) 7.156812272s ago: executing program 2 (id=85): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r1, 0x0, 0x0, 0x1, 0x3000) msgrcv(r1, 0x0, 0x0, 0x0, 0x2000) r2 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd0}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r6}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) 6.852832111s ago: executing program 4 (id=86): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 4.870971653s ago: executing program 1 (id=87): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 4.870718778s ago: executing program 3 (id=88): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x84, 0x81, 0x0, &(0x7f0000000080)) 4.855179978s ago: executing program 4 (id=89): userfaultfd(0x80001) r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x4000800) socket(0x26, 0x3, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x102, 0x155502) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000040a01040000000000000000020000040900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24004800) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udplite(0x2, 0x2, 0x88) 4.724606725s ago: executing program 0 (id=90): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x3, 0x5004) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0x80000300, 0x0, 0x0) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) r3 = syz_io_uring_setup(0x5f4, &(0x7f0000000380)={0x0, 0xddf0, 0x10100, 0x3, 0x388}, &(0x7f0000002080)=0x0, &(0x7f0000002100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r7, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES8=r7, @ANYRES16=r5, @ANYRES64=r6], &(0x7f0000000b80)='GPL\x00', 0x2000, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0xffffffbb}, 0x10}, 0x94) r8 = socket(0x400000000010, 0x3, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000200), 0x7f9f, 0x0) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x3, &(0x7f0000000000)={0x32, "e922604a451494c905fd02000c8fe725c2000000000800"}}) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) futex_waitv(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 4.666436646s ago: executing program 1 (id=91): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r3 = gettid() ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000002c0)={&(0x7f0000000380)=""/199, 0xc7}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@updpolicy={0xba8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xc}}, [@algo_aead={0x98f, 0x12, {{'morus640-sse2\x00'}, 0x4a18, 0x200, "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"}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @migrate={0x9c, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, @in=@broadcast, @in6=@remote, 0x3c, 0x1, 0x0, 0x3507, 0xa}, {@in6=@mcast1, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x0, 0x2, 0x0, 0x3505, 0x2, 0x2}]}, @lastused={0xc, 0xf, 0x4}, @etimer_thresh={0x8, 0xc, 0xffff}, @lastused={0xc, 0xf, 0x2}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd2b, 0x70bd26, 0x70bd2d, 0x70bd26, 0xa, [0x5, 0x8, 0xae8, 0x3, 0x6, 0x5, 0x1000]}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@rand_addr=0x64010102, 0x0, 0xa}}]}, 0xba8}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r7, 0x0, 0x27) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 4.577037458s ago: executing program 3 (id=92): syz_open_dev$tty20(0xc, 0x4, 0x1) 4.280900477s ago: executing program 2 (id=93): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$evdev(0x0, 0x1800202, 0x0) ioctl$EVIOCGREP(r2, 0x80084522, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a0000000800000000000004040000000800000002000004f7ffffff0400000001000000000000000300000001000000000000000030615f5f5f2e2e5f"], 0x0, 0x52, 0x0, 0x9, 0x6}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x901) mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f00000002c0)) r5 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') socket$inet6(0xa, 0x1, 0x8010800000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x1, 0x14}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000085000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0100007a000000efffffffffffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 2.944736073s ago: executing program 3 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c00000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.856638127s ago: executing program 2 (id=95): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 1.714578461s ago: executing program 4 (id=96): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) mkdirat$cgroup(r2, 0x0, 0x1ff) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x5) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x4600, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000080601020000040000000000020000010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008004) 1.65486904s ago: executing program 3 (id=97): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001040)=0xfffffff8, 0x4) r1 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) creat(&(0x7f0000000440)='./file0\x00', 0x61) sendto$inet6(r5, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x6, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x101000, 0x102) getdents64(r8, &(0x7f00000000c0)=""/55, 0x37) getdents64(r8, &(0x7f0000001f80)=""/4108, 0x100c) 1.605999105s ago: executing program 1 (id=98): bpf$MAP_CREATE(0x0, &(0x7f00000041c0)=@base={0x2, 0x4, 0x9, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) 1.372738438s ago: executing program 1 (id=99): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) read$FUSE(r0, 0x0, 0x0) 1.256482424s ago: executing program 1 (id=100): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) 1.165204115s ago: executing program 0 (id=101): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 227.327422ms ago: executing program 2 (id=102): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/172, 0xac}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000004000)=""/4064, 0xfe0}, {&(0x7f0000002940)=""/4106, 0x100a}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000240)=""/107, 0x6b}], 0x6}, 0x40012100) 13.638635ms ago: executing program 3 (id=103): socket$inet(0x2, 0x2, 0x1) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=104): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) dup3(r0, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r3, &(0x7f0000000300)=[{&(0x7f0000000600)="8414", 