last executing test programs: 46.200057116s ago: executing program 3 (id=30): openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 44.059192687s ago: executing program 3 (id=33): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, 0x0, 0x0) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r1, @ANYBLOB="000000000000000008000d00000016"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x81) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) 39.70625966s ago: executing program 3 (id=40): r0 = syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0x465d, 0x800, 0x6, 0x14a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x507, 0x966, 0x21, 0x0, 0x0) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 38.090020386s ago: executing program 3 (id=44): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 35.645993s ago: executing program 3 (id=47): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 31.787827306s ago: executing program 3 (id=50): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, 0x0, 0x0) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r1, @ANYBLOB="000000000000000008000d00000016"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x81) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) 30.281682343s ago: executing program 0 (id=51): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, 0x0, 0x0) 28.64982247s ago: executing program 0 (id=54): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x3800000000000000, 0xa401) 22.762736409s ago: executing program 4 (id=60): openat$kvm(0xffffffffffffff9c, 0x0, 0x98980, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0xa0183) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000100)={[0xff]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2040) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) 22.489450194s ago: executing program 1 (id=61): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) 21.520974339s ago: executing program 0 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x64}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r4, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000040)={0x0, 0x0, r7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r9, 0xc0040d07, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000012000300686173683a6e65742c706f72740000000c000780"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) 18.54945116s ago: executing program 4 (id=64): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8200, 0xf801, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0xff, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @remote, @rand_addr=0x64010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x7ff, 0x9, 0x7, 0x3}, {0xfff, 0x6, 0x7, 0x2}, {0x4, 0x7, 0x9, 0x3}]}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff0000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$packet(0x11, 0x3, 0x300) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x60) 17.506093695s ago: executing program 1 (id=65): r0 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_setup(0x8d4, &(0x7f00000000c0)={0x0, 0xf970, 0x3010, 0x4, 0x310}, &(0x7f0000000840)=0x0, &(0x7f0000000880)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) socket$inet6(0xa, 0x80002, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 15.908004417s ago: executing program 32 (id=50): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, 0x0, 0x0) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r1, @ANYBLOB="000000000000000008000d00000016"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x81) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) 13.967836568s ago: executing program 2 (id=68): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x3800000000000000, 0xa401) 11.893868145s ago: executing program 2 (id=69): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @null, 0x1}, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48) 9.493812929s ago: executing program 4 (id=70): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={r7, 0x3ff}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32, @ANYBLOB="000000000000000008000d00000016"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x81) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) 9.420168907s ago: executing program 0 (id=71): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x738, 0x1705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x2d, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = dup3(r2, r1, 0x0) recvmmsg$unix(r4, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) 8.315517215s ago: executing program 1 (id=72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x1ff, 0x0, 0x0, 0x2004cb, 0x7ff, 0x1770, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2, 0x0, 0x5], 0xffff1000, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.19944491s ago: executing program 4 (id=73): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) syz_open_dev$sndctrl(0x0, 0x9, 0x400000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x1f29, 0xc000, 0x2, 0xc1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 6.942302485s ago: executing program 4 (id=74): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtaction={0x154, 0x30, 0x1, 0x0, 0x0, {}, [{0x140, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0xf4, 0x1, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffa}, @local, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff6, 0xe, 0x0, 0x1, 0x4}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x42}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xffffffff, 0x2, 0x9, 0x7fff}, @multicast1, @rand_addr=0x64010101, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x4, 0x20000000, 0xfffffffc, 0x8000}, @local, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xef2c, 0x1ff, 0x2, 0xb, 0xff}, @multicast2, @empty, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0xc1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x4, 