last executing test programs: 6.35775541s ago: executing program 4 (id=29): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) r2 = socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bind$unix(r2, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x10}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0xf00, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x0, 0xfe}, {}, {0x6}, {0x2, 0x3, 0x8, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x40040c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'veth0_macvtap\x00', @local}) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 6.180413465s ago: executing program 2 (id=30): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 6.081812782s ago: executing program 1 (id=31): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084ffffffff0000000002000000c10000000000000000a5e3c523a85853ea39feeb145c6ad10a4fad60"], 0x0, 0x3e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x5, 0x6b1b, 0x4}, &(0x7f00000002c0)=0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.899557551s ago: executing program 1 (id=32): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 5.833626536s ago: executing program 4 (id=33): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x1, 0x5b}, 0x0, 0x0}) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000300)=ANY=[], 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 5.749229115s ago: executing program 2 (id=34): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 5.561997186s ago: executing program 2 (id=35): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x24040884) 5.397191465s ago: executing program 2 (id=37): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_io_uring_setup(0x1104, 0x0, &(0x7f00000003c0)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) io_uring_enter(r1, 0x47fa, 0x2000000, 0x200000000000000, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 5.021938926s ago: executing program 4 (id=39): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=0x2) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3.544141152s ago: executing program 1 (id=43): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084ffffffff0000000002000000c10000000000000000a5e3c523a85853ea39feeb145c6ad10a4fad60"], 0x0, 0x3e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000002c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.443773034s ago: executing program 0 (id=44): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.276681686s ago: executing program 1 (id=46): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e2200000600"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.963961806s ago: executing program 4 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x24040884) 2.812641502s ago: executing program 4 (id=48): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) 2.638793724s ago: executing program 1 (id=49): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 2.609056007s ago: executing program 3 (id=50): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0, 0x8080000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000400)={0x0, r1}) 2.403717792s ago: executing program 2 (id=51): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6745208e00303a000000000000000000ff00ffff64010100ff0200000000000000000000000000010401907800000001630108f9fffb2b0000000000000000000000ffff0a010102f0ff000000000000"], 0x0) recvmmsg(r0, 0x0, 0x0, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.742715989s ago: executing program 3 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xb0, 0x5, 0x8}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.685598158s ago: executing program 2 (id=53): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x57, 0xc2}}}}}}, 0x0) unshare(0x2c020400) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0xffe}, 0x2b1}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x3}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a1, 0x3, 0x3, 0x3, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x29, 0x1, 0x5, 0x1, 0x1, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x80000, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x20, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x9, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x9, 0x3, 0x2, 0x89a, 0x100, 0x5, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x9, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x80000000, 0x0, 0xfffffff8, 0x5, 0x0, 0x40a, 0x6, 0x0, 0x5, 0x3, 0x9bd, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0x248, 0x1, 0x9, 0xb, 0x4, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8000, 0x9, 0xff, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0xff, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) socket$netlink(0x10, 0x3, 0x15) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 1.429223526s ago: executing program 0 (id=54): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084ffffffff0000000002000000c10000000000000000a5e3c523a85853ea39feeb145c6ad10a4fad60"], 0x0, 0x3e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x5, 0x6b1b, 0x4}, &(0x7f00000002c0)=0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.348535509s ago: executing program 1 (id=55): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x57, 0xc2}}}}}}, 0x0) unshare(0x2c020400) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x3}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a1, 0x3, 0x3, 0x3, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x29, 0x1, 0x5, 0x1, 0x1, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x80000, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x20, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x9, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x9, 0x3, 0x2, 0x89a, 0x100, 0x5, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x9, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x80000000, 0x0, 0xfffffff8, 0x5, 0x0, 0x40a, 0x6, 0x0, 0x5, 0x3, 0x9bd, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0x248, 