last executing test programs: 23.610961486s ago: executing program 0 (id=94): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c20000002059249b379086dd60108114000711"], 0x0) 23.229964273s ago: executing program 0 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x88}}, 0x0) 23.007597098s ago: executing program 0 (id=99): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000070000008608ffffffff0602c117b5814f4bac0b5d03871d53"], 0x18}}], 0x1, 0x4040880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r7, 0x111, 0x4, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000180)=0xfffffffa, 0xfffffffffffffed4) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r8) mmap$IORING_OFF_CQ_RING(&(0x7f000085a000/0x1000)=nil, 0x1000, 0x2000009, 0x40010, r8, 0x8000000) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 16.257128365s ago: executing program 2 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15.979465543s ago: executing program 2 (id=104): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioprio_get$pid(0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, 0x0}, 0x4404c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) openat$sndseq(0xffffff9c, 0x0, 0x8000) openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004) r3 = getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) prlimit64(r3, 0x7, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) 15.266106349s ago: executing program 2 (id=107): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4404c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000880)="5ca863040000", 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 12.954487779s ago: executing program 3 (id=108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c20000002059249b379086dd60108114000711"], 0x0) 12.785527217s ago: executing program 2 (id=110): syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) io_uring_setup(0x2471, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, &(0x7f0000000080)) 12.687999442s ago: executing program 3 (id=111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x88}}, 0x0) 12.150001119s ago: executing program 3 (id=114): socket$inet(0x2, 0x80001, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2c, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 10.891895548s ago: executing program 0 (id=116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 9.872998868s ago: executing program 3 (id=117): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioprio_get$pid(0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, 0x0}, 0x4404c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) openat$sndseq(0xffffff9c, 0x0, 0x8000) openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004) r3 = getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) prlimit64(r3, 0x7, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) 9.109830803s ago: executing program 3 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r3, 0x200) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r4, &(0x7f0000000000)='.\x00', 0x0) 7.474821384s ago: executing program 3 (id=120): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x1}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000200)={{0x77359400}, 0x11, 0xae, 0x7fffffff}, 0xffffffe7) 7.332278997s ago: executing program 4 (id=122): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4404c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000880)="5ca863040000", 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 6.569012749s ago: executing program 1 (id=123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x5, 0x8, {{0x6, 0x4, 0x0, 0xe, 0x18, 0x64, 0x0, 0xfc, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x44}, {[@end]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r4, 0x2, 0x0}, 0x10) r5 = io_uring_setup(0x23dc, &(0x7f0000000200)={0x0, 0xe263, 0x2000, 0x2, 0x82}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000380)={0xdf, r1, 0x2c, {0x2, 0xd}, 0x1}, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000b000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYBLOB="04000000010000000200000000000000000000000000000000000020"], 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x70bd25, 0x0, {0x7, 0x0, 0x0, r9, 0x0, 0x96}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000c42b13f46378090000000000000074952efd9268994774c53e8df579067605471173540cd3"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r10, 0x0, 0xfaf}, 0x18) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r6) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="04002cbd700003dbdf250000000008000200000010001400000000010c0003000100000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48040}, 0x8000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r12, 0x0, 0xfaf}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x20, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000300000000000000391f000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001834000003000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000005790c61000f8ffffffb702000008000000b7030000080800008500000006000000180000000300000000000000ff0fba9dbc962c9c58c8e26e2aad0500bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @sock_ops=0x3, 0xffffffffffffffff, 0x6}, 0x94) 6.295582403s ago: executing program 4 (id=124): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, 0x0, 0x27) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 6.27528089s ago: executing program 1 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x88}}, 0x0) 6.02808189s ago: executing program 1 (id=126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000070000008608ffffffff0602c117b5814f4bac0b5d03871d53"], 0x18}}], 0x1, 0x4040880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r5, 0x111, 0x4, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000180)=0xfffffffa, 0xfffffffffffffed4) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) mmap$IORING_OFF_CQ_RING(&(0x7f000085a000/0x1000)=nil, 0x1000, 0x2000009, 0x40010, r6, 0x8000000) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 5.68659142s ago: executing program 1 (id=127): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x2, 0xfffffffffffffffe}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xd28e, @mcast1, 0xbfd}}, {{0xa, 0x4e24, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfdfffe01}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x3, {{0xa, 0x4e20, 