0xf}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r4, &(0x7f0000000180)='./file0\x00', r4, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0xe090, &(0x7f00000000c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@fscache}, {@cache_readahead}, {@fscache}, {@afid={'afid', 0x3d, 0x4}}, {@cache_readahead}, {@aname={'aname', 0x3d, 'port'}}]}}) 6.868872228s ago: executing program 2 (id=75): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0x401) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getgroups(0x0, &(0x7f0000000080)) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fcffffffffffff84c900b8785d960000000000000000000000000f00000000000100000000000000000100000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01812861ac63dfbb721032b8c300110000003aab00000000000000000000000000000300", "90be8b1c551265406c7f306003d8a0f4bd00", [0x1, 0xfffffffffffffffc]}}) 5.718602739s ago: executing program 2 (id=76): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x115) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000580), 0x109000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) sendfile(r0, r1, 0x0, 0x4) 4.121045906s ago: executing program 0 (id=77): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 3.325870667s ago: executing program 2 (id=78): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 3.28513664s ago: executing program 1 (id=79): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@dev, 0x0, 0xfffe, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 1.738511347s ago: executing program 2 (id=80): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffd, 0x32e}, 0x0, 0x0) 1.38732081s ago: executing program 0 (id=81): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0xd809, 0x0, 0x0}], 0x2}) syz_usb_control_io(r0, 0x0, 0x0) 1.265625976s ago: executing program 1 (id=82): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={r7, 0x3ff}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32, @ANYBLOB="000000000000000008000d00000016"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x81) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) 57.345809ms ago: executing program 4 (id=83): r0 = syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0x465d, 0x800, 0x6, 0x14a}, &(0x7f00000006c0), &(0x7f0000000280)) io_uring_enter(r0, 0x507, 0x966, 0x21, 0x0, 0x0) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 0s ago: executing program 1 (id=84): r0 = syz_open_dev$loop(&(0x7f0000000180), 0xfff, 0x420040) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000380)={0x4cba7c19, 0x3, 0x1}) mknod(&(0x7f0000000040)='./file1/file4\x00', 0x8000, 0x3f) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000e8ffffffffff0b00000048000580080001"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.35' (ED25519) to the list of known hosts. [ 91.322240][ T5786] cgroup: Unknown subsys name 'net' [ 91.562842][ T5786] cgroup: Unknown subsys name 'cpuset' [ 91.617957][ T5786] cgroup: Unknown subsys name 'rlimit' [ 91.912255][ T31] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 93.581123][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.112383][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.115579][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.129465][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.132701][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.150914][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.152764][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.153385][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.154796][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.155639][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.170653][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.192151][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.205433][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.229851][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.232353][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.235430][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.237137][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.250016][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.258857][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.259967][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.261065][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.264219][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.265311][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.292463][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.319262][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.324091][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.399565][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 98.467705][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 98.633415][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 98.749537][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 98.779660][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 99.268897][ T5804] Bluetooth: hci0: command tx timeout [ 99.283166][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.284537][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.284984][ T5801] bridge_slave_0: entered allmulticast mode [ 99.286979][ T5801] bridge_slave_0: entered promiscuous mode [ 99.424897][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.425070][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.425196][ T5801] bridge_slave_1: entered allmulticast mode [ 99.426955][ T5801] bridge_slave_1: entered promiscuous mode [ 99.427402][ T5804] Bluetooth: hci2: command tx timeout [ 99.427447][ T5813] Bluetooth: hci4: command tx timeout [ 99.428156][ T5813] Bluetooth: hci1: command tx timeout [ 99.428433][ T61] Bluetooth: hci3: command tx timeout [ 99.487119][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.488175][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.488371][ T5807] bridge_slave_0: