last executing test programs: 15.210402145s ago: executing program 1 (id=104): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @remote, 0x2}, 0x1c) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xc, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x526f, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xac8b, 0x8, 0xfffff3f6, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x2, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x5, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008400"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/comedi3\x00', 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0x4008af12, &(0x7f0000000080)={0x1, 0x800007f}) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x2007, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0xffffffff, 0x1, 0x8, 0x1, 0x100, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x86, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r7, 0x22052000) ioctl$sock_bt_hci(r1, 0x800448d2, 0xfffffffffffffffe) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) 14.244993737s ago: executing program 1 (id=108): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000002c0)={0x35, &(0x7f00000001c0)=[{0x2c, '\x00', @data, 0x7fff}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002580)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4400c051}, 0xc0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x10000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 14.241795817s ago: executing program 2 (id=109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856", 0x57}, {&(0x7f0000000b40)="86545d2157646172b815", 0xa}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x3ff, 0x689c1e0c043b1181) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.298180347s ago: executing program 2 (id=112): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc04", 0x10}], 0x1}, 0xc4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x1fffffff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001280)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 12.866171056s ago: executing program 1 (id=115): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x7, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setrlimit(0x1, &(0x7f0000000280)={0xc800, 0x10000}) r2 = inotify_init() mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000600000000000400000000000000100007000000000020"], 0x24, 0x3) close_range(r2, 0xffffffffffffffff, 0x0) setpriority(0x1, 0x0, 0x80000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 11.229204653s ago: executing program 1 (id=119): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x8, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x3, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0x100000002, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0x1, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x4000000006, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x1000, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x3, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x2ad, 0x80000001, 0xfffffffffeffffff, 0x7]}) 9.714262116s ago: executing program 3 (id=120): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 9.606224259s ago: executing program 2 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 9.296203145s ago: executing program 1 (id=122): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmmsg(r0, &(0x7f0000000100), 0x0, 0x140, 0x0) 8.62152818s ago: executing program 3 (id=123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd2f, 0x10b52c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xe, 0x6, 0x4, 0x2, 0x4000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24018084}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)}], 0x1}, 0x4005) 8.17088317s ago: executing program 3 (id=126): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000200)=0xb) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000002a40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) socket$qrtr(0x2a, 0x2, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_block', @ANYRESDEC=0x0]) chdir(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000300)={@multicast1, 0x0, 0x0, 0xffffffd8, 0x0, [{}, {@broadcast}, {@multicast1}, {@local}, {@dev}]}}) r7 = memfd_create(0x0, 0x2) ftruncate(r7, 0x1000006) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000580)=0x4) 8.090510732s ago: executing program 0 (id=127): r0 = syz_open_dev$sg(&(0x7f00000005c0), 0x4326, 0x101041) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, 0x0) 7.958182735s ago: executing program 0 (id=128): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x7, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0xffffffff, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x202, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0x4cd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x207, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x7], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x8000402, 0x804, 0x2, 0xffd, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0x4, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000071c0)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.922294938s ago: executing program 0 (id=129): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) openat$zero(0xffffff9c, &(0x7f00000001c0), 0x18000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffcca}, 0x48) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0xc, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000005c0)={0x3, 0x2, 0x2, "0d159fe28bdca5a7951c5861adf99c93ee9288816c78b6ef0482e45b0ec1eb6e", 0x796a7f23}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r3, 0xffffffffffffffff, 0x13, 0x0, @void}, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) close_range(r5, 0xffffffffffffffff, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) 6.340862451s ago: executing program 1 (id=130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x20, {0xc5, 0x100}, 0x4}, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) 3.321794587s ago: executing program 0 (id=133): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 2.978670124s ago: executing program 3 (id=134): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYBLOB="0000000100746800000000000000", @ANYRES32, @ANYRES32=r2, @ANYRES16, @ANYRES8=r0, @ANYRESHEX=r1, @ANYRESDEC, @ANYBLOB="19c6a122aa9fdbe923c29588f252239fead97cbfd06585d84d95cd6770b2153a8be36579c12754c7563a29c6866d8e067c22333df8b7535a5ad558eed5245148c8e95d2a93953be79e46c298a5bbb0172a5bebd3ead2"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xa}, {0xfff1, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0xffffffff, 0x2c, 0x1, 0xd, 0x400, 0x80000001}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xa}]}}}]}, 0x60}}, 0x44000890) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x400c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000240)="b6", 0x1, 0x40081, &(0x7f00000001c0)={0xa, 0x2, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000008}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000d40)='veno', 0xd2) shutdown(r5, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) mkdir(0x0, 0x0) sendfile(r4, r7, 0x0, 0x106f) 2.618147153s ago: executing program 4 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd2f, 0x10b52c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xe, 0x6, 0x4, 0x2, 0x4000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24018084}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)}], 0x1}, 0x4005) 2.039892785s ago: executing program 0 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fallocate(r0, 0x0, 0x37e9, 0x2f92) 1.951302437s ago: executing program 4 (id=138): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000d3f000/0x2000)=nil, 0x2000, 0x16) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 1.761682041s ago: executing program 4 (id=139): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_matches\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) 954.254819ms ago: executing program 2 (id=140): syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) 845.176901ms ago: executing program 0 (id=141): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0xffffffffffffffff, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0xfffffffffffffffe, &(0x7f00000002c0)=0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 825.186162ms ago: executing program 3 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 790.470012ms ago: executing program 4 (id=143): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x2a3, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 655.413876ms ago: executing program 2 (id=144): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 570.240497ms ago: executing program 4 (id=145): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x8, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x3, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0x100000002, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0x1, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x4000000006, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x1000, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x3, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x2ad, 0x80000001, 0xfffffffffeffffff, 0x7]}) 570.010257ms ago: executing program 3 (id=146): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000100)={0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$kcm(0x1e, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb4, 0x83, 0xe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x27ed4f847164e2a, 0xa, 0x27, {0x27, 0xb, "663e91b2f0187ff0478fa22a61ac06299c37480000000000008000"/37}}, 0x0, 0x0, 0x0, 0x0}, 0x0) wait4(0x0, 0x0, 0x8, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) tgkill(0x0, r4, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 114.587287ms ago: executing program 2 (id=147): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f00000016c0)=[{0xf, 0xe210, 0x0, 0x0}, {0x4, 0x1, 0x0, 0x0}], 0x2}) 0s ago: executing program 4 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd2f, 0x10b52c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xe, 0x6, 0x4, 0x2, 0x4000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24018084}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)="27030200dc0f14000e000f00fdc6c1020000ff8407c2fb", 0x17}], 0x1}, 0x4005) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 46.725314][ T4174] cgroup: Unknown subsys name 'net' [ 46.829460][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.010635][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.312450][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 49.343739][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 49.406373][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 49.434839][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 49.474469][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.482373][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.490207][ T4187] device bridge_slave_0 entered promiscuous mode [ 49.519673][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.530886][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.539516][ T4187] device bridge_slave_1 entered promiscuous mode [ 49.565033][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.572519][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.580144][ T4192] device bridge_slave_0 entered promiscuous mode [ 49.592448][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.605782][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.619566][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.626777][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.635058][ T4192] device bridge_slave_1 entered promiscuous mode [ 49.658292][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 49.701362][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.708435][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.716943][ T4186] device bridge_slave_0 entered promiscuous mode [ 49.725855][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.737329][ T4187] team0: Port device team_slave_0 added [ 49.756054][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.764105][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.771962][ T4186] device bridge_slave_1 entered promiscuous mode [ 49.780071][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.790424][ T4187] team0: Port device team_slave_1 added [ 49.804950][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.812424][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.820027][ T4198] device bridge_slave_0 entered promiscuous mode [ 49.851965][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.859040][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.867089][ T4198] device bridge_slave_1 entered promiscuous mode [ 49.886364][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.896379][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.903519][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.929558][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.946914][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.953982][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.980426][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.000048][ T4192] team0: Port device team_slave_0 added [ 50.007435][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.032602][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.039760][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.047675][ T4196] device bridge_slave_0 entered promiscuous mode [ 50.056731][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.068309][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.078730][ T4192] team0: Port device team_slave_1 added [ 50.110071][ T4187] device hsr_slave_0 entered promiscuous mode [ 50.116733][ T4187] device hsr_slave_1 entered promiscuous mode [ 50.124029][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.131087][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.139430][ T4196] device bridge_slave_1 entered promiscuous mode [ 50.157737][ T4186] team0: Port device team_slave_0 added [ 50.181900][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.188865][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.214968][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.226936][ T4186] team0: Port device team_slave_1 added [ 50.242127][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.258017][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.268834][ T4198] team0: Port device team_slave_0 added [ 50.275454][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.282667][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.308737][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.341187][ T4198] team0: Port device team_slave_1 added [ 50.364082][ T4196] team0: Port device team_slave_0 added [ 50.383250][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.390213][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.417577][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.429673][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.436834][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.463046][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.478074][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.485160][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.511111][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.523700][ T4196] team0: Port device team_slave_1 added [ 50.544570][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.551699][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.577655][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.613966][ T4192] device hsr_slave_0 entered promiscuous mode [ 50.620838][ T4192] device hsr_slave_1 entered promiscuous mode [ 