0x7, @mcast1, 0xffffffff}}, {{0xa, 0x4e20, 0x5e14, @mcast1, 0x5}}}, 0x108) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x437d, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0xfffffffe, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440)=r0, 0x1) 4.155007901s ago: executing program 4 (id=128): socket$inet(0x2, 0x80001, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2c, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, 0x0, 0x0) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 3.931650051s ago: executing program 1 (id=129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000070000008608ffffffff0602c117b5814f4bac0b5d03871d53"], 0x18}}], 0x1, 0x4040880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket$pppl2tp(0x18, 0x1, 0x1) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2.831622519s ago: executing program 4 (id=130): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioprio_get$pid(0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, 0x0}, 0x4404c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) openat$sndseq(0xffffff9c, 0x0, 0x8000) openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004) r3 = getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) prlimit64(r3, 0x7, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) 2.037819533s ago: executing program 4 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r3, 0x200) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r4, &(0x7f0000000000)='.\x00', 0x0) 2.008979828s ago: executing program 2 (id=132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001840)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r3, 0x200) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') fspick(r4, &(0x7f0000000000)='.\x00', 0x0) 1.611434624s ago: executing program 0 (id=133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c20000002059249b379086dd60108114000711"], 0x0) 110.327853ms ago: executing program 2 (id=134): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4404c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000880)="5ca863040000", 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 109.075725ms ago: executing program 4 (id=135): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) 93.990847ms ago: executing program 1 (id=136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x88}}, 0x0) 0s ago: executing program 0 (id=137): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x4040814) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. [ 80.823508][ T5823] cgroup: Unknown subsys name 'net' [ 81.075989][ T5823] cgroup: Unknown subsys name 'cpuset' [ 81.131784][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.903048][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.844278][ T980] cfg80211: failed to load regulatory.db [ 87.089953][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.103157][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.112700][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.127182][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.127989][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.243198][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.262963][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.265050][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.266520][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.267228][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.267943][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.270890][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.272728][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.279260][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.280257][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.430458][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.440684][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.441967][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.449095][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.450574][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.452428][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.453283][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.454196][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.455449][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.459343][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.170484][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 88.208358][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 88.564227][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 88.612815][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.618868][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 89.192353][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.193400][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.193767][ T5838] bridge_slave_0: entered allmulticast mode [ 89.195485][ T5838] bridge_slave_0: entered promiscuous mode [ 89.218834][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.218975][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.219469][ T5842] bridge_slave_0: entered allmulticast mode [ 89.222798][ T5840] Bluetooth: hci0: command tx timeout [ 89.230829][ T5842] bridge_slave_0: entered promiscuous mode [ 89.273300][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.273431][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.273559][ T5838] bridge_slave_1: entered allmulticast mode [ 89.275082][ T5838] bridge_slave_1: entered promiscuous mode [ 89.300320][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.300453][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.300951][ T5842] bridge_slave_1: entered allmulticast mode [ 89.301366][ T5840] Bluetooth: hci1: command tx timeout [ 89.313659][ T5842] bridge_slave_1: entered promiscuous mode [ 89.462290][ T5840] Bluetooth: hci2: command tx timeout [ 89.542060][ T59] Bluetooth: hci3: command tx timeout [ 89.542280][ T5840] Bluetooth: hci4: command tx timeout [ 89.999362][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.999629][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.999765][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.999938][ T5844] bridge_slave_0: entered allmulticast mode [ 90.007801][ T5844] bridge_slave_0: entered promiscuous mode [ 90.038594][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.206793][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.207103][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.207235][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.208063][ T5844] bridge_slave_1: entered allmulticast mode [ 90.209983][ T5844] bridge_slave_1: entered promiscuous mode [ 90.216711][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.217461][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.217656][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.217831][ T5843] bridge_slave_0: entered allmulticast mode [ 90.220376][ T5843] bridge_slave_0: entered promiscuous mode [ 90.224932][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.225067][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.225536][ T5851] bridge_slave_0: entered allmulticast mode [ 90.228142][ T5851] bridge_slave_0: entered promiscuous mode [ 90.492840][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.493006][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.493177][ T5843] bridge_slave_1: entered allmulticast mode [ 90.495946][ T5843] bridge_slave_1: entered promiscuous mode [ 90.497509][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.497633][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.497823][ T5851] bridge_slave_1: entered allmulticast mode [ 90.500507][ T5851] bridge_slave_1: entered promiscuous mode [ 90.955127][ T5838] team0: Port device team_slave_0 added [ 90.958817][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.960831][ T5842] team0: Port device team_slave_0 added [ 91.123890][ T5838] team0: Port device team_slave_1 added [ 91.126383][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.127900][ T5842] team0: Port device team_slave_1 added [ 91.153268][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.156537][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.302388][ T5840] Bluetooth: hci0: command tx timeout [ 91.377201][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.379300][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.391574][ T5840] Bluetooth: hci1: command tx timeout [ 91.541402][ T5840] Bluetooth: hci2: command tx timeout [ 91.621303][ T5840] Bluetooth: hci4: command tx timeout [ 91.621337][ T5840] Bluetooth: hci3: command tx timeout [ 91.754010][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.754027][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.754051][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.757979][ T5844] team0: Port device team_slave_0 added [ 91.987029][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.987044][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.987068][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.162952][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.162968][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.162990][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.164815][ T5844] team0: Port device team_slave_1 added [ 92.165658][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.165666][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.165680][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.167374][ T5843] team0: Port device team_slave_0 added [ 92.169392][ T5851] team0: Port device team_slave_0 added [ 92.304065][ T5843] team0: Port device team_slave_1 added [ 92.306087][ T5851] team0: Port device team_slave_1 added [ 92.494720][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.494736][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.494760][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.712586][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.712598][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.712611][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.788299][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.788315][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.788328][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.789489][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.789502][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.789524][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.976820][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.976836][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.976858][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.978270][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.978279][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.978292][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.077329][ T5838] hsr_slave_0: entered promiscuous mode [ 93.078287][ T5838] hsr_slave_1: entered promiscuous mode [ 93.097718][ T5842] hsr_slave_0: entered promiscuous mode [ 93.098512][ T5842] hsr_slave_1: entered promiscuous mode [ 93.099145][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 93.099227][ T5842] Cannot create hsr debugfs directory [ 93.381333][ T5840] Bluetooth: hci0: command tx timeout [ 93.461388][ T5840] Bluetooth: hci1: command tx timeout [ 93.617030][ T5844] hsr_slave_0: entered promiscuous mode [ 93.618376][ T5844] hsr_slave_1: entered promiscuous mode [ 93.619390][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 93.619413][ T5844] Cannot create hsr debugfs directory [ 93.621508][ T5840] Bluetooth: hci2: command tx timeout [ 93.701566][ T5840] Bluetooth: hci3: command tx timeout [ 93.701597][ T5840] Bluetooth: hci4: command tx timeout [ 93.973489][ T5843] hsr_slave_0: entered promiscuous mode [ 93.974561][ T5843] hsr_slave_1: entered promiscuous mode [ 93.975072][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 93.975090][ T5843] Cannot create hsr debugfs directory [ 93.980185][ T5851] hsr_slave_0: entered promiscuous mode [ 93.980965][ T5851] hsr_slave_1: entered promiscuous mode [ 93.990613][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 93.990639][ T5851] Cannot create hsr debugfs directory [ 95.461266][ T59] Bluetooth: hci0: command tx timeout [ 95.518719][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.543045][ T59] Bluetooth: hci1: command tx timeout [ 95.546994][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.588238][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.646852][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.701967][ T59] Bluetooth: hci2: command tx timeout [ 95.781325][ T5840] Bluetooth: hci3: command tx timeout [ 95.781371][ T59] Bluetooth: hci4: command tx timeout [ 