entered allmulticast mode [ 99.495293][ T5807] bridge_slave_0: entered promiscuous mode [ 99.735809][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.735980][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.736304][ T5807] bridge_slave_1: entered allmulticast mode [ 99.759753][ T5807] bridge_slave_1: entered promiscuous mode [ 100.048331][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.048498][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.048636][ T5800] bridge_slave_0: entered allmulticast mode [ 100.050436][ T5800] bridge_slave_0: entered promiscuous mode [ 100.142239][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.278511][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.278642][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.278829][ T5800] bridge_slave_1: entered allmulticast mode [ 100.280877][ T5800] bridge_slave_1: entered promiscuous mode [ 100.360989][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.361282][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.361389][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.361521][ T5802] bridge_slave_0: entered allmulticast mode [ 100.363347][ T5802] bridge_slave_0: entered promiscuous mode [ 100.379511][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.608793][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.608901][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.609059][ T5803] bridge_slave_0: entered allmulticast mode [ 100.611191][ T5803] bridge_slave_0: entered promiscuous mode [ 100.688341][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.688487][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.688618][ T5802] bridge_slave_1: entered allmulticast mode [ 100.690394][ T5802] bridge_slave_1: entered promiscuous mode [ 100.695014][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.790294][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.790430][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.790629][ T5803] bridge_slave_1: entered allmulticast mode [ 100.792794][ T5803] bridge_slave_1: entered promiscuous mode [ 101.031315][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.110735][ T5801] team0: Port device team_slave_0 added [ 101.272711][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.347559][ T5804] Bluetooth: hci0: command tx timeout [ 101.350783][ T5801] team0: Port device team_slave_1 added [ 101.353977][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.356301][ T5807] team0: Port device team_slave_0 added [ 101.472105][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.507511][ T5804] Bluetooth: hci3: command tx timeout [ 101.507547][ T5804] Bluetooth: hci1: command tx timeout [ 101.507573][ T5804] Bluetooth: hci4: command tx timeout [ 101.507687][ T61] Bluetooth: hci2: command tx timeout [ 101.580966][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.583098][ T5807] team0: Port device team_slave_1 added [ 101.661550][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.100984][ T5800] team0: Port device team_slave_0 added [ 102.179500][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.179516][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.179537][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.350093][ T5800] team0: Port device team_slave_1 added [ 102.428964][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.428983][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.429012][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.431681][ T5802] team0: Port device team_slave_0 added [ 102.432739][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.432754][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.432783][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.590229][ T5803] team0: Port device team_slave_0 added [ 102.609647][ T5802] team0: Port device team_slave_1 added [ 102.610382][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.610393][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.610413][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.730651][ T5803] team0: Port device team_slave_1 added [ 102.909337][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.909360][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.909381][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.060785][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.060804][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.060833][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.229876][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.229895][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.229916][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.250221][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.250279][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.250362][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.359186][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.359205][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.359233][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.427557][ T5804] Bluetooth: hci0: command tx timeout [ 103.460470][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.460485][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.460504][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.499075][ T5801] hsr_slave_0: entered promiscuous mode [ 103.504195][ T5801] hsr_slave_1: entered promiscuous mode [ 103.587539][ T61] Bluetooth: hci1: command tx timeout [ 103.587545][ T5813] Bluetooth: hci3: command tx timeout [ 103.587642][ T5115] Bluetooth: hci4: command tx timeout [ 103.587713][ T5804] Bluetooth: hci2: command tx timeout [ 103.647709][ T5807] hsr_slave_0: entered promiscuous mode [ 103.648881][ T5807] hsr_slave_1: entered promiscuous mode [ 103.649696][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 103.649810][ T5807] Cannot create hsr debugfs directory [ 103.929465][ T5800] hsr_slave_0: entered promiscuous mode [ 