last executing test programs: 1m49.059840974s ago: executing program 1 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0x15, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r5, &(0x7f0000000500)="41ffa3e8ef335673da7b7e0212ea1f9dc724e7188e3ba804a2c0d07128ba5c31dc613aa0052f02bdce2a427204121a9773b1ebdbcd1c878d", &(0x7f0000000280)=@tcp6, 0x2}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) getsockopt(r4, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) getpid() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) 1m47.742033391s ago: executing program 1 (id=19): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r4, 0x0, 0x80000}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) acct(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 1m46.403826598s ago: executing program 1 (id=20): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="ffffff000b0000005efe02677ee15c2000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x50) dup(r0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000140)=""/9, 0x9, 0x40000660, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x40002) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000048040)=""/102392, 0x18ff8) socket$inet(0x2b, 0x6, 0x5) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080), 0x1) 1m45.525241627s ago: executing program 1 (id=23): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) tee(r0, r2, 0x60000000000, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfa, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m43.592570148s ago: executing program 1 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x17}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x2}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x6}]}}]}, 0x48}}, 0x0) prctl$PR_GET_TSC(0x19, 0x0) syz_io_uring_setup(0x315b, 0x0, &(0x7f00000001c0), &(0x7f0000000300), 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d, 0xfd6f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13, 0x0, 0x6, 0xa}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)="91", 0x1}], 0x1, 0x0, 0x20, 0x40004}}], 0x1, 0x24004044) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000700000004"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettimeofday(0xfffffffffffffffe, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fdffffff00000000fdffffff85000000110000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000d01a29a393d87c627441e8562744c438bf24f00dbc765b862ce36c0b0613870ba91b82c19626df6313d4d9a211cee3d46612d022a29ae20309eef277ecec2152f2aa208dba3061a6f1d6c3bb167461f903ec080da9bd758d77c497235f554a1444"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m40.012503388s ago: executing program 1 (id=31): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 1m23.942542416s ago: executing program 32 (id=31): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 53.50548669s ago: executing program 3 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000f06810b00000000000000000100000606000b0000000000050001000700000006000b0000000000d1d8d1d0aa5f9def9a696c1dd208e802cbf6f28b285aee5dc348e56e6e15cd071cdd88454b98f3c10863472c0cf0937444b0a5f2da341947f3"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "c6b575cc1dfcfa0d585e3c978bed7db2"}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x40040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x7c, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xee}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17a}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x588, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_EXPRESSIONS={0x558, 0x12, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x18}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xfadbc82dd162313a}]}}}, {0x60, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xea}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1c}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xb263}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x68, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x77}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffe2f1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}, {0x3d4, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x3c0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DATA={0x378, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xdb, 0x1, "532ce615d35a9ad917f75838ed80a08a23f19e848723bd01b7b5f375c7e6370834a440e074539beff3841930d83bca380c493edc2fe3c45e97a07c23386839f5655e25d17fdeea02ffbe0bca2d51ae8b706b910c88229dd37eb92f9ec31c280959f6d466f591cfa1cf21a1805a71d6a681bf1caeaa76d6640030649d4b25ac87a71dc60e20a28f5b20d66d0a418bcd7106001330c3adb88a9f53166d43fb95403d1b72225f6769e6061f6bd6c478cab8157f50bcd0c4d4d127207b35773371a4e222fd71e03bf6c6e6709fcd6b93823d488fbb89d21b9d"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x8c, 0x1, "e30409b550f9f3352e86ac3c2346a7d010962b5fed9c70dd4f0ba8c8fce4aa3d8bb17d3b374dfe43a82ac42d3ab13d51649806f87ddff3879800aedc81bbf21bfdd35cdb16857f48ba277c3fbeefdb9b30dcf65a8b4f217b6623d5d619f146c3956a08bce7bc7fe676a3f8350e5694ebff6a9342ca237ac2c8b252467154c476094dc15d859feaa6"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "280606f2293cad8cffaab0e84137174636c3ea276fb6fcf37419d01430fd68ad6d1d2cd869c4a395ffb3d81e632399bf31473270868d514382d86e378f998a4ea5f904567da15c4d792303d7405ce7d7391731b2059640194b6a928467ecfc7ccd06945a43b4bd43e6672a1f85de2be0680974c707910073a26b798f5915b76d0770c9100e11a4551b481574ca18a04bb566c08384792fe5b85a92b48c50b59f6bd3cf281d861a76393835296c88c15f90ac32341bf05a4c60b57239e05faf1078c842304a992d78e256981073a70b4b0c47fcac275a3ba1bfb7ddcbcc7be2d1555491e82503967234cec8c7ba9732b102c9"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x19}]}}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5b0}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) getpgrp(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) 51.639722268s ago: executing program 0 (id=104): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000001840)=""/73, &(0x7f0000000040)=0x49) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) eventfd(0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) syz_open_procfs$userns(0x0, &(0x7f00000001c0)) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) r2 = io_uring_setup(0x1684, &(0x7f0000000200)={0x0, 0x3a2b, 0x8, 0x4, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) epoll_create1(0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) unshare(0x22020600) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'wlan0\x00', &(0x7f0000000680)=@ethtool_regs={0x4, 0x7ffffffd}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7101fcdbdf25390000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800730003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x848}, 0x4004810) 47.907412484s ago: executing program 2 (id=111): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 46.94220451s ago: executing program 0 (id=112): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xcc, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x302}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400000}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002"], 0x100}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040001) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 46.826238884s ago: executing program 4 (id=113): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\f\x00'], 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e30, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0x10, 0x10000007, 0x4}, 0x9c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0xbf, &(0x7f0000000040)=""/191}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 46.052203473s ago: executing program 2 (id=114): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp(0x2, 0x2, 0x73) socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 45.965513705s ago: executing program 0 (id=115): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001900010000000000000000002001000000000000000ae10000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ff"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}], 0x1, 0x4040001) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x3, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x8}, 0x4c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 44.463595566s ago: executing program 2 (id=116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0x15, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r5, &(0x7f0000000500)="41ffa3e8ef335673da7b7e0212ea1f9dc724e7188e3ba804a2c0d07128ba5c31dc613aa0052f02bdce2a427204121a9773b1ebdbcd1c878d", &(0x7f0000000280)=@tcp6, 