last executing test programs: 9.410696132s ago: executing program 3 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000ac0)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x200000, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001f00010029bd7000fedbdf25fc000000000000000000000000000001000004d2020032000a0101020000000000000000000000001b090000000000800c0015005b073500f2520000b3d6cded9e62ee1bc8"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f0000000100)={0x0, 0x400, 0x3, 0x1, 0x5, 0xfffffffe, 0x9}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x4}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc4, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$video4linux(0x0, 0x5, 0x20040) r7 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000010000001d"]) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x1, {0x7f, 0xd5, 0x8eac, 0x7}}) 9.409913402s ago: executing program 2 (id=116): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.freeze\x00', 0x26e1, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(r1, 0x0, 0xffffffdb) 9.311120378s ago: executing program 1 (id=117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x14, 0x2, 0x6, 0x705}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 9.156360923s ago: executing program 1 (id=118): r0 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x2, 0x3, @mcast2, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 7.350552528s ago: executing program 1 (id=119): sigaltstack(0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket(0xa, 0x3, 0x87) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local, 0x78, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) 7.210289571s ago: executing program 2 (id=120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031412d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.348328012s ago: executing program 1 (id=122): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304a"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) bind(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$ttynull(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r5, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x544, 0x33, 0x6, 0x3, 0x5, 0x200}, &(0x7f0000000180)={0x8, 0x2, 0x401, 0x2, 0x7, 0x7fff, 0x2, 0x3}, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 6.230496632s ago: executing program 3 (id=123): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="160000031f0137f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 6.109661821s ago: executing program 3 (id=124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0xc0, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0x148}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 5.983868902s ago: executing program 3 (id=125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 5.56535895s ago: executing program 2 (id=127): r0 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x2, 0x3, @mcast2, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 5.415694865s ago: executing program 0 (id=128): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.freeze\x00', 0x26e1, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(r1, 0x0, 0xffffffdb) 4.470624999s ago: executing program 2 (id=129): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) 4.352210329s ago: executing program 3 (id=130): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) 3.090986395s ago: executing program 0 (id=131): sigaltstack(0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket(0xa, 0x3, 0x87) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local, 0x78, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) 2.009110041s ago: executing program 3 (id=132): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000ac0)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x200000, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001f00010029bd7000fedbdf25fc000000000000000000000000000001000004d2020032000a0101020000000000000000000000001b090000000000800c0015005b073500f2520000b3d6cded9e62ee1bc8"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f0000000100)={0x0, 0x400, 0x3, 0x1, 0x5, 0xfffffffe, 0x9}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x4}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc4, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$video4linux(0x0, 0x5, 0x20040) r7 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000010000001d"]) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x1, {0x7f, 0xd5, 0x8eac, 0x7}}) 1.922331706s ago: executing program 0 (id=133): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x3b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x38c, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x364, 0x5, {0x5, 0x4, 0x37, 0x5, 0x97, 0x1, 0x1, 0x3, [{0x0, 0x3, 0x2, 0x80}, {0x2, 0x7, 0xa3, 0x9}, {0xef4, 0x401, 0x4, 0x9}, {0x7, 0x40, 0x12af, 0x101}, {0x5, 0x6, 0x4664, 0x5}, {0x800, 0x9a83, 0x1ff, 0x4e6}, {0xfad, 0x5, 0x1, 0x9}, {0x5, 0xb9, 0x2, 0xfffffff7}, {0x2, 0x2, 0x4, 0x7}, {0x4, 0x401, 0x8, 0x2}, {0x7, 0x400, 0x2, 0x2}, {0x3, 0x0, 0x3, 0x7}, {0x9, 0x58128040, 0x5, 0xa}, {0x6, 0x0, 0x2, 0x1}, {0x7000, 0x6, 0x0, 0x4}, {0x8, 0x1, 0x1000, 0x1}, {0x6, 0x5, 0x8, 0x5}, {0x8000, 0x2980000, 0x1, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x2d, 0x401, 0x3, 0xffff0fb9}, {0x0, 0x7, 0x8, 0x1}, {0x83604ef, 0x1, 0x2, 0x5}, {0xe00, 0x3, 0x2, 0x8}, {0x1, 0xffffffff, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xf}, {0x80, 0xb, 0x8000, 