50.628084][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.636007][ T4192] Cannot create hsr debugfs directory [ 50.657425][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.664438][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.690396][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.733189][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.740154][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.766457][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.785269][ T4186] device hsr_slave_0 entered promiscuous mode [ 50.792470][ T4186] device hsr_slave_1 entered promiscuous mode [ 50.799069][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.806769][ T4186] Cannot create hsr debugfs directory [ 50.818063][ T4198] device hsr_slave_0 entered promiscuous mode [ 50.825020][ T4198] device hsr_slave_1 entered promiscuous mode [ 50.832226][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.839776][ T4198] Cannot create hsr debugfs directory [ 50.927749][ T4196] device hsr_slave_0 entered promiscuous mode [ 50.934954][ T4196] device hsr_slave_1 entered promiscuous mode [ 50.941565][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.949135][ T4196] Cannot create hsr debugfs directory [ 51.032161][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 51.042132][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 51.111454][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 51.117940][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 51.129521][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 51.135218][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.163717][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.176610][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.186710][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.216461][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.227142][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.237163][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.249264][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.321722][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.332193][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.341767][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.351453][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.397474][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.426365][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.439092][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.455690][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.465664][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.478191][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.488122][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.497416][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.527451][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.534916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.543432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.553704][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.582397][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.594527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.606219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.615496][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.622742][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.633430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.644241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.654108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.664293][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.671391][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.679451][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.690739][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.700468][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.712285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.720645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.729475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.739479][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.746548][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.762740][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.771512][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.784260][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.794115][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.803014][ T1489] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.810076][ T1489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.837309][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.846634][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.855920][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.864989][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.875066][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.883737][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.895173][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.906911][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.916609][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.925641][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.954438][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.962634][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.970949][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.990347][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.004467][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.012639][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.021769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.030573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.043981][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.055212][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.068484][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.077861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.086603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.095286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.103198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.115670][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.146841][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.159655][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.183311][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.193243][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.202348][ T1489] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.209404][ T1489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.218035][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.227421][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.236042][ T1489] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.243115][ T1489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.250962][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.259690][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.268440][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.276935][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.285659][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.294722][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.303340][ T1489] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.310601][ T1489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.318463][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.327859][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.337180][ T1489] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.344267][ T1489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.352414][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.360419][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.368879][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.382545][ T1489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.402214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.413825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.443887][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.472217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.502376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.510916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.520699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.529706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.538876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.547878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.556609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.565609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.575404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.584006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.593282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.610619][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.625608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.641154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.650475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.666555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.676414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.684866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.701468][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.716916][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.750258][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.758131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.767227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.775368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.784014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.797079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.804721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.824560][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.847067][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.855573][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.878111][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.897077][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.906146][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.915172][ T561] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.922294][ T561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.941279][ T4187] device veth0_vlan entered promiscuous mode [ 52.972421][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.980883][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.991186][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.001822][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.010571][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.020020][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.029184][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.038582][ T561] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.045686][ T561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.053413][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.063366][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.072324][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.080038][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.089706][ T4187] device veth1_vlan entered promiscuous mode [ 53.122158][ T4226] Bluetooth: hci1: command 0x041b tx timeout [ 53.129412][ T4226] Bluetooth: hci0: command 0x041b tx timeout [ 53.130918][ T4198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.147706][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.161859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.169826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.178645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.186350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.194702][ T25] Bluetooth: hci2: command 0x041b tx timeout [ 53.197411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.200902][ T25] Bluetooth: hci4: command 0x041b tx timeout [ 53.208976][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 53.215122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.229221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.237339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.245030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.254361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.263309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.272772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.281097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.289482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.298070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.306920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.316130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.324626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.333235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.340950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.363977][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.373771][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.386484][ T4192] device veth0_vlan entered promiscuous mode [ 53.393916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.403815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.415647][ T4187] device veth0_macvtap entered promiscuous mode [ 53.448965][ T4192] device veth1_vlan entered promiscuous mode [ 53.465848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.476448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.486208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.504023][ T4187] device veth1_macvtap entered promiscuous mode [ 53.522828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.531671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.539965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.549956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.560142][ T4186] device veth0_vlan entered promiscuous mode [ 53.580493][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.613600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.626391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.635861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.645072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.653774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.663509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.676559][ T4192] device veth0_macvtap entered promiscuous mode [ 53.687816][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.704812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.713743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.723798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.732658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.740739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.749064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.757915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.768037][ T4192] device veth1_macvtap entered promiscuous mode [ 53.775932][ T4196] device veth0_vlan entered promiscuous mode [ 53.793186][ T4186] device veth1_vlan entered promiscuous mode [ 53.802164][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.811045][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.822631][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.832160][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.850084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.858344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.867260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.874988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.888346][ T4196] device veth1_vlan entered promiscuous mode [ 