last executing test programs: 38.784204798s ago: executing program 1 (id=55): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000005b40), 0x0, 0x40010132, 0x0) 37.332784708s ago: executing program 1 (id=56): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) socket(0xa, 0x3, 0x3e) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 25.618122706s ago: executing program 1 (id=71): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/6, 0x6}], 0x1, 0x7, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0), 0x0, 0x9200000000000000) shmat(r3, &(0x7f0000f62000/0x1000)=nil, 0x7000) mremap(&(0x7f0000f7f000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x460900, 0x0) ioctl$TUNSETIFINDEX(r5, 0x400454da, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x4, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) 24.335148993s ago: executing program 3 (id=72): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) shutdown(0xffffffffffffffff, 0x2) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x40}}, 0x0) fchownat(r0, &(0x7f0000000080)='./file0\x00', r3, 0x0, 0x1000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) signalfd(r2, &(0x7f0000000240)={[0x2]}, 0x8) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0xa8, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x76}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK, @TCA_FLOWER_KEY_ENC_KEY_ID={0xffffff7e, 0x1a, 0x8001}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x4}]}}, @filter_kind_options=@f_flower={{0xfffffffffffffe07}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20041090}, 0x840) setxattr$security_ima(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=@md5={0x1, "9cfe4377ae15c9502e83b058dd0885d4"}, 0x11, 0x1) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f62, 0x80400) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x85) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) 15.856252189s ago: executing program 4 (id=80): r0 = io_uring_setup(0xf08, &(0x7f00000001c0)={0x0, 0xd22a, 0x1000, 0x20001, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1) r1 = io_uring_setup(0x6fa2, &(0x7f0000000600)={0x0, 0x41e28, 0x0, 0x4, 0x3d}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 15.080148326s ago: executing program 1 (id=81): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) socket(0xa, 0x3, 0x3e) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 15.026971944s ago: executing program 4 (id=82): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0xb, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x202, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x20000080) 14.917988781s ago: executing program 0 (id=83): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) 14.079131956s ago: executing program 4 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x7}}]}}]}, 0x48}}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xb, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) 13.624442942s ago: executing program 3 (id=85): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x7, 0x5}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x57, &(0x7f00000003c0)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) 13.385483015s ago: executing program 0 (id=86): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000019300), 0x7, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x2}, &(0x7f0000000200)=0xb3f4, 0x0, 0x0, 0x3fc, 0x4cbd, 0x1, 0x30, 0x6}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0xe}, 0x0, 0x0, 0x10000, 0x101, 0x7, 0x6, 0x6, 0x5}}], 0xb0, 0x10}, 0x0) 12.925072554s ago: executing program 4 (id=87): r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB=' '], 0x33) close(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000180)={0x8001, 0x1, 0x80000000, 0xc, &(0x7f0000000040)=[{}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 12.020889786s ago: executing program 2 (id=88): bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 10.11541437s ago: executing program 2 (id=89): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x20000, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) 8.440563742s ago: executing program 2 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x11, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce) 7.275041479s ago: executing program 2 (id=91): syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122daf", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) 6.276340536s ago: executing program 2 (id=92): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x108, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) 5.626428855s ago: executing program 2 (id=93): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r3, 0x2000, 0xeed, 0x1, 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0x4, {{0xa, 0x4e20, 0x6, @loopback}}}, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x15) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) open$dir(0x0, 0x1, 0x19d) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r7) sendmsg$TIPC_NL_BEARER_DISABLE(r10, 0x0, 0x8000) ioctl$VIDIOC_QUERYMENU(r9, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) 4.001807553s ago: executing program 3 (id=94): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0xb, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x202, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080) 