0x2}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) getsockopt(r4, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) getpid() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) io_setup(0x3, &(0x7f00000003c0)) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) 44.048979088s ago: executing program 3 (id=117): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000100)={r5, 0x0, r4, 0x0, 0x80000}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 43.987022992s ago: executing program 0 (id=118): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000300)=0x808c) r7 = socket$rds(0x15, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$rds(r7, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r8, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f00000000c0)="92468505b2cb906a1dbd33a3a1d78c5cf6a0fae7769376bbcc1bfde7ecac0587bbc6b4cabc026efa67359442ddcd3ff7c51d2957f77221957de203e3da74c26562caaf", 0x43}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r9, 0x80086303, &(0x7f0000000000)) 42.439389484s ago: executing program 4 (id=119): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000500)="41ffa3e8ef335673da7b7e0212ea1f9dc724e7188e3ba804a2c0d07128ba5c31dc613aa0052f02bdce2a427204121a9773b1ebdbcd1c878d", &(0x7f0000000280)=@tcp6, 0x2}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 41.88960889s ago: executing program 0 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) 41.67973767s ago: executing program 3 (id=121): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r4, 0x0, 0x80000}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) acct(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 41.629172296s ago: executing program 2 (id=122): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 41.2522877s ago: executing program 4 (id=123): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0x15, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r5, &(0x7f0000000500)="41ffa3e8ef335673da7b7e0212ea1f9dc724e7188e3ba804a2c0d07128ba5c31dc613aa0052f02bdce2a427204121a9773b1ebdbcd1c878d", &(0x7f0000000280)=@tcp6, 0x2}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) getsockopt(r4, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) getpid() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) io_setup(0x3, &(0x7f00000003c0)) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) 40.178124432s ago: executing program 3 (id=124): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp(0x2, 0x2, 0x73) r3 = socket(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000500)="41ffa3e8ef335673da7b7e0212ea1f9dc724e7188e3ba804a2c0d07128ba5c31dc613aa0052f02bdce2a427204121a9773b1ebdbcd1c878d", &(0x7f0000000280)=@tcp6, 0x2}, 0x20) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) io_setup(0x3, &(0x7f00000003c0)) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) 39.735957675s ago: executing program 2 (id=125): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0x15, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r5, &(0x7f0000000500)="41ffa3e8ef335673da7b7e0212ea1f9dc724e7188e3ba804a2c0d07128ba5c31dc613aa0052f02bdce2a427204121a9773b1ebdbcd1c878d", &(0x7f0000000280)=@tcp6, 0x2}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) getsockopt(r4, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) getpid() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) io_setup(0x3, &(0x7f00000003c0)) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) 37.827821824s ago: executing program 3 (id=126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp(0x2, 0x2, 0x73) socket(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000500)="41ffa3e8ef335673da7b7e0212ea1f9dc724e7188e3ba804a2c0d07128ba5c31dc613aa0052f02bdce2a427204121a9773b1ebdbcd1c878d", &(0x7f0000000280)=@tcp6, 0x2}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) getpid() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) io_setup(0x3, &(0x7f00000003c0)) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) 37.817129681s ago: executing program 4 (id=127): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001900010000000000000000002001000000000000000ae10000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ff"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}], 0x1, 0x4040001) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x3, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x8}, 0x4c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 37.75417595s ago: executing program 0 (id=128): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, 0x0) unshare(0x24020400) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000480)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 37.397240635s ago: executing program 2 (id=129): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f0000000300)=0x808c) r6 = socket$rds(0x15, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$rds(r6, 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x2040, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r8, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f00000000c0)="92468505b2cb906a1dbd33a3a1d78c5cf6a0fae7769376bbcc1bfde7ecac0587bbc6b4cabc026efa67359442ddcd3ff7c51d2957f77221957de203e3da74c26562caaf", 0x43}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r9, 0x80086303, &(0x7f0000000000)) 35.893786195s ago: executing program 3 (id=130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r4, 0x0, r3, 0x0, 0x80000}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 35.531896127s ago: executing program 4 (id=131): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 27.127064621s ago: executing program 4 (id=132): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r4, 0x0, 0x80000}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) acct(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 20.016000582s ago: executing program 33 (id=128): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, 0x0) unshare(0x24020400) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000480)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 5.993836233s ago: executing program 34 (id=129): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f0000000300)=0x808c) r6 = socket$rds(0x15, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$rds(r6, 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x2040, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r8, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f00000000c0)="92468505b2cb906a1dbd33a3a1d78c5cf6a0fae7769376bbcc1bfde7ecac0587bbc6b4cabc026efa67359442ddcd3ff7c51d2957f77221957de203e3da74c26562caaf", 0x43}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r9, 0x80086303, &(0x7f0000000000)) 1.993985533s ago: executing program 35 (id=130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r4, 0x0, r3, 0x0, 0x80000}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 0s ago: executing program 36 (id=132): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r4, 0x0, 0x80000}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) acct(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 89.618710][ T5779] cgroup: Unknown subsys name 'net' [ 89.860224][ T5779] cgroup: Unknown subsys name 'cpuset' [ 89.895372][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.772436][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.316089][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.337920][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.343044][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.355417][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.356738][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.359143][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.362229][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.363249][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.368771][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.371340][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.389958][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.393621][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.395899][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.399190][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.402925][ T5111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.420278][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.429449][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.441866][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.444598][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.449388][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.450721][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.456220][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.459964][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.468225][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.503316][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.475738][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 