0xb8}, {0x0, 0x1, 0x7, 0x8}, {0xfffffffb, 0x9, 0x6, 0x1}, {0x4, 0x7f, 0x3}, {0x4, 0xfffffff8, 0x8ec, 0x7}, {0xffff9d69, 0x0, 0xe}, {0x3, 0x3, 0x80000001, 0x81}, {0x2, 0x7}, {0x7ff, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x7, 0x44b}, {0x1, 0xda3, 0x2, 0x6}, {0x7, 0xfffffff9, 0x9, 0xb581}, {0xcd08, 0xb1f, 0x8001, 0xd}, {0x5c, 0x3, 0x7, 0xa2c}, {0x2, 0x6, 0x5, 0x3}, {0xfffffffa, 0x7, 0x10001, 0x6}, {0x8, 0x80000001}, {0x0, 0x6, 0x8, 0x5}, {0x6, 0x9, 0x1, 0x2}, {0xded, 0x8, 0x1ff, 0xfffffff9}, {0x0, 0x4, 0x6d7fffa0, 0x3}, {0x1, 0x40, 0x4, 0xf}, {0x80, 0x7, 0x34, 0x9}, {0x5, 0x1ff, 0x4, 0x2}, {0x9, 0x9, 0xe, 0x5}, {0x2, 0x10000, 0xfffffffe, 0x6}, {0x3, 0xf61c, 0x2, 0x8}, {0x7, 0x1, 0x1, 0x4}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}, @TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_0\x00'}]}}]}, 0x3b8}}, 0x20000000) 1.77190667s ago: executing program 0 (id=134): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1.718212799s ago: executing program 1 (id=135): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10004, 0x1}, 0x80, 0x0}}], 0x1, 0x4000000) 1.549580217s ago: executing program 0 (id=136): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x4000000) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x1029577e49}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000002c0)="01", 0x1}], 0x1, 0xe5b, 0xac, 0xb) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.512892293s ago: executing program 1 (id=137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10167, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.059409247s ago: executing program 2 (id=138): r0 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x2, 0x3, @mcast2, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 86.698176ms ago: executing program 0 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe}, {0xf, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x400009, 0x4, 0x8001, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x20, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0x30ee4d6153acde1d}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x3, 0x0, 0xfe}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000140)=0x8) write$USERIO_CMD_SEND_INTERRUPT(r4, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000082a82, 0x0) ioctl$BLKGETSIZE(r10, 0xc0401273, &(0x7f00000002c0)) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r11, r11, &(0x7f0000000000)=0x7, 0x4) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r6, &(0x7f0000000340)="05031400d3fc140000004788031c09102c282575e343ab58abe9f9e181f929b09e8b61e51d089546", 0x28, 0x40800, &(0x7f0000000140)={0x11, 0xa, r9, 0x1, 0x2, 0x6, @random}, 0x14) 0s ago: executing program 2 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000ac0)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x200000, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001f00010029bd7000fedbdf25fc000000000000000000000000000001000004d2020032000a0101020000000000000000000000001b090000000000800c0015005b073500f2520000b3d6cded9e62ee1bc8"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_BUFINFO(r2, 0xc02c640e, &(0x7f0000000100)={0x0, 0x400, 0x3, 0x1, 0x5, 0xfffffffe, 0x9}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. [ 77.411358][ T5755] cgroup: Unknown subsys name 'net' [ 77.545714][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.197425][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.901708][ T5769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.912428][ T5769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.920330][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.939212][ T5769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.946571][ T5769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.988951][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.000244][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.002200][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.017910][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.028094][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.035708][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.043365][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.051055][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.058598][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.058633][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.068015][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.098659][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.124183][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.132647][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.140640][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.149156][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.159181][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.172916][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.180522][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.644368][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 81.748172][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 81.759724][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 81.828483][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 81.895511][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.903802][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.911938][ T5771] bridge_slave_0: entered allmulticast mode [ 81.919346][ T5771] bridge_slave_0: entered promiscuous mode [ 