3.343387085s ago: executing program 0 (id=95): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 2.883633651s ago: executing program 3 (id=96): syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000e1704b4"], 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x4}, 0x0) 2.502993952s ago: executing program 4 (id=97): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x7}}]}}]}, 0x48}}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xb, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) 2.491148944s ago: executing program 0 (id=98): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.345231753s ago: executing program 1 (id=99): bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 1.869274002s ago: executing program 3 (id=100): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.143862512s ago: executing program 4 (id=101): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030006000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 706.14299ms ago: executing program 0 (id=102): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x5, 0x0, &(0x7f0000000040)) 451.054426ms ago: executing program 1 (id=103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 223.360501ms ago: executing program 3 (id=104): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x7, 0x5}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x57, &(0x7f00000003c0)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) 0s ago: executing program 0 (id=105): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x2}, &(0x7f0000000200)=0xb3f4, 0x0, 0x0, 0x3fc, 0x4cbd, 0x1, 0x30, 0x6}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0xe}, 0x0, 0x0, 0x10000, 0x101, 0x7, 0x6, 0x6, 0x5}}], 0xb0, 0x10}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 177.478629][ T5744] cgroup: Unknown subsys name 'net' [ 177.615054][ T5744] cgroup: Unknown subsys name 'cpuset' [ 177.629774][ T5744] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 183.902683][ T5744] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 189.674960][ T5766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.685377][ T5766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.694851][ T5766] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.705023][ T5766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.714769][ T5766] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.743339][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.757045][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.765793][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.775043][ T5769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.780819][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.791329][ T5769] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.797467][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.808385][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.817520][ T5769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.847598][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.943179][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.954250][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.963718][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.977378][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.996383][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.030608][ T5769] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.040949][ T5769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.062480][ T5767] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.077920][ T5767] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.090579][ T5767] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.464443][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 191.641863][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 191.660918][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 191.912412][ T5771] Bluetooth: hci1: command tx timeout [ 191.918041][ T5771] Bluetooth: hci2: command tx timeout [ 191.924625][ T5767] Bluetooth: hci0: command tx timeout [ 192.064856][ T5767] Bluetooth: hci3: command tx timeout [ 192.111552][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 192.221701][ T5767] Bluetooth: hci4: command tx timeout [ 192.234443][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 192.481999][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.489521][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.512101][ T5768] bridge_slave_0: entered allmulticast mode [ 192.531708][ T5768] bridge_slave_0: entered promiscuous mode [ 192.619123][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.628678][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.644722][ T5768] bridge_slave_1: entered allmulticast mode [ 192.655465][ T5768] bridge_slave_1: entered promiscuous mode [ 192.924950][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.952313][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.959813][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.972083][ T5763] bridge_slave_0: entered allmulticast mode [ 192.986056][ T5763] bridge_slave_0: entered promiscuous mode [ 193.041270][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.085318][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.092946][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.100330][ T5763] bridge_slave_1: entered allmulticast mode [ 193.110238][ T5763] bridge_slave_1: entered promiscuous mode [ 193.153964][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.163337][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.170888][ T5762] bridge_slave_0: entered allmulticast mode [ 193.182285][ T5762] bridge_slave_0: entered promiscuous mode [ 193.288480][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.296367][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.304433][ T5762] bridge_slave_1: entered allmulticast mode [ 193.313351][ T5762] bridge_slave_1: entered promiscuous mode [ 193.359668][ T5768] team0: Port device team_slave_0 added [ 193.375128][ T5768] team0: Port device team_slave_1 added [ 193.389160][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.450078][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.457873][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.465574][ T5776] bridge_slave_0: entered allmulticast mode [ 193.474300][ T5776] bridge_slave_0: entered promiscuous mode [ 193.579573][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.645742][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.653814][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.661191][ T5776] bridge_slave_1: entered allmulticast mode [ 193.671280][ T5776] bridge_slave_1: entered promiscuous mode [ 193.742394][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.752421][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.759906][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.767959][ T5774] bridge_slave_0: entered allmulticast mode [ 193.776848][ T5774] bridge_slave_0: entered promiscuous mode [ 193.818060][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.825919][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.852271][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.899993][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.911018][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.919245][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.927212][ T5774] bridge_slave_1: entered allmulticast mode [ 193.936108][ T5774] bridge_slave_1: entered promiscuous mode [ 193.975334][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.982549][ T5767] Bluetooth: hci0: command tx timeout [ 193.982658][ T5767] Bluetooth: hci2: command tx timeout [ 193.982756][ T5767] Bluetooth: hci1: command tx timeout [ 193.999534][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.025739][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.045673][ T5763] team0: Port device team_slave_0 added [ 194.115595][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.141899][ T5771] Bluetooth: hci3: command tx timeout [ 194.155245][ T5763] team0: Port device team_slave_1 added [ 194.224390][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.301847][ T5771] Bluetooth: hci4: command tx timeout [ 194.335210][ T5762] team0: Port device team_slave_0 added [ 194.350094][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.370526][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.399775][ T5776] team0: Port device team_slave_0 added [ 194.442847][ T5762] team0: Port device team_slave_1 added [ 194.524155][ T5776] team0: Port device team_slave_1 added [ 194.532755][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.539809][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.566585][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.746452][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.757874][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.798237][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.850511][ T5768] hsr_slave_0: entered promiscuous mode [ 194.859513][ T5768] hsr_slave_1: entered promiscuous mode [ 194.877950][ T5774] team0: Port device team_slave_0 added [ 194.930085][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.937307][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.963768][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.979959][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.987362][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.013632][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.032894][ T5774] team0: Port device team_slave_1 added [ 195.040933][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.048204][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.075130][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.094262][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.101817][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.129223][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.348612][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.355802][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.382395][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.490137][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.497315][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.523810][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.549243][ T5763] hsr_slave_0: entered promiscuous mode [ 195.558044][ T5763] hsr_slave_1: entered promiscuous mode [ 195.566385][ T5763] debugfs: 'hsr0' already exists in 'hsr' [ 195.572411][ T5763] Cannot create hsr debugfs directory [ 195.700969][ T5762] hsr_slave_0: entered promiscuous mode [ 195.709849][ T5762] hsr_slave_1: entered