0x2}, {&(0x7f0000000640)='hQ', 0x2}], 0x2, 0xffffffff, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. [ 92.130987][ T31] cfg80211: failed to load regulatory.db [ 92.290573][ T5782] cgroup: Unknown subsys name 'net' [ 92.552190][ T5782] cgroup: Unknown subsys name 'cpuset' [ 92.606534][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.517070][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.703597][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.718284][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.718927][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.720976][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.721738][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.723062][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.723961][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.780878][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.783523][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.784429][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.786523][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.787582][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.828346][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.859827][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.862370][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.932832][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.935173][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.947547][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.948646][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.949440][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.949770][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.957220][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.958315][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.959753][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.969912][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.866005][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 99.003537][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 99.020783][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 99.160120][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 99.274044][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 99.764295][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.764403][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.764836][ T5801] bridge_slave_0: entered allmulticast mode [ 99.769537][ T5801] bridge_slave_0: entered promiscuous mode [ 99.807639][ T5114] Bluetooth: hci1: command tx timeout [ 99.807645][ T5804] Bluetooth: hci2: command tx timeout [ 99.948059][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.948258][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.948405][ T5801] bridge_slave_1: entered allmulticast mode [ 99.950296][ T5801] bridge_slave_1: entered promiscuous mode [ 99.968857][ T5804] Bluetooth: hci0: command tx timeout [ 100.046014][ T5804] Bluetooth: hci3: command tx timeout [ 100.046203][ T5114] Bluetooth: hci4: command tx timeout [ 100.246937][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.247062][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.247200][ T5798] bridge_slave_0: entered allmulticast mode [ 100.249092][ T5798] bridge_slave_0: entered promiscuous mode [ 100.334439][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.334568][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.334710][ T5805] bridge_slave_0: entered allmulticast mode [ 100.337674][ T5805] bridge_slave_0: entered promiscuous mode [ 100.437101][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.437223][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.437401][ T5798] bridge_slave_1: entered allmulticast mode [ 100.439968][ T5798] bridge_slave_1: entered promiscuous mode [ 100.557138][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.557256][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.557393][ T5805] bridge_slave_1: entered allmulticast mode [ 100.559353][ T5805] bridge_slave_1: entered promiscuous mode [ 100.564223][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.626959][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.627095][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.627276][ T5810] bridge_slave_0: entered allmulticast mode [ 100.629533][ T5810] bridge_slave_0: entered promiscuous mode [ 100.769450][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.846897][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.847032][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.847214][ T5810] bridge_slave_1: entered allmulticast mode [ 100.849698][ T5810] bridge_slave_1: entered promiscuous mode [ 100.850675][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.850837][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.851014][ T5809] bridge_slave_0: entered allmulticast mode [ 100.853101][ T5809] bridge_slave_0: entered promiscuous mode [ 101.010298][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.086909][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.087019][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.087160][ T5809] bridge_slave_1: entered allmulticast mode [ 101.089100][ T5809] bridge_slave_1: entered promiscuous mode [ 101.180400][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.251500][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.389837][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.393287][ T5801] team0: Port device team_slave_0 added [ 101.459835][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.644760][ T5801] team0: Port device team_slave_1 added [ 101.749675][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.752928][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.886052][ T5114] Bluetooth: hci1: command tx timeout [ 101.886085][ T5114] Bluetooth: hci2: command tx timeout [ 101.918517][ T5798] team0: Port device team_slave_0 added [ 102.009649][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.011764][ T5805] team0: Port device team_slave_0 added [ 102.045994][ T5804] Bluetooth: hci0: command tx timeout [ 102.089395][ T5798] team0: Port device team_slave_1 added [ 102.126386][ T5804] Bluetooth: hci3: command tx timeout [ 102.126412][ T5114] Bluetooth: hci4: command tx timeout [ 102.248680][ T5805] team0: Port device team_slave_1 added [ 