81.930222][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.937435][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.944901][ T5771] bridge_slave_1: entered allmulticast mode [ 81.952872][ T5771] bridge_slave_1: entered promiscuous mode [ 82.057813][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.065026][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.072467][ T5770] bridge_slave_0: entered allmulticast mode [ 82.079646][ T5770] bridge_slave_0: entered promiscuous mode [ 82.088062][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.095215][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.102451][ T5770] bridge_slave_1: entered allmulticast mode [ 82.109934][ T5770] bridge_slave_1: entered promiscuous mode [ 82.129241][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.174908][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.185576][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.193197][ T5766] bridge_slave_0: entered allmulticast mode [ 82.201309][ T5766] bridge_slave_0: entered promiscuous mode [ 82.210852][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.232007][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.239424][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.247650][ T5777] bridge_slave_0: entered allmulticast mode [ 82.255144][ T5777] bridge_slave_0: entered promiscuous mode [ 82.272551][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.282109][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.289385][ T5766] bridge_slave_1: entered allmulticast mode [ 82.296416][ T5766] bridge_slave_1: entered promiscuous mode [ 82.335320][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.342644][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.352914][ T5777] bridge_slave_1: entered allmulticast mode [ 82.360681][ T5777] bridge_slave_1: entered promiscuous mode [ 82.381444][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.394079][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.406398][ T5771] team0: Port device team_slave_0 added [ 82.414915][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.429900][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.452088][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.473581][ T5771] team0: Port device team_slave_1 added [ 82.493097][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.555189][ T5770] team0: Port device team_slave_0 added [ 82.578185][ T5766] team0: Port device team_slave_0 added [ 82.587932][ T5777] team0: Port device team_slave_0 added [ 82.596308][ T5770] team0: Port device team_slave_1 added [ 82.604027][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.611224][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.637589][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.651870][ T5766] team0: Port device team_slave_1 added [ 82.660867][ T5777] team0: Port device team_slave_1 added [ 82.699031][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.706038][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.732762][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.785060][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.792217][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.819327][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.842727][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.850224][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.876834][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.888891][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.895878][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.922353][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.955522][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.962646][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.988990][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.000990][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.008517][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.035054][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.065385][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.073438][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.100215][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.149631][ T5770] hsr_slave_0: entered promiscuous mode [ 83.156245][ T5770] hsr_slave_1: entered promiscuous mode [ 83.162669][ T5081] Bluetooth: hci2: command tx timeout [ 83.162761][ T5778] Bluetooth: hci1: command tx timeout [ 83.181831][ T5771] hsr_slave_0: entered promiscuous mode [ 83.189055][ T5771] hsr_slave_1: entered promiscuous mode [ 83.195310][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.203660][ T5771] Cannot create hsr debugfs directory [ 83.237416][ T5778] Bluetooth: hci0: command tx timeout [ 83.243200][ T5081] Bluetooth: hci3: command tx timeout [ 83.269424][ T5777] hsr_slave_0: entered promiscuous mode [ 83.276617][ T5777] hsr_slave_1: entered promiscuous mode [ 83.283006][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.290651][ T5777] Cannot create hsr debugfs directory [ 83.371403][ T5766] hsr_slave_0: entered promiscuous mode [ 83.378356][ T5766] hsr_slave_1: entered promiscuous mode [ 83.384742][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.392500][ T5766] Cannot create hsr debugfs directory [ 