promiscuous mode [ 195.718046][ T5762] debugfs: 'hsr0' already exists in 'hsr' [ 195.723971][ T5762] Cannot create hsr debugfs directory [ 195.743189][ T5776] hsr_slave_0: entered promiscuous mode [ 195.752131][ T5776] hsr_slave_1: entered promiscuous mode [ 195.759883][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 195.765904][ T5776] Cannot create hsr debugfs directory [ 195.959948][ T5774] hsr_slave_0: entered promiscuous mode [ 195.970010][ T5774] hsr_slave_1: entered promiscuous mode [ 195.978762][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 195.984849][ T5774] Cannot create hsr debugfs directory [ 196.061693][ T5771] Bluetooth: hci1: command tx timeout [ 196.061882][ T5769] Bluetooth: hci0: command tx timeout [ 196.072995][ T5767] Bluetooth: hci2: command tx timeout [ 196.222007][ T5769] Bluetooth: hci3: command tx timeout [ 196.382102][ T5769] Bluetooth: hci4: command tx timeout [ 197.178186][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 197.213307][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 197.249299][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 197.283950][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 197.388983][ T5763] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.429597][ T5763] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.500432][ T5763] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.524288][ T5763] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.743538][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 197.787621][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 197.863070][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 197.914276][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.080181][ T5762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 198.104984][ T5762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 198.126625][ T5762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 198.142421][ T5769] Bluetooth: hci1: command tx timeout [ 198.151733][ T5769] Bluetooth: hci0: command tx timeout [ 198.152276][ T5767] Bluetooth: hci2: command tx timeout [ 198.167594][ T5762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 198.302209][ T5767] Bluetooth: hci3: command tx timeout [ 198.456777][ T5774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 198.464674][ T5767] Bluetooth: hci4: command tx timeout [ 198.490915][ T5774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.529830][ T5774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.555833][ T5774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.680967][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.958172][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.994756][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.102820][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.110272][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.218877][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.226325][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.248968][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.326805][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.334331][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.426046][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.433695][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.469567][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.546047][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.718392][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.799242][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.806843][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.844724][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.888317][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.953414][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.960774][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.039724][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.047439][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.201213][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.208853][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.246791][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.417604][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.425252][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.575885][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.583469][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.347523][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.701005][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.099134][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.149945][ T5768] veth0_vlan: entered promiscuous mode [ 202.317311][ T5768] veth1_vlan: entered promiscuous mode [ 202.485883][ T5763] veth0_vlan: entered promiscuous mode [ 202.514554][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.602918][ T5763] veth1_vlan: entered promiscuous mode [ 202.759856][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.769234][ T5768] veth0_macvtap: entered promiscuous mode [ 202.867749][ T5768] veth1_macvtap: entered promiscuous mode [ 202.895189][ T5762] veth0_vlan: entered promiscuous mode [ 203.076612][ T5762] veth1_vlan: entered promiscuous mode [ 203.139740][ T5763] veth0_macvtap: entered promiscuous mode [ 