last executing test programs: 8.268692146s ago: executing program 2 (id=133): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x47}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)=""/4101, 0x1005}, {&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f0000001700)=""/242, 0xf2}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000001a00)=""/4095, 0xfff}, {&(0x7f0000000400)=""/181, 0xb5}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x8142, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r2, &(0x7f0000002d40)={0x2020}, 0x203e) r3 = syz_open_pts(r0, 0x900) r4 = dup3(r3, r0, 0x0) read(r4, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r4, &(0x7f0000001d40)=""/4095, 0xfff) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x1, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = syz_usb_connect$cdc_ncm(0x2, 0xaa, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0xff, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "c6b887"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x62c7d9b8, 0x5, 0x5, 0xa}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6fd, 0x0, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xb, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x40, 0xfff9}, @obex={0x5, 0x24, 0x15, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x1}, @dmm={0x7, 0x24, 0x14, 0xe21, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe8, 0x81, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x9, 0xee}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x58, 0x7, 0x62, 0x10, 0x10}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x0, 0x4, 0x1, 0x10}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100c}}, {0x96, &(0x7f0000000400)=@string={0x96, 0x3, "023c858187d0b18fb88772b00641430d17f1668a4f885f77f7bddd99e52f6aa83361abb07fa94386a913438cdb0c4deea612064dcbdcd5046f35c855fc2b85d895ea7c3033c7fc8142439d753bcd13c0194b4304154f95129287acfe79937c0864084bc4eb8df48eb5e741b271a99a7e6e9ddcf24562c03a60645c81fc3a288ca999b73b7a2e0dab2c9e26237e7fdb7fba0ad739"}}, {0xe7, &(0x7f00000004c0)=@string={0xe7, 0x3, "a4895d47081f020965c3f3b9f6a732aa9010b33dffe053f5ddecd41366479ae896718e8a94d0467246d7fcd75cda4a78359c53e888128268cd8ceb2bb8988c1622ee4c5ea6cef615f8bed686ff631317b4ca40c10f395357a3f8de08cb86704ac5fd33bb365bc4071d93d50cded3f103b4dbec23e40618f62b7df51110c2f1cbe403e97f00a472eaada1b7011d7d3b505642d1dc71696ab7353d52448d428a2efddcceb596bd450c29aa5b6b79479f61c9fc8641393441f401cc0d4fbcfa7f830f6034befa6c0c916e42957a072fc239e4b083da9eae65a04ff80d3274087346f4ecdbbd2e"}}, {0x85, &(0x7f00000005c0)=@string={0x85, 0x3, "dc261d1d297b0da39f164a04ab9dd3f6a89716757c4e3e859fd731108851c911ca5bb4f0bf677ed8d3359f99395d824c18a8b9abdb9e600898373afadc2f4586e3319d94be2ce08fae9996d96c59e49649ffcec7dcb38f1ff340247a1286419631be768e1e156e1cacd82181e980cfe58c706afb572a581aca436f85b6a410f7a42e2b"}}, {0xc2, &(0x7f0000000680)=@string={0xc2, 0x3, "b66c0bdf84fd19ad7a17dd4865e14b0d0d913f0c40d11c438ae0998280b3259055fcb86666be121c191778159f506f7e31ec15ec1d74e9940b2a26e3edd8d9a53e04862262681bfd794e63187869b96e215cc7d2bcbf3f4430874e951f6e8a370a81103aff3d7a2382d5cce50366a6baf7c14a680909579801faa98ddbb78f1d5a3778b7ca7c83308eb22af1faf32eeb426cf51275898432be73d8cbde71fd9182231513fe23486b1455cf700385d1fa0685d2ae321641c18a97dd94479f6a54"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_disconnect(r9) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7.528376518s ago: executing program 4 (id=137): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = io_uring_setup(0x37eb, &(0x7f0000000240)={0x0, 0xf489, 0x400, 0x80000000, 0x238, 0x0, r0}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_uring_setup(0x61c, &(0x7f0000000540)={0x0, 0x3ad4, 0x4000, 0x0, 0x2a5}) syz_usb_disconnect(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x6f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102020000082505a1a440000102030109025d00010106100d09040004020206010206240600004005240009000d240f0101000000030056000608241cff7f030300072414060007001224070807000300b59a0100000002000500090582020004010402090503020002060500"], &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xe0, 0x40, 0x89, 0x10, 0x1}, 0x23, &(0x7f0000000440)=ANY=[@ANYBLOB="050f230003141004433c81d57b1bb33003100b061002003406005756ab094f80864838239df89d66a3073eeccf8edb20af5c6b8ac9658bb732f7796b30271fbb180000000000000000"], 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x816}}, {0xd5, &(0x7f00000002c0)=@string={0xd5, 0x3, "69740a90c77f90cf1cb0c378606532ff79237510dd251452cb04fa4028e9ad46f9e9f6f3bb90b131d82d35d4375d457ebbd92c92caf906e3dbed3ceccbad0aa628de8b72a5eef0edbf8646034c87e843adbc201f267c17fdabc4e976949866d3eb2d78b2a18b9a1fda2f02c3fe39b6546f6459601c5574e0c3241882b6f61c6799654213b160e55406700740d1696ad2bbca70cc8f1047a04874d75c2370b18b0270056dfb364165b61216ceff3dcf20c3f4ae4b70ad5b73b8450a2b1cd63281a325c44c916a1ce628eebc5c7925674c78a7b5"}}, {0x1c, &(0x7f0000000140)=@string={0x1c, 0x3, "bad3a342c6dd1903b2788fedb3184ce684c03321422894e9db0d"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x458}}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.151658082s ago: executing program 1 (id=139): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000300)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}}, 0xc804) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000040)={0x40000000, 0x8, 0x2}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x8, 0x0, 0x0}}, 0x28) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) 5.687796232s ago: executing program 1 (id=144): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000071000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="100001800400048008000d0000000003"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES32=r4], 0x2c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0xfffffffffffffff9, 0xac}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) timer_settime(0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(0xffffffffffffffff, 0x2004, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r11}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x1, r11, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r10, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0xfffffffe, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r10, 0xc0106401, &(0x7f00000021c0)={0xf9, &(0x7f0000003700)=""/249}) 5.004376714s ago: executing program 2 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x500, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2, 0x4000000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 4.622858507s ago: executing program 2 (id=153): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x412700, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x3, 0x6e9, 0x8dc, 0x5, 0x8200, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x0, @value=r1, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x14880) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x17, {[@local=@item_012={0x2, 0x2, 0x3, "fb56"}, @local=@item_4={0x3, 0x2, 0x0, "733de3f5"}, @global=@item_4={0x3, 0x1, 0x2, "85a7ad62"}, @local=@item_4={0x3, 0x2, 0x3, "8a4b68ff"}, @local=@item_4={0x3, 0x2, 0xd, "b8d5e18d"}]}}, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)="075aaaef8472c3a9dbd1fc5f9eec4833565488a2ae56fb535dae8dfea61634298946615a6afa13d3f68208beb82b68b830d458789e4b0a1ce912f9125458e22eac0c6997da6a5aba363f091e63c7d2ee6b48da02dee34e4722c0a1fa70321fea618a977f70f26841b12260f9c0904388147a909b1710ae66ee6423b1f06223a411", &(0x7f0000000280)="a0fd17db248df16385c3e149f4f8a9f24fa7ab3b59eb33aad4647a1597c36b502c400dad406dc47b53ecb3982f2634c232a7826862b2e8a10936af2e811880c0dcc0d07810f3430074d92cbda9850ac483a72f1ecee837f5449bb7cdaaeee966fb0aaf79943a1e47aacde64244734adebf35", 0xffffffff, r2}, 0x38) 4.622178516s ago: executing program 3 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001"], 0x70}, 0x1, 0x300000000000000, 0x0, 0x800}, 0x40) 4.56066253s ago: executing program 1 (id=156): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x18001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)="4f3bfde51b257f403b6c6698", 0xc}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) modify_ldt$read(0x0, 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) 4.328246025s ago: executing program 3 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) recvfrom(r1, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fe4a5fca3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f000000bdc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)=""/66, 0x42}, {&(0x7f0000000100)=""/203, 0xcb}], 0x2, 0x0, 0x0, 0x10}, 0x4040000) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x335}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.289572072s ago: executing program 4 (id=159): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000340)={{{@in=@initdev, @in=@local}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r3], 0x4}}, 0x0) sendfile(r8, r7, 0x0, 0x100000002) r10 = fcntl$dupfd(r1, 0x0, r0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@delneigh={0x24, 0x1d, 0x1, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x6}, [@NDA_DST_IPV4={0x8, 