last executing test programs: 1m36.705123891s ago: executing program 2 (id=13): socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) 1m35.301466338s ago: executing program 2 (id=15): socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x60, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 1m34.067339883s ago: executing program 2 (id=18): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30}, 0x30) 1m33.687543708s ago: executing program 2 (id=20): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = getegid() fchown(0xffffffffffffffff, 0x0, r4) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) connect$inet6(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r7, 0x540a, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0) 1m24.713962385s ago: executing program 2 (id=37): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x10001, 0x12) 1m24.575116374s ago: executing program 2 (id=40): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = signalfd(r0, &(0x7f0000000000)={[0x5]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000380)={0x8, 0x8100003, 0x9, 0x7fffffff, 0x15, "8d593400"}) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)="020300ed0980fffb", 0x8) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x800, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) 1m8.858589447s ago: executing program 32 (id=40): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = signalfd(r0, &(0x7f0000000000)={[0x5]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000380)={0x8, 0x8100003, 0x9, 0x7fffffff, 0x15, "8d593400"}) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)="020300ed0980fffb", 0x8) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x800, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) 17.95753418s ago: executing program 4 (id=104): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x1, 0x0, 0xac1d}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) r2 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0xfffffffffffffffd]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa400080a) rmdir(&(0x7f0000000100)='./control\x00') read$FUSE(r5, &(0x7f0000004000)={0x2020}, 0x2020) 16.786961411s ago: executing program 4 (id=107): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000004c0)=""/139, &(0x7f0000000100)=0x8b) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='geneve1\x00', 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r6, 0x0, 0x5}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data}}}}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r7, &(0x7f0000006f80)={0x23, 0x0, 0x8}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4a, 0x0, &(0x7f0000001040)) accept4(r0, &(0x7f0000000080)=@ethernet={0x0, @remote}, 0x0, 0x800) 14.542368935s ago: executing program 3 (id=110): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 13.319971928s ago: executing program 1 (id=111): read$FUSE(0xffffffffffffffff, &(0x7f0000001900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) move_pages(r0, 0x7, &(0x7f0000000080)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000100)=[0x2], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001380)={0x0, 0x183, 0x0, 'queue1\x00', 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x9066, 0x2, 0x3, 0x17fffd}, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) 12.795885302s ago: executing program 4 (id=112): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x1c9243, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40682, 0x9c) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x200, @loopback, 0xffff}, 0x1c, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1e, 0x4, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 11.754694455s ago: executing program 1 (id=113): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) setresuid(0xee01, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f00000004c0)="ab", 0x1, 0xc0, 0x0, 0x0) 11.642778093s ago: executing program 4 (id=115): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d0000000080211000001080211000000505050505050d00003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 9.976453186s ago: executing program 0 (id=116): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r0, 0x0, 0x78) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 9.941742013s ago: executing program 3 (id=117): syz_clone(0x1898000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10, 0x4, 0x44, 0x0, 0x0, 0x8}, [@FRA_SRC={0x8, 0x2, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x400c0c4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) fremovexattr(r7, &(0x7f0000000000)=@known='user.incfs.size\x00') r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x111b090c, 0x40d}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 9.487437067s ago: executing program 1 (id=118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x80) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x39011, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) 7.142780783s ago: executing program 1 (id=119): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002cbd70000600000008000000"], 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) read$msr(r0, &(0x7f0000004300)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4048044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0), 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x200, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 6.995678438s ago: executing program 3 (id=120): socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x64, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 6.85147952s ago: executing program 4 (id=121): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000004c0)=""/139, &(0x7f0000000100)=0x8b) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='geneve1\x00', 