53.896882][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.923278][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.941739][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.954561][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.967217][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.977870][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.989164][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.004263][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.012335][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.020260][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.028809][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.038149][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.047693][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.057027][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.100428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.114312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.129513][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.139438][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.148455][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.157975][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.180822][ T4186] device veth0_macvtap entered promiscuous mode [ 54.210874][ T4196] device veth0_macvtap entered promiscuous mode [ 54.225557][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.237967][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.247688][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.280725][ T4196] device veth1_macvtap entered promiscuous mode [ 54.289375][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.297803][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.316350][ T4186] device veth1_macvtap entered promiscuous mode [ 54.369471][ T561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.377315][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.378720][ T561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.394627][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.405784][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.416570][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.427485][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.447212][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.457819][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.468031][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.480485][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.490596][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.502304][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.514093][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.525674][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.529822][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.544194][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.548748][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.562562][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.573378][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.585213][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.592897][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.600941][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.608874][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.618299][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.627674][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.636831][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.645526][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.654614][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.663462][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.671130][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.679775][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.693822][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.705566][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.716657][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.727364][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.737475][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.748119][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.760126][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.776936][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.789176][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.798394][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.807354][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.831189][ T4198] device veth0_vlan entered promiscuous mode [ 54.839292][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.848362][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.859542][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.868100][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.876888][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.885049][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.916286][ T4198] device veth1_vlan entered promiscuous mode [ 54.931014][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.939878][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.949625][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.958623][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.979533][ T561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.987744][ T561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.996538][ T561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.009093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.017292][ T561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.018973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.033329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.041010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.060986][ T4198] device veth0_macvtap entered promiscuous mode [ 55.090804][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.104444][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.115464][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.129024][ T4198] device veth1_macvtap entered promiscuous mode [ 55.203207][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 55.204978][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.226083][ T4261] Bluetooth: hci1: command 0x040f tx timeout [ 55.244451][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.256597][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.272029][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 55.273564][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 55.285808][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 55.293616][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.303595][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.315066][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.325036][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.335805][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.348053][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.400853][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.436064][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.453897][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.464976][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.475097][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.516256][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.713971][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 55.726680][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 55.763812][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.895397][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.956254][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.020853][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.194180][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.252202][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.276446][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.337621][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.388375][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.438871][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.491068][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.556100][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.574508][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.621764][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.106381][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.135874][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.201899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.221217][ C0] sched: RT throttling activated [ 57.243598][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.256348][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.265514][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.303182][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.449213][ T561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.523889][ T561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.751958][ T25] Bluetooth: hci5: command 0x1003 tx timeout [ 57.758279][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 57.803143][ T4226] Bluetooth: hci1: command 0x0419 tx timeout [ 57.809201][ T4226] Bluetooth: hci0: command 0x0419 tx timeout [ 57.819509][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.820540][ T4261] Bluetooth: hci3: command 0x0419 tx timeout [ 57.834504][ T4261] Bluetooth: hci4: command 0x0419 tx timeout [ 57.886318][ T4261] Bluetooth: hci2: command 0x0419 tx timeout [ 57.972444][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.010906][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.048752][ T4275] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 58.057599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.070168][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.103685][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.112874][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.004813][ T4229] Bluetooth: hci5: command 0x1001 tx timeout [ 60.053929][ T4310] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.10'. [ 60.066729][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 61.175608][ T4321] device veth0_macvtap left promiscuous mode [ 61.417260][ T4334] comedi comedi0: pcm3724: I/O port conflict (0x4,16) [ 61.833929][ T4321] syz.3.10 (4321) used greatest stack depth: 21024 bytes left [ 62.153595][ T25] Bluetooth: hci5: command 0x1009 tx timeout [ 62.221826][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.222859][ T4332] fuse: Bad value for 'fd' [ 62.841347][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 63.012196][ T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 63.055604][ T7] usb 1-1: config 0 has no interface number 0 [ 63.351755][ T7] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 63.437215][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.579797][ T7] usb 1-1: Product: syz [ 63.584489][ T7] usb 1-1: Manufacturer: syz [ 63.589110][ T7] usb 1-1: SerialNumber: syz [ 63.599502][ T7] usb 1-1: config 0 descriptor?? [ 63.665511][ T7] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 63.706695][ T7] usb 1-1: selecting invalid altsetting 1 [ 63.742084][ T7] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 63.829378][ T7] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 63.886067][ T7] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 63.944590][ T7] usb 1-1: media controller created [ 64.039760][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 64.261444][ T7] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 64.268793][ T7] zl10353_read_register: readreg error (reg=127, ret==-71) [ 64.762035][ T7] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 64.832828][ T4388] device syzkaller0 entered promiscuous mode [ 64.848681][ T4191] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 64.914206][ T7] usb 1-1: USB disconnect, device number 2 [ 66.893791][ T4421] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.109519][ T4424] ODEBUG: Out of memory. ODEBUG disabled [ 68.611384][ T4456] device syzkaller0 entered promiscuous mode [ 69.637839][ T4424] Set syz1 is full, maxelem 65536 reached [ 71.280314][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.288202][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.929371][ T4487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.081252][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 76.206554][ T4533] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 76.749444][ T1346] cfg80211: failed to load regulatory.db [ 78.372817][ T4540] device syzkaller0 entered promiscuous mode [ 78.471278][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.121991][ T4227] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.411315][ T4227] usb 3-1: Using ep0 maxpacket: 16 [ 79.479613][ T4554] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.59'. [ 79.521306][ T4233] usb 5-1: device not accepting address 2, error -71 [ 79.551485][ T4227] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 79.551530][ T4227] usb 3-1: config 0 has no interface number 0 [ 79.551560][ T4227] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 79.551583][ T4227] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 79.731530][ T4227] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 79.757389][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 79.842997][ T4227] usb 3-1: Product: syz [ 79.852107][ T4227] usb 3-1: SerialNumber: syz [ 79.877804][ T4227] usb 3-1: config 0 descriptor?? [ 80.024640][ T4227] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 80.410636][ T4227] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input5 [ 80.481583][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 80.794622][ T1346] usb 3-1: USB disconnect, device number 2 [ 80.801744][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 80.808974][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 80.821251][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 80.856277][ T1346] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 81.738375][ T4589] device syzkaller0 entered promiscuous mode [ 81.953891][ T4596] device syzkaller0 entered promiscuous mode [ 82.531238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 83.191268][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.271222][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.301679][ T4622] misc userio: Invalid payload size [ 83.381222][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.394476][ T4624] netlink: 128 bytes leftover after parsing attributes in process `syz.1.78'. [ 83.451222][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.491222][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.511236][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.521233][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.668137][ T4626] binder: 4625:4626 unknown command 1074553619 [ 83.717522][ T4626] binder: 4625:4626 ioctl c0306201 200000000040 returned -22 [ 84.504410][ T4662] device syzkaller0 entered promiscuous mode [ 87.816293][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 87.822712][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 90.222488][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 90.228588][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 91.177104][ T4698] netlink: 'syz.3.92': attribute type 1 has an invalid length. [ 91.230495][ T4698] netlink: 'syz.3.92': attribute type 2 has an invalid length. [ 91.315554][ T4703] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4706] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4703] [ 92.359635][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 93.359720][ T4723] device syzkaller0 entered promiscuous mode [ 96.334836][ T7] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 96.711740][ T7] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 96.740061][ T7] usb 4-1: config 0 has no interface number 0 [ 96.809242][ T7] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 96.840082][ T7] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 96.878540][ T7] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 97.010232][ T7] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.059068][ T7] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 97.101266][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.116264][ T4644] Set syz1 is full, maxelem 65536 reached [ 97.123798][ T7] usb 4-1: config 0 descriptor?? [ 97.153167][ T4742] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.193194][ T7] ldusb 4-1:0.55: Interrupt in endpoint not found [ 97.333124][ T4769] device syzkaller0 entered promiscuous mode [ 97.419439][ T4229] usb 4-1: USB disconnect, device number 2 [ 97.683606][ T4232] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.461292][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 98.771924][ T4232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.889969][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.919404][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 99.031366][ T4232] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 99.041923][ T4232] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.161708][ T4232] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 99.170929][ T4232] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 99.291928][ T4232] usb 3-1: Manufacturer: syz [ 99.298587][ T4232] usb 3-1: config 0 descriptor?? [ 101.071481][ T4232] rc_core: IR keymap rc-hauppauge not found [ 101.956552][ T4232] Registered IR keymap rc-empty [ 101.961989][ T4232] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 101.991470][ T4232] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.032539][ T4232] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 102.051479][ T4232] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 102.125913][ T4232] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.181388][ T4232] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.232132][ T4232] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.271315][ T4232] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.311609][ T4232] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.351373][ T4232] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.381970][ T4232] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.417159][ T4815] device syzkaller0 entered promiscuous mode [ 102.431357][ T4232] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.471395][ T4232] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.511379][ T4232] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.552761][ T4232] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 102.561289][ T1346] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.571421][ T4232] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 102.597371][ T4232] usb 3-1: USB disconnect, device number 3 [ 102.663719][ T4817] tmpfs: Unknown parameter 'nr_block00000000000000000000' [ 102.772679][ T4821] input: syz1 as /devices/virtual/input/input7 [ 102.821365][ T1346] usb 5-1: Using ep0 maxpacket: 16 [ 102.971545][ T1346] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 102.983556][ T1346] usb 5-1: config 0 has no interface number 0 [ 103.000390][ T1346] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.040570][ T1346] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.221515][ T1346] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 103.230589][ T1346] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 103.297364][ T1346] usb 5-1: Product: syz [ 103.305753][ T1346] usb 5-1: SerialNumber: syz [ 103.328289][ T1346] usb 5-1: config 0 descriptor?? [ 103.398019][ T1346] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 103.409262][ T1346] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input8 [ 103.641292][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 103.911869][ T1346] usb 5-1: USB disconnect, device number 4 [ 103.921266][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 103.928235][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 103.959288][ T1346] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 104.186253][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.562229][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 107.421330][ T13] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 107.740404][ T13] usb 1-1: can't read configurations, error -71 [ 108.402149][ T4228] Bluetooth: hci5: command 0x1003 tx timeout [ 108.412211][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 109.475370][ T4805] Set syz1 is full, maxelem 65536 reached [ 110.058834][ T4876] Scaler: ================= START STATUS ================= [ 110.067235][ T4876] Scaler: ================== END STATUS ================== [ 110.175402][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 110.188931][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 110.199038][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 110.209627][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 110.219170][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 110.681407][ T4228] Bluetooth: hci5: command 0x1001 tx timeout [ 110.687498][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 110.789800][ T4883] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 110.799612][ T4883] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 4883, name: syz.3.146 [ 110.808569][ T4883] 1 lock held by syz.3.146/4883: [ 110.813509][ T4883] #0: ffffffff8c344838 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 110.823294][ T4883] irq event stamp: 580 [ 110.827360][ T4883] hardirqs last enabled at (579): [] asm_sysvec_reschedule_ipi+0x16/0x20 [ 110.837433][ T4883] hardirqs last disabled at (580): [] _raw_spin_lock_irq+0x86/0xf0 [ 110.846908][ T4883] softirqs last enabled at (516): [] ip_setsockopt+0x58a/0x31e0 [ 110.856200][ T4883] softirqs last disabled at (514): [] release_sock+0x2b/0x1b0 [ 110.865227][ T4883] Preemption disabled at: [ 110.865236][ T4883] [<0000000000000000>] 0x0 [ 110.873972][ T4883] CPU: 1 PID: 4883 Comm: syz.3.146 Not tainted syzkaller #0 [ 110.881256][ T4883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 110.891323][ T4883] Call Trace: [ 110.894602][ T4883] [ 110.897531][ T4883] dump_stack_lvl+0x188/0x250 [ 110.902213][ T4883] ? ip_setsockopt+0x58a/0x31e0 [ 110.907068][ T4883] ? show_regs_print_info+0x20/0x20 [ 110.912266][ T4883] ? load_image+0x410/0x410 [ 110.916784][ T4883] ___might_sleep+0x493/0x610 [ 110.921470][ T4883] ? __might_sleep+0xf0/0xf0 [ 110.926070][ T4883] down_read+0x20/0x2e0 [ 110.930227][ T4883] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 110.935518][ T4883] ? kernfs_find_ns+0x510/0x510 [ 110.940375][ T4883] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 110.946532][ T4883] cgroup_get_from_path+0x5f/0x2f0 [ 110.951648][ T4883] cgroup_mt_check_v1+0x1d2/0x2d0 [ 110.956688][ T4883] xt_check_match+0x499/0xc50 [ 110.961390][ T4883] ? xt_check_proc_name+0x240/0x240 [ 110.966592][ T4883] ? xt_find_match+0x19b/0x210 [ 110.971358][ T4883] ? xt_find_match+0x1e1/0x210 [ 110.976123][ T4883] translate_table+0x1481/0x1f60 [ 110.981083][ T4883] ? ipt_register_table+0x7b0/0x7b0 [ 110.986284][ T4883] ? __might_fault+0xb7/0x110 [ 110.990968][ T4883] ? __lock_acquire+0x7b50/0x7b50 [ 110.996004][ T4883] ? _copy_from_user+0x111/0x170 [ 111.000951][ T4883] do_ipt_set_ctl+0x963/0xd70 [ 111.005638][ T4883] ? nf_setsockopt+0x218/0x280 [ 111.010409][ T4883] ? ipt_unregister_table_exit+0x220/0x220 [ 111.016216][ T4883] ? __lock_acquire+0x7b50/0x7b50 [ 111.021242][ T4883] ? __mutex_lock_common+0x435/0x2400 [ 111.026634][ T4883] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 111.032274][ T4883] ? mutex_unlock+0x10/0x10 [ 111.036781][ T4883] ? __local_bh_enable_ip+0x136/0x1c0 [ 111.042150][ T4883] ? lockdep_hardirqs_on+0x94/0x140 [ 111.047350][ T4883] ? __local_bh_enable_ip+0x136/0x1c0 [ 111.052723][ T4883] nf_setsockopt+0x25f/0x280 [ 111.057319][ T4883] ip_setsockopt+0x29c3/0x31e0 [ 111.062092][ T4883] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 111.067473][ T4883] ? __might_sleep+0xf0/0xf0 [ 111.072070][ T4883] ? rcu_lock_release+0x9/0x20 [ 111.076840][ T4883] tcp_setsockopt+0x229/0x1e60 [ 111.081611][ T4883] ? aa_sk_perm+0x7dc/0x910 [ 111.086123][ T4883] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 111.091500][ T4883] ? __sanitizer_cov_trace_pc+0x13/0x60 [ 111.097051][ T4883] ? aa_af_perm+0x340/0x340 [ 111.101558][ T4883] ? __fget_files+0x402/0x470 [ 111.106239][ T4883] ? aa_sock_opt_perm+0x74/0x100 [ 111.111175][ T4883] ? sock_common_setsockopt+0x32/0xb0 [ 111.116550][ T4883] ? sock_common_recvmsg+0x1c0/0x1c0 [ 111.121839][ T4883] __sys_setsockopt+0x2bf/0x3d0 [ 111.126700][ T4883] __x64_sys_setsockopt+0xb1/0xc0 [ 111.131727][ T4883] do_syscall_64+0x4c/0xa0 [ 111.136141][ T4883] ? clear_bhb_loop+0x30/0x80 [ 111.140818][ T4883] ? clear_bhb_loop+0x30/0x80 [ 111.145495][ T4883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.151400][ T4883] RIP: 0033:0x7f6d7bc2ae59 [ 111.155814][ T4883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.175420][ T4883] RSP: 002b:00007f6d79e62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.183853][ T4883] RAX: ffffffffffffffda RBX: 00007f6d7beb3090 RCX: 00007f6d7bc2ae59 [ 111.191841][ T4883] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000009 [ 111.199813][ T4883] RBP: 00007f6d7bcc0e6f R08: 00000000000022f8 R09: 0000000000000000 [ 111.207786][ T4883] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 111.215759][ T4883] R13: 00007f6d7beb3128 R14: 00007f6d7beb3090 R15: 00007ffcc610e7f8 [ 111.223747][ T4883] [ 111.226765][ T4883] [ 111.229079][ T4883] ============================= [ 111.233913][ T4883] [ BUG: Invalid wait context ] [ 111.238747][ T4883] syzkaller #0 Tainted: G W [ 111.244541][ T4883] ----------------------------- [ 111.249374][ T4883] syz.3.146/4883 is trying to lock: [ 111.254559][ T4883] ffffffff8c44fc30 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2c0 [ 111.264046][ T4883] other info that might help us debug this: [ 111.269922][ T4883] context-{4:4} [ 111.273368][ T4883] 1 lock held by syz.3.146/4883: [ 111.278292][ T4883] #0: ffffffff8c344838 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 111.288038][ T4883] stack backtrace: [ 111.291747][ T4883] CPU: 1 PID: 4883 Comm: syz.3.146 Tainted: G W syzkaller #0 [ 111.300415][ T4883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.310468][ T4883] Call Trace: [ 111.313745][ T4883] [ 111.316678][ T4883] dump_stack_lvl+0x188/0x250 [ 111.321360][ T4883] ? show_regs_print_info+0x20/0x20 [ 111.326559][ T4883] ? load_image+0x410/0x410 [ 111.331059][ T4883] ? _printk+0xda/0x130 [ 111.335214][ T4883] __lock_acquire+0x1bb7/0x7b50 [ 111.340076][ T4883] ? verify_lock_unused+0x140/0x140 [ 111.345270][ T4883] ? __printk_cpu_unlock+0x5f/0x70 [ 111.350379][ T4883] ? dump_stack_lvl+0x1fd/0x250 [ 111.355224][ T4883] ? ip_setsockopt+0x58a/0x31e0 [ 111.360070][ T4883] ? show_regs_print_info+0x20/0x20 [ 111.365265][ T4883] ? load_image+0x410/0x410 [ 111.369773][ T4883] lock_acquire+0x19e/0x400 [ 111.374277][ T4883] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 111.379736][ T4883] ? __might_sleep+0xf0/0xf0 [ 111.384324][ T4883] ? read_lock_is_recursive+0x10/0x10 [ 111.389701][ T4883] down_read+0x44/0x2e0 [ 111.393861][ T4883] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 111.399318][ T4883] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 111.404604][ T4883] ? kernfs_find_ns+0x510/0x510 [ 111.409454][ T4883] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 111.415608][ T4883] cgroup_get_from_path+0x5f/0x2f0 [ 111.420724][ T4883] cgroup_mt_check_v1+0x1d2/0x2d0 [ 111.425747][ T4883] xt_check_match+0x499/0xc50 [ 111.430421][ T4883] ? xt_check_proc_name+0x240/0x240 [ 111.435620][ T4883] ? xt_find_match+0x19b/0x210 [ 111.440387][ T4883] ? xt_find_match+0x1e1/0x210 [ 111.445148][ T4883] translate_table+0x1481/0x1f60 [ 111.450092][ T4883] ? ipt_register_table+0x7b0/0x7b0 [ 111.455289][ T4883] ? __might_fault+0xb7/0x110 [ 111.459960][ T4883] ? __lock_acquire+0x7b50/0x7b50 [ 111.464989][ T4883] ? _copy_from_user+0x111/0x170 [ 111.469937][ T4883] do_ipt_set_ctl+0x963/0xd70 [ 111.474620][ T4883] ? nf_setsockopt+0x218/0x280 [ 111.479385][ T4883] ? ipt_unregister_table_exit+0x220/0x220 [ 111.485190][ T4883] ? __lock_acquire+0x7b50/0x7b50 [ 111.490211][ T4883] ? __mutex_lock_common+0x435/0x2400 [ 111.495587][ T4883] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 111.501221][ T4883] ? mutex_unlock+0x10/0x10 [ 111.505725][ T4883] ? __local_bh_enable_ip+0x136/0x1c0 [ 111.511097][ T4883] ? lockdep_hardirqs_on+0x94/0x140 [ 111.516300][ T4883] ? __local_bh_enable_ip+0x136/0x1c0 [ 111.521702][ T4883] nf_setsockopt+0x25f/0x280 [ 111.526302][ T4883] ip_setsockopt+0x29c3/0x31e0 [ 111.531070][ T4883] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 111.536442][ T4883] ? __might_sleep+0xf0/0xf0 [ 111.541031][ T4883] ? rcu_lock_release+0x9/0x20 [ 111.545799][ T4883] tcp_setsockopt+0x229/0x1e60 [ 111.550565][ T4883] ? aa_sk_perm+0x7dc/0x910 [ 111.555064][ T4883] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 111.560433][ T4883] ? __sanitizer_cov_trace_pc+0x13/0x60 [ 111.565977][ T4883] ? aa_af_perm+0x340/0x340 [ 111.570480][ T4883] ? __fget_files+0x402/0x470 [ 111.575156][ T4883] ? aa_sock_opt_perm+0x74/0x100 [ 111.580091][ T4883] ? sock_common_setsockopt+0x32/0xb0 [ 111.585464][ T4883] ? sock_common_recvmsg+0x1c0/0x1c0 [ 111.590744][ T4883] __sys_setsockopt+0x2bf/0x3d0 [ 111.595603][ T4883] __x64_sys_setsockopt+0xb1/0xc0 [ 111.600639][ T4883] do_syscall_64+0x4c/0xa0 [ 111.605054][ T4883] ? clear_bhb_loop+0x30/0x80 [ 111.609730][ T4883] ? clear_bhb_loop+0x30/0x80 [ 111.614416][ T4883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.620307][ T4883] RIP: 0033:0x7f6d7bc2ae59 [ 111.624723][ T4883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.644330][ T4883] RSP: 002b:00007f6d79e62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.652754][ T4883] RAX: ffffffffffffffda RBX: 00007f6d7beb3090 RCX: 00007f6d7bc2ae59 [ 111.660728][ T4883] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000009 [ 111.668697][ T4883] RBP: 00007f6d7bcc0e6f R08: 00000000000022f8 R09: 0000000000000000 [ 111.676670][ T4883] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 111.684638][ T4883] R13: 00007f6d7beb3128 R14: 00007f6d7beb3090 R15: 00007ffcc610e7f8 [ 111.692624][ T4883] [ 111.701412][ T4883] xt_cgroup: invalid path, errno=-2 [ 111.995375][ T4887] device syzkaller0 entered promiscuous mode [ 112.301270][ T4316] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.541329][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 112.681903][ T4316] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.690034][ T4316] usb 3-1: config 0 has no interface number 0 [ 112.711256][ T1108] Bluetooth: hci5: command 0x1009 tx timeout [ 112.882583][ T4316] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 112.891715][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.899712][ T4316] usb 3-1: Product: syz [ 112.903932][ T4316] usb 3-1: Manufacturer: syz [ 112.908519][ T4316] usb 3-1: SerialNumber: syz [ 112.914086][ T4316] usb 3-1: config 0 descriptor?? [ 112.962653][ T4316] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 112.971479][ T4316] usb 3-1: selecting invalid altsetting 1 [ 112.977183][ T4316] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 112.985324][ T4316] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 112.995611][ T4316] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 113.003904][ T4316] usb 3-1: media controller created [ 113.014780][ T4316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.081335][ T4316] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 114.088421][ T4316] zl10353_read_register: readreg error (reg=127, ret==-110) [ 114.088456][ T4888] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 114.111329][ T4316] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 114.127196][ T4316] usb 3-1: USB disconnect, device number 4