0x1, 0x9, 0xb, 0x4, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8000, 0x9, 0xff, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0xff, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 1.212510655s ago: executing program 0 (id=56): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fsetxattr$system_posix_acl(r0, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000002880)={{}, {0x1, 0x6}, [{}], {0x4, 0x5}, [{0x8, 0x5}, {0x8, 0x2}, {0x8, 0x6}], {0x10, 0x3}, {0x20, 0x5}}, 0x44, 0x2) 924.694361ms ago: executing program 3 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x28}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f569a15bfd30f671c0a2fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37577813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de791e3f950d220b28f4ba268d8c9dbccc1a705b1b1c30881babdbc8cc4cf97b801e4d410fd7c61b34b1f1265b9d114c99fb469914a213bb289c5bdf5af3835d089a2300"/1504, 0x5e0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x176}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93229060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a055fdeb2ba044d0d54e341d1d1ef1eb2c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b6501b87cc74c4804f6da7d3de93327287204cc97f9cb747576d2ab23a6e35c6da6b3240c92ae18b31cb6e7bc60066994e2cb401c76b1840d3e231621355f10ff35ea91ffd463228d000000000000000e454d3c36efee949f6311c6ad78b5a8f091d2ebb008925107e4a4584dab83f7f0cb5ad94266e71e2b7aaa01cf4f9f5e1d52e1e5086e9633cbee8126a200"/349, 0x15d}], 0x4, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 792.464497ms ago: executing program 3 (id=58): r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x1, 0x5b}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000300)=ANY=[], 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 630.117387ms ago: executing program 0 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 426.432202ms ago: executing program 0 (id=60): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) 226.629686ms ago: executing program 0 (id=61): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 223.436217ms ago: executing program 4 (id=62): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0, 0x8080000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000400)={0x0, r1}) 142.104228ms ago: executing program 3 (id=63): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6745208e00303a000000000000000000ff00ffff64010100ff0200000000000000000000000000010401907800000001630108f9fffb2b0000000000000000000000ffff0a010102f0ff000000000000"], 0x0) recvmmsg(r0, 0x0, 0x0, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 3 (id=64): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.114' (ED25519) to the list of known hosts. [ 73.481633][ T5856] cgroup: Unknown subsys name 'net' [ 73.636767][ T5856] cgroup: Unknown subsys name 'cpuset' [ 73.645138][ T5856] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.117136][ T5856] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.509605][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.526480][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.535201][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.542930][ T5879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.547417][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.551579][ T5879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.565453][ T5879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.574760][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.575453][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.589986][ T5883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.597253][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.603860][ T5880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.606380][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.611371][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.619234][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.625986][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.635279][ T5873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.639901][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.646962][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.678065][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.685527][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.685535][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.686376][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.692949][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.736496][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.231133][ T5888] chnl_net:caif_netlink_parms(): no params data found [ 78.489574][ T5885] chnl_net:caif_netlink_parms(): no params data found [ 78.576630][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.584023][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.591418][ T5888] bridge_slave_0: entered allmulticast mode [ 78.598718][ T5888] bridge_slave_0: entered promiscuous mode [ 78.612100][ T5887] chnl_net:caif_netlink_parms(): no params data found [ 78.627032][ T5886] chnl_net:caif_netlink_parms(): no params data found [ 78.660570][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.667826][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.675487][ T5888] bridge_slave_1: entered allmulticast mode [ 78.682432][ T5888] bridge_slave_1: entered promiscuous mode [ 78.785195][ T5889] chnl_net:caif_netlink_parms(): no params data found [ 78.832916][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.860438][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.867890][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.875613][ T5885] bridge_slave_0: entered allmulticast mode [ 78.882623][ T5885] bridge_slave_0: entered promiscuous mode [ 78.892650][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.920130][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.927586][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.934932][ T5885] bridge_slave_1: entered allmulticast mode [ 78.941907][ T5885] bridge_slave_1: entered promiscuous mode [ 79.081569][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.094194][ T5888] team0: Port device team_slave_0 added [ 79.106175][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.113633][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.120795][ T5886] bridge_slave_0: entered allmulticast mode [ 79.128149][ T5886] bridge_slave_0: entered promiscuous mode [ 79.135368][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.142491][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.150082][ T5887] bridge_slave_0: entered allmulticast mode [ 79.157944][ T5887] bridge_slave_0: entered promiscuous mode [ 79.169491][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.180489][ T5888] team0: Port device team_slave_1 added [ 79.191716][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.199090][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.206345][ T5886] bridge_slave_1: entered allmulticast mode [ 79.213691][ T5886] bridge_slave_1: entered promiscuous mode [ 79.223547][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.230719][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.238283][ T5887] bridge_slave_1: entered allmulticast mode [ 79.245394][ T5887] bridge_slave_1: entered promiscuous mode [ 79.364555][ T5885] team0: Port device team_slave_0 added [ 79.371366][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.378664][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.405269][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.431600][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.444937][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.468980][ T5885] team0: Port device team_slave_1 added [ 79.476018][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.482967][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.509270][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.520904][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.530172][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.537411][ T5889] bridge_slave_0: entered allmulticast mode [ 79.546635][ T5889] bridge_slave_0: entered promiscuous mode [ 79.568350][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.579914][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.620065][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.627374][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.635512][ T5889] bridge_slave_1: entered allmulticast mode [ 79.642611][ T5889] bridge_slave_1: entered promiscuous mode [ 79.677147][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.684521][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.710792][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.714898][ T5189] Bluetooth: hci2: command tx timeout [ 79.721528][ T51] Bluetooth: hci0: command tx timeout [ 79.727713][ T5189] Bluetooth: hci3: command tx timeout [ 79.739751][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.746915][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.772922][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.794051][ T5189] Bluetooth: hci4: command tx timeout [ 79.794057][ T51] Bluetooth: hci1: command tx timeout [ 79.810554][ T5886] team0: Port device team_slave_0 added [ 79.854229][ T5886] team0: Port device team_slave_1 added [ 79.863427][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.875218][ T5887] team0: Port device team_slave_0 added [ 79.883667][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.895255][ T5887] team0: Port device team_slave_1 added [ 80.019474][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.027113][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.053556][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.071328][ T5888] hsr_slave_0: entered promiscuous mode [ 80.078751][ T5888] hsr_slave_1: entered promiscuous mode [ 80.098460][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.106326][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.132312][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.144989][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.151950][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.178699][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.192309][ T5889] team0: Port device team_slave_0 added [ 80.199443][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.206887][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.233925][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.258090][ T5885] hsr_slave_0: entered promiscuous mode [ 80.264708][ T5885] hsr_slave_1: entered promiscuous mode [ 80.270718][ T5885] debugfs: 'hsr0' already exists in 'hsr' [ 80.276791][ T5885] Cannot create hsr debugfs directory [ 80.297040][ T5889] team0: Port device team_slave_1 added [ 80.408400][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.415685][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.442072][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.476242][ T5887] hsr_slave_0: entered promiscuous mode [ 80.482538][ T5887] hsr_slave_1: entered promiscuous mode [ 80.489316][ T5887] debugfs: 'hsr0' already exists in 'hsr' [ 80.495146][ T5887] Cannot create hsr debugfs directory [ 80.520543][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.527941][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.554040][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.605776][ T5886] hsr_slave_0: entered promiscuous mode [ 80.611963][ T5886] hsr_slave_1: entered promiscuous mode [ 80.619428][ T5886] debugfs: 'hsr0' already exists in 'hsr' [ 80.625214][ T5886] Cannot create hsr debugfs directory [ 80.708076][ T5889] hsr_slave_0: entered promiscuous mode [ 80.714911][ T5889] hsr_slave_1: entered promiscuous mode [ 80.721018][ T5889] debugfs: 'hsr0' already exists in 'hsr' [ 80.727382][ T5889] Cannot create hsr debugfs directory [ 81.224210][ T5888] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.239448][ T5888] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.251395][ T5888] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.270689][ T5888] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.328027][ T5885] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.339599][ T5885] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.352189][ T5885] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.375566][ T5885] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.460321][ T5887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.471674][ T5887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.487518][ T5887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.521243][ T5887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.674393][ T5889] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.749818][ T5889] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.793411][ T5189] Bluetooth: hci3: command tx timeout [ 81.794596][ T51] Bluetooth: hci0: command tx timeout [ 81.798826][ T5189] Bluetooth: hci2: command tx timeout [ 81.818074][ T5889] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.856992][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.873416][ T5189] Bluetooth: hci4: command tx timeout [ 81.874034][ T51] Bluetooth: hci1: command tx timeout [ 81.892239][ T5889] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.910400][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.981059][ T5886] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.001364][ T5886] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.032359][ T5888] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.052381][ T5886] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.075030][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.082281][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.092000][ T5886] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.109373][ T5885] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.129260][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.136491][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.178239][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.185398][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.202223][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.228666][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.235836][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.345318][ T5887] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.383135][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.399537][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.406723][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.420196][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.427352][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.527899][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.538668][ T5889] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.574641][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.586485][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.593667][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.617637][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.625743][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.644777][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.669868][ T5886] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.707675][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.714864][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.744329][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.751455][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.802855][ T5885] veth0_vlan: entered promiscuous mode [ 82.866256][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.877226][ T5888] veth0_vlan: entered promiscuous mode [ 82.892175][ T5885] veth1_vlan: entered promiscuous mode [ 82.916888][ T5888] veth1_vlan: entered promiscuous mode [ 83.002322][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.031942][ T5885] veth0_macvtap: entered promiscuous mode [ 83.048080][ T5888] veth0_macvtap: entered promiscuous mode [ 83.068578][ T5888] veth1_macvtap: entered promiscuous mode [ 83.088711][ T5887] veth0_vlan: entered promiscuous mode [ 83.098389][ T5885] veth1_macvtap: entered promiscuous mode [ 83.118228][ T5887] veth1_vlan: entered promiscuous mode [ 83.141506][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.179763][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.209041][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.240607][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.255036][ T5887] veth0_macvtap: entered promiscuous mode [ 83.268454][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.302335][ T5887] veth1_macvtap: entered promiscuous mode [ 83.310766][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.321747][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.346815][ T5889] veth0_vlan: entered promiscuous mode [ 83.360285][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.370126][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.401301][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.411285][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.434983][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.444219][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.454677][ T5889] veth1_vlan: entered promiscuous mode [ 83.503183][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.519158][ T5886] veth0_vlan: entered promiscuous mode [ 83.538492][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.580210][ T5886] veth1_vlan: entered promiscuous mode [ 83.590773][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.599685][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.643014][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.652546][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.670621][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.678762][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.690860][ T5889] veth0_macvtap: entered promiscuous mode [ 83.754320][ T5889] veth1_macvtap: entered promiscuous mode [ 83.763502][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.771637][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.784648][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.801055][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.855063][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.867661][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.875679][ T51] Bluetooth: hci2: command tx timeout [ 83.881104][ T51] Bluetooth: hci0: command tx timeout [ 83.881279][ T5189] Bluetooth: hci3: command tx timeout [ 83.910847][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.925905][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.931038][ T3514] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.950124][ T3514] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.962376][ T5189] Bluetooth: hci4: command tx timeout [ 83.964454][ T51] Bluetooth: hci1: command tx timeout [ 83.977389][ T5888] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.002090][ T3514] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.032474][ T3514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.049254][ T5886] veth0_macvtap: entered promiscuous mode [ 84.068591][ T5886] veth1_macvtap: entered promiscuous mode [ 84.100697][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.130804][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.249665][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.289547][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.301474][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.318654][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.390435][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.411243][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.440229][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.505021][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.519900][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.582145][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.599879][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.632258][ T5973] netlink: 'syz.0.1': attribute type 27 has an invalid length. [ 84.662628][ T5934] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 84.861881][ T5934] usb 5-1: unable to get BOS descriptor or descriptor too short [ 84.864360][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.877851][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.893170][ T5934] usb 5-1: not running at top speed; connect to a high speed hub [ 84.905850][ T5934] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.923312][ T5934] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.941272][ T5934] usb 5-1: string descriptor 0 read error: -22 [ 84.954508][ T5934] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.964126][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.027481][ T5934] usb 5-1: 0:2 : does not exist [ 85.100585][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.114661][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.497625][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.510011][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.537135][ T5975] syz_tun: entered allmulticast mode [ 85.544413][ T5975] syz_tun: left allmulticast mode [ 85.552932][ T60] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.587831][ T60] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.624855][ T5934] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 85.635504][ T3467] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.655108][ T3467] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.664297][ T5934] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 85.711364][ T5934] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 85.769431][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.790456][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.831732][ T5958] IPVS: starting estimator thread 0... [ 85.848016][ T5934] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 85.896186][ T5934] usb 5-1: USB disconnect, device number 2 [ 85.946177][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.956156][ T51] Bluetooth: hci3: command tx timeout [ 85.956180][ T5189] Bluetooth: hci0: command tx timeout [ 85.961558][ T51] Bluetooth: hci2: command tx timeout [ 85.967234][ T5983] IPVS: using max 25 ests per chain, 60000 per kthread [ 86.017833][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.034152][ T5189] Bluetooth: hci4: command tx timeout [ 86.034972][ T51] Bluetooth: hci1: command tx timeout [ 86.303883][ T5867] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.333887][ T5942] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.454769][ T6001] syzkaller0: entered promiscuous mode [ 86.460320][ T6001] syzkaller0: entered allmulticast mode [ 86.479526][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.489999][ T5867] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 86.502702][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.524298][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 86.527520][ T5867] usb 2-1: config 0 descriptor?? [ 86.536254][ T5942] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 86.546208][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.548494][ T5867] pwc: Askey VC010 type 2 USB webcam detected. [ 86.562248][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.579376][ T5942] usb 1-1: config 0 descriptor?? [ 86.687639][ T24] cfg80211: failed to load regulatory.db [ 86.758504][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.770427][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 86.780813][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.802908][ T10] usb 3-1: config 0 descriptor?? [ 86.811104][ T5942] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 86.832462][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 86.859948][ T5942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.871492][ T5942] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 