102.250353][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.250365][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.250384][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.590027][ T5810] team0: Port device team_slave_0 added [ 102.767502][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.767516][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.767535][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.888892][ T5810] team0: Port device team_slave_1 added [ 102.890874][ T5809] team0: Port device team_slave_0 added [ 102.976521][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.976540][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.976558][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.078646][ T5809] team0: Port device team_slave_1 added [ 103.079744][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.079755][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.079774][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.082824][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.082839][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.082858][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.267572][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.267585][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.267605][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.280668][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.280688][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.280722][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.469488][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.469502][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.469522][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.470720][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.470732][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.470750][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.678086][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.678101][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.678120][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.697914][ T5801] hsr_slave_0: entered promiscuous mode [ 103.699212][ T5801] hsr_slave_1: entered promiscuous mode [ 103.966326][ T5804] Bluetooth: hci2: command tx timeout [ 103.966360][ T5804] Bluetooth: hci1: command tx timeout [ 104.093152][ T5798] hsr_slave_0: entered promiscuous mode [ 104.094156][ T5798] hsr_slave_1: entered promiscuous mode [ 104.094999][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 104.095092][ T5798] Cannot create hsr debugfs directory [ 104.126009][ T5114] Bluetooth: hci0: command tx timeout [ 104.183591][ T5805] hsr_slave_0: entered promiscuous mode [ 104.184761][ T5805] hsr_slave_1: entered promiscuous mode [ 104.185680][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 104.185708][ T5805] Cannot create hsr debugfs directory [ 104.205923][ T5804] Bluetooth: hci4: command tx timeout [ 104.206033][ T5114] Bluetooth: hci3: command tx timeout [ 104.425568][ T5810] hsr_slave_0: entered promiscuous mode [ 104.429822][ T5810] hsr_slave_1: entered promiscuous mode [ 104.431117][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 104.431145][ T5810] Cannot create hsr debugfs directory [ 104.864963][ T5809] hsr_slave_0: entered promiscuous mode [ 104.867110][ T5809] hsr_slave_1: entered promiscuous mode [ 104.868298][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 104.868325][ T5809] Cannot create hsr debugfs directory [ 106.046354][ T5804] Bluetooth: hci2: command tx timeout [ 106.046405][ T5114] Bluetooth: hci1: command tx timeout [ 106.207717][ T5114] Bluetooth: hci0: command tx timeout [ 106.296400][ T5804] Bluetooth: hci4: command tx timeout [ 106.296448][ T5114] Bluetooth: hci3: command tx timeout [ 106.301381][ T5801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.345423][ T5801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.381240][ T5801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.433609][ T5801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.553509][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.584914][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.621815][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.679540][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.804404][ T5805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.836813][ T5805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.875175][ T5805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.910227][ T5805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.060804][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.107106][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.155108][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.214585][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.356642][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.357767][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.402696][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.437270][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.473634][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.564181][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.605607][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.619384][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.619760][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.667248][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.667346][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.742714][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.778404][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.795030][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.795184][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.837721][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.837817][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.900470][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.928623][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.954878][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.955025][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.013328][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.013510][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.095072][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.130014][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.162452][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.162626][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.236255][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.236956][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.317193][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.359174][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.359393][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.406850][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.408709][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.496542][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.733376][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.850062][ T5801] veth0_vlan: entered promiscuous mode [ 108.875163][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.941552][ T5801] veth1_vlan: entered promiscuous mode [ 109.087888][ T5798] veth0_vlan: entered promiscuous mode [ 109.131038][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.145694][ T5798] veth1_vlan: entered promiscuous mode [ 109.186466][ T5801] veth0_macvtap: entered promiscuous mode [ 109.209954][ T5805] veth0_vlan: entered promiscuous mode [ 109.221947][ T5801] veth1_macvtap: entered promiscuous mode [ 109.288553][ T5805] veth1_vlan: entered promiscuous mode [ 109.305573][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.344831][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.394653][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.416424][ T5798] veth0_macvtap: entered promiscuous mode [ 109.466950][ T3578] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.469907][ T5798] veth1_macvtap: entered promiscuous mode [ 109.493181][ T3578] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.510875][ T3578] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.542523][ T3578] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.583485][ T5805] veth0_macvtap: entered promiscuous mode [ 109.646081][ T5805] veth1_macvtap: entered promiscuous mode [ 109.683713][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.767491][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.789752][ T5809] veth0_vlan: entered promiscuous mode [ 109.825277][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.851811][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.853677][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.872694][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.897967][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.917485][ T5809] veth1_vlan: entered promiscuous mode [ 109.928440][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.928467][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.974531][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.071101][ T1391] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.100651][ T1391] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.104852][ T5810] veth0_vlan: entered promiscuous mode [ 110.121147][ T1391] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.127618][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.127640][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.136645][ T1391] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.260408][ T5810] veth1_vlan: entered promiscuous mode [ 110.415092][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.415114][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.424738][ T5809] veth0_macvtap: entered promiscuous mode [ 110.469316][ T5809] veth1_macvtap: entered promiscuous mode [ 110.592628][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.592649][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.650451][ T5810] veth0_macvtap: entered promiscuous mode [ 110.667211][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.682589][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.682616][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.722359][ T5810] veth1_macvtap: entered promiscuous mode [ 110.800665][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.986351][ T1391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.986375][ T1391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.988235][ T154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.050372][ T154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.070057][ T154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.085683][ T154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.180025][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.269703][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.335772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.336125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.461972][ T3578] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.463795][ T3578] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.464820][ T3578] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.468053][ T3578] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.837392][ T5920] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.027683][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.027706][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.106550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.115838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.125796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.135784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.145782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.155785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.165790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.175786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.511961][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.511979][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.609270][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.812526][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 114.182825][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.182862][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.182913][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 114.182937][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.279008][ T31] usb 1-1: config 0 descriptor?? [ 114.617378][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.617399][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.782539][ T31] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.0001/input/input5 [ 114.932590][ T31] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.0001/input/input6 [ 115.037363][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.037385][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.093526][ T31] kye 0003:0458:5012.0001: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0 [ 115.175169][ T31] usb 1-1: USB disconnect, device number 2 [ 115.744973][ T5933] fido_id[5933]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 115.780717][ T38] audit: type=1326 audit(1760979406.155:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc646f6efc9 code=0x7ffc0000 [ 115.780779][ T38] audit: type=1326 audit(1760979406.175:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc646f6efc9 code=0x7ffc0000 [ 115.783040][ T38] audit: type=1326 audit(1760979406.175:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc646f6efc9 code=0x7ffc0000 [ 115.783083][ T38] audit: type=1326 audit(1760979406.175:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc646f6efc9 code=0x7ffc0000 [ 115.783119][ T38] audit: type=1326 audit(1760979406.175:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc646f6efc9 code=0x7ffc0000 [ 115.822990][ T38] audit: type=1326 audit(1760979406.175:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc646f6efc9 code=0x7ffc0000 [ 115.823060][ T38] audit: type=1326 audit(1760979406.205:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=40000003 syscall=9 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 115.836424][ T38] audit: type=1326 audit(1760979406.235:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc646f6efc9 code=0x7ffc0000 [ 115.836488][ T38] audit: type=1326 audit(1760979406.235:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc646f6efc9 code=0x7ffc0000 [ 116.007185][ T5944] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET) [ 116.072815][ T5940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.163528][ T5114] Bluetooth: hci1: unexpected cc 0x204b length: 9 > 3 [ 116.676974][ T5959] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.897758][ T5963] tty tty1: ldisc open failed (-12), clearing slot 0 [ 119.672927][ T5981] 9pnet_virtio: no channels available for device syz [ 120.247613][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.401788][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.401826][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.401853][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 120.401878][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.401923][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.401946][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.571313][ T10] usb 2-1: config 0 descriptor?? [ 121.148233][ T5994] warning: `syz.3.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.205578][ T10] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 121.259961][ T5996] Zero length message leads to an empty skb [ 121.430262][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 122.766830][ T5958] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 122.908669][ T5958] usb 2-1: device descriptor read/64, error -32 [ 123.217846][ T6017] random: crng reseeded on system resumption [ 123.516447][ T5958] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 123.986150][ T5958] usb 2-1: device descriptor read/64, error -32 [ 124.460887][ T5958] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 124.569514][ T5958] usb 2-1: device descriptor read/8, error -32 [ 125.082277][ T5958] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 125.116934][ T5958] usb 2-1: device descriptor read/8, error -32 [ 125.794260][ T5958] raw-gadget.0 gadget.1: failed to queue suspend event [ 126.019426][ T1235] usb 2-1: USB disconnect, device number 2 [ 127.076616][ T5977] raw-gadget.0 gadget.1: failed to queue disconnect event [ 130.313471][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 130.445094][ T6055] 9pnet_virtio: no channels available for device syz [ 130.483104][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.506676][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.389623][ T6070] random: crng reseeded on system resumption [ 138.898664][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.898762][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.907366][ T6131] process 'syz.4.70' launched './file0' with NULL argv: empty string added [ 140.743909][ T6147] binder: 6140:6147 ioctl 0 200000000040 returned -22 [ 147.918034][ T6182] binder: 6179:6182 ioctl 4018620d 0 returned -22 [ 147.925453][ T6182] binder: 6179:6182 ioctl c0306201 2000000001c0 returned -22 [ 148.354989][ T6197] netlink: 40 bytes leftover after parsing attributes in process `syz.1.91'. [ 152.656436][ T6211] ------------[ cut here ]------------ [ 152.656462][ T6211] WARNING: CPU: 1 PID: 6211 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 152.656516][ T6211] Modules linked in: [ 152.656559][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: syz.4.96 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.656585][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.656602][ T6211] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 152.656638][ T6211] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 152.656662][ T6211] RSP: 0018:ffffc900058df8e0 EFLAGS: 00010287 [ 152.656681][ T6211] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 152.656697][ T6211] RDX: ffffc9000e184000 RSI: 00000000000000ab RDI: 00000000000000ac [ 152.656711][ T6211] RBP: ffffc900058dfa70 R08: 0000000000000000 R09: 0000000000000000 [ 152.656725][ T6211] R10: dffffc0000000000 R11: fffffbfff1deea2f R12: dffffc0000000000 [ 152.656741][ T6211] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888039666791 [ 152.656755][ T6211] FS: 00007f953c4a66c0(0000) GS:ffff888126cc8000(0000) knlGS:0000000000000000 [ 152.656772][ T6211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.656787][ T6211] CR2: 00007ff9728456c0 CR3: 000000002f764000 CR4: 00000000003526f0 [ 152.656805][ T6211] Call Trace: [ 152.656819][ T6211] [ 152.656835][ T6211] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 152.656880][ T6211] ? __pfx_cgroup_freeze+0x10/0x10 [ 152.656922][ T6211] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 152.656959][ T6211] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 152.656993][ T6211] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 152.657034][ T6211] ? mutex_lock_nested+0x154/0x1d0 [ 