95.630397][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 95.642555][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 95.657096][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 95.664027][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 95.953844][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.958172][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.958814][ T5795] bridge_slave_0: entered allmulticast mode [ 95.968069][ T5795] bridge_slave_0: entered promiscuous mode [ 96.020429][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.020533][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.020909][ T5795] bridge_slave_1: entered allmulticast mode [ 96.022789][ T5795] bridge_slave_1: entered promiscuous mode [ 96.196546][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.196750][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.196933][ T5796] bridge_slave_0: entered allmulticast mode [ 96.199212][ T5796] bridge_slave_0: entered promiscuous mode [ 96.201698][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.201821][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.201991][ T5794] bridge_slave_0: entered allmulticast mode [ 96.204192][ T5794] bridge_slave_0: entered promiscuous mode [ 96.214103][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.218626][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.219139][ T5793] bridge_slave_0: entered allmulticast mode [ 96.241232][ T5793] bridge_slave_0: entered promiscuous mode [ 96.250365][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.250731][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.251284][ T5792] bridge_slave_0: entered allmulticast mode [ 96.266126][ T5792] bridge_slave_0: entered promiscuous mode [ 96.295244][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.298842][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.299123][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.300560][ T5796] bridge_slave_1: entered allmulticast mode [ 96.314548][ T5796] bridge_slave_1: entered promiscuous mode [ 96.320335][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.320664][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.321174][ T5794] bridge_slave_1: entered allmulticast mode [ 96.331000][ T5794] bridge_slave_1: entered promiscuous mode [ 96.339128][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.339457][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.339950][ T5793] bridge_slave_1: entered allmulticast mode [ 96.351650][ T5793] bridge_slave_1: entered promiscuous mode [ 96.359030][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.359299][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.359846][ T5792] bridge_slave_1: entered allmulticast mode [ 96.369856][ T5792] bridge_slave_1: entered promiscuous mode [ 96.386209][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.496073][ T60] Bluetooth: hci2: command tx timeout [ 96.574614][ T60] Bluetooth: hci1: command tx timeout [ 96.574801][ T60] Bluetooth: hci3: command tx timeout [ 96.574879][ T60] Bluetooth: hci0: command tx timeout [ 96.574941][ T5802] Bluetooth: hci4: command tx timeout [ 96.632090][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.642155][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.655695][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.658544][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.661253][ T5795] team0: Port device team_slave_0 added [ 96.664179][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.679315][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.693934][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.709295][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.718830][ T5795] team0: Port device team_slave_1 added [ 96.892197][ T5796] team0: Port device team_slave_0 added [ 96.896129][ T5794] team0: Port device team_slave_0 added [ 96.907604][ T5793] team0: Port device team_slave_0 added [ 96.910197][ T5792] team0: Port device team_slave_0 added [ 96.911385][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.911399][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.911425][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.929328][ T5796] team0: Port device team_slave_1 added [ 96.938285][ T5794] team0: Port device team_slave_1 added [ 96.949470][ T5793] team0: Port device team_slave_1 added [ 96.959222][ T5792] team0: Port device team_slave_1 added [ 96.962311][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.962360][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.962428][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.147915][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.147929][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.147955][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.149252][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.149267][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.149293][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.150620][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.150634][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.150660][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.152042][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.152056][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.152082][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.154301][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.154312][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.158420][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.163559][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.163596][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.163664][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.175247][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.175292][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.175361][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.178991][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.179032][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.179106][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.452980][ T996] cfg80211: failed to load regulatory.db [ 97.894254][ T5795] hsr_slave_0: entered promiscuous mode [ 97.901677][ T5795] hsr_slave_1: entered promiscuous mode [ 98.060477][ T5796] hsr_slave_0: entered promiscuous mode [ 98.061472][ T5796] hsr_slave_1: entered promiscuous mode [ 98.062335][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 98.062423][ T5796] Cannot create hsr debugfs directory [ 98.087884][ T5794] hsr_slave_0: entered promiscuous mode [ 98.088957][ T5794] hsr_slave_1: entered promiscuous mode [ 98.089627][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 98.089644][ T5794] Cannot create hsr debugfs directory [ 98.121826][ T5792] hsr_slave_0: entered promiscuous mode [ 98.122869][ T5792] hsr_slave_1: entered promiscuous mode [ 98.123553][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 98.123570][ T5792] Cannot create hsr debugfs directory [ 98.149673][ T5793] hsr_slave_0: entered promiscuous mode [ 98.150705][ T5793] hsr_slave_1: entered promiscuous mode [ 98.151378][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 98.151395][ T5793] Cannot create hsr debugfs directory [ 98.576317][ T5802] Bluetooth: hci2: command tx timeout [ 98.654629][ T5803] Bluetooth: hci3: command tx timeout [ 98.654667][ T5803] Bluetooth: hci4: command tx timeout [ 98.654690][ T5803] Bluetooth: hci1: command tx timeout [ 98.654933][ T5802] Bluetooth: hci0: command tx timeout [ 99.148254][ T5795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.193955][ T5795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.213663][ T5795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.243628][ T5795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.356218][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.402712][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.419330][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.489148][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.632340][ T5794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.678941][ T5794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.715444][ T5794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.768643][ T5794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.918379][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.959639][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.008270][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.054734][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.192362][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.202150][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.238202][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.280484][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.315702][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.405624][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.436947][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.468150][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.468310][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.509322][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.509499][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.568833][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.632202][ T722] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.632352][ T722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.654195][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.654583][ T5802] Bluetooth: hci2: command tx timeout [ 100.691936][ T722] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.692194][ T722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.734710][ T60] Bluetooth: hci1: command tx timeout [ 100.734742][ T60] Bluetooth: hci4: command tx timeout [ 100.734765][ T60] Bluetooth: hci3: command tx timeout [ 100.735168][ T5802] Bluetooth: hci0: command tx timeout [ 100.813690][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.840173][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.859651][ T722] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.859813][ T722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.920029][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.925362][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.011489][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.036993][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.076047][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.076152][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.137937][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.138103][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.191329][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.244099][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.259085][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.308128][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.308358][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.478793][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.639197][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.975685][ T5796] veth0_vlan: entered promiscuous mode [ 101.981756][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.086474][ T5796] veth1_vlan: entered promiscuous mode [ 102.187664][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.231361][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.271161][ T5794] veth0_vlan: entered promiscuous mode [ 102.285775][ T5796] veth0_macvtap: entered promiscuous mode [ 102.314205][ T5796] veth1_macvtap: entered promiscuous mode [ 102.339840][ T5794] veth1_vlan: entered promiscuous mode [ 102.372791][ T5795] veth0_vlan: entered promiscuous mode [ 102.418009][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.447937][ T5795] veth1_vlan: entered promiscuous mode [ 102.451730][ T5793] veth0_vlan: entered promiscuous mode [ 102.468841][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.514257][ T45] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.528543][ T5792] veth0_vlan: entered promiscuous mode [ 102.529771][ T45] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.556840][ T5793] veth1_vlan: entered promiscuous mode [ 102.559789][ T45] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.581409][ T45] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.582722][ T5794] veth0_macvtap: entered promiscuous mode [ 102.662577][ T5794] veth1_macvtap: entered promiscuous mode [ 102.672975][ T5792] veth1_vlan: entered promiscuous mode [ 102.735500][ T5802] Bluetooth: hci2: command tx timeout [ 102.810786][ T5795] veth0_macvtap: entered promiscuous mode [ 102.814603][ T5802] Bluetooth: hci0: command tx timeout [ 102.814637][ T5802] Bluetooth: hci3: command tx timeout [ 102.814649][ T5803] Bluetooth: hci4: command tx timeout [ 102.814673][ T5803] Bluetooth: hci1: command tx timeout [ 102.868765][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.870155][ T5795] veth1_macvtap: entered promiscuous mode [ 102.938407][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.942597][ T5793] veth0_macvtap: entered promiscuous mode [ 102.963032][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.963054][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.003629][ T5793] veth1_macvtap: entered promiscuous mode [ 103.013603][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.039506][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.050674][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.067877][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.068511][ T5792] veth0_macvtap: entered promiscuous mode [ 103.071899][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.181236][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.183464][ T5792] veth1_macvtap: entered promiscuous mode [ 103.203516][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.203537][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.283111][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.296262][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.325473][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.330566][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.404510][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.436652][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.514688][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.543716][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.577507][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.597173][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.648527][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.648943][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.651362][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.651381][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.837210][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.841052][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.874198][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.908688][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.983548][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.983572][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.098672][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.098695][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.249033][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.249055][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.283316][ T5865] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 104.347256][ T722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.347278][ T722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.516984][ T5865] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 104.517017][ T5865] usb 2-1: config 2 interface 0 has no altsetting 0 [ 104.520871][ T5865] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 104.520894][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.520909][ T5865] usb 2-1: Product: syz [ 104.520919][ T5865] usb 2-1: Manufacturer: syz [ 104.520930][ T5865] usb 2-1: SerialNumber: syz [ 104.640921][ T722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.640945][ T722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.791308][ T5865] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 104.791337][ T5865] usb 2-1: selecting invalid altsetting 0 [ 104.847698][ T5922] netlink: zone id is out of range [ 104.847711][ T5922] netlink: zone id is out of range [ 104.848251][ T5922] netlink: zone id is out of range [ 104.848257][ T5922] netlink: zone id is out of range [ 104.848263][ T5922] netlink: zone id is out of range [ 104.848268][ T5922] netlink: zone id is out of range [ 104.848273][ T5922] netlink: zone id is out of range [ 104.848278][ T5922] netlink: zone id is out of range [ 104.848284][ T5922] netlink: zone id is out of range [ 104.848289][ T5922] netlink: zone id is out of range [ 104.916841][ T5920] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.011221][ T5865] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 105.042809][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.042824][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.567571][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.567593][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.481023][ T5884] usb 2-1: USB disconnect, device number 2 [ 111.393029][ T5968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'. [ 112.383485][ T5968] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 112.483724][ T5968] bond1 (unregistering): Released all slaves [ 120.194920][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 122.514956][ T5878] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 122.859870][ T5878] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 122.859913][ T5878] usb 3-1: config 2 interface 0 has no altsetting 0 [ 122.864064][ T5878] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 122.864095][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.864115][ T5878] usb 3-1: Product: syz [ 122.864129][ T5878] usb 3-1: Manufacturer: syz [ 122.864143][ T5878] usb 3-1: SerialNumber: syz [ 124.248612][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 124.382924][ T5878] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 124.382955][ T5878] usb 3-1: selecting invalid altsetting 0 [ 124.504380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.597459][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 124.603094][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 124.603123][ T9] usb 4-1: config 0 has no interface number 0 [ 124.603176][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 124.618717][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 124.618750][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.618772][ T9] usb 4-1: Product: syz [ 124.618788][ T9] usb 4-1: Manufacturer: syz [ 124.618803][ T9] usb 4-1: SerialNumber: syz [ 125.160291][ T9] usb 4-1: config 0 descriptor?? [ 125.519152][ T5878] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 125.667098][ T5878] usb 3-1: USB disconnect, device number 2 [ 125.983646][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 125.983679][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 126.740198][ T6061] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 128.651499][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 128.651532][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 128.651553][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 128.652440][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 128.720880][ T9] usb 4-1: USB disconnect, device number 2 [ 129.130801][ T6073] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 129.844113][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 131.305988][ T6089] netlink: 60 bytes leftover after parsing attributes in process `syz.3.47'. [ 133.587085][ T6102] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 134.374550][ T6101] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 138.054380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.042866][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.042963][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.164393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 139.174415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.340231][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.358770][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.359733][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.361316][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.362033][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.484400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.234644][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.374594][ T60] Bluetooth: hci5: command tx timeout [ 141.384664][ T9] usb 4-1: device descriptor read/64, error -71 [ 141.664463][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 141.800513][ T6123] chnl_net:caif_netlink_parms(): no params data found [ 141.817436][ T9] usb 4-1: device descriptor read/64, error -71 [ 141.943298][ T9] usb usb4-port1: attempt power cycle [ 142.262724][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 142.448285][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.471639][ T9] usb 4-1: device descriptor read/8, error -71 [ 143.456301][ T60] Bluetooth: hci5: command tx timeout [ 145.546938][ T60] Bluetooth: hci5: command tx timeout [ 147.810553][ T60] Bluetooth: hci5: command tx timeout [ 149.184366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.284373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.343430][ T6042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.880900][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.898777][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.899014][ T6123] bridge_slave_0: entered allmulticast mode [ 149.940678][ T6123] bridge_slave_0: entered promiscuous mode [ 149.960484][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.960612][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.960855][ T6123] bridge_slave_1: entered allmulticast mode [ 149.998638][ T6123] bridge_slave_1: entered promiscuous mode [ 150.309021][ T6193] netlink: 68 bytes leftover after parsing attributes in process `syz.0.70'. [ 151.044377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.104372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.918928][ T6042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.995245][ T6123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.302310][ T6201] netlink: 68 bytes leftover after parsing attributes in process `syz.4.72'. [ 152.733660][ T6123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.497925][ T6042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.854391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.712278][ T6123] team0: Port device team_slave_0 added [ 156.791221][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 158.251620][ T6042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.287982][ T6123] team0: Port device team_slave_1 added [ 159.455122][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.455142][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.455171][ T6123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.461753][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.461771][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.461798][ T6123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.707144][ T6241] netlink: 277 bytes leftover after parsing attributes in process `syz.0.82'. [ 160.050181][ T6123] hsr_slave_0: entered promiscuous mode [ 160.051790][ T6123] hsr_slave_1: entered promiscuous mode [ 160.052740][ T6123] debugfs: 'hsr0' already exists in 'hsr' [ 160.052765][ T6123] Cannot create hsr debugfs directory [ 160.894506][ T36] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 161.312511][ T6250] netlink: 'syz.2.86': attribute type 2 has an invalid length. [ 161.312538][ T6250] netlink: 'syz.2.86': attribute type 8 has an invalid length. [ 161.312552][ T6250] netlink: 132 bytes leftover after parsing attributes in process `syz.2.86'. [ 161.666897][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 161.674078][ T36] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 161.674119][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.674141][ T36] usb 1-1: Product: syz [ 161.674156][ T36] usb 1-1: Manufacturer: syz [ 161.674171][ T36] usb 1-1: SerialNumber: syz [ 161.846216][ T36] usb 1-1: config 0 descriptor?? [ 161.852608][ T36] hub 1-1:0.0: bad descriptor, ignoring hub [ 161.852651][ T36] hub 1-1:0.0: probe with driver hub failed with error -5 [ 162.475161][ T36] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 162.586437][ T6259] netlink: 68 bytes leftover after parsing attributes in process `syz.4.88'. [ 163.032193][ T6042] bridge_slave_1: left allmulticast mode [ 163.032283][ T6042] bridge_slave_1: left promiscuous mode [ 163.032944][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.346829][ T36] input: failed to attach handler mousedev to device input5, error: -5 [ 164.974533][ T6042] bridge_slave_0: left allmulticast mode [ 164.974563][ T6042] bridge_slave_0: left promiscuous mode [ 164.977025][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.034911][ T36] usb 1-1: USB disconnect, device number 2 [ 166.624787][ T6289] netlink: 68 bytes leftover after parsing attributes in process `syz.4.98'. [ 166.964442][ T5881] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 167.126805][ T5881] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 167.126850][ T5881] usb 4-1: config 2 interface 0 has no altsetting 0 [ 167.131197][ T5881] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 167.131228][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.131249][ T5881] usb 4-1: Product: syz [ 