203.166076][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.268991][ T5763] veth1_macvtap: entered promiscuous mode [ 203.331070][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.345587][ T5776] veth0_vlan: entered promiscuous mode [ 203.414189][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.478508][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.507132][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.540863][ T5776] veth1_vlan: entered promiscuous mode [ 203.587949][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.637534][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.758188][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.789667][ T5762] veth0_macvtap: entered promiscuous mode [ 203.940343][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.954460][ T5762] veth1_macvtap: entered promiscuous mode [ 203.966648][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.973998][ T771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.013163][ T771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.158244][ T771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.180644][ T771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.273420][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.406928][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.499204][ T5776] veth0_macvtap: entered promiscuous mode [ 204.553410][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.569297][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.614344][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.632359][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.715029][ T5776] veth1_macvtap: entered promiscuous mode [ 204.886005][ T5774] veth0_vlan: entered promiscuous mode [ 204.982864][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.067117][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.088112][ T5774] veth1_vlan: entered promiscuous mode [ 205.251222][ T1015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.297038][ T1015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.323210][ T140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.416157][ T140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.729395][ T5774] veth0_macvtap: entered promiscuous mode [ 205.866239][ T5774] veth1_macvtap: entered promiscuous mode [ 206.136380][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.231062][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.424541][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.471016][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.541343][ T140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.583731][ T140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.425311][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.484962][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.772283][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.780321][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.309016][ T5768] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 210.620226][ T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.696576][ T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.097371][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.136971][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.236119][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.280016][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.472913][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.481056][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.170079][ T5955] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3'. [ 212.686458][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.766501][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.151692][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.201827][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.470593][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.539883][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.948039][ T5971] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 214.306350][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.332521][ T5971] PKCS7: Only support pkcs7_signedData type [ 214.349844][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.322852][ T5987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6'. [ 217.338302][ T5823] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 217.612004][ T5823] usb 5-1: Using ep0 maxpacket: 16 [ 217.654987][ T5823] usb 5-1: config 0 has no interfaces? [ 217.722004][ T5823] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 217.731325][ T5823] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 217.840801][ T5823] usb 5-1: Manufacturer: syz [ 217.915993][ T5823] usb 5-1: config 0 descriptor?? [ 218.911043][ T5823] usb 5-1: USB disconnect, device number 2 [ 223.632765][ T6006] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 224.377227][ T6000] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 224.632286][ T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 224.915675][ T30] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 224.973250][ T30] usb 5-1: can't read configurations, error -61 [ 225.162533][ T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 225.742738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 226.244707][ T6028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 