86.880001][ T5942] usb 1-1: media controller created [ 86.931430][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.955038][ T5867] pwc: recv_control_msg error -32 req 02 val 2b00 [ 86.978078][ T5867] pwc: recv_control_msg error -32 req 02 val 2700 [ 86.992600][ T5867] pwc: recv_control_msg error -32 req 02 val 2c00 [ 87.012609][ T5867] pwc: recv_control_msg error -32 req 04 val 1000 [ 87.036115][ T5867] pwc: recv_control_msg error -32 req 04 val 1300 [ 87.061570][ T5942] DVB: Unable to find symbol dib7000p_attach() [ 87.079010][ T5942] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 87.196476][ T5942] rc_core: IR keymap rc-dib0700-rc5 not found [ 87.213465][ T5942] Registered IR keymap rc-empty [ 87.231220][ T5942] dvb-usb: could not initialize remote control. [ 87.240277][ T5942] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 87.252701][ T5867] pwc: recv_control_msg error -71 req 02 val 2000 [ 87.269826][ T5942] usb 1-1: USB disconnect, device number 2 [ 87.271684][ T5867] pwc: recv_control_msg error -71 req 02 val 2100 [ 87.287220][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 87.290282][ T5867] pwc: recv_control_msg error -71 req 04 val 1500 [ 87.296151][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 87.310785][ T5867] pwc: recv_control_msg error -71 req 02 val 2500 [ 87.321363][ T5867] pwc: recv_control_msg error -71 req 02 val 2400 [ 87.332632][ T5867] pwc: recv_control_msg error -71 req 02 val 2600 [ 87.345365][ T5867] pwc: recv_control_msg error -71 req 02 val 2900 [ 87.351100][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 87.352448][ T5867] pwc: recv_control_msg error -71 req 02 val 2800 [ 87.371333][ T5867] pwc: recv_control_msg error -71 req 04 val 1100 [ 87.376391][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 87.381874][ T5867] pwc: recv_control_msg error -71 req 04 val 1200 [ 87.404066][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 87.430786][ T5867] pwc: Registered as video103. [ 87.434695][ T5942] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 87.464418][ T5867] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 87.525290][ T5867] usb 2-1: USB disconnect, device number 2 [ 87.596746][ T5992] udevd[5992]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 87.614523][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 87.621558][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 87.641709][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 87.671710][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 87.674060][ T5963] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.710667][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 87.727234][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 87.759480][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 87.764365][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 87.773569][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 87.781626][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 87.791579][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 87.807862][ T10] pwc: Registered as video103. [ 87.824574][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 87.841410][ T6011] Zero length message leads to an empty skb [ 87.885086][ T5963] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.885826][ T10] usb 3-1: USB disconnect, device number 2 [ 87.913936][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 87.954185][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 87.974395][ T5963] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.017280][ T5963] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 88.027285][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.073738][ T5963] usb 5-1: config 0 descriptor?? [ 88.333559][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.515451][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 88.525899][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 88.545304][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 88.555404][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.566727][ T9] usb 2-1: Product: syz [ 88.570969][ T9] usb 2-1: Manufacturer: syz [ 88.576881][ T9] usb 2-1: SerialNumber: syz [ 88.593140][ T9] usb 2-1: config 0 descriptor?? [ 88.614655][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 88.711739][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 88.724149][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 88.733812][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.744127][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.778791][ T10] usb 3-1: string descriptor 0 read error: -22 [ 88.785208][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.794615][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.830217][ T6012] syz_tun: entered allmulticast mode [ 88.838291][ T10] usb 3-1: 0:2 : does not exist [ 88.838602][ T6012] syz_tun: left allmulticast mode [ 88.933913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.983285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 89.043474][ T9] gspca_sn9c20x: Write register 1001 failed -71 [ 89.064723][ T9] gspca_sn9c20x: Device initialization failed [ 89.084224][ T9] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 89.116783][ T9] usb 2-1: USB disconnect, device number 3 [ 89.273164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.328060][ T6033] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.552596][ T10] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 89.591835][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 89.649554][ T10] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 89.764996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.788960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.800655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.809469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.818269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 89.832675][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 