167.131265][ T5881] usb 4-1: Manufacturer: syz [ 167.131280][ T5881] usb 4-1: SerialNumber: syz [ 167.265845][ T5881] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 167.265875][ T5881] usb 4-1: selecting invalid altsetting 0 [ 168.230768][ T5881] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 168.384020][ T6306] netlink: 277 bytes leftover after parsing attributes in process `syz.0.104'. [ 168.668518][ T5881] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 168.861981][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 168.879652][ T5881] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 168.879684][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.879705][ T5881] usb 1-1: Product: syz [ 168.879722][ T5881] usb 1-1: Manufacturer: syz [ 168.879732][ T5881] usb 1-1: SerialNumber: syz [ 168.921684][ T5881] usb 1-1: config 0 descriptor?? [ 168.938064][ T5881] hub 1-1:0.0: bad descriptor, ignoring hub [ 168.938109][ T5881] hub 1-1:0.0: probe with driver hub failed with error -5 [ 168.985221][ T5881] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 170.195740][ T6316] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 172.089462][ T6042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.119122][ T6334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.112'. [ 173.125455][ T5950] usb 1-1: USB disconnect, device number 3 [ 173.362296][ T6042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.569015][ T6336] Zero length message leads to an empty skb [ 173.959158][ T6042] bond0 (unregistering): Released all slaves [ 175.012833][ T5881] usb 4-1: USB disconnect, device number 7 [ 175.767668][ T6338] netlink: 'syz.4.113': attribute type 2 has an invalid length. [ 175.767703][ T6338] netlink: 'syz.4.113': attribute type 8 has an invalid length. [ 175.767716][ T6338] netlink: 132 bytes leftover after parsing attributes in process `syz.4.113'. [ 177.099247][ T6362] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 177.340376][ T6123] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 177.812559][ T6123] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.151427][ T6123] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.264482][ T6123] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 184.903216][ T6430] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 193.801330][ T6123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.051641][ T6123] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.938496][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.974793][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.978715][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.978862][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.905607][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.905689][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.703348][ T5808] Bluetooth: hci2: command 0x0406 tx timeout [ 217.703427][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 219.075845][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.098809][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.100483][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.101746][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.102902][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.993836][ T5798] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 224.031145][ T5798] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 224.043568][ T5798] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 224.070398][ T5798] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 224.071402][ T5798] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.976011][ T5798] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 228.994680][ T5811] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 228.999746][ T5811] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 229.046145][ T5811] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 229.166685][ T5811] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.167859][ T5811] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 229.169347][ T5811] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 229.170158][ T5811] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 229.233331][ T5798] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 229.249448][ T5798] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 229.974656][ T5798] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 267.239532][ T5807] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 267.258520][ T5807] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 267.259864][ T5807] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 267.261671][ T5807] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 267.262612][ T5807] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 268.232655][ T6478] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 268.250339][ T6478] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 268.262149][ T6478] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 268.263611][ T6478] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 268.283464][ T6478] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 269.122349][ T6454] chnl_net:caif_netlink_parms(): no params data found [ 270.102317][ T6492] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 270.121533][ T6492] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 270.132865][ T6492] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 270.152090][ T6492] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 270.152904][ T6492] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 270.248586][ T6455] chnl_net:caif_netlink_parms(): no params data found [ 271.511951][ T6466] chnl_net:caif_netlink_parms(): no params data found [ 271.647248][ T6454] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.647387][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.648065][ T6454] bridge_slave_0: entered allmulticast mode [ 271.674728][ T6454] bridge_slave_0: entered promiscuous mode [ 271.769932][ T6454] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.770478][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.770725][ T6454] bridge_slave_1: entered allmulticast mode [ 271.773841][ T6454] bridge_slave_1: entered promiscuous mode [ 271.892143][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.892366][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.892598][ T6455] bridge_slave_0: entered allmulticast mode [ 271.926287][ T6455] bridge_slave_0: entered promiscuous mode [ 272.732097][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.732263][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.732494][ T6455] bridge_slave_1: entered allmulticast mode [ 272.758537][ T6455] bridge_slave_1: entered promiscuous mode [ 272.833903][ T6454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.916173][ T6454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.027522][ T6455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.111939][ T6455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.148363][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.148519][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.148759][ T6466] bridge_slave_0: entered allmulticast mode [ 273.151773][ T6466] bridge_slave_0: entered promiscuous mode [ 273.190573][ T6454] team0: Port device team_slave_0 added [ 273.242020][ T6466] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.242158][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.242822][ T6466] bridge_slave_1: entered allmulticast mode [ 273.267435][ T6466] bridge_slave_1: entered promiscuous mode [ 273.272271][ T6454] team0: Port device team_slave_1 added [ 273.382634][ T6455] team0: Port device team_slave_0 added [ 273.421405][ T6455] team0: Port device team_slave_1 added [ 273.455504][ T6454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.455525][ T6454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.455562][ T6454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.560118][ T6466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.573837][ T6454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.573857][ T6454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.573887][ T6454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.676411][ T6466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.701810][ T6455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.701830][ T6455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.701859][ T6455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.798059][ T6455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.798078][ T6455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.798107][ T6455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.884758][ T6474] chnl_net:caif_netlink_parms(): no params data found [ 273.956473][ T6466] team0: Port device team_slave_0 added [ 274.207432][ T6466] team0: Port device team_slave_1 added [ 274.659924][ T5111] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 274.681633][ T5111] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 274.695177][ T5111] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 274.712463][ T5111] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 274.713892][ T5111] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 274.786569][ T6455] hsr_slave_0: entered promiscuous mode [ 274.788308][ T6455] hsr_slave_1: entered promiscuous mode [ 274.789425][ T6455] debugfs: 'hsr0' already exists in 'hsr' [ 274.789452][ T6455] Cannot create hsr debugfs directory [ 274.790736][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.790750][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.790779][ T6466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.928433][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.928455][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.928485][ T6466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.003226][ T6490] chnl_net:caif_netlink_parms(): no params data found [ 275.305027][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.305166][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.305768][ T6474] bridge_slave_0: entered allmulticast mode [ 275.309315][ T6474] bridge_slave_0: entered promiscuous mode [ 275.420535][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.420758][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.421510][ T6474] bridge_slave_1: entered allmulticast mode [ 275.446319][ T6474] bridge_slave_1: entered promiscuous mode [ 275.513853][ T6466] hsr_slave_0: entered promiscuous mode [ 275.535038][ T6466] hsr_slave_1: entered promiscuous mode [ 275.536228][ T6466] debugfs: 'hsr0' already exists in 'hsr' [ 275.536256][ T6466] Cannot create hsr debugfs directory [ 276.617100][ T6474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.707412][ T6474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.818657][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.818797][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.819388][ T6490] bridge_slave_0: entered allmulticast mode [ 276.854494][ T6490] bridge_slave_0: entered promiscuous mode [ 276.973720][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.973926][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.989460][ T6490] bridge_slave_1: entered allmulticast mode [ 276.993686][ T6490] bridge_slave_1: entered promiscuous mode [ 277.605529][ T6474] team0: Port device team_slave_0 added [ 277.697455][ T6474] team0: Port device team_slave_1 added [ 277.839620][ T6490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.956743][ T6490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.002648][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.002668][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.002698][ T6474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.126510][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.126530][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.126560][ T6474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.369683][ T6490] team0: Port device team_slave_0 added [ 278.457010][ T6490] team0: Port device team_slave_1 added [ 278.751126][ T6557] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 278.772437][ T6557] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 278.794475][ T6557] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 278.795800][ T6557] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 278.796618][ T6557] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 278.912419][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.912438][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.912468][ T6490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.987067][ T6474] hsr_slave_0: entered promiscuous mode [ 278.990235][ T6474] hsr_slave_1: entered promiscuous mode [ 279.010143][ T6474] debugfs: 'hsr0' already exists in 'hsr' [ 279.010174][ T6474] Cannot create hsr debugfs directory [ 279.030028][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.030048][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.030077][ T6490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.487244][ T6490] hsr_slave_0: entered promiscuous mode [ 279.488973][ T6490] hsr_slave_1: entered promiscuous mode [ 279.490087][ T6490] debugfs: 'hsr0' already exists in 'hsr' [ 279.490115][ T6490] Cannot create hsr debugfs directory [ 279.598574][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 280.595449][ T6466] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 282.305517][ T6530] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 282.322100][ T6530] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 282.334592][ T6530] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 282.343861][ T6530] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 282.354457][ T6530] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 290.774297][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 290.774319][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29/2:b..l P6429/1:b..l P5794/1:b..l [ 290.774400][ C0] rcu: (detected by 0, t=10502 jiffies, g=13593, q=12967 ncpus=2) [ 290.774427][ C0] task:syz-executor state:D stack:22624 pid:5794 tgid:5794 ppid:1 task_flags:0x400140 flags:0x00080002 [ 290.774503][ C0] Call Trace: [ 290.774517][ C0] [ 290.774533][ C0] __schedule+0x1553/0x5240 [ 290.774606][ C0] ? irqentry_exit+0x59e/0x620 [ 290.774632][ C0] ? trace_irq_disable+0x3b/0x150 [ 290.774664][ C0] ? __pfx___schedule+0x10/0x10 [ 290.774720][ C0] schedule_rtlock+0x30/0x70 [ 290.774744][ C0] rtlock_slowlock_locked+0x3638/0x3c80 [ 290.774804][ C0] ? rcu_is_watching+0x15/0xb0 [ 290.774835][ C0] ? rtlock_slowlock_locked+0x2a8/0x3c80 [ 290.774882][ C0] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 290.774935][ C0] ? rcu_is_watching+0x15/0xb0 [ 290.774969][ C0] rt_spin_lock+0x165/0x400 [ 290.775007][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 290.775041][ C0] ? rcu_is_watching+0x15/0xb0 [ 290.775066][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 290.775103][ C0] ? hrtimer_cancel_wait_running+0xe5/0x180 [ 290.775132][ C0] ? hrtimer_cancel_wait_running+0xe5/0x180 [ 290.775158][ C0] hrtimer_cancel_wait_running+0xfa/0x180 [ 290.775189][ C0] do_nanosleep+0x239/0x660 [ 290.775234][ C0] ? do_nanosleep+0x8a/0x660 [ 290.775274][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 290.775316][ C0] ? __hrtimer_setup+0x181/0x200 [ 290.775340][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 290.775373][ C0] hrtimer_nanosleep+0x20c/0x440 [ 290.775405][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 290.775437][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 290.775467][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 290.775504][ C0] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 290.775537][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 290.775580][ C0] do_syscall_64+0x14d/0xf80 [ 290.775606][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.775631][ C0] ? clear_bhb_loop+0x40/0x90 [ 290.775661][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.775686][ C0] RIP: 0033:0x7f62e5d5d04e [ 290.775720][ C0] RSP: 002b:00007fff2fd5aac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 290.775743][ C0] RAX: ffffffffffffffda RBX: 000055555dd7b500 RCX: 00007f62e5d5d04e [ 290.775761][ C0] RDX: 00007fff2fd5ab20 RSI: 0000000000000000 RDI: 0000000000000000 [ 290.775775][ C0] RBP: 00007fff2fd5ab8c R08: 0000000000000000 R09: 0000000000000000 [ 290.775790][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 290.775804][ C0] R13: 00000000000927c0 R14: 000000000002cf68 R15: 00007fff2fd5abe0 [ 290.775840][ C0] [ 290.775849][ C0] task:syz.2.129 state:R running task stack:27904 pid:6429 tgid:6418 ppid:5793 task_flags:0x400040 flags:0x00080002 [ 290.775930][ C0] Call Trace: [ 290.775938][ C0] [ 290.775951][ C0] __schedule+0x1553/0x5240 [ 290.776007][ C0] ? __pfx___schedule+0x10/0x10 [ 290.776048][ C0] preempt_schedule_irq+0x4d/0xa0 [ 290.776072][ C0] irqentry_exit+0x599/0x620 [ 290.776102][ C0] ? trace_irq_disable+0x3b/0x150 [ 290.776139][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 290.776165][ C0] RIP: 0010:lock_release+0x2d7/0x3d0 [ 290.776189][ C0] Code: 7c ae 10 00 00 00 00 eb b5 e8 55 58 83 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 c5 35 ae 10 