0x1, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700880000000c00018008000140850101010c00028008"], 0x54}, 0x1, 0x0, 0x0, 0x100048d7}, 0x80) 3.996411639s ago: executing program 4 (id=161): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x7e, 0xab983) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe10859891d875397bab22d0000b420a9c81f40f45f819e01177d3d458dac00000000000000000000003b00", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000480)={r0, 0x1, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, "fee8a2ab0000000000e3ff7f2e00000000deff0000000000000000050000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x0, 0x5]}}) 3.875781466s ago: executing program 4 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 3.697922747s ago: executing program 1 (id=164): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x4081) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) dup3(r7, r3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x46e8}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$inet_sctp(0x2, 0x0, 0x84) faccessat2(r0, 0x0, 0x2, 0x1100) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ffffffdd40000000000000730a00fe000000007704000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12017c00022f8b881063071110e1a5010203010902340001fa02007f0904cb8002ff633d8009050204ff0304b10e080b25bbf1def7fa19090504030804010106080b50023a795d"], 0x0) 3.516323528s ago: executing program 4 (id=165): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000300)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}}, 0xc804) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x8, 0x0, 0x0}}, 0x28) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) 2.828539304s ago: executing program 0 (id=167): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="7b18000000000000180a02000000000000000000004000009500000000bb0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x51) 2.288726847s ago: executing program 0 (id=168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd5) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000001", @ANYRES16=r2, @ANYBLOB="000228bd7000fedbdf254c000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x44000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='workqueue_activate_work\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071107a00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x9, 0x20, 0x8f, 0xff, 0x0, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x4, 0x5}, 0xe) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000190001000100000000000a008020140000040005"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) recvfrom$rxrpc(r4, 0x0, 0x0, 0x80, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000380)=r6) 2.023798521s ago: executing program 0 (id=169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01010000000000000000010000040900010073797a30000000002c0000001b0a01080000000000000000010000000900030073797a32000000000900010073797a30"], 0xc4}}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000040), 0x5, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000140)={0x1, 0xfd, 0xfffffffffffffffd, 0x1, 0x1}) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000004c0)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x4049c04) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="a1cc2369aa318f9a84883c7639f5fae52992be701b991684b38d869e1b9404b5c105cef56a261a6115b81bfaf10edc76684134492f9c10a242e41e49026f7ef4", 0x40}, {&(0x7f0000000500)="c753a7c16ba130e615f2a03952992f5e8e5d56eaf772a1499d308433c058a8278c47b0e02857eb8dee87b49a3ee46645b7a5b74ea10810add9638aa744e751847abe794bf35e40f35d6ffea1e066f0731e3191967ae017939c6ddbb16ca75ea107ccaa464ebdc2d7244a0595ab8b786845d823de04467f6a494730cc748c6cd148c0f9a8b7774fc6f2526efe5639eac06ee523b48fb726e183d84773cff0a0df80bc55d304aaf3aa387158a15e38d7f6046bc2ca8dd16410418b4fb8429f1561315756121912e11f4a4af906f0640a81a86f27aa69426427e2053d0e97fe59dd8aead764c66126c9e02d", 0xea}], 0x2, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x30}, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x40002, 0x0) lseek(r3, 0xffffffffffffff89, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) 1.780464319s ago: executing program 0 (id=170): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="5aec06a18f97812fca42b11827e8d198b83d", 0x12}, {&(0x7f0000000080)="fb850ed3849d25f7226be26512e52ce2f93ee84adbf55c8f4d659d4807235e0c467d24c712652a97cd226fc97bea4618e712d633f2002a00be28501ab89a46f64e5ce0ba3fe6b00fa78c5ccbc23724225285dd9571e8bc936a126fdb42e34504144fc6305bdc7001a7f4fd862675dc52b9b1742ad36f974d7dd532a1d5a34c526146b5d2b95aaff6f2d9f208b4b4dff3c30e9be877e18fa78afe194163f34305fc888ebaf37006ba875abc1103969ee045351e14dba7c6a4b613f2711def", 0xbe}, {&(0x7f0000000140)="729d2e0ac6cc71e16fd462ab40ad3fc984cde369911a84b1f64fa230b054112aa67253dfa221cbb7512434d0b6f2f17d", 0x30}, {&(0x7f0000000180)="6b7d83d9ac9d2880fe58cc9f6665f7b5c06fe4cbd5cae5cd60291bf905f1ef247648c843e9542571109f73e3b2961b784b92feb5fdb9a49b946193f9011da9ff7474df195d348acc3c00dcb89e3a8e05dec6214577da5268f24539e139ee5b66a0f189fc1fcbd4c0556710c92bb1290997949aee66398f24354ef74d6d35e80a4be8b0cf1dd867840d4148aa242f6d4754c6d85b529b8147b4a544d5d1c27c2c74ec556b1e148ab037474762ec44b40d8b8439eb8233703e9e4c9f94bb0f4cb63fdaf42ba2d0", 0xc6}, {&(0x7f0000000340)="961e82929b807fa4464302de92bca6c9bae01b985ac7d0cea43d4fe448ac741c0af877ca6040d0a81573e7e1548678cb6b3a2a81fe0e36de51250fa7f0efe59c417a853db058256a93ca596fbc95d8e8caa603e66e05dded282e2a79a7610bdee5134fcddd8dbec1d43b5c8235ffd645c2090cf773fdbe6f7fb6c8a77d426dade976275a53601221874a1b0b6f8f76d2de8f733ace04d1b7f7ed0916109290964404346748c1df03c6e9ac680131e6a6", 0xb0}], 0x5, &(0x7f0000000400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}, 0x44000) creat(&(0x7f0000000480)='./file0\x00', 0x19) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000041c0)="76c7d63f", 0x4, 0x1) writev(r0, &(0x7f0000002e80)=[{&(0x7f0000001cc0)='S', 0x1}, {0x0, 0x1c}], 0x2) 1.685556988s ago: executing program 4 (id=171): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x4) cachestat(r3, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000340), 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r4 = getpid() ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x9, 0x0, [{0x956, 0x0, 0x2}, {0xbaa, 0x0, 0x62f2}, {0xb9a, 0x0, 0x401}, {0xb7a, 0x0, 0xa}, {0xbff, 0x0, 0x9}, {0xb91}, {0x9ae}, {0x2c9, 0x0, 0x8000000000000001}, {0x3ac, 0x0, 0xe210}]}) sched_setattr(r4, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, 0x0) gettid() openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000300)) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)}) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) 1.672405156s ago: executing program 3 (id=172): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001a00010000000000000000001c00140075aaac1a8f483442f24d85b3efa58e3281cdcef0"], 0x14}}, 0x0) 1.508047616s ago: executing program 0 (id=173): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x10, 0x6, 0xcc0, 0xb20, 0xd0, 0x980, 0x0, 0xd0, 0xbf0, 0xbf0, 0xbf0, 0xbf0, 0xbf0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [0x0, 0x0, 0xffffffff], 'pim6reg\x00', 'sit0\x00', {}, {0xff}, 0x29}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x0, 0x1}, {}, {0xfffffffc, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0xfffffffb, 0x3}, {0x3}, {0x2, 0x3}, {0x9, 0x1}, {0xfffffffa, 0x1}, {0x0, 0x3}], [{0x2, 0xb54a}, {0x4, 0x7a2}, {0xffffff2c, 0x2}, {0x81, 0x80000001}, {0x0, 0x4}, {0x400, 0x8}, {0x73, 0x7ff}, {0x10000}, {0x0, 0x10000}, {0x401, 0x1000}, {0x1, 0x4}], 0x5, 0xa}, {[{0x3, 0x1}, {0x8, 0x3}, {0x1d51, 0x3}, {0x8}, {0x9}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0x2}, {0x3, 0x2}, {0x1}, {0x4, 0x1}], [{0x2, 0x3}, {}, {0x6, 0x9}, {0x1, 0x3ff}, {0xe02f, 0xd8063f6}, {0x1, 0xdf0}, {0x6}, {0x8, 0xffffffc0}, {0x400, 0x4}, {0x8000, 0x29000000}, {0x8001, 0xfffffffd}], 0x6, 0x4}, {[{0x36, 0x3}, {0x26, 0x1}, {0x4, 0x1}, {0x400, 0x1}, {0x9}, {0x7, 0x3}, {0xd, 0x3}, {0xed72, 0x3}, {0x8001}, {0x8, 0x1}, {0x1, 0x1}], [{0x8001, 0x5}, {0xb, 0x81}, {0x40, 0x473a}, {0x80000000, 0x10}, {0xf2e, 0x1}, {0x7ac4, 0x7}, {0xfff, 0x8}, {0x81, 0x5}, {0x7, 0x9}, {0x2, 0x1}, {0x3, 0x5}], 0xb, 0xb}, {[{0x6}, {0x2, 0x2}, {0x1}, {0x9, 0x2}, {0x7fff, 0x2}, {0x2, 0x1}, {0x9, 0x3}, {0xc}, {0xb3, 0x1}, {0x7}, {0x2, 0x1}], [{0x81, 0x8}, {0xd, 0x7}, {0x8, 0xffff0000}, {0x4}, {0xa, 0xfffffffd}, {0xfff, 0xfffff001}, {0x8, 0x7}, {0x20, 0x4}, {0x8, 0xc}, {0x7, 0xfffffff8}, {0x3, 0xfd0d}], 0xb, 0x25}, {[{0x0, 0x3}, {0xb6}, {0x7}, {0x200, 0x2}, {0xff, 0x2}, {0x5, 0x1}, {0x7f, 0x2}, {0x9, 0x3}, {0xf}, {0xb95}, {0x8}], [{0x6, 0xff}, {0x6, 0x5f}, {0x80000000, 0x2311}, {0xfffffffb, 0xffffffff}, {0x6, 0xb221}, {0x400, 0x6}, {0x4, 0x7}, {0x200, 0xfffffffd}, {0x6, 0xb}, {0x200, 0x1a}, {0x6, 0x75}], 0x0, 0xa}, {[{0x9}, {0x9, 0x2}, {0xffff0001, 0x1}, {0xb}, {0x2, 0x1}, {0x10000, 0x3}, {0x3, 0x3}, {0x5, 0x3}, {0x6, 0x1}, {0x44, 0x2}, {0x9}], [{0x14000000, 0x218d50ea}, {0x1ff, 0x100}, {0x1000, 0x1}, {0xac, 0x3}, {0x5, 0x1d0}, {0x51, 0x1}, {0xfffffff7, 0x6}, {0x0, 0x4}, {0xfffff001, 0xfff}, {0x1, 0x4}, {0x2, 0xb}], 0x4, 