89.846236][ T10] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 89.934764][ T10] usb 3-1: USB disconnect, device number 3 [ 89.967164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.115003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.275645][ T5970] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.408415][ T9] usb 5-1: USB disconnect, device number 3 [ 90.433742][ T5970] usb 1-1: Using ep0 maxpacket: 8 [ 90.455809][ T5970] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 90.494647][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.521752][ T5970] usb 1-1: Product: syz [ 90.544445][ T5970] usb 1-1: Manufacturer: syz [ 90.567038][ T5970] usb 1-1: SerialNumber: syz [ 90.575261][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 90.610656][ T5970] usb 1-1: config 0 descriptor?? [ 90.629211][ T5970] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 90.657133][ T6054] syz_tun: entered allmulticast mode [ 90.703038][ T6053] syz_tun: left allmulticast mode [ 91.661159][ T5970] gspca_sonixj: reg_w1 err -71 [ 91.746562][ T5970] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 91.774769][ T5970] usb 1-1: USB disconnect, device number 3 [ 91.920115][ T6080] input: syz0 as /devices/virtual/input/input8 [ 92.047538][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 92.205268][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 92.218771][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 92.262165][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 92.438706][ T9] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 92.486710][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.510465][ T9] usb 5-1: Product: syz [ 92.526904][ T9] usb 5-1: Manufacturer: syz [ 92.573341][ T9] usb 5-1: SerialNumber: syz [ 92.595489][ T9] usb 5-1: config 0 descriptor?? [ 92.613629][ T6078] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 92.635074][ T6078] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 92.651337][ T9] usb 5-1: ucan: probing device on interface #0 [ 92.795436][ T6092] batman_adv: batadv0: Adding interface: dummy0 [ 92.806956][ T6092] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.884047][ T6092] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 93.078082][ T9] usb 5-1: ucan: device reported invalid device info [ 93.099229][ T9] usb 5-1: ucan: probe failed; try to update the device firmware [ 93.282401][ T9] usb 5-1: USB disconnect, device number 4 [ 93.753457][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.906372][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 93.918957][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.955736][ T9] usb 1-1: config 0 descriptor?? [ 93.994373][ T9] cp210x 1-1:0.0: cp210x converter detected [ 94.198912][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.226535][ T5942] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 94.232813][ T5942] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 94.650383][ T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 94.670221][ T9] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 94.852147][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 94.907563][ T9] usb 1-1: USB disconnect, device number 4 [ 94.945375][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 94.980791][ T9] cp210x 1-1:0.0: device disconnected [ 95.308274][ T6141] tipc: Enabling of bearer rejected, failed to enable media [ 95.322096][ T6141] syzkaller0: entered promiscuous mode [ 95.333297][ T6141] syzkaller0: entered allmulticast mode [ 95.485150][ T6151] input: syz0 as /devices/virtual/input/input9 [ 95.747492][ T6155] input: syz0 as /devices/virtual/input/input10 [ 96.753493][ T5942] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 96.778027][ T5942] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 96.833320][ C1] ------------[ cut here ]------------ [ 96.839061][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 96.845859][ C1] WARNING: CPU: 1 PID: 0 at kernel/workqueue.c:2256 __queue_work+0xd38/0xfb0 [ 96.854647][ C1] Modules linked in: [ 96.858647][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 96.867596][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.877645][ C1] RIP: 0010:__queue_work+0xd38/0xfb0 [ 96.882927][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 f3 10 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 e1 89 8b 4c 89 fa e8 99 39 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 2a 9e 35 00 90 0f 0b 90 e9 dd fc ff [ 96.902561][ C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010046 [ 96.908642][ C1] RAX: eff95b2d65bd4a00 RBX: 0000000000000100 RCX: ffff88801d2d5a00 [ 96.916602][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 96.924568][ C1] RBP: 1ffff11004e08d38 R08: 0000000000000003 R09: 0000000000000004 [ 96.932525][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: dffffc0000000000 [ 96.940481][ C1] R13: ffff88807f094988 R14: 0000000000000008 R15: ffff888027046978 [ 96.948437][ C1] FS: 0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 96.957351][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.963917][ C1] CR2: 0000200000298030 CR3: 0000000027df8000 CR4: 00000000003526f0 [ 96.971875][ C1] Call Trace: [ 96.975143][ C1] [ 96.977974][ C1] call_timer_fn+0x17b/0x5f0 [ 96.982555][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 96.988344][ C1] ? call_timer_fn+0xbe/0x5f0 [ 96.993027][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 96.998135][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 97.003318][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 97.009192][ C1] __run_timer_base+0x646/0x860 [ 97.014070][ C1] ? ktime_get+0x3e/0x1f0 [ 97.018442][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 97.023816][ C1] run_timer_softirq+0xb7/0x180 [ 97.028658][ C1] handle_softirqs+0x283/0x870 [ 97.033406][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 97.038166][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 