83.799668][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.812794][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.826040][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.841174][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.918890][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.939997][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.952636][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.964056][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.050271][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.062904][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.075690][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.086443][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.165270][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.191589][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.203456][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.222793][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.288119][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.344748][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.399618][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.407121][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.423905][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.431065][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.450645][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.492868][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.511063][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.518280][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.539596][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.546889][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.564649][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.632580][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.652719][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.659976][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.721748][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.729031][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.805534][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.878508][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.897941][ T4966] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.905136][ T4966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.974459][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.981719][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.236017][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.238840][ T5778] Bluetooth: hci1: command tx timeout [ 85.249635][ T5081] Bluetooth: hci2: command tx timeout [ 85.317028][ T5778] Bluetooth: hci3: command tx timeout [ 85.322520][ T5778] Bluetooth: hci0: command tx timeout [ 85.340395][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.409401][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.432474][ T5771] veth0_vlan: entered promiscuous mode [ 85.521264][ T5771] veth1_vlan: entered promiscuous mode [ 85.547674][ T5777] veth0_vlan: entered promiscuous mode [ 85.575272][ T5766] veth0_vlan: entered promiscuous mode [ 85.589259][ T5766] veth1_vlan: entered promiscuous mode [ 85.612064][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.632631][ T5777] veth1_vlan: entered promiscuous mode [ 85.656485][ T5771] veth0_macvtap: entered promiscuous mode [ 85.702769][ T5766] veth0_macvtap: entered promiscuous mode [ 85.718925][ T5771] veth1_macvtap: entered promiscuous mode [ 85.742478][ T5766] veth1_macvtap: entered promiscuous mode [ 85.784780][ T5777] veth0_macvtap: entered promiscuous mode [ 85.796601][ T5777] veth1_macvtap: entered promiscuous mode [ 85.818610][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.834545][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.842566][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.856472][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.869558][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.886474][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.902171][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.913590][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.931002][ T5770] veth0_vlan: entered promiscuous mode [ 85.946659][ T5770] veth1_vlan: entered promiscuous mode [ 85.964173][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.973262][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.983303][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.993042][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.005271][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.014774][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.024037][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.033272][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.069318][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.080435][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.090654][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.102513][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.114207][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.185768][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.203997][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.215086][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.225819][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.237573][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.274077][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.283780][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.294096][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.303862][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.318668][ T5770] veth0_macvtap: entered promiscuous mode [ 86.363519][ T5770] veth1_macvtap: entered promiscuous mode [ 86.386070][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.399065][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.457313][ T4966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.465187][ T4966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.467994][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.485203][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.496216][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.507342][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.517940][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.529664][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.542064][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.584883][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.596325][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.608324][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.619190][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.630483][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.641264][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.653150][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.689513][ T4966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.704631][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.719505][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.726883][ T4966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.738749][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.747755][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.756516][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.768119][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.904387][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.936873][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.958941][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.973227][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.035368][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.075759][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.177195][ T4966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.185102][ T4966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.318110][ T5778] Bluetooth: hci1: command tx timeout [ 87.323758][ T5778] Bluetooth: hci2: command tx timeout [ 87.406792][ T5778] Bluetooth: hci0: command tx timeout [ 87.412310][ T5778] Bluetooth: hci3: command tx timeout [ 88.654108][ T5851] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.712525][ T5854] syzkaller0: entered promiscuous mode [ 88.748472][ T5854] syzkaller0: entered allmulticast mode [ 89.396903][ T5778] Bluetooth: hci2: command tx timeout [ 89.402384][ T5778] Bluetooth: hci1: command tx timeout [ 89.496878][ T5778] Bluetooth: hci3: command tx timeout [ 89.502536][ T5778] Bluetooth: hci0: command tx timeout [ 91.539986][ T5866] sctp: failed to load transform for md5: -2 [ 92.139000][ T23] cfg80211: failed to load regulatory.db [ 92.459079][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 92.818419][ T5906] syzkaller0: entered promiscuous mode [ 92.855920][ T5906] syzkaller0: entered allmulticast mode [ 93.047801][ T5829] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.306884][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 93.344701][ T5829] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 93.444180][ T5829] usb 2-1: config 179 has no interface number 0 [ 93.534873][ T5829] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 93.740802][ T5829] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 93.793008][ T5829] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 93.837962][ T5829] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 93.891773][ T5829] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 94.179320][ T5829] usb 2-1: config 179 interface 65 has no altsetting 0 [ 94.186430][ T5829] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 94.196004][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.303290][ T5917] program syz.2.21 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.186686][ C1] sched: RT throttling activated [ 95.252579][ T5829] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 95.407074][ T5121] input input5: unable to receive magic message: -110 [ 95.458792][ T5121] input input5: unable to receive magic message: -32 [ 95.488743][ T5121] input input5: unable to receive magic message: -32 [ 95.603313][ T5924] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.777435][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 95.777548][ T5409] usb 2-1: USB disconnect, device number 2 [ 95.819416][ T5409] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 96.714219][ T5935] syzkaller0: entered promiscuous mode [ 96.720192][ T5935] syzkaller0: entered allmulticast mode [ 98.957112][ T5956] program syz.1.33 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.157127][ T5990] Zero length message leads to an empty skb [ 102.563396][ T6010] program syz.0.46 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.325484][ T5894] Set syz1 is full, maxelem 65536 reached [ 105.648276][ T6038] loop5: detected capacity change from 0 to 7 [ 105.669178][ T5784] Dev loop5: unable to read RDB block 7 [ 105.675094][ T5784] loop5: unable to read partition table [ 105.685463][ T5784] loop5: partition table beyond EOD, truncated [ 