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 22 27 cd [ 290.776209][ C0] RSP: 0018:ffffc90006427640 EFLAGS: 00000282 [ 290.776228][ C0] RAX: 044baa2c00cba100 RBX: 0000000000000206 RCX: 0000000000000046 [ 290.776243][ C0] RDX: 00000000c45bc6bf RSI: ffffffff8d7c0dbe RDI: ffffffff8ba67680 [ 290.776260][ C0] RBP: ffff88801ff8c8e0 R08: ffffffff8b2611d0 R09: ffffffff8ddcb9c0 [ 290.776278][ C0] R10: 0000000000000000 R11: ffffed1006db4895 R12: 0000000000000002 [ 290.776293][ C0] R13: 0000000000000002 R14: ffff8880353f6f98 R15: ffff88801ff8bd00 [ 290.776317][ C0] ? rt_spin_lock+0x1e0/0x400 [ 290.776364][ C0] rt_spin_unlock+0x29/0x200 [ 290.776402][ C0] __skb_try_recv_datagram+0xa9/0x1b0 [ 290.776438][ C0] __unix_dgram_recvmsg+0x2e3/0xd60 [ 290.776483][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 290.776518][ C0] ? irqentry_exit+0x59e/0x620 [ 290.776542][ C0] ? trace_irq_disable+0x3b/0x150 [ 290.776586][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 290.776608][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 290.776633][ C0] sock_recvmsg_nosec+0x10c/0x140 [ 290.776672][ C0] ____sys_recvmsg+0x3ef/0x4b0 [ 290.776719][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 290.776766][ C0] ? import_iovec+0x73/0xa0 [ 290.776808][ C0] ___sys_recvmsg+0x215/0x590 [ 290.776834][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 290.776863][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 290.776895][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 290.776920][ C0] ? irqentry_exit+0x59e/0x620 [ 290.776978][ C0] do_recvmmsg+0x33a/0x800 [ 290.777014][ C0] ? file_init_path+0x3b/0x5b0 [ 290.777044][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 290.777071][ C0] ? __asan_memcpy+0x40/0x70 [ 290.777116][ C0] ? __pfx_do_futex+0x10/0x10 [ 290.777158][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 290.777191][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 290.777234][ C0] do_syscall_64+0x14d/0xf80 [ 290.777258][ C0] ? trace_irq_disable+0x3b/0x150 [ 290.777286][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.777310][ C0] ? clear_bhb_loop+0x40/0x90 [ 290.777340][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.777363][ C0] RIP: 0033:0x7f7f438dc819 [ 290.777382][ C0] RSP: 002b:00007f7f41b0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 290.777404][ C0] RAX: ffffffffffffffda RBX: 00007f7f43b56090 RCX: 00007f7f438dc819 [ 290.777421][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 290.777436][ C0] RBP: 00007f7f43972c91 R08: 0000000000000000 R09: 0000000000000000 [ 290.777450][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 290.777463][ C0] R13: 00007f7f43b56128 R14: 00007f7f43b56090 R15: 00007ffce5780948 [ 290.777501][ C0] [ 290.777509][ C0] task:ktimers/1 state:R running task stack:23800 pid:29 tgid:29 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 290.777579][ C0] Call Trace: [ 290.777586][ C0] [ 290.777600][ C0] __schedule+0x1553/0x5240 [ 290.777655][ C0] ? __pfx___schedule+0x10/0x10 [ 290.777679][ C0] ? irqentry_exit+0x59e/0x620 [ 290.777711][ C0] ? rcu_is_watching+0x15/0xb0 [ 290.777747][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 290.777778][ C0] preempt_schedule_common+0x82/0xd0 [ 290.777803][ C0] preempt_schedule_thunk+0x16/0x30 [ 290.777840][ C0] try_to_wake_up+0x832/0x1380 [ 290.777875][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 290.777904][ C0] hrtimer_wakeup+0x4e/0x60 [ 290.777933][ C0] __hrtimer_run_queues+0x55f/0xda0 [ 290.777983][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 290.778009][ C0] ? read_tsc+0x9/0x20 [ 290.778050][ C0] hrtimer_run_softirq+0x192/0x5d0 [ 290.778089][ C0] handle_softirqs+0x1de/0x6f0 [ 290.778134][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 290.778171][ C0] run_ktimerd+0x69/0x100 [ 290.778194][ C0] smpboot_thread_fn+0x541/0xa50 [ 290.778233][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 290.778286][ C0] kthread+0x388/0x470 [ 290.778313][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 290.778349][ C0] ? __pfx_kthread+0x10/0x10 [ 290.778376][ C0] ret_from_fork+0x51e/0xb90 [ 290.778414][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 290.778446][ C0] ? __switch_to+0xc7d/0x1450 [ 290.778480][ C0] ? __pfx_kthread+0x10/0x10 [ 290.778508][ C0] ret_from_fork_asm+0x1a/0x30 [ 290.778550][ C0] [ 290.778564][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 9187 jiffies! g13593 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 290.778591][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=9634 [ 290.778604][ C0] rcu: rcu_preempt kthread starved for 9188 jiffies! g13593 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 290.778628][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 290.778639][ C0] rcu: RCU grace-period kthread stack dump: [ 290.778647][ C0] task:rcu_preempt state:I stack:27776 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 290.778729][ C0] Call Trace: [ 290.778736][ C0] [ 290.778749][ C0] __schedule+0x1553/0x5240 [ 290.778778][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 290.778823][ C0] ? __pfx___schedule+0x10/0x10 [ 290.778856][ C0] ? schedule+0x90/0x360 [ 290.778882][ C0] schedule+0x164/0x360 [ 290.778907][ C0] schedule_timeout+0x158/0x2c0 [ 290.778948][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 290.778987][ C0] ? __pfx_process_timeout+0x10/0x10 [ 290.779021][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 290.779047][ C0] ? prepare_to_swait_event+0x340/0x370 [ 290.779091][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 290.779117][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 290.779145][ C0] ? rcu_gp_init+0x1313/0x15b0 [ 290.779170][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 290.779195][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 290.779216][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 290.779247][ C0] ? rcu_gp_fqs_loop+0x11b4/0x11d0 [ 290.779275][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 290.779301][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 290.779321][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 290.779349][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 290.779386][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 290.779429][ C0] kthread+0x388/0x470 [ 290.779452][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 290.779467][ C0] ? __pfx_kthread+0x10/0x10 [ 290.779490][ C0] ret_from_fork+0x51e/0xb90 [ 290.779527][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 290.779559][ C0] ? __switch_to+0xc7d/0x1450 [ 290.779593][ C0] ? __pfx_kthread+0x10/0x10 [ 290.779620][ C0] ret_from_fork_asm+0x1a/0x30 [ 290.779660][ C0] [ 290.779668][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 290.779692][ C0] Sending NMI from CPU 0 to CPUs 1: [ 290.779727][ C1] NMI backtrace for cpu 1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 290.779759][ C1] CPU: 1 UID: 0 PID: 6425 Comm: syz.3.130 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 290.779780][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.779790][ C1] RIP: 0010:syscall_return_via_sysret+0x1a/0x87 [ 290.779811][ C1] Code: 1c 00 00 e8 50 3f 23 0a 84 c0 0f 84 58 15 00 00 66 90 b9 48 00 00 00 65 48 8b 15 e1 d3 4e 11 83 e2 fe 89 d0 48 c1 ea 20 0f 30 <41> 5f 41 5e 41 5d 41 5c 5d 5b 41 5b 41 5a 41 59 41 58 58 59 5a 5e [ 290.779826][ C1] RSP: 0018:ffffc900063f7f48 EFLAGS: 00000046 [ 290.779841][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000048 [ 290.779852][ C1] RDX: 0000000000000000 RSI: ffffffff8d5648b1 RDI: ffffffff8ba67680 [ 290.779865][ C1] RBP: 0000000000000000 R08: ffffffff8f6a6ab7 R09: 1ffffffff1ed4d56 [ 290.779877][ C1] R10: dffffc0000000000 R11: fffffbfff1ed4d57 R12: 0000000000000000 [ 290.779890][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 290.779900][ C1] FS: 00007f62e3ff66c0(0000) GS:ffff888126436000(0000) knlGS:0000000000000000 [ 290.779916][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.779928][ C1] CR2: 00007f2b035262fc CR3: 0000000051062000 CR4: 00000000003526f0 [ 290.779945][ C1] Call Trace: [ 290.779951][ C1] [ 290.779957][ C1] RIP: 0033:0x7f62e5d9c819 [ 290.779972][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.779987][ C1] RSP: 002b:00007f62e3ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 290.780003][ C1] RAX: ffffffffffffffda RBX: 00007f62e6015fa8 RCX: 00007f62e5d9c819 [ 290.780016][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f62e6015fa8 [ 290.780028][ C1] RBP: 00007f62e6015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 290.780039][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.780049][ C1] R13: 00007f62e6016038 R14: 00007fff2fd5a700 R15: 00007fff2fd5a7e8 [ 290.780072][ C1]