103.930860][ T5800] hsr_slave_1: entered promiscuous mode [ 103.931864][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 103.931889][ T5800] Cannot create hsr debugfs directory [ 104.404421][ T5802] hsr_slave_0: entered promiscuous mode [ 104.405491][ T5802] hsr_slave_1: entered promiscuous mode [ 104.406142][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 104.406160][ T5802] Cannot create hsr debugfs directory [ 104.439529][ T5803] hsr_slave_0: entered promiscuous mode [ 104.440528][ T5803] hsr_slave_1: entered promiscuous mode [ 104.441213][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 104.441231][ T5803] Cannot create hsr debugfs directory [ 105.508876][ T5804] Bluetooth: hci0: command tx timeout [ 105.667585][ T5813] Bluetooth: hci1: command tx timeout [ 105.667639][ T61] Bluetooth: hci4: command tx timeout [ 105.667677][ T5115] Bluetooth: hci2: command tx timeout [ 105.667712][ T5804] Bluetooth: hci3: command tx timeout [ 105.845020][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.886501][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.921120][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.977129][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.102547][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.134920][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.153337][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.210544][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.336904][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.382589][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.413730][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.472081][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.640722][ T5803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.687134][ T5803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.725608][ T5803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.772391][ T5803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.873007][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.909166][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.952282][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.990760][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.023756][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.111510][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.158963][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.159133][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.209886][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.213872][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.214015][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.319651][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.352904][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.385211][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.385382][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.432076][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.432167][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.488743][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.522447][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.545106][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.546405][ T3082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.605835][ T3082] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.610795][ T3082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.733106][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.770443][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.819704][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.819818][ T1482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.865625][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.866546][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.936958][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.017886][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.018115][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.025717][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.110550][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.110728][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.442055][ T5801] veth0_vlan: entered promiscuous mode [ 108.488206][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.525318][ T5801] veth1_vlan: entered promiscuous mode [ 108.551357][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.741606][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.785647][ T5801] veth0_macvtap: entered promiscuous mode [ 108.804548][ T5801] veth1_macvtap: entered promiscuous mode [ 108.904309][ T5807] veth0_vlan: entered promiscuous mode [ 108.904880][ T5800] veth0_vlan: entered promiscuous mode [ 108.973070][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.996646][ T5807] veth1_vlan: entered promiscuous mode [ 109.009233][ T5800] veth1_vlan: entered promiscuous mode [ 109.033625][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.071821][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.101500][ T1482] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.122230][ T1482] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.126714][ T1482] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.151554][ T1482] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.384586][ T5807] veth0_macvtap: entered promiscuous mode [ 109.415258][ T5800] veth0_macvtap: entered promiscuous mode [ 109.434224][ T5807] veth1_macvtap: entered promiscuous mode [ 109.456112][ T5800] veth1_macvtap: entered promiscuous mode [ 109.565020][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.565048][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.566602][ T5802] veth0_vlan: entered promiscuous mode [ 109.609991][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.645987][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.660744][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.686044][ T5803] veth0_vlan: entered promiscuous mode [ 109.702469][ T5802] veth1_vlan: entered promiscuous mode [ 109.706753][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.734442][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.737789][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.737808][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.773645][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.790401][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.806868][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.823221][ T5803] veth1_vlan: entered promiscuous mode [ 109.837030][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.853963][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.894950][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.906454][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.244036][ T5802] veth0_macvtap: entered promiscuous mode [ 110.264710][ T5802] veth1_macvtap: entered promiscuous mode [ 110.370297][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.370315][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.402778][ T5803] veth0_macvtap: entered promiscuous mode [ 110.459880][ T5803] veth1_macvtap: entered promiscuous mode [ 110.516122][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.564353][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.576144][ T5921] mmap: syz.3.4 (5921) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.601269][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.601287][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.664813][ T1482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.664831][ T1482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.687675][ T970] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.710545][ T970] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.712018][ T970] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.712065][ T970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.824625][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.927006][ T970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.927030][ T970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.965375][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.117820][ T3451] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.155830][ T3451] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.156965][ T990] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.157012][ T990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.317784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.318661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.938537][ T1482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.938562][ T1482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.950261][ T5932] Zero length message leads to an empty skb [ 112.366676][ T5931] binder: 5930:5931 ioctl c0306201 200000000300 returned -11 [ 112.409438][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.409462][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.457511][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.607859][ T5936] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.618916][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 112.636114][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.636137][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.715506][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.715542][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.715585][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 112.715609][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.069470][ T9] usb 3-1: config 0 descriptor?? [ 113.826268][ T5929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.826761][ T5929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.852660][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.852686][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.468307][ T5946] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.602299][ T5932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.632478][ T5932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.344679][ T804] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.435054][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 115.435209][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 115.476724][ T9] usb 3-1: USB disconnect, device number 2 [ 115.527803][ T804] usb 4-1: Using ep0 maxpacket: 16 [ 115.534415][ T804] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 115.534443][ T804] usb 4-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 115.555256][ T804] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 115.555338][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.555408][ T804] usb 4-1: Product: syz [ 115.555448][ T804] usb 4-1: Manufacturer: syz [ 115.555489][ T804] usb 4-1: SerialNumber: syz [ 115.881313][ T804] usb 4-1: USB disconnect, device number 2 [ 116.449055][ T5966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 116.911863][ T5966] erspan0: entered promiscuous mode [ 116.958053][ T5966] erspan0: left promiscuous mode [ 117.985336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.627294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.637280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.827281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.830849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.997911][ T5995] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 123.729793][ T38] audit: type=1326 audit(1768460407.601:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5988 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 123.729855][ T38] audit: type=1326 audit(1768460407.611:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5988 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 123.729900][ T38] audit: type=1326 audit(1768460407.611:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5988 