152.657062][ T6211] ? cgroup_kn_lock_live+0x13c/0x230 [ 152.657097][ T6211] cgroup_freeze_write+0x156/0x1c0 [ 152.657127][ T6211] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 152.657152][ T6211] ? kernfs_root+0x1c/0x230 [ 152.657180][ T6211] ? kernfs_root+0x1c/0x230 [ 152.657211][ T6211] ? kernfs_root+0x1ea/0x230 [ 152.657241][ T6211] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 152.657287][ T6211] cgroup_file_write+0x39e/0x740 [ 152.657318][ T6211] ? __pfx_cgroup_file_write+0x10/0x10 [ 152.657356][ T6211] ? __pfx_cgroup_file_write+0x10/0x10 [ 152.657377][ T6211] kernfs_fop_write_iter+0x3b0/0x540 [ 152.657410][ T6211] vfs_write+0x5d5/0xb40 [ 152.657451][ T6211] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 152.657478][ T6211] ? __pfx_vfs_write+0x10/0x10 [ 152.657508][ T6211] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 152.657548][ T6211] ? mutex_lock_nested+0x154/0x1d0 [ 152.657576][ T6211] ? fdget_pos+0x253/0x320 [ 152.657612][ T6211] ksys_write+0x14b/0x260 [ 152.657636][ T6211] ? __pfx_ksys_write+0x10/0x10 [ 152.657660][ T6211] ? do_syscall_64+0xbe/0xfa0 [ 152.657685][ T6211] do_syscall_64+0xfa/0xfa0 [ 152.657704][ T6211] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.657738][ T6211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.657760][ T6211] ? clear_bhb_loop+0x60/0xb0 [ 152.657788][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.657809][ T6211] RIP: 0033:0x7f953e23efc9 [ 152.657836][ T6211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.657854][ T6211] RSP: 002b:00007f953c4a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.657877][ T6211] RAX: ffffffffffffffda RBX: 00007f953e495fa0 RCX: 00007f953e23efc9 [ 152.657902][ T6211] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000c [ 152.657916][ T6211] RBP: 00007f953e2c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 152.657930][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.657944][ T6211] R13: 00007f953e496038 R14: 00007f953e495fa0 R15: 00007ffc87a5cc28 [ 152.657983][ T6211] [ 152.658000][ T6211] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 152.658016][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: syz.4.96 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.658040][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.658052][ T6211] Call Trace: [ 152.658062][ T6211] [ 152.658071][ T6211] dump_stack_lvl+0x99/0x250 [ 152.658100][ T6211] ? __asan_memcpy+0x40/0x70 [ 152.658133][ T6211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.658159][ T6211] ? __pfx__printk+0x10/0x10 [ 152.658201][ T6211] vpanic+0x237/0x6d0 [ 152.658224][ T6211] ? __pfx_vpanic+0x10/0x10 [ 152.658258][ T6211] panic+0xb9/0xc0 [ 152.658279][ T6211] ? __pfx_panic+0x10/0x10 [ 152.658318][ T6211] __warn+0x31b/0x4b0 [ 152.658338][ T6211] ? cgroup_freeze+0x80a/0xf90 [ 152.658375][ T6211] ? cgroup_freeze+0x80a/0xf90 [ 152.658409][ T6211] report_bug+0x2be/0x4f0 [ 152.658442][ T6211] ? cgroup_freeze+0x80a/0xf90 [ 152.658476][ T6211] ? cgroup_freeze+0x80a/0xf90 [ 152.658509][ T6211] ? cgroup_freeze+0x80c/0xf90 [ 152.658544][ T6211] handle_bug+0x84/0x160 [ 152.658570][ T6211] exc_invalid_op+0x1a/0x50 [ 152.658594][ T6211] asm_exc_invalid_op+0x1a/0x20 [ 152.658615][ T6211] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 152.658649][ T6211] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 152.658668][ T6211] RSP: 0018:ffffc900058df8e0 EFLAGS: 00010287 [ 152.658687][ T6211] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 152.658702][ T6211] RDX: ffffc9000e184000 RSI: 00000000000000ab RDI: 00000000000000ac [ 152.658717][ T6211] RBP: ffffc900058dfa70 R08: 0000000000000000 R09: 0000000000000000 [ 152.658732][ T6211] R10: dffffc0000000000 R11: fffffbfff1deea2f R12: dffffc0000000000 [ 152.658749][ T6211] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888039666791 [ 152.658774][ T6211] ? cgroup_freeze+0x809/0xf90 [ 152.658822][ T6211] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 152.658862][ T6211] ? __pfx_cgroup_freeze+0x10/0x10 [ 152.658902][ T6211] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 152.658936][ T6211] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 152.658972][ T6211] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 152.659012][ T6211] ? mutex_lock_nested+0x154/0x1d0 [ 152.659039][ T6211] ? cgroup_kn_lock_live+0x13c/0x230 [ 152.659076][ T6211] cgroup_freeze_write+0x156/0x1c0 [ 152.659106][ T6211] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 152.659132][ T6211] ? kernfs_root+0x1c/0x230 [ 152.659158][ T6211] ? kernfs_root+0x1c/0x230 [ 152.659209][ T6211] ? kernfs_root+0x1ea/0x230 [ 152.659236][ T6211] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 152.659263][ T6211] cgroup_file_write+0x39e/0x740 [ 152.659294][ T6211] ? __pfx_cgroup_file_write+0x10/0x10 [ 152.659332][ T6211] ? __pfx_cgroup_file_write+0x10/0x10 [ 152.659353][ T6211] kernfs_fop_write_iter+0x3b0/0x540 [ 152.659386][ T6211] vfs_write+0x5d5/0xb40 [ 152.659425][ T6211] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 152.659450][ T6211] ? __pfx_vfs_write+0x10/0x10 [ 152.659479][ T6211] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 152.659517][ T6211] ? mutex_lock_nested+0x154/0x1d0 [ 152.659544][ T6211] ? fdget_pos+0x253/0x320 [ 152.659579][ T6211] ksys_write+0x14b/0x260 [ 152.659602][ T6211] ? __pfx_ksys_write+0x10/0x10 [ 152.659628][ T6211] ? do_syscall_64+0xbe/0xfa0 [ 152.659652][ T6211] do_syscall_64+0xfa/0xfa0 [ 152.659671][ T6211] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.659705][ T6211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.659728][ T6211] ? clear_bhb_loop+0x60/0xb0 [ 152.659755][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.659777][ T6211] RIP: 0033:0x7f953e23efc9 [ 152.659796][ T6211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.659814][ T6211] RSP: 002b:00007f953c4a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.659836][ T6211] RAX: ffffffffffffffda RBX: 00007f953e495fa0 RCX: 00007f953e23efc9 [ 152.659852][ T6211] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000c [ 152.659867][ T6211] RBP: 00007f953e2c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 152.659881][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.659917][ T6211] R13: 00007f953e496038 R14: 00007f953e495fa0 R15: 00007ffc87a5cc28 [ 152.659955][ T6211] [ 152.660276][ T6211] Kernel Offset: disabled