230.448851][ T6049] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 230.465083][ T6049] PKCS7: Only support pkcs7_signedData type [ 230.592331][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 230.624423][ T30] usb 5-1: device descriptor read/all, error -110 [ 230.637673][ T30] usb usb5-port1: attempt power cycle [ 230.810494][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 230.848047][ T5855] usb 4-1: config 0 has no interfaces? [ 230.916896][ T5855] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 230.946150][ T5855] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 231.006015][ T5855] usb 4-1: Manufacturer: syz [ 231.055582][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 231.070695][ T5855] usb 4-1: config 0 descriptor?? [ 231.176313][ T30] usb 5-1: device descriptor read/8, error -32 [ 231.503428][ T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 231.546035][ T30] usb 5-1: device descriptor read/8, error -32 [ 231.672976][ T30] usb usb5-port1: unable to enumerate USB device [ 232.405260][ T30] usb 4-1: USB disconnect, device number 2 [ 235.013709][ T6060] netlink: 48 bytes leftover after parsing attributes in process `syz.4.25'. [ 239.216760][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.29'. [ 239.675261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 242.511707][ T5095] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 242.721697][ T5095] usb 1-1: Using ep0 maxpacket: 32 [ 242.767830][ T5095] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 242.829687][ T5095] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 242.871768][ T5095] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 242.921638][ T5095] usb 1-1: Product: syz [ 242.946936][ T5095] usb 1-1: Manufacturer: syz [ 242.988058][ T5095] usb 1-1: SerialNumber: syz [ 243.060960][ T5095] usb 1-1: config 0 descriptor?? [ 243.110011][ T6097] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 243.216543][ T5095] hub 1-1:0.0: bad descriptor, ignoring hub [ 243.233400][ T5095] hub 1-1:0.0: probe with driver hub failed with error -5 [ 243.267136][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 243.294164][ T6101] bond0: Unable to set down delay as MII monitoring is disabled [ 243.553105][ T30] usb 1-1: USB disconnect, device number 2 [ 244.092313][ T30] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 244.278042][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 244.303823][ T30] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 244.346280][ T30] usb 1-1: string descriptor 0 read error: -22 [ 244.363094][ T30] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 244.531631][ T30] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 244.601154][ T30] usb 1-1: config 0 descriptor?? [ 244.648429][ T6097] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 244.702169][ T30] hub 1-1:0.0: bad descriptor, ignoring hub [ 244.716277][ T30] hub 1-1:0.0: probe with driver hub failed with error -5 [ 244.752134][ T5855] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 244.924811][ T30] usb 1-1: USB disconnect, device number 3 [ 245.216860][ T5855] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 245.256972][ T5855] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.332120][ T5855] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.371748][ T5855] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.381032][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.490461][ T5855] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.585772][ T5855] usb 3-1: invalid MIDI out EP 0 [ 245.721917][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.732128][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.895095][ T6112] netlink: 52 bytes leftover after parsing attributes in process `syz.3.46'. [ 245.995474][ T6112] netlink: 50 bytes leftover after parsing attributes in process `syz.3.46'. [ 247.112926][ T6125] netlink: 56 bytes leftover after parsing attributes in process `syz.0.48'. [ 247.709599][ T5855] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 255.274296][ T5855] usb 3-1: USB disconnect, device number 2 [ 258.383527][ T6160] syz.0.60 uses obsolete (PF_INET,SOCK_PACKET) [ 259.997307][ T6172] tipc: Started in network mode [ 260.050393][ T6172] tipc: Node identity fe3d07c22ae3, cluster identity 4711 [ 260.067372][ T6172] tipc: Enabled bearer , priority 0 [ 260.098769][ T6171] syzkaller0: entered promiscuous mode [ 260.130456][ T6171] syzkaller0: entered allmulticast mode [ 260.402453][ T6171] tipc: Resetting bearer [ 260.453617][ T6170] tipc: Resetting bearer [ 260.671216][ T6170] tipc: Disabling bearer [ 261.964538][ T56] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.974008][ T6181] Zero length message leads to an empty skb [ 262.071713][ T56] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.164804][ T56] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.210049][ T35] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.602097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 265.378027][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.384995][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.318288][ T6202] netlink: 56 bytes leftover after parsing attributes in process `syz.0.70'. [ 267.935093][ T6210] fuse: Bad value for 'fd' [ 267.964254][ T6210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.72'. [ 267.974156][ T6210] netlink: 32 bytes leftover after parsing attributes in process `syz.3.72'. [ 268.355711][ T6213] syzkaller0: entered promiscuous mode [ 268.394332][ T6213] syzkaller0: entered allmulticast mode [ 268.472694][ T6215] random: crng reseeded on system resumption [ 269.482699][ T29] audit: type=1800 audit(1775902497.462:2): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.72" name="/newroot/25/file0" dev="tmpfs" ino=149 res=0 errno=0 [ 270.702053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 271.963363][ T6225] netlink: 56 bytes leftover after parsing attributes in process `syz.4.76'. [ 276.222167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 277.914841][ T6248] syzkaller0: entered promiscuous mode [ 277.957472][ T6248] syzkaller0: entered allmulticast mode [ 283.482352][ T6271] syzkaller1: entered promiscuous mode [ 283.487965][ T6271] syzkaller1: entered allmulticast mode [ 286.761775][ T6281] netlink: 56 bytes leftover after parsing attributes in process `syz.2.93'. [ 288.489950][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 288.542165][ T6287] bond0: Unable to set down delay as MII monitoring is disabled [ 289.593007][ T6293] syzkaller0: entered promiscuous mode [ 289.598705][ T6293] syzkaller0: entered allmulticast mode [ 291.852021][ C0] ===================================================== [ 291.859332][ C0] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 [ 291.868132][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 291.874639][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 291.881776][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 291.887861][ C0] sysvec_call_function_single+0x7c/0x90 [ 291.893722][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 291.899909][ C0] virt_to_page_or_null+0x43/0x170 [ 291.905194][ C0] kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 291.911022][ C0] __msan_metadata_ptr_for_load_8+0x24/0x40 [ 291.917228][ C0] tcp_diag_dump+0x2286/0x36d0 [ 291.922248][ C0] inet_diag_dump_compat+0x44f/0x7d0 [ 291.927749][ C0] netlink_dump+0xbaa/0x1800 [ 291.932550][ C0] __netlink_dump_start+0x716/0xd60 [ 291.937941][ C0] inet_diag_rcv_msg_compat+0x273/0x4b0 [ 291.943646][ C0] sock_diag_rcv_msg+0x2a7/0x730 [ 291.948757][ C0] netlink_rcv_skb+0x54d/0x680 [ 291.953713][ C0] sock_diag_rcv+0x35/0x40 [ 291.958300][ C0] netlink_unicast+0xf04/0x12b0 [ 291.963327][ C0] netlink_sendmsg+0x10b2/0x1250 [ 291.968487][ C0] ____sys_sendmsg+0xf37/0xfd0 [ 291.975250][ C0] ___sys_sendmsg+0x271/0x3b0 [ 291.980130][ C0] __sys_sendmsg+0x1aa/0x300 [ 291.984920][ C0] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 291.990687][ C0] ia32_sys_call+0x1e4a/0x4360 [ 291.995643][ C0] __do_fast_syscall_32+0x17f/0x3f0 [ 292.001081][ C0] do_fast_syscall_32+0x37/0x80 [ 292.006166][ C0] do_SYSENTER_32+0x1f/0x30 [ 292.010906][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.017459][ C0] [ 292.020205][ C0] Local variable iter created at: [ 292.025321][ C0] tdp_mmu_zap_leafs+0x52/0x6e0 [ 292.030385][ C0] kvm_tdp_mmu_unmap_gfn_range+0x910/0xb50 [ 292.036475][ C0] [ 292.038925][ C0] CPU: 0 UID: 0 PID: 6306 Comm: syz.4.101 Not tainted syzkaller #0 PREEMPT(full) [ 292.048265][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 292.058441][ C0] ===================================================== [ 292.065475][ C0] Disabling lock debugging due to kernel taint [ 292.071750][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 292.078309][ C0] CPU: 0 UID: 0 PID: 6306 Comm: syz.4.101 Tainted: G B syzkaller #0 PREEMPT(full) [ 292.089270][ C0] Tainted: [B]=BAD_PAGE [ 292.093526][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 292.103737][ C0] Call Trace: [ 292.107142][ C0] [ 292.110097][ C0] __dump_stack+0x26/0x30 [ 292.114631][ C0] dump_stack_lvl+0x50/0x1c0 [ 292.119438][ C0] ? dump_stack+0x12/0x25 [ 292.123964][ C0] dump_stack+0x1e/0x25 [ 292.128297][ C0] vpanic+0x7b4/0x1430 [ 292.132587][ C0] panic+0x15d/0x160 [ 292.136694][ C0] kmsan_report+0x31a/0x320 [ 292.141430][ C0] ? __msan_warning+0x1b/0x30 [ 292.146314][ C0] ? __flush_smp_call_function_queue+0x362/0x18e0 [ 292.152913][ C0] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 292.160203][ C0] ? __sysvec_call_function_single+0x4b/0x3e0 [ 292.166455][ C0] ? sysvec_call_function_single+0x7c/0x90 [ 292.172475][ C0] ? asm_sysvec_call_function_single+0x1f/0x30 [ 292.178812][ C0] ? virt_to_page_or_null+0x43/0x170 [ 292.184446][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 292.190433][ C0] ? __msan_metadata_ptr_for_load_8+0x24/0x40 [ 292.196797][ C0] ? tcp_diag_dump+0x2286/0x36d0 [ 292.201927][ C0] ? inet_diag_dump_compat+0x44f/0x7d0 [ 292.207542][ C0] ? netlink_dump+0xbaa/0x1800 [ 292.212497][ C0] ? __netlink_dump_start+0x716/0xd60 [ 292.218084][ C0] ? inet_diag_rcv_msg_compat+0x273/0x4b0 [ 292.224076][ C0] ? sock_diag_rcv_msg+0x2a7/0x730 [ 292.229415][ C0] ? netlink_rcv_skb+0x54d/0x680 [ 292.234532][ C0] ? sock_diag_rcv+0x35/0x40 [ 292.239278][ C0] ? netlink_unicast+0xf04/0x12b0 [ 292.244472][ C0] ? netlink_sendmsg+0x10b2/0x1250 [ 292.249779][ C0] ? ____sys_sendmsg+0xf37/0xfd0 [ 292.254891][ C0] ? ___sys_sendmsg+0x271/0x3b0 [ 292.259909][ C0] ? __sys_sendmsg+0x1aa/0x300 [ 292.264859][ C0] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 