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 123.729946][ T38] audit: type=1326 audit(1768460407.611:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5988 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 123.729992][ T38] audit: type=1326 audit(1768460407.611:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5988 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 123.730036][ T38] audit: type=1326 audit(1768460407.611:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5988 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 123.730081][ T38] audit: type=1326 audit(1768460407.611:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5988 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 123.730128][ T38] audit: type=1326 audit(1768460407.611:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5988 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 123.730174][ T38] audit: type=1326 audit(1768460407.611:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5988 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 123.730218][ T38] audit: type=1326 audit(1768460407.611:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5988 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 123.780084][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 124.537280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.747282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.134510][ T6015] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.598664][ T5959] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.749019][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 127.751021][ T5959] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 127.751047][ T5959] usb 2-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 127.755337][ T5959] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 127.755368][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.755390][ T5959] usb 2-1: Product: syz [ 127.755406][ T5959] usb 2-1: Manufacturer: syz [ 127.755422][ T5959] usb 2-1: SerialNumber: syz [ 128.340115][ T6024] loop9: detected capacity change from 0 to 8 [ 128.819814][ T6024] Dev loop9: unable to read RDB block 8 [ 128.819870][ T6024] loop9: unable to read partition table [ 128.820092][ T6024] loop9: partition table beyond EOD, truncated [ 128.820150][ T6024] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿ„É) failed (rc=-5) [ 129.061723][ T805] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.226762][ T5959] usb 2-1: USB disconnect, device number 2 [ 129.337876][ T805] usb 4-1: Using ep0 maxpacket: 16 [ 129.342243][ T805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.342295][ T805] usb 4-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 129.342328][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.516007][ T805] usb 4-1: config 0 descriptor?? [ 130.768105][ T5875] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.814563][ T805] usbhid 4-1:0.0: can't add hid device: -71 [ 130.814686][ T805] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 130.857540][ T805] usb 4-1: USB disconnect, device number 3 [ 131.116806][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 131.129658][ T5875] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 131.129694][ T5875] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 131.129716][ T5875] usb 5-1: config 0 interface 0 has no altsetting 0 [ 131.129751][ T5875] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 131.129775][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.348343][ T6052] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 131.404922][ T38] kauditd_printk_skb: 140 callbacks suppressed [ 131.404971][ T38] audit: type=1326 audit(1768460415.871:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 131.405272][ T38] audit: type=1326 audit(1768460415.871:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 131.405502][ T38] audit: type=1326 audit(1768460415.871:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 131.405726][ T38] audit: type=1326 audit(1768460415.881:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 131.405924][ T38] audit: type=1326 audit(1768460415.891:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 131.406155][ T38] audit: type=1326 audit(1768460415.891:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 131.406423][ T38] audit: type=1326 audit(1768460415.891:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 131.406646][ T38] audit: type=1326 audit(1768460415.891:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 131.406885][ T38] audit: type=1326 audit(1768460415.901:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 131.407085][ T38] audit: type=1326 audit(1768460415.901:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6049 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 132.002231][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 132.025365][ T5875] usb 5-1: config 0 descriptor?? [ 132.867267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.315157][ T5875] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 133.659167][ T5875] corsair-cpro 0003:1B1C:0C10.0001: probe with driver corsair-cpro failed with error -90 [ 134.554775][ T5875] usb 5-1: USB disconnect, device number 2 [ 137.995243][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.995343][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 147.205948][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.48'. [ 147.215467][ T6135] erspan0: entered promiscuous mode [ 148.336323][ T6135] erspan0: left promiscuous mode [ 150.591470][ T6161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.50'. [ 150.591502][ T6161] netlink: 108 bytes leftover after parsing attributes in process `syz.3.50'. [ 150.594236][ T6161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.50'. [ 150.599935][ T6161] netlink: 108 bytes leftover after parsing attributes in process `syz.3.50'. [ 150.599970][ T6161] netlink: 