105.714212][ T6038] Dev loop5: unable to read RDB block 7 [ 105.725935][ T6038] loop5: unable to read partition table [ 105.733438][ T6038] loop5: partition table beyond EOD, truncated [ 105.748823][ T6038] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 105.926970][ T968] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.120234][ T968] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 106.141385][ T968] usb 3-1: config 128 has no interface number 0 [ 106.217003][ T968] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 106.307142][ T968] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 106.318751][ T968] usb 3-1: config 128 interface 148 has no altsetting 0 [ 106.404832][ T968] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 106.456846][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.486890][ T968] usb 3-1: Product: syz [ 106.496827][ T968] usb 3-1: Manufacturer: syz [ 106.510072][ T968] usb 3-1: SerialNumber: syz [ 106.846714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.977259][ T968] usb 3-1: USB disconnect, device number 2 [ 107.576955][ T968] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.796773][ T968] usb 3-1: Using ep0 maxpacket: 8 [ 107.845934][ T968] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 107.914249][ T968] usb 3-1: config 16 has an invalid interface number: 148 but max is 0 [ 107.959830][ T968] usb 3-1: config 16 has no interface number 0 [ 108.002273][ T968] usb 3-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 108.033521][ T968] usb 3-1: config 16 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 108.080655][ T968] usb 3-1: config 16 interface 148 has no altsetting 0 [ 108.106776][ T968] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.115914][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.639752][ T6068] syzkaller0: entered promiscuous mode [ 108.663558][ T6068] syzkaller0: entered allmulticast mode [ 108.671329][ T968] usb 3-1: string descriptor 0 read error: -71 [ 108.707026][ T968] usb 3-1: USB disconnect, device number 3 [ 110.300162][ T6080] syzkaller0: entered promiscuous mode [ 110.311482][ T6080] syzkaller0: entered allmulticast mode [ 111.546274][ T6093] syzkaller0: entered promiscuous mode [ 111.552654][ T6093] syzkaller0: entered allmulticast mode [ 111.886897][ T5829] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.069096][ T5829] usb 2-1: config 128 has an invalid interface number: 148 but max is 0 [ 112.092054][ T5829] usb 2-1: config 128 has no interface number 0 [ 112.110334][ T5829] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 112.145501][ T5829] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 112.176795][ T5829] usb 2-1: config 128 interface 148 has no altsetting 0 [ 112.195801][ T5829] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 112.216429][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.226607][ T5829] usb 2-1: Product: syz [ 112.235511][ T5829] usb 2-1: Manufacturer: syz [ 112.241135][ T5829] usb 2-1: SerialNumber: syz [ 112.489526][ T5829] usb 2-1: USB disconnect, device number 3 [ 113.744486][ T968] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.936782][ T968] usb 2-1: Using ep0 maxpacket: 8 [ 113.953856][ T968] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 113.969101][ T968] usb 2-1: config 16 has an invalid interface number: 148 but max is 0 [ 113.991243][ T968] usb 2-1: config 16 has no interface number 0 [ 114.007856][ T968] usb 2-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 114.019533][ T6114] program syz.0.79 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.042131][ T968] usb 2-1: config 16 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 114.070060][ T968] usb 2-1: config 16 interface 148 has no altsetting 0 [ 114.092078][ T968] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 114.117473][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.586198][ T968] usb 2-1: string descriptor 0 read error: -71 [ 114.623220][ T968] usb 2-1: USB disconnect, device number 4 [ 116.501771][ T6131] syzkaller0: entered promiscuous mode [ 116.526851][ T6131] syzkaller0: entered allmulticast mode [ 119.136192][ T968] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.472055][ T968] usb 2-1: config 128 has an invalid interface number: 148 but max is 0 [ 119.504031][ T968] usb 2-1: config 128 has no interface number 0 [ 119.532308][ T968] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 119.555366][ T968] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 119.592558][ T968] usb 2-1: config 128 interface 148 has no altsetting 0 [ 119.655634][ T968] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 119.697078][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.712529][ T968] usb 2-1: Product: syz [ 119.722575][ T968] usb 2-1: Manufacturer: syz [ 119.733192][ T968] usb 2-1: SerialNumber: syz [ 120.031664][ T968] usb 2-1: USB disconnect, device number 5 [ 120.577031][ T968] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.847117][ T968] usb 2-1: Using ep0 maxpacket: 8 [ 120.900294][ T968] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 120.909644][ T968] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 120.946877][ T968] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 121.111843][ T968] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.135669][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.189628][ T968] usbtmc 2-1:16.0: bulk endpoints not