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r6, 0x0, 0x5}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data}}}}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r7, &(0x7f0000006f80)={0x23, 0x0, 0x8}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4a, 0x0, &(0x7f0000001040)) accept4(r0, &(0x7f0000000080)=@ethernet={0x0, @remote}, 0x0, 0x800) 6.796371211s ago: executing program 0 (id=122): read$FUSE(0xffffffffffffffff, &(0x7f0000001900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) move_pages(r0, 0x7, &(0x7f0000000080)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000100)=[0x2], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001380)={0x0, 0x183, 0x0, 'queue1\x00', 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x9066, 0x2, 0x3, 0x17fffd}, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) 6.062108505s ago: executing program 3 (id=123): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe1e, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000080)={0x0, 0xffff, 0xe2}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) socket(0x2, 0x80805, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x40800400, 0x2b6a41) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefc9, 0x7f9, 0xb2, "20ab9809006ea4a7446c180000cd681ec267a0", 0x7, 0x200008}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) 4.739051582s ago: executing program 1 (id=124): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x1c9243, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40682, 0x9c) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x200, @loopback, 0xffff}, 0x1c, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1e, 0x4, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4.63540821s ago: executing program 0 (id=125): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="dcdd8d01617570de8694bfe5007541247d8c35e596efd8e614df25a4ebbf8b4f5dfe0bf3d20e52ca8245a1d9ce61ba91ad6749e8cafe3e7b1ca52bbfddd0dfbcbd165312e6457106b89ce3d4fcc463d7a00276cbf3c7deb0891b80ef48dc36ccce57bd5adc85f0c98b0533ef72ac7917e1382f9d0bb576c40ce833ca1382a8f7ca5455bcbe07108af59302bc41ad0b720eaedf5710868868f0aae15ff549ab4455036248ce1c087702eaa051e631d8a307b238bcf3ccb38c8c0bb5bd835fd7e66468dd77c84318faf0a71d9c68830bc41335a6e5520cc143c3146e4150aa37d5e4839390b27c645714d7d6fb1bd90671"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r3, 0x0, 0xb0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 4.617905837s ago: executing program 4 (id=126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 3.420170366s ago: executing program 0 (id=127): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) setresuid(0xee01, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f00000004c0)="ab", 0x1, 0xc0, 0x0, 0x0) 3.092140343s ago: executing program 3 (id=128): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d0000000080211000001080211000000505050505050d00003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.607412285s ago: executing program 1 (id=129): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000005c0)=""/97, 0x61}, {&(0x7f0000000640)=""/148, 0x94}, {&(0x7f0000000700)=""/246, 0xf6}, {&(0x7f00000001c0)=""/64, 0x40}, {&(0x7f0000000880)=""/242, 0xf2}, {&(0x7f0000000980)=""/84, 0x54}], 0x8, &(0x7f0000000d00)=[@rdma_args={0x48, 0x114, 0x1, {{0x2a, 0x3fffff}, {&(0x7f0000000a00)=""/197, 0xc5}, &(0x7f0000000440)=[{&(0x7f0000000b00)=""/224, 0xe0}, {&(0x7f0000000c00)=""/183, 0xb7}], 0x2, 0x44, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x400, 0x81}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0xc}, &(0x7f0000000800)=0x3, &(0x7f0000000cc0)=0x5, 0x7, 0x578d, 0x8, 0x5, 0x58, 0x8001}}], 0xb8, 0x40008080}, 0x20040080) 1.519663052s ago: executing program 3 (id=130): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000003c0)) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r1) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) preadv(r5, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$FUSE(r5, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xff08, 0x0) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="000000001000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 1.26063176s ago: executing program 0 (id=131): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r0, 0x0, 0x78) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 0s ago: executing program 0 (id=132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) socket(0x840000000002, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf9}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff4, 0x4}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. [ 81.937212][ T5826] cgroup: Unknown subsys name 'net' [ 82.232787][ T5826] cgroup: Unknown subsys name 'cpuset' [ 82.288294][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.086811][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.736080][ T991] cfg80211: failed to load regulatory.db [ 86.825879][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.838503][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.857882][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.861634][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.862522][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.878301][ T5157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.882400][ T5157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.883149][ T5157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.884373][ T5157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.885095][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.919462][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.928721][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.940272][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.942011][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.942877][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.021164][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.031155][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.040248][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.043286][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.045097][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.045953][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.071086][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.074583][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.095337][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.096156][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.007878][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 88.072246][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 88.184723][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 88.214622][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 88.520021][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 88.788553][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.789371][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.789894][ T5841] bridge_slave_0: entered allmulticast mode [ 88.791585][ T5841] bridge_slave_0: entered promiscuous mode [ 88.958700][ T59] Bluetooth: hci0: command tx timeout [ 88.958816][ T59] Bluetooth: hci2: command tx timeout [ 88.959033][ T5846] Bluetooth: hci1: command tx timeout [ 88.989553][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.989698][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.990135][ T5841] bridge_slave_1: entered allmulticast mode [ 88.992545][ T5841] bridge_slave_1: entered promiscuous mode [ 89.068948][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.069082][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.069300][ T5836] bridge_slave_0: entered allmulticast mode [ 89.072058][ T5836] bridge_slave_0: entered promiscuous mode [ 89.118457][ T5848] Bluetooth: hci4: command tx timeout [ 89.118689][ T5846] Bluetooth: hci3: command tx timeout [ 89.310132][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.310251][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.310456][ T5836] bridge_slave_1: entered allmulticast mode [ 89.312390][ T5836] bridge_slave_1: entered promiscuous mode [ 89.458557][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.458736][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.458891][ T5838] bridge_slave_0: entered allmulticast mode [ 89.460808][ T5838] bridge_slave_0: entered promiscuous mode [ 89.519745][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.519847][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.519973][ T5851] bridge_slave_0: entered allmulticast mode [ 89.522663][ T5851] bridge_slave_0: entered promiscuous mode [ 89.554861][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.556062][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.556181][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.556657][ T5838] bridge_slave_1: entered allmulticast mode [ 89.560396][ T5838] bridge_slave_1: entered promiscuous mode [ 89.621739][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.621841][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.622128][ T5851] bridge_slave_1: entered allmulticast mode [ 89.623788][ T5851] bridge_slave_1: entered promiscuous mode [ 89.722547][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.802517][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.101051][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.199746][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.199955][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.200116][ T5850] bridge_slave_0: entered allmulticast mode [ 90.202004][ T5850] bridge_slave_0: entered promiscuous mode [ 90.414101][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.526134][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.526353][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.526458][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.526588][ T5850] bridge_slave_1: entered allmulticast mode [ 90.542908][ T5850] bridge_slave_1: entered promiscuous mode [ 90.559314][ T5841] team0: Port device team_slave_0 added [ 90.564474][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.653615][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.738030][ T5841] team0: Port device team_slave_1 added [ 90.791184][ T5836] team0: Port device team_slave_0 added [ 91.038016][ T5848] Bluetooth: hci2: command tx timeout [ 91.038058][ T5848] Bluetooth: hci0: command tx timeout [ 91.038188][ T5846] Bluetooth: hci1: command tx timeout [ 91.133622][ T5836] team0: Port device team_slave_1 added [ 91.197860][ T59] Bluetooth: hci4: command tx timeout [ 91.197879][ T5846] Bluetooth: hci3: command tx timeout [ 91.264667][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.352126][ T5838] team0: Port device team_slave_0 added [ 91.432141][ T5851] team0: Port device team_slave_0 added [ 91.435458][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.730965][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.730982][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.731009][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.734388][ T5838] team0: Port device team_slave_1 added [ 91.850378][ T5851] team0: Port device team_slave_1 added [ 91.919849][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.919863][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.919888][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.029572][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.029586][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.029610][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.250690][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.250707][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.250734][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.352176][ T5850] team0: Port device team_slave_0 added [ 92.355744][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.355758][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.355775][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.369260][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.369273][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.369298][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.374036][ T5850] team0: Port device team_slave_1 added [ 92.375148][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.375160][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.375184][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.381780][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.381796][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.381825][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.879787][ T5841] hsr_slave_0: entered promiscuous mode [ 92.883469][ T5841] hsr_slave_1: entered promiscuous mode [ 92.886532][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.886541][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.886558][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.090136][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.090152][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.090177][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.100785][ T5836] hsr_slave_0: entered promiscuous mode [ 93.102576][ T5836] hsr_slave_1: entered promiscuous mode [ 93.103583][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 93.103691][ T5836] Cannot create hsr debugfs directory [ 93.125705][ T59] Bluetooth: hci1: command tx timeout [ 93.125735][ T59] Bluetooth: hci2: command tx timeout [ 93.125790][ T5846] Bluetooth: hci0: command tx timeout [ 93.278068][ T5846] Bluetooth: hci4: command tx timeout [ 93.278081][ T59] Bluetooth: hci3: command tx timeout [ 93.466045][ T5838] hsr_slave_0: entered promiscuous mode [ 93.467270][ T5838] hsr_slave_1: entered promiscuous mode [ 93.468437][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 93.468461][ T5838] Cannot create hsr debugfs directory [ 93.496613][ T5851] hsr_slave_0: entered promiscuous mode [ 93.497590][ T5851] hsr_slave_1: entered promiscuous mode [ 93.506741][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 93.506766][ T5851] Cannot create hsr debugfs directory [ 94.241561][ T5850] hsr_slave_0: entered promiscuous mode [ 94.243432][ T5850] hsr_slave_1: entered promiscuous mode [ 94.243966][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 94.243987][ T5850] Cannot create hsr debugfs directory [ 95.198048][ T5846] Bluetooth: hci0: command tx timeout [ 95.198069][ T59] Bluetooth: hci1: command tx timeout [ 95.198092][ T59] Bluetooth: hci2: command tx timeout [ 95.358285][ T5846] Bluetooth: hci4: command tx timeout [ 95.358828][ T5846] Bluetooth: hci3: command tx timeout [ 95.461875][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.507512][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.552575][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.578143][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.688907][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.725926][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.773208][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.822136][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.977620][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.034226][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.066540][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.130384][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.277475][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.305516][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.364829][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.417211][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.509862][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.566202][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.609701][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.635357][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.694174][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.765591][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.820562][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.821099][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.880827][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.883029][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.883216][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.994034][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.044167][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.065239][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.065364][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.117268][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.117666][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.182318][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.221143][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.250290][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.251340][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.299334][ T790] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.299469][ T790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.389949][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.432115][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.437422][ T790] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.437564][ T790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.513828][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.514017][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.619838][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.707542][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.707643][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.796210][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.796359][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.867533][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.054274][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.314351][ T5836] veth0_vlan: entered promiscuous mode [ 98.344035][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.424394][ T5836] veth1_vlan: entered promiscuous mode [ 98.583469][ T5838] veth0_vlan: entered promiscuous mode [ 98.615374][ T5836] veth0_macvtap: entered promiscuous mode [ 98.649610][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.655583][ T5838] veth1_vlan: entered promiscuous mode [ 98.685596][ T5836] veth1_macvtap: entered promiscuous mode [ 98.794966][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.846393][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.873247][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.921044][ T5838] veth0_macvtap: entered promiscuous mode [ 98.922402][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.932298][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.961714][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.987367][ T5838] veth1_macvtap: entered promiscuous mode [ 98.996007][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.997341][ T5841] veth0_vlan: entered promiscuous mode [ 99.000434][ T5851] veth0_vlan: entered promiscuous mode [ 99.146495][ T5841] veth1_vlan: entered promiscuous mode [ 99.160808][ T5851] veth1_vlan: entered promiscuous mode [ 99.233229][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.274425][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.352041][ T3617] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.357416][ T3617] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.371178][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.371203][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.402184][ T3617] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.423564][ T5850] veth0_vlan: entered promiscuous mode [ 99.423957][ T3617] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.580899][ T5841] veth0_macvtap: entered promiscuous mode [ 99.585667][ T5851] veth0_macvtap: entered promiscuous mode [ 99.604784][ T1444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.604802][ T1444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.614007][ T5850] veth1_vlan: entered promiscuous mode [ 99.693058][ T5851] veth1_macvtap: entered promiscuous mode [ 99.694988][ T5841] veth1_macvtap: entered promiscuous mode [ 99.822879][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.822897][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.849923][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.864325][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.926680][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.935613][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.015616][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.015637][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.028055][ T3561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.066204][ T5850] veth0_macvtap: entered promiscuous mode [ 100.074736][ T3561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.094002][ T3561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.118162][ T3561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.130083][ T3561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.130670][ T5850] veth1_macvtap: entered promiscuous mode [ 100.132880][ T3561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.163055][ T3561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.165879][ T3561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.248124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.253122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.253835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.782721][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.022808][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.141525][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.172154][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.205459][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.206390][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.206407][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.209528][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.523096][ T5969] random: crng reseeded on system resumption [ 101.715461][ T5969] Restarting kernel threads ... [ 101.729233][ T5969] Done restarting kernel threads. [ 102.372035][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.372056][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.548964][ T1409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.548982][ T1409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.627217][ T5977] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.684892][ T790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.684933][ T790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.987795][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.987818][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.417748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.477730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.507726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.597718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.699862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.699919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.757737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.315723][ T1386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.315744][ T1386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.358681][ T5994] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.518890][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 108.797361][ T6024] random: crng reseeded on system resumption [ 108.974278][ T6024] Restarting kernel threads ... [ 108.979162][ T6024] Done restarting kernel threads. [ 110.160376][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 111.052255][ T6023] bridge_slave_1: left allmulticast mode [ 111.052277][ T6023] bridge_slave_1: left promiscuous mode [ 111.052584][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.102237][ T6023] bridge_slave_0: left allmulticast mode [ 112.102259][ T6023] bridge_slave_0: left promiscuous mode [ 112.103614][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.778300][ T6053] IPVS: length: 139 != 8 [ 114.166700][ T6065] random: crng reseeded on system resumption [ 114.344909][ T6065] Restarting kernel threads ... [ 114.354847][ T6065] Done restarting kernel threads. [ 117.611907][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 117.929919][ T6087] random: crng reseeded on system resumption [ 117.944503][ T6087] Restarting kernel threads ... [ 117.945693][ T6087] Done restarting kernel threads. [ 118.982582][ T6090] syz.0.38 (6090) used greatest stack depth: 18968 bytes left [ 120.876230][ T6116] random: crng reseeded on system resumption [ 121.051893][ T6116] Restarting kernel threads ... [ 121.061861][ T6116] Done restarting kernel threads. [ 121.554544][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.648764][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.998176][ T6135] IPVS: length: 139 != 8 [ 131.429523][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 131.615614][ T6137] bridge_slave_1: left allmulticast mode [ 131.615638][ T6137] bridge_slave_1: left promiscuous mode [ 131.615827][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.438412][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 133.129226][ T6137] bridge_slave_0: left allmulticast mode [ 133.129248][ T6137] bridge_slave_0: left promiscuous mode [ 133.129423][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.562953][ T6156] random: crng reseeded on system resumption [ 133.573604][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 133.668590][ T6156] Restarting kernel threads ... [ 133.669827][ T6156] Done restarting kernel threads. [ 134.306028][ T6149] : entered promiscuous mode [ 134.848244][ T6164] random: crng reseeded on system resumption [ 135.393945][ T6164] Restarting kernel threads ... [ 135.395643][ T6164] Done restarting kernel threads. [ 136.908154][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'. [ 137.099347][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.105938][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.969426][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.974644][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.989944][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.022201][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.022855][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.242565][ T5848] Bluetooth: hci5: command tx timeout [ 142.317898][ T5848] Bluetooth: hci5: command tx timeout [ 144.397986][ T5848] Bluetooth: hci5: command tx timeout [ 144.892524][ T6184] IPVS: length: 139 != 8 [ 145.269531][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 146.440096][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 146.980469][ T5848] Bluetooth: hci5: command tx timeout [ 147.334913][ T6200] : entered promiscuous mode [ 148.038793][ T6212] random: crng reseeded on system resumption [ 148.204126][ T6212] Restarting kernel threads ... [ 148.213858][ T6212] Done restarting kernel threads. [ 149.409256][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 152.188423][ T6216] bridge_slave_1: left allmulticast mode [ 152.188453][ T6216] bridge_slave_1: left promiscuous mode [ 152.188762][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.301564][ T6216] bridge_slave_0: left allmulticast mode [ 152.301587][ T6216] bridge_slave_0: left promiscuous mode [ 152.301768][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.271789][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 160.279388][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 160.832113][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 161.943978][ T6245] IPVS: length: 139 != 8 [ 161.964840][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.997824][ T6243] openvswitch: : Dropping previously announced user features [ 162.368290][ T5930] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 162.718127][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 162.829852][ T6256] random: crng reseeded on system resumption [ 163.013395][ T6256] Restarting kernel threads ... [ 163.023473][ T6256] Done restarting kernel threads. [ 163.510855][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.510884][ T5930] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 163.510926][ T5930] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 163.510951][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.597184][ T5930] usb 4-1: config 0 descriptor?? [ 163.820009][ T6248] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 166.100787][ T6261] gretap1: entered promiscuous mode [ 166.297783][ T10] usb 4-1: USB disconnect, device number 2 [ 166.761197][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.407230][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 175.118562][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.316235][ T6296] random: crng reseeded on system resumption [ 176.497611][ T6296] Restarting kernel threads ... [ 176.507022][ T6296] Done restarting kernel threads. [ 178.137042][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 178.195173][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.554768][ T6310] IPVS: length: 139 != 8 [ 178.947789][ T6131] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 179.129023][ T6131] usb 2-1: Using ep0 maxpacket: 32 [ 179.132391][ T6131] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.132413][ T6131] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 179.132447][ T6131] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 179.132469][ T6131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.198597][ T6131] usb 2-1: config 0 descriptor?? [ 179.389723][ T6316] Zero length message leads to an empty skb [ 179.450808][ T6309] netlink: 'syz.1.94': attribute type 1 has an invalid length. [ 179.719537][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 179.770395][ T6321] gretap1: entered promiscuous mode [ 179.795349][ T10] usb 2-1: USB disconnect, device number 2 [ 180.068306][ T6172] chnl_net:caif_netlink_parms(): no params data found [ 180.640573][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 182.297197][ T6344] random: crng reseeded on system resumption [ 182.311433][ T6344] Restarting kernel threads ... [ 182.312586][ T6344] Done restarting kernel threads. [ 184.176769][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.274505][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.751321][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 185.623910][ T6370] IPVS: length: 139 != 8 [ 186.403032][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 186.950917][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.017103][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.138079][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.250563][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.510343][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.550653][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.576267][ T13] bond0 (unregistering): Released all slaves [ 188.210073][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 190.501960][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.502088][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.502304][ T6172] bridge_slave_0: entered allmulticast mode [ 190.568131][ T6172] bridge_slave_0: entered promiscuous mode [ 191.416367][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.434223][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.671206][ T6172] bridge_slave_1: entered allmulticast mode [ 191.673844][ T6172] bridge_slave_1: entered promiscuous mode [ 191.977441][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.557118][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.649058][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.256964][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 193.854320][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.877109][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.887849][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.784581][ T6432] IPVS: length: 139 != 8 [ 196.372003][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 197.024021][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.044296][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.045208][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.046218][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.047226][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.812930][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.965613][ T6455] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 198.642157][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.739906][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.864690][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.126029][ T5848] Bluetooth: hci4: command tx timeout [ 199.373415][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.373484][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.479982][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.517015][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 201.180199][ T6477] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.180223][ T6477] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 201.197832][ T5848] Bluetooth: hci4: command tx timeout [ 201.428022][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.747781][ T13] hsr_slave_0: left promiscuous mode [ 201.947681][ T13] hsr_slave_1: left promiscuous mode [ 201.986483][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.986542][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.109429][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.109457][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.207408][ T6477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.207432][ T6477] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 202.417462][ T13] veth1_macvtap: left promiscuous mode [ 202.417769][ T13] veth0_macvtap: left promiscuous mode [ 202.431479][ T13] veth1_vlan: left promiscuous mode [ 202.431696][ T13] veth0_vlan: left promiscuous mode [ 203.400390][ T6477] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.400413][ T6477] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 209.598315][ C1] ------------[ cut here ]------------ [ 209.598327][ C1] workqueue: cannot queue hci_conn_timeout on wq hci2 [ 209.598440][ C1] WARNING: CPU: 1 PID: 29 at kernel/workqueue.c:2256 __queue_work+0x2e5/0x1010 [ 209.598477][ C1] Modules linked in: [ 209.598518][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.598540][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.598555][ C1] RIP: 0010:__queue_work+0x2e5/0x1010 [ 209.598582][ C1] Code: 42 80 3c 28 00 74 08 48 89 ef e8 16 a7 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 