last executing test programs: 14.351354918s ago: executing program 4 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 13.06799483s ago: executing program 3 (id=279): syz_usb_connect$hid(0x5, 0x2a, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) sendto$packet(r3, &(0x7f0000000000)="10", 0x1, 0x20008040, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 12.338447501s ago: executing program 2 (id=280): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0xfffffff4, @mcast1, 0x4}}, 0x0, 0x1, 0x0, 0x8}, 0x9c) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000000)={0x1000, &(0x7f0000000880)="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"}) mmap(&(0x7f000033a000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0xc34cd000) 10.099517361s ago: executing program 0 (id=284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB='va\x00\x00\x00\x00\x00\x00'], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000ff000003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 8.901511717s ago: executing program 2 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 8.627303307s ago: executing program 0 (id=287): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44880) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001840), 0x3b, 0x0) 7.866614019s ago: executing program 1 (id=288): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x108) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000001040)="a6aada", 0x3}], 0x1, 0x8, 0x5, 0x4) 7.411577152s ago: executing program 4 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000040) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, &(0x7f0000000080)) r6 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x18}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9, 0x20}, {}, {}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.411180179s ago: executing program 0 (id=290): socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) connect$x25(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 6.6999813s ago: executing program 3 (id=291): syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x85}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = semget$private(0x0, 0x1, 0x81) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SETVAL(r0, 0x1, 0x10, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c0002800500010014000280080001000000000008000200ac14140008000540000000000900010073797a310000000000000000"], 0x58}}, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x100000000000f7) keyctl$revoke(0x3, r3) read$watch_queue(r4, &(0x7f0000000300)=""/62, 0x3e) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 6.44325692s ago: executing program 4 (id=292): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card2/oss_mixer\x00', 0xe2002, 0x0) dup3(r1, r0, 0x0) 6.411518806s ago: executing program 0 (id=293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_kvm_add_vcpu$x86(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000004e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r6, 0x0, 0x0) 5.651699826s ago: executing program 4 (id=294): syz_open_dev$dmmidi(&(0x7f0000000340), 0xfffffffffffffffc, 0x8901) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) munlockall() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000300), 0x4) 5.651527122s ago: executing program 1 (id=295): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x3, 0x4, 'P}?', 0x88, 0x2}) 4.906977688s ago: executing program 0 (id=296): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = signalfd(r0, &(0x7f0000000080)={[0x9]}, 0x8) r2 = getegid() syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0) setresgid(r2, 0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x82400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@access_any}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@smackfshat}]}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) 4.866379533s ago: executing program 3 (id=297): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'macvlan0\x00', {0x2}, 0xe34}) 4.7876463s ago: executing program 1 (id=298): unshare(0x64000600) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x4c}, 0x8, 0x3000000000002}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, 0x0, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x1, 0x5001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100b11b700000feffff1a000000180001801400020064756d6d7930"], 0x2c}}, 0x0) setrlimit(0x9, &(0x7f0000000140)={0xf}) 3.744529778s ago: executing program 3 (id=299): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 3.609275525s ago: executing program 2 (id=300): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x200}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.323466449s ago: executing program 2 (id=301): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) clock_settime(0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xaf4, 0x0) 1.579763186s ago: executing program 1 (id=302): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)=ANY=[], 0x1000f) 1.462589867s ago: executing program 3 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000040) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, &(0x7f0000000080)) r6 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x18}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9, 0x20}, {}, {}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.460157104s ago: executing program 1 (id=304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c050000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="3c002c8008000000000000000800000007000000080000008b09000008000000924e0000080000004ffc00000800000000feffff0800000006000000ec"], 0x56c}}, 0x0) 1.359053796s ago: executing program 4 (id=305): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2, 0x2, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2a1, @local, 0xfff}}]}, 0x48}, 0x1, 0x7}, 0x0) 1.355550453s ago: executing program 2 (id=306): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 