95.811387][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.859504][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.913412][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.986978][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.138755][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.190113][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.253506][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.300355][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.474171][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.532473][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.570866][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.633927][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.758650][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.800290][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.844635][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.890049][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.923165][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.019854][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.069007][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.069519][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.117686][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.137353][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.137502][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.230670][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.285689][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.285903][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.322730][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.330986][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.331277][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.435652][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.439389][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.525671][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.526578][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.587696][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.589354][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.654162][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.704135][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.749903][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.750077][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.807055][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.807501][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.887958][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.941022][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.941754][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.994242][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.994458][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.037702][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.322662][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.499050][ T5838] veth0_vlan: entered promiscuous mode [ 98.590447][ T5838] veth1_vlan: entered promiscuous mode [ 98.598248][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.710680][ T5842] veth0_vlan: entered promiscuous mode [ 98.805731][ T5838] veth0_macvtap: entered promiscuous mode [ 98.808087][ T5842] veth1_vlan: entered promiscuous mode [ 98.838463][ T5838] veth1_macvtap: entered promiscuous mode [ 98.912630][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.944783][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.948124][ T5844] veth0_vlan: entered promiscuous mode [ 98.975137][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.029405][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.074211][ T5844] veth1_vlan: entered promiscuous mode [ 99.093003][ T5842] veth0_macvtap: entered promiscuous mode [ 99.115009][ T1012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.130149][ T1012] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.189630][ T1012] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.193951][ T5842] veth1_macvtap: entered promiscuous mode [ 99.236726][ T1012] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.386678][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.506471][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.518129][ T5843] veth0_vlan: entered promiscuous mode [ 99.531642][ T5844] veth0_macvtap: entered promiscuous mode [ 99.578942][ T1113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.605495][ T5844] veth1_macvtap: entered promiscuous mode [ 99.607941][ T1113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.624200][ T1113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.641087][ T5843] veth1_vlan: entered promiscuous mode [ 99.645616][ T1113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.662008][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.662028][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.850045][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.875661][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.875680][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.957623][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.037694][ T5851] veth0_vlan: entered promiscuous mode [ 100.040196][ T1444] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.076140][ T1444] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.103870][ T1444] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.109392][ T1444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.109410][ T1444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.137062][ T1113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.166843][ T5843] veth0_macvtap: entered promiscuous mode [ 100.195368][ T5851] veth1_vlan: entered promiscuous mode [ 100.278167][ T5843] veth1_macvtap: entered promiscuous mode [ 100.361986][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.362005][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.742141][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.475668][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.698415][ T3596] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.698978][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.698995][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.700167][ T5851] veth0_macvtap: entered promiscuous mode [ 101.725143][ T3596] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.748015][ T3596] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.756764][ T3596] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.757396][ T5851] veth1_macvtap: entered promiscuous mode [ 101.931063][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.931084][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.947961][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.026492][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.101581][ T9] usb 4-1: device descriptor read/64, error -71 [ 102.123829][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.220298][ T3596] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.245738][ T3596] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.415882][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.471221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.631218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.641641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.641778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.651177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.681322][ T9] usb 4-1: device descriptor read/64, error -71 [ 102.829761][ T9] usb usb4-port1: attempt power cycle [ 102.831529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.891651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.898368][ T3596] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.991511][ T3596] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.028651][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.028671][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.351244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.541176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.571207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.813778][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.813793][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.449922][ T5987] warning: `syz.3.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.252990][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.253003][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.594025][ T5972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.594046][ T5972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.221054][ T6003] Zero length message leads to an empty skb [ 108.373338][ T6015] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 108.511405][ T5998] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.691382][ T5998] usb 5-1: Using ep0 maxpacket: 32 [ 108.698695][ T5998] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.698721][ T5998] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 108.702826][ T5998] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 108.702850][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.702860][ T5998] usb 5-1: Product: syz [ 108.702867][ T5998] usb 5-1: Manufacturer: syz [ 108.702874][ T5998] usb 5-1: SerialNumber: syz [ 108.847111][ T5998] usb 5-1: config 0 descriptor?? [ 110.294709][ T6025] netlink: 56 bytes leftover after parsing attributes in process `syz.2.21'. [ 111.010887][ T6036] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.083224][ T6039] mmap: syz.2.23 (6039) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.200794][ T6036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.829167][ T5923] usb 5-1: USB disconnect, device number 2 [ 114.496741][ T6060] netlink: 56 bytes leftover after parsing attributes in process `syz.4.33'. [ 116.637666][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.693355][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.811672][ T6083] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 116.878506][ T6083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.976252][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.231371][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.778479][ T6097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.856409][ T6111] netlink: 56 bytes leftover after parsing attributes in process `syz.4.45'. [ 127.684906][ T6137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.130282][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.374824][ T6155] overlayfs: failed to resolve './file0': -2 [ 129.524650][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.279150][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.563116][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.311998][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.322620][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.331326][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.774859][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.975299][ T6182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.349009][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.781003][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.438567][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.432874][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.421370][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.611443][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 140.617259][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 140.617286][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.617302][ T31] usb 1-1: config 0 has no interface number 0 [ 140.617331][ T31] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 140.617342][ T31] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.621543][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 140.621558][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.621568][ T31] usb 1-1: Product: syz [ 140.621575][ T31] usb 1-1: Manufacturer: syz [ 140.621582][ T31] usb 1-1: SerialNumber: syz [ 140.772668][ T31] usb 1-1: config 0 descriptor?? [ 140.795660][ T31] smsc95xx v2.0.0 [ 140.795681][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 140.796295][ T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 141.335268][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.753319][ T5998] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 142.921270][ T5998] usb 2-1: Using ep0 maxpacket: 32 [ 142.923390][ T5998] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 142.923406][ T5998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.929540][ T5998] usb 2-1: config 0 descriptor?? [ 142.938835][ T5998] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 143.045331][ T5828] usb 1-1: USB disconnect, device number 2 [ 143.122275][ T6247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.348394][ T5998] gspca_nw80x: reg_r err -32 [ 143.348451][ T5998] nw80x 2-1:0.0: probe with driver