e0 ed 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 2d 6d 34 00 eb 2e e8 26 6d 34 00 e9 [ 209.598598][ C1] RSP: 0018:ffffc90000a3f828 EFLAGS: 00010046 [ 209.598614][ C1] RAX: d6b93fa654830000 RBX: 0000000000000000 RCX: ffff88801c6b1dc0 [ 209.598628][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 209.598640][ C1] RBP: ffff888033d789e0 R08: 0000000000000000 R09: 0000000000000100 [ 209.598652][ C1] R10: dffffc0000000000 R11: ffffed1017124863 R12: dffffc0000000000 [ 209.598666][ C1] R13: dffffc0000000000 R14: ffff888036372168 R15: ffff88801c6b28cc [ 209.598681][ C1] FS: 0000000000000000(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 209.598696][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.598709][ C1] CR2: 000020000000a000 CR3: 00000000358c0000 CR4: 00000000003526f0 [ 209.598725][ C1] Call Trace: [ 209.598731][ C1] [ 209.598754][ C1] call_timer_fn+0x17b/0x5f0 [ 209.598783][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 209.598809][ C1] ? call_timer_fn+0xbe/0x5f0 [ 209.598833][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 209.598859][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 209.598876][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 209.598896][ C1] __run_timer_base+0x709/0x970 [ 209.598924][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 209.598955][ C1] run_timer_softirq+0xb7/0x180 [ 209.598972][ C1] handle_softirqs+0x22f/0x710 [ 209.598996][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 209.599021][ C1] run_ktimerd+0xcf/0x190 [ 209.599041][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 209.599058][ C1] ? schedule+0x91/0x360 [ 209.599083][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 209.599099][ C1] smpboot_thread_fn+0x53f/0xa60 [ 209.599116][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 209.599140][ C1] kthread+0x70e/0x8a0 [ 209.599162][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 209.599186][ C1] ? __pfx_kthread+0x10/0x10 [ 209.599211][ C1] ? __pfx_kthread+0x10/0x10 [ 209.599232][ C1] ret_from_fork+0x3f9/0x770 [ 209.599254][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 209.599276][ C1] ? __switch_to_asm+0x39/0x70 [ 209.599289][ C1] ? __switch_to_asm+0x33/0x70 [ 209.599301][ C1] ? __pfx_kthread+0x10/0x10 [ 209.599322][ C1] ret_from_fork_asm+0x1a/0x30 [ 209.599347][ C1] [ 209.599358][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 209.599367][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.599382][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.599390][ C1] Call Trace: [ 209.599395][ C1] [ 209.599400][ C1] dump_stack_lvl+0x99/0x250 [ 209.599421][ C1] ? __asan_memcpy+0x40/0x70 [ 209.599436][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.599456][ C1] ? __pfx__printk+0x10/0x10 [ 209.599481][ C1] vpanic+0x281/0x750 [ 209.599502][ C1] ? __pfx__printk+0x10/0x10 [ 209.599516][ C1] ? __pfx_vpanic+0x10/0x10 [ 209.599536][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 209.599564][ C1] panic+0xb9/0xc0 [ 209.599584][ C1] ? __pfx_panic+0x10/0x10 [ 209.599614][ C1] __warn+0x31b/0x4b0 [ 209.599634][ C1] ? __queue_work+0x2e5/0x1010 [ 209.599653][ C1] ? __queue_work+0x2e5/0x1010 [ 209.599671][ C1] report_bug+0x2be/0x4f0 [ 209.599690][ C1] ? __queue_work+0x2e5/0x1010 [ 209.599709][ C1] ? __queue_work+0x2e5/0x1010 [ 209.599726][ C1] ? __queue_work+0x2e7/0x1010 [ 209.599744][ C1] handle_bug+0x84/0x160 [ 209.599759][ C1] exc_invalid_op+0x1a/0x50 [ 209.599773][ C1] asm_exc_invalid_op+0x1a/0x20 [ 209.599786][ C1] RIP: 0010:__queue_work+0x2e5/0x1010 [ 209.599804][ C1] Code: 42 80 3c 28 00 74 08 48 89 ef e8 16 a7 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 e0 ed 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 2d 6d 34 00 eb 2e e8 26 6d 34 00 e9 [ 209.599815][ C1] RSP: 0018:ffffc90000a3f828 EFLAGS: 00010046 [ 209.599826][ C1] RAX: d6b93fa654830000 RBX: 0000000000000000 RCX: ffff88801c6b1dc0 [ 209.599836][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 209.599844][ C1] RBP: ffff888033d789e0 R08: 0000000000000000 R09: 0000000000000100 [ 209.599853][ C1] R10: dffffc0000000000 R11: ffffed1017124863 R12: dffffc0000000000 [ 209.599863][ C1] R13: dffffc0000000000 R14: ffff888036372168 R15: ffff88801c6b28cc [ 209.599886][ C1] ? __queue_work+0x2e4/0x1010 [ 209.599913][ C1] call_timer_fn+0x17b/0x5f0 [ 209.599931][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 209.599949][ C1] ? call_timer_fn+0xbe/0x5f0 [ 209.599967][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 209.599993][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 209.600009][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 209.600031][ C1] __run_timer_base+0x709/0x970 [ 209.600058][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 209.600086][ C1] run_timer_softirq+0xb7/0x180 [ 209.600103][ C1] handle_softirqs+0x22f/0x710 [ 209.600127][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 209.600152][ C1] run_ktimerd+0xcf/0x190 [ 209.600170][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 209.600201][ C1] ? schedule+0x91/0x360 [ 209.600225][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 209.600241][ C1] smpboot_thread_fn+0x53f/0xa60 [ 209.600260][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 209.600284][ C1] kthread+0x70e/0x8a0 [ 209.600307][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 209.600324][ C1] ? __pfx_kthread+0x10/0x10 [ 209.600349][ C1] ? __pfx_kthread+0x10/0x10 [ 209.600370][ C1] ret_from_fork+0x3f9/0x770 [ 209.600390][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 209.600413][ C1] ? __switch_to_asm+0x39/0x70 [ 209.600425][ C1] ? __switch_to_asm+0x33/0x70 [ 209.600437][ C1] ? __pfx_kthread+0x10/0x10 [ 209.600458][ C1] ret_from_fork_asm+0x1a/0x30 [ 209.600483][ C1] [ 209.600821][ C1] Kernel Offset: disabled