679.621418ms ago: executing program 0 (id=307): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 126.642052ms ago: executing program 1 (id=308): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) readv(r4, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) 125.419682ms ago: executing program 3 (id=309): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22400) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 47.685713ms ago: executing program 4 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 0s ago: executing program 2 (id=311): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c1045646a315761c6720700005e007f0a7eed1168379a3601ffc491c4666b08f17a3f5cbdb3ccd695"], 0x1c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0xf0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400a0af0a2514692d994e0dea0000330001002ba17000fedbdb2504000000080004000200000008000500", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) socket(0x2, 0x80805, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000000c0)={0x40000}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x7ff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000f80)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000bb000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. [ 66.677707][ T5817] cgroup: Unknown subsys name 'net' [ 66.807431][ T5817] cgroup: Unknown subsys name 'cpuset' [ 66.815915][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.183163][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.891488][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.910863][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.915346][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.919781][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.926425][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.932867][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.940445][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.954821][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.954922][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.962308][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.970094][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.976720][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.984010][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.991905][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.998952][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.004601][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.011871][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.018560][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.025599][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.044234][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.050642][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.052007][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.058722][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.080830][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.088219][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.350362][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.356862][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.679834][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 71.780607][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 71.867063][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 71.975654][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 71.999112][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 72.038258][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.045594][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.052899][ T5829] bridge_slave_0: entered allmulticast mode [ 72.061518][ T5829] bridge_slave_0: entered promiscuous mode [ 72.099936][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.107220][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.114432][ T5829] bridge_slave_1: entered allmulticast mode [ 72.121491][ T5829] bridge_slave_1: entered promiscuous mode [ 72.142942][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.150110][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.157609][ T5827] bridge_slave_0: entered allmulticast mode [ 72.164942][ T5827] bridge_slave_0: entered promiscuous mode [ 72.227760][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.235512][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.242627][ T5827] bridge_slave_1: entered allmulticast mode [ 72.249740][ T5827] bridge_slave_1: entered promiscuous mode [ 72.328050][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.376729][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.383891][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.391321][ T5828] bridge_slave_0: entered allmulticast mode [ 72.398685][ T5828] bridge_slave_0: entered promiscuous mode [ 72.408734][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.443220][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.450400][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.458194][ T5844] bridge_slave_0: entered allmulticast mode [ 72.466352][ T5844] bridge_slave_0: entered promiscuous mode [ 72.476751][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.489045][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.511150][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.518867][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.526482][ T5828] bridge_slave_1: entered allmulticast mode [ 72.533457][ T5828] bridge_slave_1: entered promiscuous mode [ 72.572441][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.579872][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.587146][ T5830] bridge_slave_0: entered allmulticast mode [ 72.595469][ T5830] bridge_slave_0: entered promiscuous mode [ 72.602403][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.609560][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.617603][ T5844] bridge_slave_1: entered allmulticast mode [ 72.624886][ T5844] bridge_slave_1: entered promiscuous mode [ 72.675175][ T5829] team0: Port device team_slave_0 added [ 72.681240][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.689355][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.696663][ T5830] bridge_slave_1: entered allmulticast mode [ 72.703594][ T5830] bridge_slave_1: entered promiscuous mode [ 72.716389][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.728239][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.738802][ T5827] team0: Port device team_slave_0 added [ 72.746608][ T5827] team0: Port device team_slave_1 added [ 72.755305][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.766193][ T5829] team0: Port device team_slave_1 added [ 72.774803][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.870100][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.883785][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.896447][ T5844] team0: Port device team_slave_0 added [ 72.938781][ T5828] team0: Port device team_slave_0 added [ 72.959425][ T5844] team0: Port device team_slave_1 added [ 72.981195][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.988173][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.014352][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.026759][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.033692][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.060643][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.073218][ T5828] team0: Port device team_slave_1 added [ 73.105065][ T5151] Bluetooth: hci2: command tx timeout [ 73.105070][ T5840] Bluetooth: hci1: command tx timeout [ 73.108838][ T5837] Bluetooth: hci3: command tx timeout [ 73.133985][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.141373][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.167350][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.179179][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.186297][ T5837] Bluetooth: hci0: command tx timeout [ 73.186551][ T5837] Bluetooth: hci4: command tx timeout [ 73.197500][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.224163][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.250287][ T5830] team0: Port device team_slave_0 added [ 73.256804][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.263754][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.289991][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.317642][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.325064][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.351613][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.365548][ T5830] team0: Port device team_slave_1 added [ 73.372082][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.379088][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.405052][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.426888][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.433840][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.460477][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.500057][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.507118][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.533461][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.592574][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.599782][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.626270][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.706270][ T5844] hsr_slave_0: entered promiscuous mode [ 73.712735][ T5844] hsr_slave_1: entered promiscuous mode [ 73.723414][ T5829] hsr_slave_0: entered promiscuous mode [ 73.730039][ T5829] hsr_slave_1: entered promiscuous mode [ 73.737551][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 73.743345][ T5829] Cannot create hsr debugfs directory [ 73.758307][ T5827] hsr_slave_0: entered promiscuous mode [ 73.764667][ T5827] hsr_slave_1: entered promiscuous mode [ 73.770633][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 73.776541][ T5827] Cannot create hsr debugfs directory [ 73.788109][ T5828] hsr_slave_0: entered promiscuous mode [ 73.794554][ T5828] hsr_slave_1: entered promiscuous mode [ 73.800480][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 73.806582][ T5828] Cannot create hsr debugfs directory [ 73.949727][ T5830] hsr_slave_0: entered promiscuous mode [ 73.955925][ T5830] hsr_slave_1: entered promiscuous mode [ 73.961909][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 73.967753][ T5830] Cannot create hsr debugfs directory [ 74.472530][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.488945][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.501121][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.520516][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.571893][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.589079][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.600216][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.612825][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.716983][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.735419][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.746919][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.770465][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.859270][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.876469][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.888131][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.905296][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.969090][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.036688][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.063324][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.070643][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.082333][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.092546][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.123945][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.159510][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.166828][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.184489][ T5837] Bluetooth: hci3: command tx timeout [ 75.184506][ T5151] Bluetooth: hci1: command tx timeout [ 75.184516][ T5840] Bluetooth: hci2: command tx timeout [ 75.191594][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.223071][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.230294][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.240481][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.247622][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.265103][ T5837] Bluetooth: hci4: command tx timeout [ 75.265146][ T5151] Bluetooth: hci0: command tx timeout [ 75.298183][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.305364][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.328135][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.461137][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.530741][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.537951][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.581209][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.588467][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.638714][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.685438][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.767625][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.788572][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.823792][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.840668][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.847814][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.881148][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.888324][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.898239][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.905401][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.921915][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.929104][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.049859][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.120154][ T5844] veth0_vlan: entered promiscuous mode [ 76.156931][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.199579][ T5844] veth1_vlan: entered promiscuous mode [ 76.308986][ T5828] veth0_vlan: entered promiscuous mode [ 76.338823][ T5828] veth1_vlan: entered promiscuous mode [ 76.353958][ T5844] veth0_macvtap: entered promiscuous mode [ 76.379200][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.433912][ T5844] veth1_macvtap: entered promiscuous mode [ 76.513271][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.554010][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.591159][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.619049][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.627149][ T5828] veth0_macvtap: entered promiscuous mode [ 76.637566][ T5828] veth1_macvtap: entered promiscuous mode [ 76.646990][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.655880][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.684296][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.743654][ T5827] veth0_vlan: entered promiscuous mode [ 76.757155][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.771315][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.802250][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.872870][ T5827] veth1_vlan: entered promiscuous mode [ 76.883343][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.893480][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.918289][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.936864][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.947312][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.958721][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.042346][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.058770][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.111296][ T5829] veth0_vlan: entered promiscuous mode [ 77.127548][ T5827] veth0_macvtap: entered promiscuous mode [ 77.139815][ T5827] veth1_macvtap: entered promiscuous mode [ 77.182185][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.188130][ T5829] veth1_vlan: entered promiscuous mode [ 77.215633][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.223499][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.266140][ T5151] Bluetooth: hci3: command tx timeout [ 77.267861][ T5837] Bluetooth: hci2: command tx timeout [ 77.271570][ T5151] Bluetooth: hci1: command tx timeout [ 77.319749][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.357116][ T5829] veth0_macvtap: entered promiscuous mode [ 77.368042][ T5829] veth1_macvtap: entered promiscuous mode [ 77.388984][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.401857][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.409294][ T5837] Bluetooth: hci0: command tx timeout [ 77.416402][ T5151] Bluetooth: hci4: command tx timeout [ 77.466590][ T5830] veth0_vlan: entered promiscuous mode [ 77.480511][ T5830] veth1_vlan: entered promiscuous mode [ 77.512456][ T5830] veth0_macvtap: entered promiscuous mode [ 77.562560][ T179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.571475][ T179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.153898][ T5830] veth1_macvtap: entered promiscuous mode [ 78.171551][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.187037][ T179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.200294][ T179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.209235][ T179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.278632][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.291023][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.302434][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.361456][ T179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.379726][ T179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.390851][ T179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.510318][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.607802][ T179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.622243][ T179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.996473][ T179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.153859][ T179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.167245][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.183135][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.267163][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.275263][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.345595][ T5837] Bluetooth: hci2: command tx timeout [ 79.351970][ T5840] Bluetooth: hci3: command tx timeout [ 79.363995][ T5151] Bluetooth: hci1: command tx timeout [ 79.397626][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.414793][ T5832] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.425745][ T5837] Bluetooth: hci0: command tx timeout [ 79.431186][ T5151] Bluetooth: hci4: command tx timeout [ 79.447992][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.501044][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.536771][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.601597][ T5832] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 79.613580][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.631613][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.639661][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.676086][ T5832] usb 3-1: Product: syz [ 79.687879][ T5832] usb 3-1: Manufacturer: syz [ 79.702709][ T5832] usb 3-1: SerialNumber: syz [ 79.731290][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.747787][ T5832] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 79.767064][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.788283][ T5945] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 81.674380][ T5945] usb 3-1: Service connection timeout for: 256 [ 81.934662][ T5945] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 82.260306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 82.317708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 82.334674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 82.350959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 82.744226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 83.234965][ T5985] 8021q: VLANs not supported on ip6tnl0 [ 83.325402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 83.775537][ T5895] usb 3-1: USB disconnect, device number 2 [ 83.794341][ T5945] ath9k_htc: Failed to initialize the device [ 83.985047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.013232][ T5895] usb 3-1: ath9k_htc: USB layer deinitialized [ 84.051989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.726467][ T1211] cfg80211: failed to load regulatory.db [ 86.771750][ T6023] 8021q: VLANs not supported on ip6gre0 [ 86.918528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.225658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.150189][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'. [ 91.646437][ T6066] netlink: 68 bytes leftover after parsing attributes in process `syz.0.30'. [ 93.028667][ T6088] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.255503][ T6114] 8021q: VLANs not supported on ip6tnl0 [ 96.507788][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 97.808871][ T6120] 8021q: VLANs not supported on ip6gre0 [ 99.578255][ T6124] netlink: 68 bytes leftover after parsing attributes in process `syz.4.48'. [ 105.447833][ T6154] 8021q: VLANs not supported on ip6tnl0 [ 106.129621][ T6161] 8021q: VLANs not supported on ip6gre0 [ 108.517226][ T6180] netlink: 68 bytes leftover after parsing attributes in process `syz.1.65'. [ 110.444915][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'. [ 112.906685][ T6219] 8021q: VLANs not supported on ip6gre0 [ 113.522888][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 113.905688][ T6226] netlink: 68 bytes leftover after parsing attributes in process `syz.3.78'. [ 115.281147][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 120.275453][ T6272] netlink: 68 bytes leftover after parsing attributes in process `syz.3.90'. [ 120.320723][ T6271] 8021q: VLANs not supported on ip6tnl0 [ 123.748989][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'. [ 126.648915][ T6319] 8021q: VLANs not supported on ip6gre0 [ 127.628375][ T6331] netlink: 68 bytes leftover after parsing attributes in process `syz.3.109'. [ 129.059116][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 129.451210][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 133.235683][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.242024][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.450604][ T6377] 9pnet_fd: Insufficient options for proto=fd [ 135.899465][ T6381] netlink: 68 bytes leftover after parsing attributes in process `syz.2.124'. [ 137.841583][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 142.337817][ T6418] 9pnet_fd: Insufficient options for proto=fd [ 143.271083][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 146.650963][ T6446] netlink: 'syz.1.142': attribute type 1 has an invalid length. [ 146.659130][ T6446] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.142'. [ 150.176301][ T6468] 9pnet_fd: Insufficient options for proto=fd [ 153.167853][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.155'. [ 154.343368][ T6503] 8021q: VLANs not supported on ip6tnl0 [ 155.203419][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 156.231022][ T5964] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 156.674303][ T5964] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 156.744241][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.780363][ T5964] usb 4-1: Product: syz [ 156.804156][ T5964] usb 4-1: Manufacturer: syz [ 156.832940][ T5964] usb 4-1: SerialNumber: syz [ 156.888141][ T5964] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 156.951098][ T5963] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 158.205196][ T5964] usb 4-1: USB disconnect, device number 