0x2}, {[{0x4}, {0x2, 0x2}, {0x3da6, 0x3}, {0x8f1, 0x3}, {0x133e, 0x2}, {0x4, 0x1}, {}, {0x101, 0x1}, {}, {0x101}, {0x7ff, 0x1}], [{0x5, 0x92}, {0x3, 0x4}, {0x0, 0x7}, {0x10000, 0x1}, {0x7f, 0x3ff}, {0x5, 0x7}, {0x7, 0x7f}, {0x2, 0x9}, {0x80000000, 0xb0a}, {0x5f9, 0xfffffff7}, {0xa6, 0x5}], 0x0, 0x4}, {[{0x5, 0x2}, {0x6, 0x3}, {0x5}, {0x9}, {0x1, 0x2}, {0x3, 0x3}, {0x6}, {0x9}, {0x1}, {0x8, 0x3}, {0x0, 0x3}], [{0x3, 0x8}, {0x5, 0xef}, {0xfffffff9, 0xcf9}, {0x8, 0x4}, {0xfffffffe, 0x2}, {0x4, 0x3}, {0x0, 0x5}, {0x1, 0xef}, {0x7, 0xc7}, {0x8, 0x7}, {0xc2, 0x2}], 0x1, 0x4}, {[{0x4, 0x1}, {0x5, 0x2}, {0x5, 0x3}, {0x8, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x40, 0x2}, {0xffffffff, 0x1}, {0x1, 0x1}, {0x6, 0x2}, {0x80000000}], [{0x8, 0x5}, {0x5}, {0x10001, 0x8}, {0x5, 0x10}, {0x5, 0x80}, {0x12}, {0x7, 0x9}, {0x1, 0x3}, {0x3}, {0x7, 0x80000001}, {0x10, 0x6}], 0x7, 0x3}, {[{0xb, 0x3}, {0x8, 0x2}, {0x401, 0x1}, {0x8, 0x3}, {0xc40, 0x3}, {0xfffffffa, 0x3}, {0x2}, {0x7, 0x2}, {0x9, 0x3}, {0xa, 0x1}, {0x3, 0x1}], [{0x7, 0x1}, {0x2}, {0x7, 0x3}, {0x7ff, 0x4}, {0x0, 0x72}, {0x9, 0xe3}, {0x0, 0x6}, {0xabc, 0x80000000}, {0x8, 0x2}, {0x6, 0xfffffff7}, {0xcbb, 0x6}], 0x2, 0x4}, {[{0x0, 0x2}, {0x4}, {0x3, 0x2}, {0x9, 0x2}, {0x9, 0x2}, {0xf2, 0x3}, {0xb583, 0x1}, {0x1, 0x2}, {0x4}, {0x9ab5, 0x2}, {0x2ad}], [{0xe1b0, 0x35e}, {0x7, 0x9}, {0xfffffff3, 0xdce0}, {0x2, 0x8}, {0x5, 0x46a}, {0x8, 0x8}, {0x608, 0x2}, {0x8, 0x3}, {0x73e0, 0x7}, {0x7, 0x3dda}, {0xa93b, 0xca1}], 0x7, 0x3}], 0xb, 0x1}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'wlan1\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff000000, 0xffffff00], 'veth1_to_batadv\x00', 'geneve0\x00', {}, {}, 0x21, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xd20) 1.507827936s ago: executing program 3 (id=174): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x18001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)="4f3bfde51b257f403b6c66989dae0846e3dc", 0x12}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) modify_ldt$read(0x0, 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) 1.477798715s ago: executing program 2 (id=175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.260865075s ago: executing program 0 (id=176): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x4) cachestat(r3, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000340), 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r4 = getpid() ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x9, 0x0, [{0x956, 0x0, 0x2}, {0xbaa, 0x0, 0x62f2}, {0xb9a, 0x0, 0x401}, {0xb7a, 0x0, 0xa}, {0xbff, 0x0, 0x9}, {0xb91}, {0x9ae}, {0x2c9, 0x0, 0x8000000000000001}, {0x3ac, 0x0, 0xe210}]}) sched_setattr(r4, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, 0x0) gettid() openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000300)) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)}) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) 1.127657598s ago: executing program 2 (id=177): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f000000bdc0)={'wlan1\x00', 0x0}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000080)={0x0, 0x3b, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2, @ANYBLOB="01002dbd700000000064bc330e9e02b3808397000c0000b2109d1894630665f5aa7344e0a0ec0008000300", @ANYRES32=r1, @ANYBLOB="10005080050002000500000004000600"], 0x2c}, 0x1, 0x0, 0x0, 0x400c085}, 0x2000c994) 808.311536ms ago: executing program 2 (id=178): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x39, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x804, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xa, 0xffe0}, {0xc, 0xe}, {0xed8a468028310887, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r2 = syz_usb_connect(0x5, 0x3d7, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0xe, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0}) 634.19114ms ago: executing program 1 (id=179): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) epoll_create(0xf253e97) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000000000000000000007ef", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 308.250325ms ago: executing program 3 (id=180): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x368, 0x25, 0x148, 0x0, 0x60, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x1000000, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0x0, 0x0, 0x40000000, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) 256.185µs ago: executing program 1 (id=181): r0 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync(r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)={0x24, r1, 0x5707b563827c8365, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x6a}, @val={0x8, 0x12a}, @void}}}, 0x24}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r3, 0xfffffffffffffff5, 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000021c0), r0) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000002280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) write$6lowpan_control(r3, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x0, 0x2, 0x9, 0xff, 0x0, 0x8001}}}, 0x0) 0s ago: executing program 3 (id=182): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x840000000002, 0x3, 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000100003040161000000000000000a0000", @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x44}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. [ 84.118154][ T5826] cgroup: Unknown subsys name 'net' [ 84.289412][ T5826] cgroup: Unknown subsys name 'cpuset' [ 84.298509][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.872626][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.011850][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.022979][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.049269][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.057589][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.060477][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.071827][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.079560][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.080578][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.094063][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.102680][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.110961][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.118184][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.118860][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.133022][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.134549][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.149064][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.150325][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.157840][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.164924][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.178690][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.186529][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.195022][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.195102][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.212251][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.220236][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.773031][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 90.996607][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 91.028326][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 91.147779][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.155973][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.163338][ T5852] bridge_slave_0: entered allmulticast mode [ 91.171562][ T5852] bridge_slave_0: entered promiscuous mode [ 91.179572][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 91.198740][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 91.221125][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.228789][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.236041][ T5852] bridge_slave_1: entered allmulticast mode [ 91.243213][ T5852] bridge_slave_1: entered promiscuous mode [ 91.415979][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.440408][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.448022][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.458302][ T5850] bridge_slave_0: entered allmulticast mode [ 91.465866][ T5850] bridge_slave_0: entered promiscuous mode [ 91.473272][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.480828][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.488096][ T5855] bridge_slave_0: entered allmulticast mode [ 91.495774][ T5855] bridge_slave_0: entered promiscuous mode [ 91.505315][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.538823][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.548771][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.556033][ T5850] bridge_slave_1: entered allmulticast mode [ 91.563121][ T5850] bridge_slave_1: entered promiscuous mode [ 91.585712][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.592828][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.600072][ T5855] bridge_slave_1: entered allmulticast mode [ 91.608115][ T5855] bridge_slave_1: entered promiscuous mode [ 91.727691][ T5852] team0: Port device team_slave_0 added [ 91.733852][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.741514][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.749207][ T5856] bridge_slave_0: entered allmulticast mode [ 91.758541][ T5856] bridge_slave_0: entered promiscuous mode [ 91.766114][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.773241][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.781235][ T5853] bridge_slave_0: entered allmulticast mode [ 91.788546][ T5853] bridge_slave_0: entered promiscuous mode [ 91.797511][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.804668][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.811933][ T5853] bridge_slave_1: entered allmulticast mode [ 91.819497][ T5853] bridge_slave_1: entered promiscuous mode [ 91.830568][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.845972][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.857753][ T47] cfg80211: failed to load regulatory.db [ 91.863549][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.877834][ T5852] team0: Port device team_slave_1 added [ 91.895731][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.902864][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.910697][ T5856] bridge_slave_1: entered allmulticast mode [ 91.918197][ T5856] bridge_slave_1: entered promiscuous mode [ 91.944139][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.043435][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.051428][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.077729][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.105010][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.117245][ T5850] team0: Port device team_slave_0 added [ 92.126950][ T5855] team0: Port device team_slave_0 added [ 92.133661][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.141177][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.168761][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.180149][ T5151] Bluetooth: hci2: command tx timeout [ 92.185613][ T5840] Bluetooth: hci0: command tx timeout [ 92.189503][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.204281][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.216118][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.240816][ T5850] team0: Port device team_slave_1 added [ 92.249086][ T5855] team0: Port device team_slave_1 added [ 92.255334][ T5151] Bluetooth: hci3: command tx timeout [ 92.255431][ T5840] Bluetooth: hci1: command tx timeout [ 92.260969][ T5151] Bluetooth: hci4: command tx timeout [ 92.363602][ T5856] team0: Port device team_slave_0 added [ 92.372846][ T5853] team0: Port device team_slave_0 added [ 92.393923][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.401188][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.428374][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.453304][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.460512][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.486657][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.499953][ T5856] team0: Port device team_slave_1 added [ 92.510508][ T5853] team0: Port device team_slave_1 added [ 92.517098][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.524060][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.553168][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.578436][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.585619][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.611652][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.677042][ T5852] hsr_slave_0: entered promiscuous mode [ 92.683629][ T5852] hsr_slave_1: entered promiscuous mode [ 92.713841][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.720910][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.747431][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.761579][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.768879][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.795581][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.827321][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.834297][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.860836][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.880840][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.888497][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.914965][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.042132][ T5850] hsr_slave_0: entered promiscuous mode [ 93.048695][ T5850] hsr_slave_1: entered promiscuous mode [ 93.055160][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.062932][ T5850] Cannot create hsr debugfs directory [ 93.088144][ T5855] hsr_slave_0: entered promiscuous mode [ 93.094490][ T5855] hsr_slave_1: entered promiscuous mode [ 93.101607][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.109243][ T5855] Cannot create hsr debugfs directory [ 93.158380][ T5856] hsr_slave_0: entered promiscuous mode [ 93.166017][ T5856] hsr_slave_1: entered promiscuous mode [ 93.172100][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.180465][ T5856] Cannot create hsr debugfs directory [ 93.246795][ T5853] hsr_slave_0: entered promiscuous mode [ 93.253018][ T5853] hsr_slave_1: entered promiscuous mode [ 93.259743][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.267378][ T5853] Cannot create hsr debugfs directory [ 93.741412][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.772493][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.797209][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.818098][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.878859][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.896767][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.921743][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.945952][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.000953][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.011999][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.038929][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.067762][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.186930][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.203244][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.232849][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.243267][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.255032][ T5151] Bluetooth: hci2: command tx timeout [ 94.255938][ T5840] Bluetooth: hci0: command tx timeout [ 94.263156][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.335028][ T5840] Bluetooth: hci1: command tx timeout [ 94.335441][ T5151] Bluetooth: hci4: command tx timeout [ 94.340450][ T55] Bluetooth: hci3: command tx timeout [ 94.354663][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.367415][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.411805][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.419105][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.461104][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.474652][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.496622][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.503885][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.528535][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.540030][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.552700][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.559872][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.572828][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.580052][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.601123][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.694561][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.818129][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.852500][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.868220][ T4769] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.875471][ T4769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.886615][ T4769] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.893793][ T4769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.923450][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.022620][ T5852] veth0_vlan: entered promiscuous mode [ 95.041559][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.068365][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.112841][ T5852] veth1_vlan: entered promiscuous mode [ 95.122984][ T4769] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.130171][ T4769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.151618][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.158798][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.171166][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.238824][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.263102][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.290124][ T5852] veth0_macvtap: entered promiscuous mode [ 95.308820][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.316190][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.347964][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.355157][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.372580][ T5852] veth1_macvtap: entered promiscuous mode [ 95.408530][ T5850] veth0_vlan: entered promiscuous mode [ 95.433019][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.474439][ T5850] veth1_vlan: entered promiscuous mode [ 95.484086][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.522394][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.532877][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.542155][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.552162][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.571053][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.608320][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.623064][ T5855] veth0_vlan: entered promiscuous mode [ 95.654253][ T5855] veth1_vlan: entered promiscuous mode [ 95.688616][ T5850] veth0_macvtap: entered promiscuous mode [ 95.719046][ T5850] veth1_macvtap: entered promiscuous mode [ 95.793559][ T5855] veth0_macvtap: entered promiscuous mode [ 95.823612][ T5855] veth1_macvtap: entered promiscuous mode [ 95.842369][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.859901][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.870901][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.879899][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.885893][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.893034][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.908104][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.918898][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.930116][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.949423][ T5853] veth0_vlan: entered promiscuous mode [ 95.968770][ T5850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.978647][ T5850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.988504][ T5850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.997477][ T5850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.039221][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.050225][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.060826][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.072005][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.083489][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.113991][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.117066][ T5853] veth1_vlan: entered promiscuous mode [ 96.124195][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.130720][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.147616][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.157530][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.168892][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.181775][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.210646][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.219569][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.229631][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.238487][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.335212][ T5840] Bluetooth: hci0: command tx timeout [ 96.340687][ T5840] Bluetooth: hci2: command tx timeout [ 96.382090][ T5856] veth0_vlan: entered promiscuous mode [ 96.410353][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.430183][ T5840] Bluetooth: hci1: command tx timeout [ 96.433688][ T5853] veth0_macvtap: entered promiscuous mode [ 96.435675][ T55] Bluetooth: hci3: command tx timeout [ 96.444439][ T5840] Bluetooth: hci4: command tx timeout [ 96.490596][ T5853] veth1_macvtap: entered promiscuous mode [ 96.502014][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.521342][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.532273][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.536764][ T5856] veth1_vlan: entered promiscuous mode [ 96.544939][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.639754][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.657147][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.667458][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.677987][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.688945][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.699422][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.711433][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.737902][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.750402][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.807296][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.819225][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.824303][ T5898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'. [ 96.830150][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.849146][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.862811][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.874873][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.890248][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.934133][ T5853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.950254][ T5853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.961041][ T5853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.970214][ T5853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.008032][ T5900] vlan2: entered allmulticast mode [ 97.043198][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.048026][ T5856] veth0_macvtap: entered promiscuous mode [ 97.060773][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.152787][ T5856] veth1_macvtap: entered promiscuous mode [ 97.214061][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.228652][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 97.233108][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.256741][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.258196][ T5906] Invalid logical block size (1) [ 97.267817][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.282935][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.293972][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.309407][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.320319][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.356074][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.418455][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.433533][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.473419][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.501539][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.516452][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.516625][ T5911] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.528235][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.550431][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.561571][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.572789][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.583975][ T5911] xt_hashlimit: size too large, truncated to 1048576 [ 97.626362][ T5856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.643164][ T5856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.653638][ T5911] xt_hashlimit: overflow, try lower: 0/0 [ 97.659508][ T5856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.669280][ T5856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.806024][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.845660][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.973202][ T5926] pimreg: entered allmulticast mode [ 98.003112][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.030974][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.110968][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.138876][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.146700][ T5831] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.221849][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.253130][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.295745][ T5887] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.325075][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 98.351989][ T5831] usb 3-1: config 2 has an invalid interface number: 169 but max is 1 [ 98.387414][ T5831] usb 3-1: config 2 has an invalid interface number: 163 but max is 1 [ 98.399323][ T5831] usb 3-1: config 2 has an invalid interface number: 125 but max is 1 [ 98.423616][ T5151] Bluetooth: hci2: command tx timeout [ 98.425091][ T5840] Bluetooth: hci0: command tx timeout [ 98.430082][ T5831] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 98.451935][ T5831] usb 3-1: config 2 has 3 interfaces, different from the descriptor's value: 2 [ 98.468113][ T5831] usb 3-1: config 2 has no interface number 0 [ 98.474227][ T5831] usb 3-1: config 2 has no interface number 1 [ 98.486782][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 98.497877][ T5840] Bluetooth: hci4: command tx timeout [ 98.498382][ T5151] Bluetooth: hci3: command tx timeout [ 98.503281][ T55] Bluetooth: hci1: command tx timeout [ 98.525520][ T5831] usb 3-1: config 2 has no interface number 2 [ 98.535807][ T5887] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 98.544536][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.558630][ T5831] usb 3-1: config 2 interface 169 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 98.576779][ T5887] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.586084][ T5831] usb 3-1: config 2 interface 169 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 98.615448][ T5831] usb 3-1: config 2 interface 169 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 98.647356][ T5887] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.657880][ T5831] usb 3-1: config 2 interface 169 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 98.699863][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.715401][ T5831] usb 3-1: config 2 interface 169 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 98.738399][ T5887] usb 5-1: Product: syz [ 98.752716][ T5887] usb 5-1: Manufacturer: syz [ 98.780626][ T5887] usb 5-1: SerialNumber: syz [ 98.786812][ T5831] usb 3-1: config 2 interface 169 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 98.820164][ T5831] usb 3-1: config 2 interface 169 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 98.877028][ T5831] usb 3-1: config 2 interface 169 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 98.928489][ T5831] usb 3-1: config 2 interface 169 altsetting 6 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 98.980357][ T5831] usb 3-1: too many endpoints for config 2 interface 163 altsetting 129: 255, using maximum allowed: 30 [ 99.012459][ T5831] usb 3-1: config 2 interface 163 altsetting 129 has a duplicate endpoint with address 0x6, skipping [ 99.044905][ T5831] usb 3-1: config 2 interface 163 altsetting 129 endpoint 0xE has an invalid bInterval 129, changing to 11 [ 99.064179][ T5831] usb 3-1: config 2 interface 163 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 99.085633][ T5831] usb 3-1: config 2 interface 125 altsetting 60 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 99.095825][ T5948] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.099935][ T5831] usb 3-1: config 2 interface 169 has no altsetting 0 [ 99.129831][ T5831] usb 3-1: config 2 interface 163 has no altsetting 0 [ 99.148670][ T5831] usb 3-1: config 2 interface 125 has no altsetting 0 [ 99.165563][ T5831] usb 3-1: New USB device found, idVendor=0769, idProduct=11f2, bcdDevice=97.99 [ 99.178975][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.189520][ T5831] usb 3-1: Product: syz [ 99.193756][ T5831] usb 3-1: Manufacturer: syz [ 99.203244][ T5831] usb 3-1: SerialNumber: syz [ 99.209206][ T47] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.233937][ T5923] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 99.242587][ T5887] usb 5-1: 0:2 : does not exist [ 99.359555][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21'. [ 99.371881][ T5954] netlink: 'syz.3.21': attribute type 10 has an invalid length. [ 99.394664][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.396332][ T5954] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21'. [ 99.406307][ T47] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 99.433002][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.454296][ T5923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.466587][ T5923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.507591][ T5954] team0: Port device geneve0 added [ 99.513514][ T47] usb 1-1: config 0 descriptor?? [ 99.544431][ T47] pwc: Askey VC010 type 2 USB webcam detected. [ 99.604303][ T5831] usb 3-1: USB disconnect, device number 2 [ 99.635392][ T5888] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.809198][ T5888] usb 2-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.60 [ 99.820348][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.831803][ T5888] usb 2-1: config 0 descriptor?? [ 99.841593][ T5888] ums-cypress 2-1:0.0: USB Mass Storage device detected [ 99.960012][ T47] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.972485][ T47] pwc: recv_control_msg error -32 req 02 val 2700 [ 99.980021][ T47] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.987963][ T47] pwc: recv_control_msg error -32 req 04 val 1000 [ 100.004601][ T47] pwc: recv_control_msg error -32 req 04 val 1300 [ 100.012360][ T47] pwc: recv_control_msg error -32 req 04 val 1400 [ 100.022339][ T47] pwc: recv_control_msg error -32 req 02 val 2000 [ 100.030144][ T47] pwc: recv_control_msg error -32 req 02 val 2100 [ 100.038207][ T47] pwc: recv_control_msg error -32 req 04 val 1500 [ 100.065402][ T47] pwc: recv_control_msg error -32 req 02 val 2500 [ 100.102414][ T47] pwc: recv_control_msg error -32 req 02 val 2400 [ 100.129244][ T47] pwc: recv_control_msg error -32 req 02 val 2600 [ 100.506662][ T5887] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 100.624091][ T5887] usb 5-1: USB disconnect, device number 2 [ 100.886049][ T47] pwc: recv_control_msg error -71 req 04 val 1200 [ 100.903872][ T47] pwc: Registered as video103. [ 100.910093][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.948228][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 100.957723][ T47] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 101.021961][ T47] usb 1-1: USB disconnect, device number 2 [ 101.576501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.585227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.725509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.755316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.185933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.416648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.610877][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.40'. [ 102.630755][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.40'. [ 102.725459][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 102.758206][ T6006] bond1 (unregistering): Released all slaves [ 102.959617][ T6024] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 102.975809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.984715][ T47] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 103.027373][ T6024] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 103.167047][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.263937][ T47] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 103.284914][ T47] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 103.303981][ T47] usb 3-1: Manufacturer: syz [ 103.310020][ T6037] [U]  [ 103.312933][ T6037] [U] K{ [ 103.327112][ T6037] [U] t 1ŠFfˊ`GJgo/mC [ 103.346013][ T47] usb 3-1: config 0 descriptor?? [ 103.379600][ T47] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 103.395004][ T6037] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 103.458164][ T6038] syzkaller1: entered promiscuous mode [ 103.458173][ T6037] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 103.458251][ T6037] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 103.494208][ T6038] syzkaller1: entered allmulticast mode [ 103.614570][ T6037] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 103.704443][ T6037] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 103.742392][ T6046] FAULT_INJECTION: forcing a failure. [ 103.742392][ T6046] name failslab, interval 1, probability 0, space 0, times 1 [ 103.758586][ T6037] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 103.793523][ T6046] CPU: 0 UID: 0 PID: 6046 Comm: syz.0.46 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 103.793553][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.793570][ T6046] Call Trace: [ 103.793579][ T6046] [ 103.793588][ T6046] dump_stack_lvl+0x241/0x360 [ 103.793638][ T6046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.793670][ T6046] ? __pfx__printk+0x10/0x10 [ 103.793705][ T6046] ? ref_tracker_alloc+0x316/0x4c0 [ 103.793732][ T6046] should_fail_ex+0x424/0x570 [ 103.793760][ T6046] should_failslab+0xac/0x100 [ 103.793792][ T6046] kmem_cache_alloc_noprof+0x78/0x390 [ 103.793821][ T6046] ? skb_clone+0x20c/0x390 [ 103.793851][ T6046] skb_clone+0x20c/0x390 [ 103.793879][ T6046] __netlink_deliver_tap+0x3c4/0x7f0 [ 103.793921][ T6046] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.793950][ T6046] netlink_deliver_tap+0x19d/0x1b0 [ 103.793982][ T6046] netlink_sendskb+0x68/0x140 [ 103.794011][ T6046] netlink_unicast+0x39f/0x9a0 [ 103.794036][ T6046] ? __asan_memcpy+0x40/0x70 [ 103.794067][ T6046] ? __pfx_netlink_unicast+0x10/0x10 [ 103.794105][ T6046] netlink_rcv_skb+0x296/0x480 [ 103.794136][ T6046] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 103.794162][ T6046] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.794208][ T6046] ? apparmor_capable+0x13b/0x1b0 [ 103.794233][ T6046] ? bpf_lsm_capable+0x9/0x10 [ 103.794258][ T6046] ? security_capable+0x7e/0x2d0 [ 103.794294][ T6046] nfnetlink_rcv+0x296/0x28f0 [ 103.794326][ T6046] ? __dev_queue_xmit+0x2f9/0x3f60 [ 103.794350][ T6046] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 103.794377][ T6046] ? __dev_queue_xmit+0x2f9/0x3f60 [ 103.794401][ T6046] ? __dev_queue_xmit+0x2f9/0x3f60 [ 103.794427][ T6046] ? __dev_queue_xmit+0x1780/0x3f60 [ 103.794449][ T6046] ? kasan_save_track+0x3f/0x80 [ 103.794471][ T6046] ? __kasan_slab_alloc+0x66/0x80 [ 103.794503][ T6046] ? do_syscall_64+0xf3/0x230 [ 103.794534][ T6046] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 103.794555][ T6046] ? __dev_queue_xmit+0x2f9/0x3f60 [ 103.794584][ T6046] ? __pfx___dev_queue_xmit+0x10/0x10 [ 103.794627][ T6046] ? ref_tracker_free+0x63e/0x7e0 [ 103.794651][ T6046] ? __asan_memcpy+0x40/0x70 [ 103.794672][ T6046] ? __pfx_ref_tracker_free+0x10/0x10 [ 103.794693][ T6046] ? __skb_clone+0x5c/0x6d0 [ 103.794733][ T6046] ? skb_clone+0x240/0x390 [ 103.794770][ T6046] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.794807][ T6046] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.794839][ T6046] netlink_unicast+0x7f8/0x9a0 [ 103.794873][ T6046] ? __pfx_netlink_unicast+0x10/0x10 [ 103.794903][ T6046] ? skb_put+0x114/0x1f0 [ 103.794929][ T6046] netlink_sendmsg+0x8c3/0xcd0 [ 103.794983][ T6046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.795019][ T6046] ? aa_sock_msg_perm+0x91/0x160 [ 103.795054][ T6046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.795083][ T6046] __sock_sendmsg+0x221/0x270 [ 103.795121][ T6046] ____sys_sendmsg+0x523/0x860 [ 103.795153][ T6046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.795174][ T6046] ? __fget_files+0x2a/0x420 [ 103.795197][ T6046] ? __fget_files+0x2a/0x420 [ 103.795226][ T6046] __sys_sendmsg+0x271/0x360 [ 103.795255][ T6046] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.795343][ T6046] ? do_syscall_64+0xb6/0x230 [ 103.795373][ T6046] do_syscall_64+0xf3/0x230 [ 103.795399][ T6046] ? clear_bhb_loop+0x45/0xa0 [ 103.795425][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.795451][ T6046] RIP: 0033:0x7f0eddf8d169 [ 103.795473][ T6046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.795490][ T6046] RSP: 002b:00007f0edee93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.795513][ T6046] RAX: ffffffffffffffda RBX: 00007f0ede1a5fa0 RCX: 00007f0eddf8d169 [ 103.795528][ T6046] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 103.795541][ T6046] RBP: 00007f0edee93090 R08: 0000000000000000 R09: 0000000000000000 [ 103.795554][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.795566][ T6046] R13: 0000000000000000 R14: 00007f0ede1a5fa0 R15: 00007f0ede2cfa28 [ 103.795598][ T6046] [ 103.856124][ T6037] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<, priority 10 [ 122.028028][ T6350] netlink: 52 bytes leftover after parsing attributes in process `syz.3.154'. [ 122.059847][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.068393][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.275568][ T5934] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.510221][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 122.549269][ T5934] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 122.579425][ T5934] usb 3-1: can't read configurations, error -61 [ 122.590210][ T6367] Invalid logical block size (1) [ 122.758975][ T5934] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 122.895803][ T47] tipc: Node number set to 1 [ 122.955068][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 122.964724][ T5934] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 122.973542][ T5934] usb 3-1: can't read configurations, error -61 [ 122.983019][ T5934] usb usb3-port1: attempt power cycle [ 123.058051][ T6374] bridge0: port 3(hsr0) entered blocking state [ 123.064766][ T6374] bridge0: port 3(hsr0) entered disabled state [ 123.079904][ T6374] hsr0: entered allmulticast mode [ 123.085160][ T6374] hsr_slave_0: entered allmulticast mode [ 123.090894][ T6374] hsr_slave_1: entered allmulticast mode [ 123.132712][ T6374] hsr0: entered promiscuous mode [ 123.147561][ T6374] bridge0: port 3(hsr0) entered blocking state [ 123.154042][ T6374] bridge0: port 3(hsr0) entered forwarding state [ 123.331257][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 123.416930][ T5934] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 123.481590][ T47] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.516569][ T6390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.166'. [ 123.568408][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 123.582027][ T5934] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 123.612092][ T5934] usb 3-1: can't read configurations, error -61 [ 123.675937][ T47] usb 2-1: device descriptor read/64, error -71 [ 123.844152][ T5934] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 123.879746][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 123.890392][ T5934] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 123.920655][ T5934] usb 3-1: can't read configurations, error -61 [ 123.927458][ T5934] usb usb3-port1: unable to enumerate USB device [ 123.949221][ T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.104922][ T47] usb 2-1: device descriptor read/64, error -71 [ 124.215164][ T47] usb usb2-port1: attempt power cycle [ 124.615577][ T47] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.655899][ T47] usb 2-1: device descriptor read/8, error -71 [ 124.962163][ T47] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.032934][ T47] usb 2-1: device descriptor read/8, error -71 [ 125.167582][ T47] usb usb2-port1: unable to enumerate USB device [ 125.415081][ T5890] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 125.689967][ T5934] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.699455][ T5890] usb 5-1: config index 0 descriptor too short (expected 25183, got 77) [ 125.754829][ T5890] usb 5-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 125.783826][ T5890] usb 5-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 125.808772][ T5890] usb 5-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 125.825769][ T5934] usb 1-1: device descriptor read/64, error -71 [ 125.827865][ T5890] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 125.841509][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.849725][ T5890] usb 5-1: Product: syz [ 125.928749][ T5890] usb 5-1: Manufacturer: syz [ 125.968889][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.179'. [ 125.979164][ T5890] usb 5-1: SerialNumber: syz [ 125.995399][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.179'. [ 126.064938][ T5934] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.113754][ T6422] bridge0: entered promiscuous mode [ 126.126663][ T6422] syz_tun: entered promiscuous mode [ 126.145916][ T6422] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 126.154879][ T5887] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 126.204991][ T6422] Cannot create hsr debugfs directory [ 126.246724][ T6405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.255719][ T6405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.318491][ T5934] usb 1-1: device descriptor read/64, error -71 [ 126.325088][ T5887] usb 3-1: device descriptor read/64, error -71 [ 126.464301][ T6424] xt_hashlimit: size too large, truncated to 1048576 [ 126.473717][ T5934] usb usb1-port1: attempt power cycle [ 126.479900][ T6424] xt_hashlimit: overflow, try lower: 0/0 [ 126.597603][ T5887] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 126.626666][ T6426] batadv0: entered promiscuous mode [ 126.633094][ T6426] macsec1: entered promiscuous mode [ 126.654425][ T6426] batadv0: left promiscuous mode [ 126.735064][ T5887] usb 3-1: device descriptor read/64, error -71 [ 126.746456][ T53] [ 126.748817][ T53] ============================================ [ 126.754972][ T53] WARNING: possible recursive locking detected [ 126.761128][ T53] 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 Not tainted [ 126.768230][ T53] -------------------------------------------- [ 126.774372][ T53] kworker/u8:3/53 is trying to acquire lock: [ 126.780370][ T53] ffff88807ed74f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 126.789456][ T53] [ 126.789456][ T53] but task is already holding lock: [ 126.796821][ T53] ffff88805d662f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 126.805921][ T53] [ 126.805921][ T53] other info that might help us debug this: [ 126.813993][ T53] Possible unsafe locking scenario: [ 126.813993][ T53] [ 126.821458][ T53] CPU0 [ 126.824756][ T53] ---- [ 126.828048][ T53] lock(&hsr->seqnr_lock); [ 126.832578][ T53] lock(&hsr->seqnr_lock); [ 126.832639][ T5934] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.837084][ T53] [ 126.837084][ T53] *** DEADLOCK *** [ 126.837084][ T53] [ 126.837092][ T53] May be due to missing lock nesting notation [ 126.837092][ T53] [ 126.837099][ T53] 11 locks held by kworker/u8:3/53: [ 126.837111][ T53] #0: ffff88814d195148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 126.877796][ T53] #1: ffffc90000be7c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 126.890645][ T53] #2: ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x110/0x16a0 [ 126.900188][ T53] #3: ffffffff8ed3dfa0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1ef/0x1560 [ 126.909746][ T53] #4: ffffffff8ed3dfa0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x1750 [ 126.919645][ T53] #5: ffffffff8ed3e000 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 126.929627][ T53] #6: ffff88805d662f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 126.939168][ T53] #7: ffffffff8ed3dfa0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb8/0x2d20 [ 126.944918][ T5934] usb 1-1: device descriptor read/8, error -71 [ 126.948681][ T53] #8: ffffffff8ed3e000 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 126.964804][ T53] #9: ffffffff8ed3dfa0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x220/0x1c00 [ 126.974180][ T53] #10: ffffffff8ed3e000 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 126.984248][ T53] [ 126.984248][ T53] stack backtrace: [ 126.990168][ T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 126.990195][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.990210][ T53] Workqueue: ipv6_addrconf addrconf_dad_work [ 126.990243][ T53] Call Trace: [ 126.990251][ T53] [ 126.990260][ T53] dump_stack_lvl+0x241/0x360 [ 126.990292][ T53] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.990321][ T53] ? __pfx__printk+0x10/0x10 [ 126.990352][ T53] print_deadlock_bug+0x2be/0x2d0 [ 126.990380][ T53] validate_chain+0x928/0x24e0 [ 126.990418][ T53] __lock_acquire+0xad5/0xd80 [ 126.990443][ T53] lock_acquire+0x116/0x2f0 [ 126.990462][ T53] ? hsr_dev_xmit+0x18a/0x210 [ 126.990496][ T53] ? hsr_dev_xmit+0x18a/0x210 [ 126.990527][ T53] _raw_spin_lock_bh+0x35/0x50 [ 126.990547][ T53] ? hsr_dev_xmit+0x18a/0x210 [ 126.990576][ T53] hsr_dev_xmit+0x18a/0x210 [ 126.990608][ T53] dev_hard_start_xmit+0x2d4/0x840 [ 126.990637][ T53] __dev_queue_xmit+0x1b80/0x3f60 [ 126.990667][ T53] ? __dev_queue_xmit+0x2f9/0x3f60 [ 126.990692][ T53] ? __pfx___dev_queue_xmit+0x10/0x10 [ 126.990714][ T53] ? __local_bh_enable_ip+0x168/0x200 [ 126.990734][ T53] ? lockdep_hardirqs_on+0x9d/0x150 [ 126.990759][ T53] ? __local_bh_enable_ip+0x168/0x200 [ 126.990779][ T53] ? ebt_do_table+0x2858/0x2a60 [ 126.990806][ T53] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 126.990827][ T53] ? ebt_do_table+0x2858/0x2a60 [ 126.990856][ T53] ? ebt_do_table+0x2858/0x2a60 [ 126.990887][ T53] ? lockdep_hardirqs_on+0x9d/0x150 [ 126.990910][ T53] ? __local_bh_enable_ip+0x168/0x200 [ 126.990931][ T53] ? skb_push+0x97/0x100 [ 126.990956][ T53] br_dev_queue_push_xmit+0x771/0x950 [ 126.990980][ T53] ? br_nf_post_routing+0x1ef/0xe80 [ 126.991005][ T53] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 126.991029][ T53] ? NF_HOOK+0xa1/0x460 [ 126.991050][ T53] NF_HOOK+0x3ac/0x460 [ 126.991078][ T53] ? NF_HOOK+0xa1/0x460 [ 126.991097][ T53] ? __pfx_NF_HOOK+0x10/0x10 [ 126.991117][ T53] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 126.991144][ T53] br_forward_finish+0xd8/0x130 [ 126.991164][ T53] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 126.991187][ T53] NF_HOOK+0x3ac/0x460 [ 126.991207][ T53] ? NF_HOOK+0xa1/0x460 [ 126.991226][ T53] ? __pfx_NF_HOOK+0x10/0x10 [ 126.991247][ T53] ? __pfx_br_forward_finish+0x10/0x10 [ 126.991272][ T53] __br_forward+0x46a/0x640 [ 126.991292][ T53] ? __pfx_br_forward_finish+0x10/0x10 [ 126.991326][ T53] ? __pfx___br_forward+0x10/0x10 [ 126.991347][ T53] ? skb_clone+0x240/0x390 [ 126.991369][ T53] maybe_deliver+0xb3/0x150 [ 126.991390][ T53] br_flood+0x2e4/0x680 [ 126.991412][ T53] br_dev_xmit+0x12ac/0x1c00 [ 126.991438][ T53] ? br_dev_xmit+0x220/0x1c00 [ 126.991465][ T53] ? __pfx_br_dev_xmit+0x10/0x10 [ 126.991489][ T53] ? hsr_forward_skb+0x1238/0x2d20 [ 126.991509][ T53] ? dev_hard_start_xmit+0x2d4/0x840 [ 126.991527][ T53] ? __dev_queue_xmit+0x1b80/0x3f60 [ 126.991546][ T53] ? ip6_finish_output2+0x1296/0x1750 [ 126.991573][ T53] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 126.991591][ T53] ? addrconf_dad_work+0xb2f/0x16a0 [ 126.991615][ T53] ? netif_skb_features+0x8be/0xca0 [ 126.991642][ T53] dev_hard_start_xmit+0x2d4/0x840 [ 126.991668][ T53] __dev_queue_xmit+0x1b80/0x3f60 [ 126.991696][ T53] ? __dev_queue_xmit+0x2f9/0x3f60 [ 126.991719][ T53] ? __pfx___dev_queue_xmit+0x10/0x10 [ 126.991741][ T53] ? __copy_skb_header+0xa7/0x5a0 [ 126.991762][ T53] ? __asan_memcpy+0x40/0x70 [ 126.991782][ T53] ? __pskb_copy_fclone+0x9fb/0x10e0 [ 126.991805][ T53] ? __asan_memcpy+0x40/0x70 [ 126.991824][ T53] ? __pskb_copy_fclone+0x9fb/0x10e0 [ 126.991848][ T53] ? hsr_create_tagged_frame+0x4de/0xef0 [ 126.991869][ T53] ? __asan_memmove+0x40/0x70 [ 126.991887][ T53] ? hsr_addr_subst_dest+0x30d/0xac0 [ 126.991920][ T53] hsr_forward_skb+0x184c/0x2d20 [ 126.991944][ T53] ? hsr_forward_skb+0xb8/0x2d20 [ 126.991969][ T53] ? __pfx_hsr_forward_skb+0x10/0x10 [ 126.991991][ T53] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.992018][ T53] ? lockdep_hardirqs_on+0x9d/0x150 [ 126.992040][ T53] ? hsr_dev_xmit+0x18a/0x210 [ 126.992092][ T53] hsr_dev_xmit+0x195/0x210 [ 126.992122][ T53] dev_hard_start_xmit+0x2d4/0x840 [ 126.992149][ T53] __dev_queue_xmit+0x1b80/0x3f60 [ 126.992169][ T53] ? register_lock_class+0x54/0x330 [ 126.992191][ T53] ? __lock_acquire+0xad5/0xd80 [ 126.992212][ T53] ? __dev_queue_xmit+0x2f9/0x3f60 [ 126.992235][ T53] ? __pfx___dev_queue_xmit+0x10/0x10 [ 126.992257][ T53] ? neigh_connected_output+0x1d5/0x450 [ 126.992283][ T53] ? read_seqbegin+0x15c/0x2c0 [ 126.992324][ T53] ? lockdep_hardirqs_on+0x9d/0x150 [ 126.992348][ T53] ? read_seqbegin+0x202/0x2c0 [ 126.992376][ T53] ? __pfx_read_seqbegin+0x10/0x10 [ 126.992402][ T53] ? eth_header+0x11c/0x1f0 [ 126.992420][ T53] ? __asan_memcpy+0x40/0x70 [ 126.992441][ T53] ? eth_header+0x11c/0x1f0 [ 126.992460][ T53] ? __pfx_eth_header+0x10/0x10 [ 126.992478][ T53] ? neigh_connected_output+0x3a7/0x450 [ 126.992512][ T53] ip6_finish_output2+0x1296/0x1750 [ 126.992543][ T53] ? ip6_finish_output2+0x701/0x1750 [ 126.992577][ T53] ? __pfx_ip6_finish_output2+0x10/0x10 [ 126.992608][ T53] ? ip6_mtu+0x81/0x3f0 [ 126.992633][ T53] ? ip6_mtu+0x81/0x3f0 [ 126.992659][ T53] ip6_finish_output+0x421/0x840 [ 126.992688][ T53] ndisc_send_skb+0xb58/0x1560 [ 126.992708][ T53] ? ndisc_send_skb+0x1ef/0x1560 [ 126.992731][ T53] ? __pfx_ndisc_send_skb+0x10/0x10 [ 126.992752][ T53] ? __pfx_dst_output+0x10/0x10 [ 126.992770][ T53] ? ndisc_ns_create+0x53b/0x690 [ 126.992799][ T53] ndisc_send_ns+0xce/0x160 [ 126.992819][ T53] ? __pfx_ndisc_send_ns+0x10/0x10 [ 126.992839][ T53] ? addrconf_dad_work+0xa42/0x16a0 [ 126.992865][ T53] addrconf_dad_work+0xb2f/0x16a0 [ 126.992893][ T53] ? __pfx_addrconf_dad_work+0x10/0x10 [ 126.992917][ T53] ? lock_acquire+0x167/0x2f0 [ 126.992942][ T53] ? process_scheduled_works+0x9cb/0x18e0 [ 126.992964][ T53] process_scheduled_works+0xac3/0x18e0 [ 126.992999][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.993026][ T53] ? assign_work+0x367/0x3d0 [ 126.993049][ T53] worker_thread+0x870/0xd50 [ 126.993086][ T53] ? __kthread_parkme+0x1a8/0x200 [ 126.993112][ T53] ? __pfx_worker_thread+0x10/0x10 [ 126.993136][ T53] kthread+0x7b7/0x940 [ 126.993164][ T53] ? __pfx_worker_thread+0x10/0x10 [ 126.993187][ T53] ? __pfx_kthread+0x10/0x10 [ 126.993213][ T53] ? __pfx_kthread+0x10/0x10 [ 126.993239][ T53] ? __pfx_kthread+0x10/0x10 [ 126.993266][ T53] ? __pfx_kthread+0x10/0x10 [ 126.993292][ T53] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.993311][ T53] ? lockdep_hardirqs_on+0x9d/0x150 [ 126.993333][ T53] ? __pfx_kthread+0x10/0x10 [ 126.993361][ T53] ret_from_fork+0x4b/0x80 [ 126.993382][ T53] ? __pfx_kthread+0x10/0x10 [ 126.993409][ T53] ret_from_fork_asm+0x1a/0x30 [ 126.993435][ T53] [ 127.213629][ T5887] usb usb3-port1: attempt power cycle [ 127.214272][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.698360][ T6428] netlink: 'syz.1.181': attribute type 298 has an invalid length. [ 127.914849][ T5934] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 127.925070][ T5956] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 127.937100][ T5934] usb 1-1: device descriptor read/8, error -71 [ 128.029470][ T5890] usb 5-1: USB disconnect, device number 8 [ 128.046367][ T5934] usb usb1-port1: unable to enumerate USB device [ 128.095076][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 128.101472][ T5956] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.113175][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 128.124479][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.138019][ T5956] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 128.144904][ T5887] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 128.147090][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.165720][ T5956] usb 2-1: config 0 descriptor?? [ 128.171194][ T6429] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 128.176024][ T5887] usb 3-1: device descriptor read/8, error -71 [ 128.179987][ T5956] hub 2-1:0.0: USB hub found [ 128.383424][ T5956] hub 2-1:0.0: config failed, hub has too many ports! (err -19) [ 128.424872][ T5887] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 128.445320][ T5887] usb 3-1: device descriptor read/8, error -71 [ 128.555511][ T5887] usb usb3-port1: unable to enumerate USB device [ 128.587776][ T5956] usbhid 2-1:0.0: can't add hid device: -71 [ 128.593894][ T5956] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 128.615839][ T5956] usb 2-1: USB disconnect, device number 9 [ 132.816861][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.823194][ T1298] ieee802154 phy1 wpan1: encryption failed: -22