nw80x failed with error -32 [ 143.738413][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.565081][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.661905][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 144.661939][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 145.766744][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.914331][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.109505][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.302626][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.726302][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.756423][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.257859][ T9] usb 2-1: USB disconnect, device number 2 [ 148.433766][ T6285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.230248][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 160.050104][ T5946] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 160.307691][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 160.503986][ T5946] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 160.504018][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.551868][ T5946] usb 5-1: config 0 descriptor?? [ 160.558354][ T5946] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 160.996851][ T5946] gspca_nw80x: reg_r err -32 [ 160.996933][ T5946] nw80x 5-1:0.0: probe with driver nw80x failed with error -32 [ 161.945472][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.167044][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.717356][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.290357][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.376930][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.425340][ T5828] usb 5-1: USB disconnect, device number 3 [ 163.568481][ T6349] input: syz1 as /devices/virtual/input/input6 [ 163.568654][ T6349] input: failed to attach handler leds to device input6, error: -6 [ 164.380139][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.597493][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.932935][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.192246][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.398293][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.539129][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.821542][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.054925][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.476119][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 170.573029][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.786145][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 171.324515][ T5998] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.377959][ T6394] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 171.377979][ T6394] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 6394, name: syz.4.135 [ 171.377996][ T6394] preempt_count: 0, expected: 0 [ 171.378005][ T6394] RCU nest depth: 0, expected: 0 [ 171.378029][ T6394] 1 lock held by syz.4.135/6394: [ 171.378041][ T6394] #0: ffff888145fa4058 (&dum_hcd->dum->lock){+.+.}-{3:3}, at: dummy_dequeue+0x164/0x480 [ 171.378120][ T6394] irq event stamp: 1816 [ 171.378127][ T6394] hardirqs last enabled at (1815): [] _raw_spin_unlock_irq+0x23/0x50 [ 171.378162][ T6394] hardirqs last disabled at (1816): [] dummy_dequeue+0x151/0x480 [ 171.378191][ T6394] softirqs last enabled at (0): [] copy_process+0x979/0x3ae0 [ 171.378220][ T6394] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 171.378265][ T6394] CPU: 0 UID: 0 PID: 6394 Comm: syz.4.135 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.378288][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 171.378303][ T6394] Call Trace: [ 171.378311][ T6394] [ 171.378320][ T6394] dump_stack_lvl+0x189/0x250 [ 171.378358][ T6394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.378395][ T6394] ? print_lock_name+0xde/0x100 [ 171.378423][ T6394] __might_resched+0x44b/0x5d0 [ 171.378453][ T6394] ? __pfx___might_resched+0x10/0x10 [ 171.378486][ T6394] ? dummy_dequeue+0x164/0x480 [ 171.378527][ T6394] rt_spin_lock+0xc7/0x2c0 [ 171.378549][ T6394] ? _raw_spin_unlock_irq+0x23/0x50 [ 171.378580][ T6394] ? __pfx_rt_spin_lock+0x10/0x10 [ 171.378609][ T6394] ? rcu_is_watching+0x15/0xb0 [ 171.378643][ T6394] dummy_dequeue+0x164/0x480 [ 171.378675][ T6394] ? __pfx_dummy_dequeue+0x10/0x10 [ 171.378697][ T6394] ? __pfx_schedule_timeout+0x10/0x10 [ 171.378723][ T6394] ? __pfx___wait_for_common+0x10/0x10 [ 171.378765][ T6394] usb_ep_dequeue+0x66/0x250 [ 171.378792][ T6394] raw_process_ep0_io+0x435/0x980 [ 171.378829][ T6394] raw_ioctl+0x22f6/0x3ba0 [ 171.378857][ T6394] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 171.378889][ T6394] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 171.378918][ T6394] ? do_vfs_ioctl+0xbeb/0x1440 [ 171.378945][ T6394] ? __pfx_raw_ioctl+0x10/0x10 [ 171.378970][ T6394] ? __pfx_smack_log+0x10/0x10 [ 171.378998][ T6394] ? restore_signal_shadow_stack+0x3e9/0x4b0 [ 171.379030][ T6394] ? smk_access+0x14c/0x4e0 [ 171.379067][ T6394] ? smk_tskacc+0x2fc/0x370 [ 171.379102][ T6394] ? smack_file_ioctl+0x24d/0x340 [ 171.379125][ T6394] ? __pfx_smack_file_ioctl+0x10/0x10 [ 171.379159][ T6394] ? __fget_files+0x2a/0x420 [ 171.379184][ T6394] ? __fget_files+0x3a6/0x420 [ 171.379208][ T6394] ? __fget_files+0x2a/0x420 [ 171.379239][ T6394] ? bpf_lsm_file_ioctl+0x9/0x20 [ 171.379262][ T6394] ? __pfx_raw_ioctl+0x10/0x10 [ 171.379286][ T6394] __se_sys_ioctl+0xff/0x170 [ 171.379312][ T6394] do_syscall_64+0xfa/0x3b0 [ 171.379332][ T6394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.379351][ T6394] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 171.379369][ T6394] ? clear_bhb_loop+0x60/0xb0 [ 171.379394][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.379413][ T6394] RIP: 0033:0x7f1d7a15e7ab [ 171.379429][ T6394] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 171.379445][ T6394] RSP: 002b:00007f1d783bbf10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.379465][ T6394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f1d7a15e7ab [ 171.379479][ T6394] RDX: 00007f1d783bbfd0 RSI: 0000000040085503 RDI: 0000000000000003 [ 171.379492][ T6394] RBP: 00007f1d783bcfe0 R08: 0000000000000080 R09: 00007f1d783bbfd8 [ 171.379505][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 171.379517][ T6394] R13: 0000000800000000 R14: 0000000000000012 R15: 00007f1d7a1ed391 [ 171.379550][ T6394]