2 [ 158.309197][ T5963] usb 4-1: Service connection timeout for: 256 [ 158.360134][ T5963] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 158.955256][ T5963] ath9k_htc: Failed to initialize the device [ 158.963744][ T5964] usb 4-1: ath9k_htc: USB layer deinitialized [ 159.183088][ T6556] 8021q: VLANs not supported on ip6gre0 [ 160.514165][ T6569] 8021q: VLANs not supported on ip6gre0 [ 164.165373][ T5908] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 164.212944][ T6609] 8021q: VLANs not supported on ip6gre0 [ 165.688869][ T5908] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 165.753566][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.791093][ T5908] usb 2-1: Product: syz [ 165.819990][ T5908] usb 2-1: Manufacturer: syz [ 166.249026][ T6622] netlink: 'syz.2.191': attribute type 10 has an invalid length. [ 166.289151][ T5908] usb 2-1: SerialNumber: syz [ 166.947127][ T6622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.336682][ T6622] team0: Port device bond0 added [ 167.368183][ T5908] usb 2-1: can't set config #1, error -71 [ 167.391944][ T5908] usb 2-1: USB disconnect, device number 2 [ 167.433242][ T6622] syz.2.191 (6622) used greatest stack depth: 19880 bytes left [ 168.949086][ T6651] netlink: 68 bytes leftover after parsing attributes in process `syz.3.199'. [ 170.516593][ T6664] 8021q: VLANs not supported on ip6gre0 [ 172.453342][ T5832] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 172.889295][ T5832] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 173.229054][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.230543][ T5832] usb 2-1: Product: syz [ 173.231797][ T5832] usb 2-1: Manufacturer: syz [ 173.232322][ T5832] usb 2-1: SerialNumber: syz [ 173.421764][ T5832] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 173.447890][ T48] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 174.911033][ T5908] usb 2-1: USB disconnect, device number 3 [ 174.944326][ T48] usb 2-1: Service connection timeout for: 256 [ 174.950534][ T48] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 174.967064][ T48] ath9k_htc: Failed to initialize the device [ 175.276698][ T5908] usb 2-1: ath9k_htc: USB layer deinitialized [ 175.611134][ T6714] 8021q: VLANs not supported on ip6tnl0 [ 176.596957][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.218'. [ 180.100810][ T6760] 8021q: VLANs not supported on ip6tnl0 [ 181.554109][ T48] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 183.807220][ T48] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 183.824173][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.832194][ T48] usb 5-1: Product: syz [ 183.941813][ T48] usb 5-1: Manufacturer: syz [ 183.946540][ T48] usb 5-1: SerialNumber: syz [ 184.958309][ T48] usb 5-1: can't set config #1, error -71 [ 185.209927][ T48] usb 5-1: USB disconnect, device number 2 [ 185.475400][ T6806] 8021q: VLANs not supported on ip6gre0 [ 186.282193][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 186.486619][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 189.424202][ T1211] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 190.216899][ T1211] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 190.260587][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.289022][ T1211] usb 2-1: Product: syz [ 190.308944][ T1211] usb 2-1: Manufacturer: syz [ 190.443562][ T1211] usb 2-1: SerialNumber: syz [ 190.834974][ T1211] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 190.875449][ T5908] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 191.337306][ T48] usb 2-1: USB disconnect, device number 4 [ 192.366221][ T5908] usb 2-1: Service connection timeout for: 256 [ 192.372586][ T5908] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 193.228384][ T5908] ath9k_htc: Failed to initialize the device [ 193.326328][ T48] usb 2-1: ath9k_htc: USB layer deinitialized [ 194.231802][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.239634][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.006518][ T5908] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 196.210162][ T5908] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 196.644387][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 196.650619][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 196.659354][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 196.659640][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 196.671331][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 196.679743][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.702169][ T5908] usb 4-1: Product: syz [ 196.721848][ T5908] usb 4-1: Manufacturer: syz [ 196.728387][ T5908] usb 4-1: SerialNumber: syz [ 196.748876][ T5908] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 196.768054][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 197.087333][ T6924] mkiss: ax0: crc mode is auto. [ 197.340211][ T5908] usb 4-1: USB disconnect, device number 3 [ 197.706087][ T6924] mmap: syz.1.272 (6924) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 198.144055][ T10] usb 4-1: Service connection timeout for: 256 [ 198.374340][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 198.445479][ T10] ath9k_htc: Failed to initialize the device [ 199.016403][ T5908] usb 4-1: ath9k_htc: USB layer deinitialized [ 199.228929][ T6951] usb usb8: usbfs: process 6951 (syz.3.279) did not claim interface 0 before use [ 201.477524][ T6963] Invalid logical block size (3) [ 204.406276][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 205.171410][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 205.181655][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 205.843382][ T6998] netlink: 68 bytes leftover after parsing attributes in process `syz.0.293'. [ 206.974129][ T5963] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 207.905376][ T5963] usb 1-1: Using ep0 maxpacket: 8 [ 207.927400][ T5963] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 207.947492][ T5963] usb 1-1: config 0 has no interface number 1 [ 207.966478][ T5963] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 207.992317][ T5963] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 208.976466][ T5963] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 208.994088][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.003369][ T5963] usb 1-1: Product: syz [ 209.007827][ T5963] usb 1-1: Manufacturer: syz [ 209.013710][ T5963] usb 1-1: SerialNumber: syz [ 209.033576][ T5963] usb 1-1: config 0 descriptor?? [ 209.046123][ T5963] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 209.725802][ T5963] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 209.739213][ T2345] pvrusb2: Invalid read control endpoint [ 209.780349][ T2345] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 209.801271][ T5963] usb 1-1: USB disconnect, device number 2 [ 209.817994][ T2345] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 210.315114][ T7034] netlink: 1064 bytes leftover after parsing attributes in process `syz.1.304'. [ 210.448917][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 211.499414][ T5828] [ 211.501787][ T5828] ============================================ [ 211.507917][ T5828] WARNING: possible recursive locking detected [ 211.514048][ T5828] 6.16.0-rc4-next-20250703-syzkaller #0 Not tainted [ 211.520614][ T5828] -------------------------------------------- [ 211.526732][ T5828] syz-executor/5828 is trying to acquire lock: [ 211.532852][ T5828] ffff8880583d48c8 (&sb->s_type->i_mutex_key#22){+.+.}-{4:4}, at: rpc_close_pipes+0x10a/0x730 [ 211.543109][ T5828] [ 211.543109][ T5828] but task is already holding lock: [ 211.550447][ T5828] ffff8880583d11c8 (&sb->s_type->i_mutex_key#22){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 211.561645][ T5828] [ 211.561645][ T5828] other info that might help us debug this: [ 211.569681][ T5828] Possible unsafe locking scenario: [ 211.569681][ T5828] [ 211.577108][ T5828] CPU0 [ 211.580363][ T5828] ---- [ 211.583618][ T5828] lock(&sb->s_type->i_mutex_key#22); [ 211.589059][ T5828] lock(&sb->s_type->i_mutex_key#22); [ 211.594502][ T5828] [ 211.594502][ T5828] *** DEADLOCK *** [ 211.594502][ T5828] [ 211.602618][ T5828] May be due to missing lock nesting notation [ 211.602618][ T5828] [ 211.610915][ T5828] 4 locks held by syz-executor/5828: [ 211.616177][ T5828] #0: ffff88805704e0e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 211.626351][ T5828] #1: ffff8880276e60a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190 [ 211.635904][ T5828] #2: ffffffff8f6d0e30 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 211.647981][ T5828] #3: ffff8880583d11c8 (&sb->s_type->i_mutex_key#22){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 211.659633][ T5828] [ 211.659633][ T5828] stack backtrace: [ 211.665516][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 211.665532][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.665546][ T5828] Call Trace: [ 211.665553][ T5828] [ 211.665559][ T5828] dump_stack_lvl+0x189/0x250 [ 211.665581][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.665599][ T5828] ? __pfx__printk+0x10/0x10 [ 211.665612][ T5828] ? print_lock_name+0xde/0x100 [ 211.665626][ T5828] print_deadlock_bug+0x28b/0x2a0 [ 211.665644][ T5828] validate_chain+0x1a3f/0x2140 [ 211.665668][ T5828] __lock_acquire+0xab9/0xd20 [ 211.665685][ T5828] ? rpc_close_pipes+0x10a/0x730 [ 211.665699][ T5828] lock_acquire+0x120/0x360 [ 211.665712][ T5828] ? rpc_close_pipes+0x10a/0x730 [ 211.665731][ T5828] down_write+0x96/0x1f0 [ 211.665745][ T5828] ? rpc_close_pipes+0x10a/0x730 [ 211.665758][ T5828] ? __pfx_down_write+0x10/0x10 [ 211.665771][ T5828] ? __pfx_find_submount+0x10/0x10 [ 211.665784][ T5828] ? _raw_spin_unlock+0x28/0x50 [ 211.665799][ T5828] ? d_walk+0x6f4/0x780 [ 211.665813][ T5828] rpc_close_pipes+0x10a/0x730 [ 211.665827][ T5828] ? d_invalidate+0x204/0x260 [ 211.665842][ T5828] ? __pfx_rpc_close_pipes+0x10/0x10 [ 211.665857][ T5828] ? up_write+0x1c4/0x420 [ 211.665874][ T5828] ? __pfx_rpc_close_pipes+0x10/0x10 [ 211.665889][ T5828] __simple_recursive_removal+0x20b/0x510 [ 211.665906][ T5828] ? __pfx_rpc_close_pipes+0x10/0x10 [ 211.665922][ T5828] rpc_unlink+0x56/0x80 [ 211.665936][ T5828] rpc_pipefs_event+0xc0/0x170 [ 211.665949][ T5828] notifier_call_chain+0x1b3/0x3e0 [ 211.665969][ T5828] blocking_notifier_call_chain+0x6a/0x90 [ 211.665986][ T5828] rpc_kill_sb+0xd0/0x190 [ 211.666003][ T5828] deactivate_locked_super+0xb9/0x130 [ 211.666019][ T5828] cleanup_mnt+0x425/0x4c0 [ 211.666033][ T5828] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.666052][ T5828] task_work_run+0x1d1/0x260 [ 211.666066][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 211.666077][ T5828] ? __x64_sys_umount+0x122/0x160 [ 211.666100][ T5828] ? exit_to_user_mode_loop+0x40/0x110 [ 211.666116][ T5828] exit_to_user_mode_loop+0xec/0x110 [ 211.666130][ T5828] do_syscall_64+0x2bd/0x3b0 [ 211.666142][ T5828] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.666160][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.666172][ T5828] ? clear_bhb_loop+0x60/0xb0 [ 211.666185][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.666198][ T5828] RIP: 0033:0x7ff68b18fc57 [ 211.666214][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 211.666226][ T5828] RSP: 002b:00007fffabc3e108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 211.666240][ T5828] RAX: 0000000000000000 RBX: 00007ff68b210925 RCX: 00007ff68b18fc57 [ 211.666249][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffabc3e1c0 [ 211.666257][ T5828] RBP: 00007fffabc3e1c0 R08: 0000000000000000 R09: 0000000000000000 [ 211.666265][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffabc3f250 [ 211.666274][ T5828] R13: 00007ff68b210925 R14: 000000000003390e R15: 00007fffabc3f290 [ 211.666288][ T5828] [ 212.359882][ T7058] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 212.375826][ T7058] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.