84 bytes leftover after parsing attributes in process `syz.3.50'. [ 162.170117][ T6196] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 162.228619][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'. [ 162.457400][ T38] kauditd_printk_skb: 146 callbacks suppressed [ 162.457421][ T38] audit: type=1326 audit(1768460446.781:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 162.457475][ T38] audit: type=1326 audit(1768460446.781:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 162.457523][ T38] audit: type=1326 audit(1768460446.781:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 162.457572][ T38] audit: type=1326 audit(1768460446.781:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 162.457619][ T38] audit: type=1326 audit(1768460446.781:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 162.457668][ T38] audit: type=1326 audit(1768460446.781:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 162.457722][ T38] audit: type=1326 audit(1768460446.781:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 162.457769][ T38] audit: type=1326 audit(1768460446.781:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 162.457817][ T38] audit: type=1326 audit(1768460446.781:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 162.457864][ T38] audit: type=1326 audit(1768460446.781:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6187 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f673dc9f749 code=0x7ffc0000 [ 164.422732][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.643845][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.667945][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.672594][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.673525][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.707531][ T5115] Bluetooth: hci5: command tx timeout [ 167.436484][ T6206] chnl_net:caif_netlink_parms(): no params data found [ 168.903643][ T5115] Bluetooth: hci5: command tx timeout [ 169.581094][ T6132] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 169.765358][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.797669][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.835495][ T6206] bridge_slave_0: entered allmulticast mode [ 170.078423][ T6206] bridge_slave_0: entered promiscuous mode [ 170.108755][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.109860][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.110105][ T6206] bridge_slave_1: entered allmulticast mode [ 170.112989][ T6206] bridge_slave_1: entered promiscuous mode [ 170.127318][ T6132] usb 1-1: Using ep0 maxpacket: 16 [ 170.129977][ T6132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.130028][ T6132] usb 1-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 170.130055][ T6132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.268958][ T6132] usb 1-1: config 0 descriptor?? [ 171.671290][ T5115] Bluetooth: hci5: command tx timeout [ 171.833337][ T6132] usbhid 1-1:0.0: can't add hid device: -71 [ 171.833456][ T6132] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 171.854069][ T6132] usb 1-1: USB disconnect, device number 2 [ 172.773312][ T6132] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 172.937467][ T6132] usb 5-1: Using ep0 maxpacket: 32 [ 172.940135][ T6132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.940166][ T6132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.940203][ T6132] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 172.940225][ T6132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.993075][ T6132] usb 5-1: config 0 descriptor?? [ 173.213046][ T6249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.227346][ T6249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.273890][ T5115] Bluetooth: hci5: command tx timeout [ 174.557522][ T6259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.558140][ T6259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.399185][ T6206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.577436][ T5889] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 177.808429][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 178.153686][ T5889] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 178.153870][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.305912][ T5889] usb 1-1: config 0 descriptor?? [ 178.520749][ T5889] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 178.585780][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 178.606576][ T5889] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 178.606709][ T5889] usb 1-1: media controller created [ 178.627554][ T6132] usbhid 5-1:0.0: can't add hid device: -71 [ 178.627662][ T6132] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 178.650588][ T6132] usb 5-1: USB disconnect, device number 3 [ 178.684400][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.739205][ T6276] ------------[ cut here ]------------ [ 178.739222][ T6276] usb 1-1: BOGUS control dir, pipe 80000380 doesn't match bRequestType c0 [ 178.739244][ T6276] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#1: syz.0.81/6276 [ 178.739296][ T6276] Modules linked in: [ 178.739335][ T6276] CPU: 1 UID: 0 PID: 6276 Comm: syz.0.81 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.739362][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.739380][ T6276] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 178.739409][ T6276] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 178.739429][ T6276] RSP: 0018:ffffc900062f7940 EFLAGS: 00010246 [ 178.739449][ T6276] RAX: 0000000000000000 RBX: ffff888145b4b500 RCX: 0000000080000380 [ 178.739466][ T6276] RDX: ffff88803354a9c0 RSI: ffffffff8b83ac20 RDI: ffffffff8ee6e680 [ 178.739484][ T6276] RBP: 1ffff11003c5c264 R08: 00000000000000c0 R09: 0000000000000000 [ 178.739499][ T6276] R10: ffffc900062f7a40 R11: fffff52000c5ef54 R12: ffff88805e19d100 [ 178.739516][ T6276] R13: ffff88801e2e1320 R14: 0000000080000380 R15: ffff88803354a9c0 [ 178.739534][ T6276] FS: 00007f673befe6c0(0000) GS:ffff888126dee000(0000) knlGS:0000000000000000 [ 178.739554][ T6276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.739571][ T6276] CR2: 0000001b2f41eff8 CR3: 0000000028648000 CR4: 00000000003526f0 [ 178.739590][ T6276] Call Trace: [ 178.739604][ T6276] [ 178.739622][ T6276] ? __init_swait_queue_head+0xa9/0x150 [ 178.739662][ T6276] usb_start_wait_urb+0x115/0x4f0 [ 178.739701][ T6276] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 178.739755][ T6276] usb_control_msg+0x232/0x3e0 [ 178.739792][ T6276] dib0700_i2c_xfer+0xba7/0xf70 [ 178.739852][ T6276] __i2c_transfer+0x79a/0x1f00 [ 178.739885][ T6276] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 178.739914][ T6276] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 178.739942][ T6276] ? i2c_transfer+0xc8/0x2d0 [ 178.739974][ T6276] i2c_transfer+0x1cc/0x2d0 [ 178.740007][ T6276] i2cdev_ioctl_rdwr+0x460/0x740 [ 178.740049][ T6276] i2cdev_ioctl+0x64e/0x820 [ 178.740078][ T6276] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 178.740111][ T6276] ? __fget_files+0x3a6/0x420 [ 178.740135][ T6276] ? __fget_files+0x2a/0x420 [ 178.740170][ T6276] ? bpf_lsm_file_ioctl+0x9/0x20 [ 178.740207][ T6276] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 178.740237][ T6276] __se_sys_ioctl+0xff/0x170 [ 178.740274][ T6276] do_syscall_64+0xec/0xf80 [ 178.740298][ T6276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.740323][ T6276] ? clear_bhb_loop+0x60/0xb0 [ 178.740352][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.740374][ T6276] RIP: 0033:0x7f673dc9f749 [ 178.740400][ T6276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.740420][ T6276] RSP: 002b:00007f673befe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.740444][ T6276] RAX: ffffffffffffffda RBX: 00007f673def5fa0 RCX: 00007f673dc9f749 [ 178.740461][ T6276] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 178.740477][ T6276] RBP: 00007f673dd23f91 R08: 0000000000000000 R09: 0000000000000000 [ 178.740492][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.740506][ T6276] R13: 00007f673def6038 R14: 00007f673def5fa0 R15: 00007fffe0bd8618 [ 178.740544][ T6276] [ 178.740561][ T6276] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 178.740578][ T6276] CPU: 1 UID: 0 PID: 6276 Comm: syz.0.81 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.740605][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.740619][ T6276] Call Trace: [ 178.740628][ T6276] [ 178.740637][ T6276] vpanic+0x1e0/0x670 [ 178.740676][ T6276] panic+0xb9/0xc0 [ 178.740709][ T6276] ? __pfx_panic+0x10/0x10 [ 178.740762][ T6276] __warn+0x317/0x4b0 [ 178.740793][ T6276] ? usb_submit_urb+0x105c/0x18d0 [ 178.740825][ T6276] ? usb_submit_urb+0x105c/0x18d0 [ 178.740852][ T6276] __report_bug+0x288/0x500 [ 178.740877][ T6276] ? usb_submit_urb+0x105c/0x18d0 [ 178.740911][ T6276] ? __pfx___report_bug+0x10/0x10 [ 178.740941][ T6276] ? lockdep_hardirqs_on+0x7b/0x110 [ 178.740965][ T6276] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 178.741001][ T6276] report_bug_entry+0x19a/0x290 [ 178.741025][ T6276] ? usb_submit_urb+0x111c/0x18d0 [ 178.741050][ T6276] ? usb_submit_urb+0x1121/0x18d0 [ 178.741076][ T6276] handle_bug+0xca/0x200 [ 178.741105][ T6276] exc_invalid_op+0x1a/0x50 [ 178.741134][ T6276] asm_exc_invalid_op+0x1a/0x20 [ 178.741156][ T6276] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 178.741194][ T6276] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 178.741214][ T6276] RSP: 0018:ffffc900062f7940 EFLAGS: 00010246 [ 178.741234][ T6276] RAX: 0000000000000000 RBX: ffff888145b4b500 RCX: 0000000080000380 [ 178.741250][ T6276] RDX: ffff88803354a9c0 RSI: ffffffff8b83ac20 RDI: ffffffff8ee6e680 [ 178.741269][ T6276] RBP: 1ffff11003c5c264 R08: 00000000000000c0 R09: 0000000000000000 [ 178.741284][ T6276] R10: ffffc900062f7a40 R11: fffff52000c5ef54 R12: ffff88805e19d100 [ 178.741303][ T6276] R13: ffff88801e2e1320 R14: 0000000080000380 R15: ffff88803354a9c0 [ 178.741348][ T6276] ? __init_swait_queue_head+0xa9/0x150 [ 178.741381][ T6276] usb_start_wait_urb+0x115/0x4f0 [ 178.741418][ T6276] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 178.741472][ T6276] usb_control_msg+0x232/0x3e0 [ 178.741509][ T6276] dib0700_i2c_xfer+0xba7/0xf70 [ 178.741568][ T6276] __i2c_transfer+0x79a/0x1f00 [ 178.741599][ T6276] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 178.741626][ T6276] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 178.741653][ T6276] ? i2c_transfer+0xc8/0x2d0 [ 178.741684][ T6276] i2c_transfer+0x1cc/0x2d0 [ 178.741716][ T6276] i2cdev_ioctl_rdwr+0x460/0x740 [ 178.741757][ T6276] i2cdev_ioctl+0x64e/0x820 [ 178.741784][ T6276] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 178.741815][ T6276] ? __fget_files+0x3a6/0x420 [ 178.741838][ T6276] ? __fget_files+0x2a/0x420 [ 178.741866][ T6276] ? bpf_lsm_file_ioctl+0x9/0x20 [ 178.741900][ T6276] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 178.741928][ T6276] __se_sys_ioctl+0xff/0x170 [ 178.741962][ T6276] do_syscall_64+0xec/0xf80 [ 178.741985][ T6276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.742009][ T6276] ? clear_bhb_loop+0x60/0xb0 [ 178.742038][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.742060][ T6276] RIP: 0033:0x7f673dc9f749 [ 178.742080][ T6276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.742099][ T6276] RSP: 002b:00007f673befe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.742122][ T6276] RAX: ffffffffffffffda RBX: 00007f673def5fa0 RCX: 00007f673dc9f749 [ 178.742139][ T6276] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 178.742153][ T6276] RBP: 00007f673dd23f91 R08: 0000000000000000 R09: 0000000000000000 [ 178.742175][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.742188][ T6276] R13: 00007f673def6038 R14: 00007f673def5fa0 R15: 00007fffe0bd8618 [ 178.742219][ T6276] [ 178.742939][ T6276] Kernel Offset: disabled