292.270766][ C0] ? ia32_sys_call+0x1e4a/0x4360 [ 292.275887][ C0] ? __do_fast_syscall_32+0x17f/0x3f0 [ 292.281474][ C0] ? do_fast_syscall_32+0x37/0x80 [ 292.286701][ C0] ? do_SYSENTER_32+0x1f/0x30 [ 292.291565][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.298273][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 292.304565][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 292.309846][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 292.315839][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 292.321235][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 292.327882][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 292.333160][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 292.339114][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 292.344395][ C0] __msan_warning+0x1b/0x30 [ 292.349090][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 292.355511][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 292.361533][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 292.368641][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 292.374716][ C0] sysvec_call_function_single+0x7c/0x90 [ 292.380543][ C0] [ 292.383556][ C0] [ 292.386583][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 292.392738][ C0] RIP: 0010:virt_to_page_or_null+0x43/0x170 [ 292.398778][ C0] Code: 12 0f b6 0d 18 62 45 10 48 89 d6 48 d3 ee 48 85 f6 74 1a 31 c0 e9 cd cb 60 0e cc 48 3d ff ff ff 1f 77 f0 48 8b 15 ed a4 db 0f <48> 01 c2 55 48 89 e5 65 ff 05 f7 34 d9 12 48 89 d6 48 c1 ee 1b b9 [ 292.418528][ C0] RSP: 0000:ffff888056c27138 EFLAGS: 00000297 [ 292.424863][ C0] RAX: 0000000015b97ec8 RBX: ffffffff95b97ec8 RCX: 0000080000000000 [ 292.432967][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff95b97ec8 [ 292.441065][ C0] RBP: ffff888056c27158 R08: ffffea000000000f R09: 0000000000000000 [ 292.449152][ C0] R10: ffff888056427340 R11: ffff888056427128 R12: 000000000000ffff [ 292.457239][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 292.465355][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 292.470640][ C0] kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 292.476445][ C0] __msan_metadata_ptr_for_load_8+0x24/0x40 [ 292.482547][ C0] tcp_diag_dump+0x2286/0x36d0 [ 292.487436][ C0] ? __sys_sendmsg+0x1aa/0x300 [ 292.492498][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 292.497742][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 292.502985][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 292.508947][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 292.514199][ C0] ? __pfx_tcp_diag_dump+0x10/0x10 [ 292.519473][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 292.525486][ C0] ? __pfx_tcp_diag_dump+0x10/0x10 [ 292.530747][ C0] inet_diag_dump_compat+0x44f/0x7d0 [ 292.536240][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 292.542802][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 292.548063][ C0] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 292.554020][ C0] netlink_dump+0xbaa/0x1800 [ 292.558880][ C0] __netlink_dump_start+0x716/0xd60 [ 292.564273][ C0] inet_diag_rcv_msg_compat+0x273/0x4b0 [ 292.569982][ C0] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 292.576472][ C0] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 292.582462][ C0] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 292.588305][ C0] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 292.594521][ C0] sock_diag_rcv_msg+0x2a7/0x730 [ 292.599666][ C0] netlink_rcv_skb+0x54d/0x680 [ 292.604660][ C0] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 292.610356][ C0] sock_diag_rcv+0x35/0x40 [ 292.614964][ C0] ? __pfx_sock_diag_rcv+0x10/0x10 [ 292.620279][ C0] netlink_unicast+0xf04/0x12b0 [ 292.625367][ C0] netlink_sendmsg+0x10b2/0x1250 [ 292.630555][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.636049][ C0] ____sys_sendmsg+0xf37/0xfd0 [ 292.641066][ C0] ___sys_sendmsg+0x271/0x3b0 [ 292.645918][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 292.651197][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 292.657182][ C0] ? __rcu_read_unlock+0x6c/0xd0 [ 292.662321][ C0] ? __fget_files+0x3b4/0x4a0 [ 292.667188][ C0] ? __fget_files+0x3b9/0x4a0 [ 292.672056][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 292.677326][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 292.683304][ C0] __sys_sendmsg+0x1aa/0x300 [ 292.688124][ C0] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 292.693878][ C0] ia32_sys_call+0x1e4a/0x4360 [ 292.698791][ C0] __do_fast_syscall_32+0x17f/0x3f0 [ 292.704203][ C0] do_fast_syscall_32+0x37/0x80 [ 292.709267][ C0] do_SYSENTER_32+0x1f/0x30 [ 292.713985][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.720530][ C0] RIP: 0023:0xf707ef6c [ 292.724760][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 292.744557][ C0] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 292.753133][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 292.761225][ C0] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.769337][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.777438][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 292.785529][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.793654][ C0] [ 292.797374][ C0] Kernel Offset: disabled [ 292.801764][ C0] Rebooting in 86400 seconds..