found [ 121.338371][ T6173] loop5: detected capacity change from 0 to 7 [ 121.352977][ T6173] Dev loop5: unable to read RDB block 7 [ 121.371898][ T6173] loop5: unable to read partition table [ 121.390232][ T6173] loop5: partition table beyond EOD, truncated [ 121.410259][ T6173] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 121.634880][ T6177] syzkaller0: entered promiscuous mode [ 121.640827][ T6177] syzkaller0: entered allmulticast mode [ 122.886120][ T23] usb 2-1: USB disconnect, device number 6 [ 123.131576][ T6198] syz.1.102[6198]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 123.213106][ T6198] loop1: detected capacity change from 0 to 1024 [ 125.069846][ T6216] loop5: detected capacity change from 0 to 7 [ 125.125359][ T6216] Dev loop5: unable to read RDB block 7 [ 125.146521][ T6216] loop5: unable to read partition table [ 125.165858][ T6216] loop5: partition table beyond EOD, truncated [ 125.244116][ T6216] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 125.636493][ T6221] syzkaller0: entered promiscuous mode [ 125.661210][ T6221] syzkaller0: entered allmulticast mode [ 127.216905][ T5772] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.420224][ T5772] usb 1-1: config 128 has an invalid interface number: 148 but max is 0 [ 127.437977][ T5772] usb 1-1: config 128 has no interface number 0 [ 127.446431][ T5772] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 127.476962][ T5772] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 127.521864][ T5772] usb 1-1: config 128 interface 148 has no altsetting 0 [ 127.549671][ T5772] usb 1-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 127.564870][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.582876][ T5772] usb 1-1: Product: syz [ 127.592765][ T5772] usb 1-1: Manufacturer: syz [ 127.607279][ T5772] usb 1-1: SerialNumber: syz [ 127.880885][ T5772] usb 1-1: USB disconnect, device number 2 [ 128.944613][ T6255] program syz.3.115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.826875][ T5772] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.036799][ T5772] usb 1-1: Using ep0 maxpacket: 8 [ 130.807245][ T5772] usb 1-1: device descriptor read/all, error -71 [ 130.833743][ T6264] syzkaller0: entered promiscuous mode [ 130.865683][ T6264] syzkaller0: entered allmulticast mode [ 133.407449][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.414168][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.033551][ T6323] program syz.3.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.270446][ T6332] [ 137.272871][ T6332] ============================= [ 137.278141][ T6332] WARNING: suspicious RCU usage [ 137.283035][ T6332] syzkaller #0 Not tainted [ 137.287894][ T6332] ----------------------------- [ 137.292827][ T6332] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 137.301322][ T6332] [ 137.301322][ T6332] other info that might help us debug this: [ 137.301322][ T6332] [ 137.311619][ T6332] [ 137.311619][ T6332] rcu_scheduler_active = 2, debug_locks = 1 [ 137.319767][ T6332] 1 lock held by syz.0.139/6332: [ 137.324914][ T6332] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 137.334500][ T6332] [ 137.334500][ T6332] stack backtrace: [ 137.340621][ T6332] CPU: 1 PID: 6332 Comm: syz.0.139 Not tainted syzkaller #0 [ 137.347923][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.358037][ T6332] Call Trace: [ 137.361362][ T6332] [ 137.364320][ T6332] dump_stack_lvl+0x18c/0x250 [ 137.369053][ T6332] ? show_regs_print_info+0x20/0x20 [ 137.374273][ T6332] ? load_image+0x420/0x420 [ 137.378827][ T6332] lockdep_rcu_suspicious+0x1e1/0x300 [ 137.384222][ T6332] ieee80211_check_concurrent_iface+0x475/0x950 [ 137.390502][ T6332] ieee80211_open+0xc1/0x200 [ 137.395152][ T6332] __dev_open+0x2cb/0x430 [ 137.399515][ T6332] ? dev_open+0x190/0x190 [ 137.403867][ T6332] __dev_change_flags+0x211/0x6a0 [ 137.408940][ T6332] ? dev_get_flags+0x1c0/0x1c0 [ 137.413724][ T6332] ? mutex_lock_nested+0x20/0x20 [ 137.418683][ T6332] dev_change_flags+0x88/0x1a0 [ 137.423492][ T6332] dev_ioctl+0x7b4/0x1140 [ 137.427874][ T6332] sock_do_ioctl+0x239/0x310 [ 137.432477][ T6332] ? sock_show_fdinfo+0xb0/0xb0 [ 137.437358][ T6332] sock_ioctl+0x5ba/0x7e0 [ 137.441705][ T6332] ? sock_poll+0x3e0/0x3e0 [ 137.446144][ T6332] ? bpf_lsm_file_ioctl+0x9/0x10 [ 137.451093][ T6332] ? security_file_ioctl+0x80/0xa0 [ 137.456221][ T6332] ? sock_poll+0x3e0/0x3e0 [ 137.460755][ T6332] __se_sys_ioctl+0xfd/0x170 [ 137.465408][ T6332] do_syscall_64+0x55/0xa0 [ 137.469875][ T6332] ? clear_bhb_loop+0x40/0x90 [ 137.474613][ T6332] ? clear_bhb_loop+0x40/0x90 [ 137.479340][ T6332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.485265][ T6332] RIP: 0033:0x7f1c1439c819 [ 137.489741][ T6332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.509385][ T6332] RSP: 002b:00007f1c15279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.517830][ T6332] RAX: ffffffffffffffda RBX: 00007f1c14615fa0 RCX: 00007f1c1439c819 [ 137.525829][ T6332] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004 [ 137.533824][ T6332] RBP: 00007f1c14432c91 R08: 0000000000000000 R09: 0000000000000000 [ 137.541821][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.549819][ T6332] R13: 00007f1c14616038 R14: 00007f1c14615fa0 R15: 00007fff636d2418 [ 137.557832][ T6332] [ 137.615559][ T6332] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 137.623348][ T6332] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode