last executing test programs: 29.348798693s ago: executing program 3 (id=111): r0 = socket(0x29, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./file1\x00', &(0x7f0000000340)='bpf\x00', 0x100001, &(0x7f0000000380)='/dev/net/tun\x00') ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 26.485040868s ago: executing program 3 (id=119): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 24.262136827s ago: executing program 3 (id=123): r0 = socket$inet(0xa, 0x801, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0xc8, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x90, 0x2, [@TCA_CGROUP_ACT={0x8c, 0x1, [@m_connmark={0x88, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000140)=0xffffffffffffffff) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) 24.257430294s ago: executing program 0 (id=124): socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x20000000) pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x29, 0x107, 0x70bd25, 0x25dfdbfe, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x44) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) 23.015841155s ago: executing program 0 (id=129): socket$key(0xf, 0x3, 0x2) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f00000007c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 21.585506942s ago: executing program 3 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e5635", 0x46}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323", 0x47}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b8", 0xa}], 0x2}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8db", @ANYRES32], 0x1c}}, 0x4008054) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 20.708433196s ago: executing program 0 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') 20.377159099s ago: executing program 3 (id=138): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$pptp(0x18, 0x1, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x15, 0x1, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffff48}, 0x10112) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0xd, 0x4, 0x100, &(0x7f0000000440)="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"}) bind$pptp(r3, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r6, 0xee01, 0x0) 19.332147498s ago: executing program 0 (id=139): r0 = socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x2, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b0000000904"], 0x0) r1 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r1]}, &(0x7f0000000680)={0x44, &(0x7f0000000100)={0x0, 0x9}, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xfc}, 0x0, &(0x7f0000000700)={0x20, 0x82, 0x1, "88"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, "eac9"}, &(0x7f0000000600)=ANY=[], 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x10000009}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3ee0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000140)=""/210) shutdown(r0, 0x0) 16.04306889s ago: executing program 0 (id=147): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "5a060040", "0725eade", "e4eecc1a", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x15b, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) r3 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmctl$SHM_LOCK(r3, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 11.993791097s ago: executing program 4 (id=155): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24040810) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001000000000800010000000900562df27baa757c5201"], 0x24}}, 0x4) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 10.481896052s ago: executing program 2 (id=156): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) getpgid(0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0xf02, 0x0, 0x0, &(0x7f0000000000), 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000340)={0xe939, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r4}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000004, 0x4008011, r1, 0x100000000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001680)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4004) 10.342315606s ago: executing program 1 (id=157): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}, 0x1, 0x0, 0x0, 0x2004c001}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x4, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) 10.262747607s ago: executing program 5 (id=158): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002ac0)=""/4096, 0x1000}], 0x1}, 0xd}], 0x26, 0x10022, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) 8.557882576s ago: executing program 1 (id=159): r0 = socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x2, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b0000000904"], 0x0) r1 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r1]}, &(0x7f0000000680)={0x44, &(0x7f0000000100)={0x0, 0x9}, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xfc}, 0x0, &(0x7f0000000700)={0x20, 0x82, 0x1, "88"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, "eac9"}, &(0x7f0000000600)=ANY=[], 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x10000009}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3ee0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000140)=""/210) shutdown(r0, 0x0) 8.389052146s ago: executing program 4 (id=160): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000b40)={0x12, 0x10, 0xfa00, {&(0x7f0000000b00), 0xffffffffffffffff, r2}}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x200, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xd}, {0xe, 0xf}, {0x8, 0xc}}, [{0x8, 0xb, 0xc0e}, {0x8, 0xb, 0x89}, {0x8, 0xb, 0x87e}]}, 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x10) fsopen(&(0x7f0000000180)='adfs\x00', 0x1) 8.313582845s ago: executing program 5 (id=161): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x100) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x844) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) timer_create(0x4, 0x0, &(0x7f0000000340)) 8.217374814s ago: executing program 2 (id=162): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast, {[@end, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@loopback}, {@remote}, {@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r1, 0x8b20, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x6c, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x8843, @void, @val={0x1, 0x6, [{0x2}, {0x2, 0x1}, {0x36}, {0x60, 0x1}, {0x4, 0x1}, {0x4}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x3c, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0xffffffff, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24008015, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 7.206425293s ago: executing program 4 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e5635", 0x46}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323", 0x47}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b8", 0xa}], 0x2}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010426bd7000f8dbdf", @ANYRES32], 0x1c}}, 0x4008054) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.1488272s ago: executing program 5 (id=164): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 6.076528465s ago: executing program 2 (id=165): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xb00, 0x12) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000600)="27031600160014000000002f1eafacf706e105000000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmget(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/139}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="5c194c76e3fd358c3f2ec0cf6046", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) gettid() capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x4}) 6.072880703s ago: executing program 4 (id=166): socket(0x29, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket(0x2, 0x80805, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./file1\x00', &(0x7f0000000340)='bpf\x00', 0x100001, &(0x7f0000000380)='/dev/net/tun\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 5.885847646s ago: executing program 3 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') 5.116604041s ago: executing program 5 (id=168): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000009c0)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x2000000, 0x0}) 4.83165987s ago: executing program 1 (id=169): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getpid() r3 = io_uring_setup(0x3450, &(0x7f0000000340)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.975501681s ago: executing program 2 (id=170): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x42000) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x844) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x108402) timer_create(0x4, 0x0, &(0x7f0000000340)=0x0) timer_gettime(r5, &(0x7f0000000540)) 3.908861023s ago: executing program 5 (id=171): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@hyper, 0x6}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000240)=0x1) 3.825883942s ago: executing program 1 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') 3.773584994s ago: executing program 4 (id=173): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a", 0x42}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624", 0xaf}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050", 0x75}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b", 0x41}], 0x5}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.213436655s ago: executing program 0 (id=174): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24040810) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001000000000800010000000900562df27baa757c5201"], 0x24}}, 0x4) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x5b) read$watch_queue(r6, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES16=r7, @ANYRESOCT=r7, @ANYRESDEC=r5, @ANYRESDEC=0x0, @ANYRES64=r1, @ANYRES64], 0x0, 0x0, 0x0, 0x0}) 2.149574008s ago: executing program 1 (id=175): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000b40)={0x12, 0x10, 0xfa00, {&(0x7f0000000b00), 0xffffffffffffffff, r2}}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x200, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xd}, {0xe, 0xf}, {0x8, 0xc}}, [{0x8, 0xb, 0xc0e}, {0x8, 0xb, 0x89}, {0x8, 0xb, 0x87e}]}, 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x10) fsopen(&(0x7f0000000180)='adfs\x00', 0x1) 2.08428228s ago: executing program 4 (id=176): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x80000, @mcast1={0xff, 0x5}}, 0x6d) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaa0a0535810800450800240000000000119078ac1414bbe000000100004e20001090780209"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86ccff009b66bcd9a7b4c333a53e8c04455397aef78e379cd5e13aec6c2332faaef6ca310547d38e3f94414ebf33411ace8acabb11db28b8d4a121aabc746e6654556cab1e2de77b082d2e061e3fe4c58efe4f8e0ca956bedc5763cc2da2151eb0ac6a937560b54dd5dc11b4e65a4bdf04414605200a", 0xe9}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030db22777a29e201d", 0xff95}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.06612119s ago: executing program 2 (id=177): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x100) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x844) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) timer_create(0x4, 0x0, &(0x7f0000000340)) 1.19589089s ago: executing program 5 (id=178): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast, {[@end, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@loopback}, {@remote}, {@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r1, 0x8b20, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x6c, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x8843, @void, @val={0x1, 0x6, [{0x2}, {0x2, 0x1}, {0x36}, {0x60, 0x1}, {0x4, 0x1}, {0x4}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x3c, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0xffffffff, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24008015, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 130.117574ms ago: executing program 2 (id=179): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x10040, 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 0s ago: executing program 1 (id=180): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x80000, @mcast1={0xff, 0x5}}, 0x6d) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaa0a0535810800450800240000000000119078ac1414bbe000000100004e20001090780209"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86ccff009b66bcd9a7b4c333a53e8c04455397aef78e379cd5e13aec6c2332faaef6ca310547d38e3f94414ebf33411ace8acabb11db28b8d4a121aabc746e6654556cab1e2de77b082d2e061e3fe4c58efe4f8e0ca956bedc5763cc2da2151eb0ac6a937560b54dd5dc11b4e65a4bdf04414605200a", 0xe9}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030db22777a29e201d", 0xff95}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 74.753471][ T5605] cgroup: Unknown subsys name 'net' [ 74.874866][ T5605] cgroup: Unknown subsys name 'cpuset' [ 74.884133][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.369696][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.908678][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.916233][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.933921][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.942113][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.951701][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.959911][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.968577][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.976783][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.986393][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.986664][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.000606][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.001413][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.017618][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.024045][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.027575][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.033115][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.048755][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.049598][ T4936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.063728][ T4936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.071521][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.093239][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.093357][ T4936] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.104517][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.115906][ T4936] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.116930][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.130881][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.134946][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.146321][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.146786][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.163150][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.103758][ T50] Bluetooth: hci0: command tx timeout [ 81.109554][ T5627] Bluetooth: hci1: command tx timeout [ 81.180603][ T5627] Bluetooth: hci5: command tx timeout [ 81.186792][ T5621] Bluetooth: hci4: command tx timeout [ 81.186966][ T5637] Bluetooth: hci3: command tx timeout [ 81.192426][ T50] Bluetooth: hci2: command tx timeout [ 81.703701][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.710938][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.718070][ T5619] bridge_slave_0: entered allmulticast mode [ 81.725796][ T5619] bridge_slave_0: entered promiscuous mode [ 81.752735][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.759849][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.767107][ T5639] bridge_slave_0: entered allmulticast mode [ 81.774755][ T5639] bridge_slave_0: entered promiscuous mode [ 81.808382][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.815734][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.823125][ T5619] bridge_slave_1: entered allmulticast mode [ 81.830529][ T5619] bridge_slave_1: entered promiscuous mode [ 81.837701][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.844849][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.852390][ T5625] bridge_slave_0: entered allmulticast mode [ 81.859712][ T5625] bridge_slave_0: entered promiscuous mode [ 81.874301][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.881494][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.888629][ T5639] bridge_slave_1: entered allmulticast mode [ 81.896263][ T5639] bridge_slave_1: entered promiscuous mode [ 81.965509][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.972753][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.979868][ T5625] bridge_slave_1: entered allmulticast mode [ 81.987676][ T5625] bridge_slave_1: entered promiscuous mode [ 82.063545][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.098805][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.120144][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.127394][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.134805][ T5628] bridge_slave_0: entered allmulticast mode [ 82.142419][ T5628] bridge_slave_0: entered promiscuous mode [ 82.152478][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.173647][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.180789][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.187973][ T5632] bridge_slave_0: entered allmulticast mode [ 82.195764][ T5632] bridge_slave_0: entered promiscuous mode [ 82.205731][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.215133][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.222534][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.229666][ T5618] bridge_slave_0: entered allmulticast mode [ 82.237381][ T5618] bridge_slave_0: entered promiscuous mode [ 82.245304][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.252645][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.259992][ T5628] bridge_slave_1: entered allmulticast mode [ 82.268131][ T5628] bridge_slave_1: entered promiscuous mode [ 82.325210][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.336101][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.344050][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.351290][ T5632] bridge_slave_1: entered allmulticast mode [ 82.358768][ T5632] bridge_slave_1: entered promiscuous mode [ 82.376426][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.389190][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.396584][ T5618] bridge_slave_1: entered allmulticast mode [ 82.403983][ T5618] bridge_slave_1: entered promiscuous mode [ 82.424126][ T5619] team0: Port device team_slave_0 added [ 82.432960][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.492099][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.503393][ T5619] team0: Port device team_slave_1 added [ 82.534595][ T5639] team0: Port device team_slave_0 added [ 82.554911][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.592254][ T5625] team0: Port device team_slave_0 added [ 82.601063][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.612548][ T5639] team0: Port device team_slave_1 added [ 82.620831][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.656396][ T5625] team0: Port device team_slave_1 added [ 82.678455][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.701929][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.713000][ T5628] team0: Port device team_slave_0 added [ 82.719562][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.726737][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.752835][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.813660][ T5628] team0: Port device team_slave_1 added [ 82.819891][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.826902][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.852831][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.864769][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.872035][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.898309][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.921558][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.928595][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.955086][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.009209][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.016390][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.042914][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.056419][ T5632] team0: Port device team_slave_0 added [ 83.062945][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.069936][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.096263][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.109612][ T5618] team0: Port device team_slave_0 added [ 83.152403][ T5632] team0: Port device team_slave_1 added [ 83.167133][ T5618] team0: Port device team_slave_1 added [ 83.173359][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.180372][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.180660][ T5627] Bluetooth: hci0: command tx timeout [ 83.207232][ T50] Bluetooth: hci1: command tx timeout [ 83.212729][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.261075][ T5627] Bluetooth: hci5: command tx timeout [ 83.261100][ T5637] Bluetooth: hci4: command tx timeout [ 83.267072][ T5621] Bluetooth: hci3: command tx timeout [ 83.267160][ T50] Bluetooth: hci2: command tx timeout [ 83.301955][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.308986][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.334918][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.391776][ T5619] hsr_slave_0: entered promiscuous mode [ 83.398291][ T5619] hsr_slave_1: entered promiscuous mode [ 83.438151][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.445119][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.471294][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.496164][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.503150][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.529130][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.558956][ T5625] hsr_slave_0: entered promiscuous mode [ 83.565564][ T5625] hsr_slave_1: entered promiscuous mode [ 83.572324][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 83.578071][ T5625] Cannot create hsr debugfs directory [ 83.584496][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.591473][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.618013][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.631763][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.638695][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.664811][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.759504][ T5639] hsr_slave_0: entered promiscuous mode [ 83.766693][ T5639] hsr_slave_1: entered promiscuous mode [ 83.773139][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 83.778851][ T5639] Cannot create hsr debugfs directory [ 83.806303][ T5628] hsr_slave_0: entered promiscuous mode [ 83.812899][ T5628] hsr_slave_1: entered promiscuous mode [ 83.819116][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 83.824885][ T5628] Cannot create hsr debugfs directory [ 83.942720][ T5618] hsr_slave_0: entered promiscuous mode [ 83.949073][ T5618] hsr_slave_1: entered promiscuous mode [ 83.955393][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 83.961213][ T5618] Cannot create hsr debugfs directory [ 84.059777][ T5632] hsr_slave_0: entered promiscuous mode [ 84.066744][ T5632] hsr_slave_1: entered promiscuous mode [ 84.073243][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 84.078972][ T5632] Cannot create hsr debugfs directory [ 84.628022][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.640948][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.665091][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.676655][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.685264][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.695756][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.719655][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.729540][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.797037][ T5639] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.809132][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.818579][ T5639] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.828867][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.837033][ T5639] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.847411][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.859180][ T5639] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.869402][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.963668][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.975820][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.983870][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.994554][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.009340][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.020336][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.034053][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.044648][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.133335][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.156938][ T5625] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.169254][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.187978][ T5625] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.199403][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.207818][ T5625] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.218832][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.226861][ T5625] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.237912][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.261357][ T5637] Bluetooth: hci1: command tx timeout [ 85.261489][ T5627] Bluetooth: hci0: command tx timeout [ 85.297347][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.331649][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.338955][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.347528][ T5627] Bluetooth: hci5: command tx timeout [ 85.347841][ T5637] Bluetooth: hci2: command tx timeout [ 85.354105][ T5621] Bluetooth: hci4: command tx timeout [ 85.361567][ T50] Bluetooth: hci3: command tx timeout [ 85.401748][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.428662][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.435823][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.449755][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.462259][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.486014][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.496125][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.517571][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.531249][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.540293][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.562394][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.573418][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.616955][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.624166][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.661197][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.668423][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.717190][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.728068][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.748759][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.758922][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.779437][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.789196][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.797596][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.809011][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.923186][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.988308][ T24] cfg80211: failed to load regulatory.db [ 86.054209][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.082792][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.126980][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.134168][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.177120][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.184317][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.209720][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.256504][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.263682][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.322466][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.329644][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.366304][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.472289][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.489548][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.559735][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.566916][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.625420][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.632606][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.682331][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.732325][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.775555][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.782747][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.825747][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.832935][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.021455][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.053186][ T5619] veth0_vlan: entered promiscuous mode [ 87.133107][ T5619] veth1_vlan: entered promiscuous mode [ 87.328194][ T5639] veth0_vlan: entered promiscuous mode [ 87.340873][ T50] Bluetooth: hci0: command tx timeout [ 87.346328][ T5621] Bluetooth: hci1: command tx timeout [ 87.387141][ T5619] veth0_macvtap: entered promiscuous mode [ 87.420824][ T5621] Bluetooth: hci3: command tx timeout [ 87.426282][ T50] Bluetooth: hci4: command tx timeout [ 87.426547][ T5627] Bluetooth: hci5: command tx timeout [ 87.432088][ T5621] Bluetooth: hci2: command tx timeout [ 87.446812][ T5639] veth1_vlan: entered promiscuous mode [ 87.485758][ T5619] veth1_macvtap: entered promiscuous mode [ 87.649658][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.706787][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.766549][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.797202][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.841338][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.850351][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.875008][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.882642][ T5639] veth0_macvtap: entered promiscuous mode [ 87.908706][ T5639] veth1_macvtap: entered promiscuous mode [ 87.956092][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.042370][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.139345][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.230246][ T135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.250548][ T135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.285968][ T135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.307486][ T135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.361289][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.376147][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.385284][ T5628] veth0_vlan: entered promiscuous mode [ 88.404415][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.491794][ T5628] veth1_vlan: entered promiscuous mode [ 88.585624][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.597072][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.606930][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.658863][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.667784][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.767149][ T5619] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.796307][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.818393][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.843198][ T5628] veth0_macvtap: entered promiscuous mode [ 88.873353][ T5628] veth1_macvtap: entered promiscuous mode [ 89.326628][ T5860] Zero length message leads to an empty skb [ 89.609179][ T5625] veth0_vlan: entered promiscuous mode [ 89.677107][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.721942][ T5625] veth1_vlan: entered promiscuous mode [ 89.744149][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.781746][ T5632] veth0_vlan: entered promiscuous mode [ 89.811226][ T63] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.925180][ T63] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.999927][ T5632] veth1_vlan: entered promiscuous mode [ 90.007074][ T63] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.018237][ T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.248063][ T5618] veth0_vlan: entered promiscuous mode [ 90.297897][ T5625] veth0_macvtap: entered promiscuous mode [ 90.346866][ T5618] veth1_vlan: entered promiscuous mode [ 90.358696][ T5625] veth1_macvtap: entered promiscuous mode [ 90.428410][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.446370][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.513057][ T5632] veth0_macvtap: entered promiscuous mode [ 90.607472][ T5632] veth1_macvtap: entered promiscuous mode [ 90.643442][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.664685][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.666596][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.707296][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.785834][ T148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.826917][ T148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.847704][ T148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.866986][ T148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.928702][ T5618] veth0_macvtap: entered promiscuous mode [ 90.974865][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.023549][ T5618] veth1_macvtap: entered promiscuous mode [ 91.060730][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.673342][ T135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.847782][ T135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.856943][ T135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.865985][ T135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.623072][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.704847][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.789249][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.816175][ T148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.828535][ T148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.840449][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.901291][ T148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.959240][ T148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.087979][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.112301][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.188771][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.198765][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.231496][ T5742] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.255061][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.288332][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.311643][ T5818] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.328769][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.390526][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.430940][ T5742] usb 3-1: Using ep0 maxpacket: 32 [ 94.543260][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 94.590502][ T5742] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 94.674958][ T5742] usb 3-1: config 0 has no interface number 0 [ 94.681268][ T5818] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 94.687419][ T5742] usb 3-1: config 0 interface 12 has no altsetting 0 [ 94.999857][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.002440][ T5742] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 95.061226][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.106754][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.114770][ T5742] usb 3-1: Product: syz [ 95.129115][ T5818] usb 4-1: config 0 descriptor?? [ 95.149448][ T5742] usb 3-1: Manufacturer: syz [ 95.176286][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.198467][ T5742] usb 3-1: SerialNumber: syz [ 95.284618][ T5742] usb 3-1: config 0 descriptor?? [ 95.353910][ T5818] as10x_usb: device has been detected [ 95.390160][ T5818] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 95.399548][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.594450][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.226121][ T5818] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 96.733316][ T5818] as10x_usb: error during firmware upload part1 [ 96.762122][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.842212][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.884532][ T5818] Registered device nBox DVB-T Dongle [ 96.966494][ T5742] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 97.158095][ T5742] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 97.192713][ T5742] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 97.369921][ T5742] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 97.408930][ T5742] usb 3-1: USB disconnect, device number 2 [ 98.396085][ T803] usb 4-1: USB disconnect, device number 2 [ 98.686373][ T5927] binder: 5924:5927 ioctl 541b 0 returned -22 [ 99.220103][ T5926] bridge_slave_1: left allmulticast mode [ 99.225863][ T5926] bridge_slave_1: left promiscuous mode [ 99.232692][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.515526][ T5926] bridge_slave_0: left allmulticast mode [ 99.521469][ T5926] bridge_slave_0: left promiscuous mode [ 99.528648][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.695876][ T803] Unregistered device nBox DVB-T Dongle [ 99.705782][ T803] as10x_usb: device has been disconnected [ 100.253160][ T5742] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.453050][ T5742] usb 5-1: Using ep0 maxpacket: 32 [ 100.482632][ T5742] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 100.520586][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.605917][ T5945] NILFS (nullb0): couldn't find nilfs on the device [ 101.635097][ T5742] usb 5-1: config 0 descriptor?? [ 101.680627][ T5742] usb 5-1: can't set config #0, error -71 [ 102.099442][ T5742] usb 5-1: USB disconnect, device number 2 [ 102.212760][ T5622] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.246393][ T5953] loop6: detected capacity change from 0 to 2640 [ 102.262160][ T5953] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.537467][ T5953] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.551007][ T5622] usb 1-1: Using ep0 maxpacket: 16 [ 103.288939][ T5953] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.303236][ T5622] usb 1-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 103.335886][ T5622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.380855][ T5953] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.396820][ T5622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.516550][ T5953] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.525610][ T5622] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 103.580058][ T5622] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.599675][ T5953] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.639456][ T5953] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.656440][ T5622] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 103.677758][ T5622] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 103.706827][ T5953] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.722843][ T5953] ldm_validate_partition_table(): Disk read failed. [ 103.761035][ T5622] usb 1-1: Manufacturer: syz [ 103.775292][ T5953] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.788605][ T5953] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.807041][ T5953] Dev loop6: unable to read RDB block 0 [ 103.832747][ T5953] loop6: unable to read partition table [ 103.834650][ T5622] usb 1-1: config 0 descriptor?? [ 103.852305][ T5953] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 104.291905][ T5973] /dev/nullb0: Can't open blockdev [ 104.747037][ T5622] usb 1-1: can't set config #0, error -71 [ 105.290054][ T5622] usb 1-1: USB disconnect, device number 2 [ 106.200513][ T5742] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.401427][ T5742] usb 5-1: Using ep0 maxpacket: 8 [ 106.539481][ T5742] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 106.570013][ T5742] usb 5-1: config 0 has no interface number 0 [ 106.629981][ T5742] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 106.932028][ T5742] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 106.981845][ T5742] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.116706][ T5742] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.203705][ T5742] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 107.353875][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.365611][ T5742] usb 5-1: config 0 descriptor?? [ 107.377500][ T5742] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 108.170484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.190429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 108.518317][ T5982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.586655][ T5982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.746878][ T30] audit: type=1804 audit(1777784883.150:2): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.37" name="/newroot/6/file0" dev="tmpfs" ino=49 res=1 errno=0 [ 109.901122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 109.948534][ T30] audit: type=1326 audit(1777784883.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.0.39" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25379cdd9 code=0x7ffc0000 [ 110.115181][ T30] audit: type=1326 audit(1777784883.210:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.0.39" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25379cdd9 code=0x7ffc0000 [ 110.789099][ T30] audit: type=1326 audit(1777784883.210:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.0.39" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff25379cdd9 code=0x7ffc0000 [ 110.965569][ T30] audit: type=1326 audit(1777784883.210:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.0.39" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25379cdd9 code=0x7ffc0000 [ 111.013500][ T30] audit: type=1326 audit(1777784883.210:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.0.39" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25379cdd9 code=0x7ffc0000 [ 111.095471][ T30] audit: type=1326 audit(1777784883.210:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.0.39" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff25379cdd9 code=0x7ffc0000 [ 111.229437][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-1) [ 111.260149][ T29] usb 5-1: USB disconnect, device number 3 [ 111.287408][ T30] audit: type=1326 audit(1777784883.210:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.0.39" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25379cdd9 code=0x7ffc0000 [ 111.329635][ T29] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 111.420140][ T30] audit: type=1326 audit(1777784883.210:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.0.39" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25379cdd9 code=0x7ffc0000 [ 111.485584][ T30] audit: type=1326 audit(1777784883.210:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.0.39" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff25379cdd9 code=0x7ffc0000 [ 115.792073][ T5742] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.971963][ T5742] usb 2-1: Using ep0 maxpacket: 16 [ 115.997853][ T6075] fuse: Bad value for 'fd' [ 116.016735][ T5742] usb 2-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 116.045096][ T5742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.083760][ T5742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 116.133043][ T5742] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 116.143336][ T5742] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.161766][ T5742] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 116.231228][ T5742] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 116.239718][ T5742] usb 2-1: Manufacturer: syz [ 116.250777][ T5742] usb 2-1: config 0 descriptor?? [ 116.361737][ T5622] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 116.760587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 116.800711][ T5622] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.834917][ T5622] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.880654][ T5622] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 116.950341][ T5622] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 116.991740][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 117.030868][ T5622] usb 1-1: Product: syz [ 117.047189][ T5622] usb 1-1: Manufacturer: syz [ 117.074126][ T5622] usb 1-1: SerialNumber: syz [ 117.090041][ T5742] rc_core: IR keymap rc-hauppauge not found [ 117.105844][ T5742] Registered IR keymap rc-empty [ 117.131248][ T5742] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.156052][ T5622] usb 1-1: config 0 descriptor?? [ 117.203080][ T5742] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 117.221541][ T5622] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 117.387693][ T5622] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 117.590035][ T5742] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 118.225791][ T5742] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 118.249874][ T5622] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 118.506644][ T5870] usb 1-1: USB disconnect, device number 3 [ 122.905444][ T5742] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 123.090551][ T5742] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 123.116276][ T5742] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 123.140651][ T5742] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 123.170570][ T5742] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 123.220698][ T5742] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 123.251711][ T5742] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 123.282776][ T5742] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 123.384529][ T6114] comedi comedi0: Minor 3 could not be opened [ 123.390584][ T5742] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 123.480834][ T5742] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 123.541983][ T5742] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 123.553798][ T5742] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 123.655987][ T5742] usb 2-1: USB disconnect, device number 2 [ 124.735153][ T6129] netlink: 'syz.0.73': attribute type 1 has an invalid length. [ 124.781621][ T6129] veth1_macvtap: Device is already in use. [ 125.270735][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 125.700622][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 125.726013][ T10] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 125.736200][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.744680][ T10] usb 6-1: Product: syz [ 125.748947][ T10] usb 6-1: Manufacturer: syz [ 125.753605][ T10] usb 6-1: SerialNumber: syz [ 125.763771][ T10] usb 6-1: config 0 descriptor?? [ 125.776186][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 126.382355][ T10] gspca_se401: Wrong descriptor type [ 126.504574][ T10] usb 6-1: USB disconnect, device number 2 [ 126.550537][ T5763] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 126.722796][ T5763] usb 3-1: Using ep0 maxpacket: 8 [ 126.771469][ T5763] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 126.779806][ T5763] usb 3-1: config 0 has no interface number 0 [ 126.812447][ T5763] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 126.867813][ T5763] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 126.892201][ T5763] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.906343][ T5763] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 126.925164][ T5763] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 126.947602][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.969610][ T5763] usb 3-1: config 0 descriptor?? [ 127.058452][ T5763] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 127.210523][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 127.686402][ T6138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.735234][ T6138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.744116][ T10] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 127.758990][ T10] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 127.828001][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.878864][ T10] usb 1-1: Product: syz [ 127.910315][ T10] usb 1-1: Manufacturer: syz [ 127.934411][ T10] usb 1-1: SerialNumber: syz [ 127.981427][ T10] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 127.993117][ T10] imon 1-1:155.0: unable to initialize intf0, err -19 [ 128.006793][ T10] imon:imon_probe: failed to initialize context! [ 128.021010][ T10] imon 1-1:155.0: unable to register, err -19 [ 128.160779][ T10] usb 3-1: USB disconnect, device number 3 [ 128.166763][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 128.286204][ T6151] netlink: 256 bytes leftover after parsing attributes in process `syz.0.79'. [ 128.679713][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 128.687233][ T6138] ldusb: No device or device unplugged -19 [ 128.779236][ T5763] usb 1-1: USB disconnect, device number 4 [ 128.953475][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 130.400703][ T6175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.90'. [ 130.488882][ T30] audit: type=1326 audit(1777784904.890:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.5.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b139cdd9 code=0x7ffc0000 [ 131.391794][ T6187] binder: BINDER_SET_CONTEXT_MGR already set [ 131.398161][ T6187] binder: 6181:6187 ioctl 4018620d 200000004a80 returned -16 [ 131.575528][ T30] audit: type=1326 audit(1777784904.900:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.5.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b139cdd9 code=0x7ffc0000 [ 131.691161][ T30] audit: type=1326 audit(1777784904.900:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.5.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f98b139cdd9 code=0x7ffc0000 [ 131.728424][ T6194] SQUASHFS error: Failed to read block 0x0: -5 [ 131.775053][ T6194] unable to read squashfs_super_block [ 132.098698][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.115607][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.230619][ T30] audit: type=1326 audit(1777784904.900:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.5.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b139cdd9 code=0x7ffc0000 [ 132.356234][ T30] audit: type=1326 audit(1777784904.900:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.5.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b139cdd9 code=0x7ffc0000 [ 132.426916][ T30] audit: type=1326 audit(1777784904.900:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.5.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f98b139cdd9 code=0x7ffc0000 [ 132.798303][ T30] audit: type=1326 audit(1777784904.900:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.5.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b139cdd9 code=0x7ffc0000 [ 132.906123][ T30] audit: type=1326 audit(1777784904.900:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.5.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b139cdd9 code=0x7ffc0000 [ 133.023389][ T30] audit: type=1326 audit(1777784904.900:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.5.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f98b139cdd9 code=0x7ffc0000 [ 133.060048][ T6210] syz.3.100 uses obsolete (PF_INET,SOCK_PACKET) [ 133.127928][ T30] audit: type=1326 audit(1777784905.710:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.5.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b139cdd9 code=0x7ffc0000 [ 133.166478][ T6210] netlink: 'syz.3.100': attribute type 25 has an invalid length. [ 135.469743][ T6230] syzkaller0: entered promiscuous mode [ 135.493930][ T6230] syzkaller0: entered allmulticast mode [ 135.500562][ T5763] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.692215][ T5763] usb 5-1: Using ep0 maxpacket: 8 [ 135.770588][ T5763] usb 5-1: unable to get BOS descriptor or descriptor too short [ 135.865688][ T5763] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 135.875283][ T5763] usb 5-1: can't read configurations, error -71 [ 137.059457][ T6244] bridge_slave_1: left allmulticast mode [ 137.086338][ T6247] binder: 6242:6247 ioctl 541b 0 returned -22 [ 137.151869][ T6244] bridge_slave_1: left promiscuous mode [ 137.159442][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.494204][ T6244] bridge_slave_0: left allmulticast mode [ 137.500002][ T6244] bridge_slave_0: left promiscuous mode [ 137.506983][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.691474][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 139.691519][ T30] audit: type=1326 audit(1777784914.080:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.118" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eed39cdd9 code=0x7ffc0000 [ 140.321096][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 140.871685][ T6280] binder: 6274:6280 ioctl c0306201 0 returned -14 [ 141.327393][ T30] audit: type=1326 audit(1777784914.080:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.118" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eed39cdd9 code=0x7ffc0000 [ 141.460517][ T30] audit: type=1326 audit(1777784914.090:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.118" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8eed39cdd9 code=0x7ffc0000 [ 141.586366][ T30] audit: type=1326 audit(1777784914.090:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.118" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eed39cdd9 code=0x7ffc0000 [ 141.698187][ T30] audit: type=1326 audit(1777784914.090:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.118" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eed39cdd9 code=0x7ffc0000 [ 141.769474][ T30] audit: type=1326 audit(1777784914.100:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.118" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8eed39cdd9 code=0x7ffc0000 [ 141.971590][ T30] audit: type=1326 audit(1777784914.100:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.118" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eed39cdd9 code=0x7ffc0000 [ 142.071116][ T916] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 142.230282][ T30] audit: type=1326 audit(1777784914.100:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.118" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eed39cdd9 code=0x7ffc0000 [ 142.420608][ T916] usb 2-1: Using ep0 maxpacket: 32 [ 142.657472][ T916] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 142.684890][ T916] usb 2-1: config 0 has no interface number 0 [ 142.737352][ T30] audit: type=1326 audit(1777784914.100:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.118" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8eed39cdd9 code=0x7ffc0000 [ 142.767387][ T916] usb 2-1: config 0 interface 12 has no altsetting 0 [ 142.846007][ T916] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 142.867505][ T916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.471327][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.686964][ T6306] binder: BINDER_SET_CONTEXT_MGR already set [ 143.696296][ T6306] binder: 6301:6306 ioctl 4018620d 200000004a80 returned -16 [ 143.697981][ T916] usb 2-1: Product: syz [ 143.742496][ T916] usb 2-1: Manufacturer: syz [ 144.070460][ T916] usb 2-1: SerialNumber: syz [ 144.181439][ T916] usb 2-1: config 0 descriptor?? [ 144.192826][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 144.204859][ T10] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 144.233929][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.283490][ T10] usb 3-1: config 0 descriptor?? [ 144.994833][ T10] as10x_usb: device has been detected [ 144.996843][ T916] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 145.046538][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 145.055793][ T916] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 145.095113][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.109972][ T916] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 145.121676][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.180053][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 145.180232][ T916] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 145.250370][ T916] usb 2-1: USB disconnect, device number 3 [ 145.811734][ T6324] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 146.206505][ T10] as10x_usb: error during firmware upload part1 [ 146.231098][ T10] Registered device nBox DVB-T Dongle [ 146.362041][ T10] usb 3-1: USB disconnect, device number 4 [ 146.983445][ T10] Unregistered device nBox DVB-T Dongle [ 147.003226][ T10] as10x_usb: device has been disconnected [ 147.088652][ T6324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.266587][ T5763] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 147.861218][ T6351] binder: BINDER_SET_CONTEXT_MGR already set [ 147.861244][ T6351] binder: 6350:6351 ioctl 4018620d 200000004a80 returned -16 [ 147.906055][ T5763] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 147.917309][ T5763] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 147.917335][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.917353][ T5763] usb 1-1: Product: syz [ 147.917367][ T5763] usb 1-1: Manufacturer: syz [ 147.917386][ T5763] usb 1-1: SerialNumber: syz [ 147.940866][ T5763] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 147.940950][ T5763] imon 1-1:155.0: unable to initialize intf0, err -19 [ 147.940964][ T5763] imon:imon_probe: failed to initialize context! [ 147.940975][ T5763] imon 1-1:155.0: unable to register, err -19 [ 148.800111][ T10] usb 1-1: USB disconnect, device number 5 [ 150.200551][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 150.382814][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 150.567333][ T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 150.580217][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.590601][ T10] usb 2-1: Product: syz [ 150.598277][ T10] usb 2-1: Manufacturer: syz [ 150.611357][ T10] usb 2-1: SerialNumber: syz [ 150.638616][ T10] usb 2-1: config 0 descriptor?? [ 150.766756][ T30] audit: type=1326 audit(1777784925.130:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.2.148" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0539cdd9 code=0x7ffc0000 [ 151.386646][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 151.393622][ T30] audit: type=1326 audit(1777784925.140:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.2.148" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0539cdd9 code=0x7ffc0000 [ 151.422833][ T30] audit: type=1326 audit(1777784925.140:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.2.148" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c0539cdd9 code=0x7ffc0000 [ 151.495722][ T30] audit: type=1326 audit(1777784925.140:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.2.148" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0539cdd9 code=0x7ffc0000 [ 151.967465][ T10] gspca_se401: Wrong descriptor type [ 151.992947][ T30] audit: type=1326 audit(1777784925.150:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.2.148" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0539cdd9 code=0x7ffc0000 [ 152.069874][ T30] audit: type=1326 audit(1777784925.150:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.2.148" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6c0539cdd9 code=0x7ffc0000 [ 152.149556][ T30] audit: type=1326 audit(1777784925.150:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.2.148" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0539cdd9 code=0x7ffc0000 [ 152.187228][ T10] usb 2-1: USB disconnect, device number 4 [ 152.288564][ T30] audit: type=1326 audit(1777784925.150:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.2.148" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0539cdd9 code=0x7ffc0000 [ 152.409740][ T30] audit: type=1326 audit(1777784925.160:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.2.148" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6c0539cdd9 code=0x7ffc0000 [ 152.513269][ T30] audit: type=1326 audit(1777784925.160:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.2.148" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0539cdd9 code=0x7ffc0000 [ 153.895615][ T6387] binder: BINDER_SET_CONTEXT_MGR already set [ 153.902030][ T6387] binder: 6385:6387 ioctl 4018620d 200000004a80 returned -16 [ 155.437183][ T803] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 156.015480][ T803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.034351][ T803] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.020120][ T803] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 157.044624][ T803] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 157.054379][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 157.128795][ T803] usb 5-1: Product: syz [ 157.133251][ T803] usb 5-1: Manufacturer: syz [ 157.137872][ T803] usb 5-1: SerialNumber: syz [ 157.168927][ T803] usb 5-1: config 0 descriptor?? [ 157.269351][ T803] usb 5-1: can't set config #0, error -71 [ 157.293239][ T803] usb 5-1: USB disconnect, device number 6 [ 157.640515][ T5742] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 158.426609][ T5742] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 158.430041][ T6417] warning: `syz.2.162' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 158.439992][ T5742] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 158.465376][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.474223][ T5742] usb 2-1: Product: syz [ 158.479705][ T5742] usb 2-1: Manufacturer: syz [ 158.490128][ T5742] usb 2-1: SerialNumber: syz [ 158.903928][ T5742] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 158.927940][ T5742] imon 2-1:155.0: unable to initialize intf0, err -19 [ 158.972661][ T5742] imon:imon_probe: failed to initialize context! [ 159.001435][ T5742] imon 2-1:155.0: unable to register, err -19 [ 159.617055][ T5742] usb 2-1: USB disconnect, device number 5 [ 163.710157][ T6461] bridge_slave_1: left allmulticast mode [ 163.716143][ T6461] bridge_slave_1: left promiscuous mode [ 163.723103][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.849675][ T6461] bridge_slave_0: left allmulticast mode [ 163.855755][ T6461] bridge_slave_0: left promiscuous mode [ 163.862675][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.477672][ T5351] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 164.908732][ T5351] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.244344][ T5351] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.405205][ T5351] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 165.637267][ T5351] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 165.667991][ T5351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 165.714454][ T5351] usb 1-1: Product: syz [ 165.740335][ T5351] usb 1-1: Manufacturer: syz [ 165.758302][ T5351] usb 1-1: SerialNumber: syz [ 165.763165][ T6470] ------------[ cut here ]------------ [ 165.763197][ T6470] !chanctx_conf [ 165.768622][ T6470] WARNING: net/mac80211/rate.c:53 at rate_control_rate_init+0x64a/0x6e0, CPU#0: syz.5.178/6470 [ 165.783335][ T6470] Modules linked in: [ 165.786978][ T5351] usb 1-1: config 0 descriptor?? [ 165.787295][ T6470] CPU: 0 UID: 0 PID: 6470 Comm: syz.5.178 Not tainted syzkaller #0 PREEMPT(full) [ 165.801838][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 165.812798][ T6470] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 165.819649][ T6470] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 93 34 f5 f5 cc e8 a2 9f aa f6 90 0f 0b 90 eb e1 e8 97 9f aa f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 165.839546][ T6470] RSP: 0018:ffffc9000ec6efd8 EFLAGS: 00010287 [ 165.845710][ T6470] RAX: ffffffff8b1b0c89 RBX: ffff88802c888000 RCX: 0000000000080000 [ 165.848364][ T5351] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 165.853750][ T6470] RDX: ffffc90006b99000 RSI: 0000000000000323 RDI: 0000000000000324 [ 165.853771][ T6470] RBP: 0000000000000000 R08: ffffffff8b1b07a3 R09: ffffffff8e95cd60 [ 165.853791][ T6470] R10: dffffc0000000000 R11: ffffed1005911031 R12: 1ffff1100591100a [ 165.853812][ T6470] R13: ffff888051560f20 R14: 0000000000000001 R15: ffffffff8b1b07a3 [ 165.853834][ T6470] FS: 00007f98b23216c0(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 165.853856][ T6470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.853875][ T6470] CR2: 0000200000001080 CR3: 0000000079354000 CR4: 0000000000350ef0 [ 165.853896][ T6470] Call Trace: [ 165.853908][ T6470] [ 165.853921][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.853962][ T6470] rate_control_rate_init_all_links+0x109/0x1a0 [ 165.854006][ T6470] sta_apply_auth_flags+0x1c2/0x400 [ 165.941208][ T6470] sta_apply_parameters+0x1098/0x18a0 [ 165.946591][ T6470] ieee80211_add_station+0x3e6/0x710 [ 165.951911][ T6470] rdev_add_station+0xfc/0x290 [ 165.956675][ T6470] nl80211_new_station+0x1cab/0x2130 [ 165.961990][ T6470] ? __pfx_nl80211_new_station+0x10/0x10 [ 165.967612][ T6470] ? __rtnl_unlock+0xc8/0xf0 [ 165.972277][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.977930][ T6470] genl_family_rcv_msg_doit+0x22a/0x330 [ 165.983523][ T6470] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 165.989587][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.995237][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.000944][ T6470] ? security_capable+0x7e/0x2c0 [ 166.005895][ T6470] genl_rcv_msg+0x61c/0x7a0 [ 166.010451][ T6470] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.016174][ T6470] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 166.021989][ T6470] ? __pfx_nl80211_new_station+0x10/0x10 [ 166.027616][ T6470] ? __pfx_nl80211_post_doit+0x10/0x10 [ 166.033126][ T6470] ? __pfx_ref_tracker_free+0x10/0x10 [ 166.038491][ T6470] ? __asan_memcpy+0x40/0x70 [ 166.043102][ T6470] ? __skb_clone+0x63/0x7a0 [ 166.047606][ T6470] netlink_rcv_skb+0x232/0x4b0 [ 166.052472][ T6470] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.057487][ T6470] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.062828][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.068451][ T6470] ? down_read+0x270/0x2e0 [ 166.072927][ T6470] ? genl_rcv+0xd/0x40 [ 166.076985][ T6470] genl_rcv+0x28/0x40 [ 166.080990][ T6470] netlink_unicast+0x75c/0x8e0 [ 166.085756][ T6470] netlink_sendmsg+0x813/0xb40 [ 166.090604][ T6470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.095893][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.101549][ T6470] ? aa_sock_msg_perm+0xf1/0x1b0 [ 166.106484][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.112132][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.118484][ T6470] ____sys_sendmsg+0x972/0x9f0 [ 166.123702][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.129335][ T6470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.134663][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.140282][ T6470] ? import_iovec+0x73/0xa0 [ 166.145040][ T6470] ___sys_sendmsg+0x2a5/0x360 [ 166.149715][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.155494][ T6470] ? __lock_acquire+0x6b5/0x2cf0 [ 166.160458][ T6470] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.165649][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.171322][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.176944][ T6470] ? futex_wait+0x2a2/0x390 [ 166.181509][ T6470] ? __fget_files+0x2a/0x420 [ 166.186087][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.191743][ T6470] ? __fget_files+0x3a0/0x420 [ 166.196420][ T6470] __x64_sys_sendmsg+0x1bd/0x2a0 [ 166.201397][ T6470] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.206855][ T6470] ? rcu_is_watching+0x15/0xb0 [ 166.211671][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.217299][ T6470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.223996][ T6470] do_syscall_64+0x15f/0xf80 [ 166.228585][ T6470] ? trace_irq_disable+0x3b/0x140 [ 166.234084][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.239968][ T6470] RIP: 0033:0x7f98b139cdd9 [ 166.244405][ T6470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.264058][ T6470] RSP: 002b:00007f98b2321028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.272507][ T6470] RAX: ffffffffffffffda RBX: 00007f98b1615fa0 RCX: 00007f98b139cdd9 [ 166.280523][ T6470] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 166.288482][ T6470] RBP: 00007f98b1432d69 R08: 0000000000000000 R09: 0000000000000000 [ 166.296476][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.304476][ T6470] R13: 00007f98b1616038 R14: 00007f98b1615fa0 R15: 00007fffa35ef368 [ 166.312502][ T6470] [ 166.315525][ T6470] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.322790][ T6470] CPU: 0 UID: 0 PID: 6470 Comm: syz.5.178 Not tainted syzkaller #0 PREEMPT(full) [ 166.331978][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.342026][ T6470] Call Trace: [ 166.345282][ T6470] [ 166.348191][ T6470] vpanic+0x56c/0xa60 [ 166.352159][ T6470] ? __pfx__printk+0x10/0x10 [ 166.356736][ T6470] ? __pfx_vpanic+0x10/0x10 [ 166.361220][ T6470] ? is_bpf_text_address+0x292/0x2b0 [ 166.366490][ T6470] ? is_bpf_text_address+0x26/0x2b0 [ 166.371678][ T6470] panic+0xc5/0xd0 [ 166.375383][ T6470] ? __pfx_panic+0x10/0x10 [ 166.379796][ T6470] __warn+0x315/0x4c0 [ 166.383762][ T6470] ? rate_control_rate_init+0x64a/0x6e0 [ 166.389294][ T6470] ? rate_control_rate_init+0x64a/0x6e0 [ 166.394825][ T6470] __report_bug+0x29a/0x540 [ 166.399320][ T6470] ? rate_control_rate_init+0x64a/0x6e0 [ 166.404852][ T6470] ? __pfx___report_bug+0x10/0x10 [ 166.409862][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.415478][ T6470] ? __lock_acquire+0x6b5/0x2cf0 [ 166.420496][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.426130][ T6470] ? __lock_acquire+0x6b5/0x2cf0 [ 166.431060][ T6470] ? rate_control_rate_init+0x64a/0x6e0 [ 166.436591][ T6470] report_bug+0x16a/0x220 [ 166.440911][ T6470] ? rate_control_rate_init+0x64a/0x6e0 [ 166.446441][ T6470] ? rate_control_rate_init+0x64c/0x6e0 [ 166.451969][ T6470] handle_bug+0x9c/0x200 [ 166.456205][ T6470] exc_invalid_op+0x1a/0x50 [ 166.460699][ T6470] asm_exc_invalid_op+0x1a/0x20 [ 166.465531][ T6470] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 166.471672][ T6470] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 93 34 f5 f5 cc e8 a2 9f aa f6 90 0f 0b 90 eb e1 e8 97 9f aa f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 166.491260][ T6470] RSP: 0018:ffffc9000ec6efd8 EFLAGS: 00010287 [ 166.497310][ T6470] RAX: ffffffff8b1b0c89 RBX: ffff88802c888000 RCX: 0000000000080000 [ 166.505261][ T6470] RDX: ffffc90006b99000 RSI: 0000000000000323 RDI: 0000000000000324 [ 166.513212][ T6470] RBP: 0000000000000000 R08: ffffffff8b1b07a3 R09: ffffffff8e95cd60 [ 166.521162][ T6470] R10: dffffc0000000000 R11: ffffed1005911031 R12: 1ffff1100591100a [ 166.529114][ T6470] R13: ffff888051560f20 R14: 0000000000000001 R15: ffffffff8b1b07a3 [ 166.537066][ T6470] ? rate_control_rate_init+0x163/0x6e0 [ 166.542606][ T6470] ? rate_control_rate_init+0x163/0x6e0 [ 166.548139][ T6470] ? rate_control_rate_init+0x649/0x6e0 [ 166.553681][ T6470] ? rate_control_rate_init+0x649/0x6e0 [ 166.559216][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.564838][ T6470] rate_control_rate_init_all_links+0x109/0x1a0 [ 166.571073][ T6470] sta_apply_auth_flags+0x1c2/0x400 [ 166.576267][ T6470] sta_apply_parameters+0x1098/0x18a0 [ 166.581643][ T6470] ieee80211_add_station+0x3e6/0x710 [ 166.586930][ T6470] rdev_add_station+0xfc/0x290 [ 166.591688][ T6470] nl80211_new_station+0x1cab/0x2130 [ 166.596971][ T6470] ? __pfx_nl80211_new_station+0x10/0x10 [ 166.602590][ T6470] ? __rtnl_unlock+0xc8/0xf0 [ 166.607195][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.612819][ T6470] genl_family_rcv_msg_doit+0x22a/0x330 [ 166.618353][ T6470] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 166.624432][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.630061][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.636390][ T6470] ? security_capable+0x7e/0x2c0 [ 166.641323][ T6470] genl_rcv_msg+0x61c/0x7a0 [ 166.645813][ T6470] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.650818][ T6470] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 166.656173][ T6470] ? __pfx_nl80211_new_station+0x10/0x10 [ 166.661790][ T6470] ? __pfx_nl80211_post_doit+0x10/0x10 [ 166.667235][ T6470] ? __pfx_ref_tracker_free+0x10/0x10 [ 166.672594][ T6470] ? __asan_memcpy+0x40/0x70 [ 166.677172][ T6470] ? __skb_clone+0x63/0x7a0 [ 166.681670][ T6470] netlink_rcv_skb+0x232/0x4b0 [ 166.686423][ T6470] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.691430][ T6470] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.696715][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.702328][ T6470] ? down_read+0x270/0x2e0 [ 166.706733][ T6470] ? genl_rcv+0xd/0x40 [ 166.710782][ T6470] genl_rcv+0x28/0x40 [ 166.714742][ T6470] netlink_unicast+0x75c/0x8e0 [ 166.719500][ T6470] netlink_sendmsg+0x813/0xb40 [ 166.724261][ T6470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.729537][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.735153][ T6470] ? aa_sock_msg_perm+0xf1/0x1b0 [ 166.740081][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.745696][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.751318][ T6470] ____sys_sendmsg+0x972/0x9f0 [ 166.756072][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.761694][ T6470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.766974][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.772588][ T6470] ? import_iovec+0x73/0xa0 [ 166.777088][ T6470] ___sys_sendmsg+0x2a5/0x360 [ 166.781750][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.787364][ T6470] ? __lock_acquire+0x6b5/0x2cf0 [ 166.792287][ T6470] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.797534][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.803158][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.808773][ T6470] ? futex_wait+0x2a2/0x390 [ 166.813287][ T6470] ? __fget_files+0x2a/0x420 [ 166.817860][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.823475][ T6470] ? __fget_files+0x3a0/0x420 [ 166.828147][ T6470] __x64_sys_sendmsg+0x1bd/0x2a0 [ 166.833076][ T6470] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.838534][ T6470] ? rcu_is_watching+0x15/0xb0 [ 166.843285][ T6470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.848928][ T6470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.854975][ T6470] do_syscall_64+0x15f/0xf80 [ 166.859561][ T6470] ? trace_irq_disable+0x3b/0x140 [ 166.864581][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.870463][ T6470] RIP: 0033:0x7f98b139cdd9 [ 166.874873][ T6470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.894460][ T6470] RSP: 002b:00007f98b2321028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.902857][ T6470] RAX: ffffffffffffffda RBX: 00007f98b1615fa0 RCX: 00007f98b139cdd9 [ 166.910808][ T6470] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 166.918756][ T6470] RBP: 00007f98b1432d69 R08: 0000000000000000 R09: 0000000000000000 [ 166.926704][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.934653][ T6470] R13: 00007f98b1616038 R14: 00007f98b1615fa0 R15: 00007fffa35ef368 [ 166.942621][ T6470] [ 166.945893][ T6470] Kernel Offset: disabled [ 166.950210][ T6470] Rebooting in 86400 seconds..