97.043463][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 97.048666][ C1] __irq_exit_rcu+0xca/0x1f0 [ 97.053246][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 97.058450][ C1] irq_exit_rcu+0x9/0x30 [ 97.062672][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 97.068289][ C1] [ 97.071203][ C1] [ 97.074117][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 97.080098][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 97.085799][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 e9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 97.105384][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 97.111435][ C1] RAX: eff95b2d65bd4a00 RBX: ffffffff819693f8 RCX: eff95b2d65bd4a00 [ 97.119392][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b9e1e RDI: ffffffff8be33e80 [ 97.127353][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 97.135327][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa3a530 [ 97.143284][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a5ab40 [ 97.151272][ C1] ? do_idle+0x1e8/0x510 [ 97.155503][ C1] default_idle+0x13/0x20 [ 97.159818][ C1] default_idle_call+0x74/0xb0 [ 97.164566][ C1] do_idle+0x1e8/0x510 [ 97.168622][ C1] ? __pfx_do_idle+0x10/0x10 [ 97.173205][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 97.179111][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.184291][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 97.190170][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 97.196500][ C1] cpu_startup_entry+0x44/0x60 [ 97.201253][ C1] start_secondary+0x101/0x110 [ 97.206013][ C1] common_startup_64+0x13e/0x147 [ 97.210948][ C1] [ 97.213955][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 97.221222][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 97.230138][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 97.240185][ C1] Call Trace: [ 97.243462][ C1] [ 97.246297][ C1] dump_stack_lvl+0x99/0x250 [ 97.251067][ C1] ? __asan_memcpy+0x40/0x70 [ 97.255667][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.260869][ C1] ? __pfx__printk+0x10/0x10 [ 97.265484][ C1] vpanic+0x281/0x750 [ 97.269466][ C1] ? __pfx__printk+0x10/0x10 [ 97.274052][ C1] ? __pfx_vpanic+0x10/0x10 [ 97.278552][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 97.283843][ C1] panic+0xb9/0xc0 [ 97.287560][ C1] ? __pfx_panic+0x10/0x10 [ 97.291981][ C1] __warn+0x31b/0x4b0 [ 97.295961][ C1] ? __queue_work+0xd38/0xfb0 [ 97.300642][ C1] ? __queue_work+0xd38/0xfb0 [ 97.305328][ C1] report_bug+0x2be/0x4f0 [ 97.309652][ C1] ? __queue_work+0xd38/0xfb0 [ 97.314322][ C1] ? __queue_work+0xd38/0xfb0 [ 97.318991][ C1] ? __queue_work+0xd3a/0xfb0 [ 97.323744][ C1] handle_bug+0x84/0x160 [ 97.327981][ C1] exc_invalid_op+0x1a/0x50 [ 97.332474][ C1] asm_exc_invalid_op+0x1a/0x20 [ 97.337310][ C1] RIP: 0010:__queue_work+0xd38/0xfb0 [ 97.342582][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 f3 10 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 e1 89 8b 4c 89 fa e8 99 39 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 2a 9e 35 00 90 0f 0b 90 e9 dd fc ff [ 97.362198][ C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010046 [ 97.368271][ C1] RAX: eff95b2d65bd4a00 RBX: 0000000000000100 RCX: ffff88801d2d5a00 [ 97.376233][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 97.384190][ C1] RBP: 1ffff11004e08d38 R08: 0000000000000003 R09: 0000000000000004 [ 97.392144][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: dffffc0000000000 [ 97.400103][ C1] R13: ffff88807f094988 R14: 0000000000000008 R15: ffff888027046978 [ 97.408089][ C1] call_timer_fn+0x17b/0x5f0 [ 97.412676][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 97.418469][ C1] ? call_timer_fn+0xbe/0x5f0 [ 97.423140][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 97.428253][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 97.433454][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 97.439249][ C1] __run_timer_base+0x646/0x860 [ 97.444098][ C1] ? ktime_get+0x3e/0x1f0 [ 97.448428][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 97.453806][ C1] run_timer_softirq+0xb7/0x180 [ 97.458648][ C1] handle_softirqs+0x283/0x870 [ 97.463402][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 97.468160][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 97.473437][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 97.478638][ C1] __irq_exit_rcu+0xca/0x1f0 [ 97.483214][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 97.488412][ C1] irq_exit_rcu+0x9/0x30 [ 97.492640][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 97.498272][ C1] [ 97.501188][ C1] [ 97.504104][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 97.510073][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 97.515779][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 e9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 97.535370][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 97.541428][ C1] RAX: eff95b2d65bd4a00 RBX: ffffffff819693f8 RCX: eff95b2d65bd4a00 [ 97.549389][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b9e1e RDI: ffffffff8be33e80 [ 97.557351][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 97.565317][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa3a530 [ 97.573278][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a5ab40 [ 97.581247][ C1] ? do_idle+0x1e8/0x510 [ 97.585510][ C1] default_idle+0x13/0x20 [ 97.589828][ C1] default_idle_call+0x74/0xb0 [ 97.594587][ C1] do_idle+0x1e8/0x510 [ 97.598664][ C1] ? __pfx_do_idle+0x10/0x10 [ 97.603251][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 97.609146][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.614334][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 97.620221][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 97.626555][ C1] cpu_startup_entry+0x44/0x60 [ 97.631304][ C1] start_secondary+0x101/0x110 [ 97.636061][ C1] common_startup_64+0x13e/0x147 [ 97.641005][ C1] [ 97.644252][ C1] Kernel Offset: disabled [ 97.648564][ C1] Rebooting in 86400 seconds..