last executing test programs: 9.015060782s ago: executing program 0 (id=6): sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x4, 0x0, 0x2000, &(0x7f0000a76000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0, 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0x6, 0x5, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) timerfd_create(0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) unshare(0x40400) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) 8.941333939s ago: executing program 4 (id=5): r0 = syz_open_dev$vcsa(&(0x7f0000000340), 0x3, 0x100) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000006c0)=0x2000000, 0x4) read$smackfs_logging(r0, &(0x7f0000000000), 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 8.096759029s ago: executing program 2 (id=3): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7d) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) 8.046075736s ago: executing program 0 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005e1000a58000000060a010400000000000000000a0000010900010073797a31000000002c00048028000180080001006e6174001c000280080002400004000a080003400000001608000140000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20000, r1}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) syz_emit_ethernet(0x63e, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x608, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x5, 0xe, "7db4000005d4a3b4364be7baa2d73b4ac24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d980110420fa979a3"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x1f, 0x4, "d429145c793e823829b4376332b2c98aee2dae3e1cb11adb2b381eb30650ac6c45f9"}, {0x0, 0xa2, "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"}]}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0x8, 0x36, 0x0, 0x4}, 0x9c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r8, 0x8070ae9f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) unshare(0x8000680) r10 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$KDGETLED(r10, 0x4b31, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc00864d2, &(0x7f0000000080)={r9}) 8.002479175s ago: executing program 4 (id=10): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xb}, {0x0, 0x0, 0xfffffffffffffffd}, 0x10000005, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r4, 0x40045b0a, &(0x7f0000000000)={0x64, 0x1, 0x1800000, 0x10001, 0x8, 0xb}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000001040)={0x1f, @any, 0x47}, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) munlock(&(0x7f0000a34000/0x2000)=nil, 0x2000) 7.94577162s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000040)={0x20080522}, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x808c) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000002"], 0x20201) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r5, 0x3, 0xf00, 0x10000) socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a000000000000000400000003000600000000"], 0x50}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 7.765295449s ago: executing program 2 (id=11): syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x8, 0x367}, &(0x7f0000000140)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001cc82abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0118020003110000280012800b00010065727370616e0000180002800800140097000000050016000200000004001200"], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) 6.508829357s ago: executing program 1 (id=12): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_usb_connect$cdc_ncm(0x2, 0xe1, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf}}]}}, &(0x7f0000000280)={0x5, &(0x7f0000000000)={0xa}, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="050f0c00e53cb308984fc777b300"], 0x1, [{0x46, &(0x7f0000000200)=@string={0xfe2d, 0x3, "9c685afa5e7f7b60256296022dbf0c6ad17e486032001a5cf1b76e59dbcec64c65ae75bf30f96f0539ff247c87425e54f5e665e3c196b89773e4c791974748130aa36a39"}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c"], 0x1d8}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {r2, r3+10000000}}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000080)={0x1, "7bc7b0eb07939da1ee8efc70c96ced7db5515f1f455fd01ec5750310cb20fa5e"}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r5], 0x20}}, 0x0) syz_open_dev$sg(0x0, 0xe6, 0x2602) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0x24) 6.379616649s ago: executing program 3 (id=13): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x10010}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000240)={0xffff1000, 0xb4002ee111e4cc5a, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703025701f328000600002fb96dbcf706e10500000086ddffff1144ee1629d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffefffffb, 0x1) ioctl$VIDIOC_SUBDEV_G_CROP(r6, 0xc038563b, &(0x7f0000000100)={0x1, 0x0, {0xd61, 0x7, 0x1ddb, 0x3fd}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = socket$kcm(0x2, 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r10, 0x1, 0x34, &(0x7f00000000c0)=r9, 0x4) listen(r10, 0x0) close(r10) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r8, r7}) 5.878500711s ago: executing program 0 (id=14): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0xee1834122ff9d177, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x2, "c64a7dc9"}, @global=@item_4={0x3, 0x1, 0x3, "fdedc925"}, @local=@item_012={0x0, 0x2, 0x5, "e2a3"}]}}, 0x0}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x98802) socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x9, 0x2ac3) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={r4, 0x0, 0x0, 0x0, 0x0}) 4.758093089s ago: executing program 3 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') 4.702331453s ago: executing program 2 (id=16): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) 3.16477281s ago: executing program 3 (id=17): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xb}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.840108791s ago: executing program 2 (id=18): r0 = syz_open_dev$vcsa(&(0x7f0000000340), 0x3, 0x100) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000006c0)=0x2000000, 0x4) read$smackfs_logging(r0, &(0x7f0000000000), 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2.598598233s ago: executing program 3 (id=19): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x5, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x8000, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40000017, 0x7, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x0, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x12c0, 0x6c7, 0x9, 0xfffffff9, 0x3, 0x0, 0x0, 0x5, 0x2, 0xe, 0xe, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffd, 0x2, 0x4, 0x9, 0x5, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x200100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x6, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x201, 0x2, 0x5f, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x23d6, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0xe59b, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r1, &(0x7f0000000080)) 2.53787403s ago: executing program 2 (id=20): r0 = getpid() syz_pidfd_open(r0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x80002, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$inet6_tcp(0xa, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 2.335593445s ago: executing program 1 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18, 0x24000814}, 0xc800) getpgrp(0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg$sock(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000dc0)="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", 0x1000}], 0x1, &(0x7f0000000380)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x599}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xe}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x63139b79}}], 0xd8}}], 0x1, 0x20040051) r3 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x41, 0x800000000004}, &(0x7f0000000340)=0x0) timer_settime(r6, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000007c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000240), 0x0, 0x1000, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdfffffffff9}, &(0x7f00000001c0)) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 1.987627159s ago: executing program 3 (id=22): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)="7abc7b", 0x3}], 0x1, &(0x7f0000000c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x68}}], 0x1, 0x20000000) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)='k', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)}}], 0x2, 0x4004000) 544.7786ms ago: executing program 0 (id=23): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 458.687904ms ago: executing program 3 (id=24): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000340)={[{0x2b, 'pids'}, {0x2d, 'rlimit'}]}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8943, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 382.935808ms ago: executing program 2 (id=25): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x844) 299.701238ms ago: executing program 1 (id=26): timer_create(0x6, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000002c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280", 0x13}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12", 0x12}], 0x2}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/66, 0x42}], 0x1}, 0x0) 176.361419ms ago: executing program 0 (id=27): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff0f, r4, 0x0}) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f0000000080)={r5}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={r2, r5, 0xe, 0x7, 0x3edc}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={r2, r5, 0xe, 0x7, 0x3edc}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x8, 0xff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x4d, 0x7, 0x800, 0x0, {0x80000001, 0xfff, 0x0, 0x6, 0x9, 0x9, 0x5, 0x100, 0xb, 0x80, 0x0, 0x40c, 0x5, 0x6, "4e80de46358e7f255a5d3f52e16f724fd04ef0eb3e6202d127cf9208f8a3226c"}}) 0s ago: executing program 0 (id=28): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 67.724493][ T5781] cgroup: Unknown subsys name 'net' [ 67.965554][ T5781] cgroup: Unknown subsys name 'cpuset' [ 68.011766][ T5781] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.600402][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.320101][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.320186][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.652372][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.654999][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.655740][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.661749][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.665994][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.675907][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.681559][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.691522][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.711725][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.731546][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.826238][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.829016][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.834748][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.835726][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.836540][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.903986][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.911900][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.920157][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.932762][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.942863][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.943596][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.944970][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.969519][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.989523][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.996324][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.583503][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 72.588750][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 72.639316][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 72.828608][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 72.889349][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 72.961742][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.962706][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.962988][ T5799] bridge_slave_0: entered allmulticast mode [ 72.964449][ T5799] bridge_slave_0: entered promiscuous mode [ 72.968004][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.968111][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.968571][ T5794] bridge_slave_0: entered allmulticast mode [ 72.969953][ T5794] bridge_slave_0: entered promiscuous mode [ 73.046092][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.046212][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.046358][ T5799] bridge_slave_1: entered allmulticast mode [ 73.047659][ T5799] bridge_slave_1: entered promiscuous mode [ 73.049982][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.050067][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.050170][ T5794] bridge_slave_1: entered allmulticast mode [ 73.052375][ T5794] bridge_slave_1: entered promiscuous mode [ 73.071800][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.071911][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.072057][ T5804] bridge_slave_0: entered allmulticast mode [ 73.074382][ T5804] bridge_slave_0: entered promiscuous mode [ 73.137441][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.137623][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.137775][ T5804] bridge_slave_1: entered allmulticast mode [ 73.139478][ T5804] bridge_slave_1: entered promiscuous mode [ 73.226281][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.229045][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.273700][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.275762][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.295827][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.297022][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.297201][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.297657][ T5805] bridge_slave_0: entered allmulticast mode [ 73.300037][ T5805] bridge_slave_0: entered promiscuous mode [ 73.349295][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.349602][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.349710][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.349831][ T5805] bridge_slave_1: entered allmulticast mode [ 73.351143][ T5805] bridge_slave_1: entered promiscuous mode [ 73.409089][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.409201][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.409347][ T5808] bridge_slave_0: entered allmulticast mode [ 73.411075][ T5808] bridge_slave_0: entered promiscuous mode [ 73.448389][ T5799] team0: Port device team_slave_0 added [ 73.450903][ T5794] team0: Port device team_slave_0 added [ 73.451814][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.451915][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.452045][ T5808] bridge_slave_1: entered allmulticast mode [ 73.454269][ T5808] bridge_slave_1: entered promiscuous mode [ 73.495098][ T5799] team0: Port device team_slave_1 added [ 73.764626][ T5804] team0: Port device team_slave_0 added [ 73.766584][ T5794] team0: Port device team_slave_1 added [ 73.769176][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.793547][ T5113] Bluetooth: hci1: command tx timeout [ 73.793648][ T5113] Bluetooth: hci0: command tx timeout [ 73.812397][ T5804] team0: Port device team_slave_1 added [ 73.835679][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.864758][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.896828][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.896839][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.896852][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.940525][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.942239][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.942252][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.942275][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.951636][ T60] Bluetooth: hci2: command tx timeout [ 73.965739][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.965754][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.965778][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.967197][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.967208][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.967229][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.988241][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.988256][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.988279][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.991776][ T5805] team0: Port device team_slave_0 added [ 74.006779][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.006793][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.006816][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.033181][ T60] Bluetooth: hci4: command tx timeout [ 74.033334][ T60] Bluetooth: hci3: command tx timeout [ 74.042719][ T5805] team0: Port device team_slave_1 added [ 74.058241][ T5808] team0: Port device team_slave_0 added [ 74.086473][ T5808] team0: Port device team_slave_1 added [ 74.204488][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.204503][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.204527][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.253490][ T5799] hsr_slave_0: entered promiscuous mode [ 74.254456][ T5799] hsr_slave_1: entered promiscuous mode [ 74.255987][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.255999][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.256014][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.279287][ T5794] hsr_slave_0: entered promiscuous mode [ 74.280457][ T5794] hsr_slave_1: entered promiscuous mode [ 74.283947][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 74.284057][ T5794] Cannot create hsr debugfs directory [ 74.284917][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.284928][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.284952][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.309257][ T5804] hsr_slave_0: entered promiscuous mode [ 74.310396][ T5804] hsr_slave_1: entered promiscuous mode [ 74.311178][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 74.311199][ T5804] Cannot create hsr debugfs directory [ 74.314555][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.314567][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.314590][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.484830][ T5805] hsr_slave_0: entered promiscuous mode [ 74.485480][ T5805] hsr_slave_1: entered promiscuous mode [ 74.485921][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 74.485934][ T5805] Cannot create hsr debugfs directory [ 74.840092][ T5808] hsr_slave_0: entered promiscuous mode [ 74.848674][ T5808] hsr_slave_1: entered promiscuous mode [ 74.849903][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 74.849925][ T5808] Cannot create hsr debugfs directory [ 75.359145][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.401159][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.447073][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.494720][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.612624][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.649399][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.691189][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.717988][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.822881][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.858804][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.881935][ T5113] Bluetooth: hci0: command tx timeout [ 75.881964][ T5113] Bluetooth: hci1: command tx timeout [ 75.892166][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.940516][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.032447][ T60] Bluetooth: hci2: command tx timeout [ 76.050888][ T5805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.078335][ T5805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.111549][ T60] Bluetooth: hci3: command tx timeout [ 76.111582][ T60] Bluetooth: hci4: command tx timeout [ 76.126994][ T5805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.180356][ T5805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.290462][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.292782][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.337960][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.387722][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.420172][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.497718][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.522703][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.545367][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.545517][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.583760][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.583832][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.625969][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.658354][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.658486][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.678684][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.697537][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.697624][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.762349][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.771113][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.804579][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.804739][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.837799][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.837993][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.890584][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.905838][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.967360][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.967516][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.035579][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.035732][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.064410][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.105058][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.105245][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.156788][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.156914][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.230015][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.447742][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.685942][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.737921][ T5794] veth0_vlan: entered promiscuous mode [ 77.780402][ T5794] veth1_vlan: entered promiscuous mode [ 77.916801][ T5799] veth0_vlan: entered promiscuous mode [ 77.921036][ T5804] veth0_vlan: entered promiscuous mode [ 77.940454][ T5794] veth0_macvtap: entered promiscuous mode [ 77.951456][ T5113] Bluetooth: hci1: command tx timeout [ 77.951483][ T5113] Bluetooth: hci0: command tx timeout [ 77.979032][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.982206][ T5794] veth1_macvtap: entered promiscuous mode [ 77.984276][ T5799] veth1_vlan: entered promiscuous mode [ 77.993546][ T5804] veth1_vlan: entered promiscuous mode [ 78.037018][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.059792][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.094667][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.111610][ T60] Bluetooth: hci2: command tx timeout [ 78.139412][ T146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.155919][ T5799] veth0_macvtap: entered promiscuous mode [ 78.158794][ T146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.167760][ T146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.183127][ T5804] veth0_macvtap: entered promiscuous mode [ 78.192739][ T60] Bluetooth: hci4: command tx timeout [ 78.192766][ T60] Bluetooth: hci3: command tx timeout [ 78.209373][ T146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.225784][ T5799] veth1_macvtap: entered promiscuous mode [ 78.230334][ T5804] veth1_macvtap: entered promiscuous mode [ 78.274285][ T5805] veth0_vlan: entered promiscuous mode [ 78.355993][ T5805] veth1_vlan: entered promiscuous mode [ 78.394195][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.396014][ T5808] veth0_vlan: entered promiscuous mode [ 78.404304][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.446013][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.448832][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.503868][ T146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.505135][ T5808] veth1_vlan: entered promiscuous mode [ 78.509713][ T146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.518815][ T3606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.518842][ T3606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.539763][ T146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.562106][ T146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.568023][ T146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.596741][ T146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.662812][ T146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.704688][ T146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.716267][ T3606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.716287][ T3606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.835063][ T5805] veth0_macvtap: entered promiscuous mode [ 78.916623][ T5805] veth1_macvtap: entered promiscuous mode [ 78.977167][ T5808] veth0_macvtap: entered promiscuous mode [ 79.036775][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.036794][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.077638][ T5808] veth1_macvtap: entered promiscuous mode [ 79.105829][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.113775][ T5907] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.167626][ T4024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.167646][ T4024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.188518][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.784801][ T4024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.784888][ T4024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.784901][ T4024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.843535][ T4024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.874480][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.874744][ T4024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.898681][ T4024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.914467][ T4024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.914485][ T4024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.921360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 79.949123][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.030720][ T3606] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.031461][ T5113] Bluetooth: hci0: command tx timeout [ 80.031487][ T5113] Bluetooth: hci1: command tx timeout [ 80.084362][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.089644][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.109607][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.191628][ T60] Bluetooth: hci2: command tx timeout [ 80.276126][ T60] Bluetooth: hci3: command tx timeout [ 80.276157][ T60] Bluetooth: hci4: command tx timeout [ 80.655509][ T3606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.655529][ T3606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.831098][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.831117][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.904433][ T3606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.904452][ T3606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.003679][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.003697][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.121691][ T5869] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.311600][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 81.326435][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.328732][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.328760][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 81.328779][ T5869] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 81.328800][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.347106][ T5869] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 81.347133][ T5869] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 81.347151][ T5869] usb 4-1: Manufacturer: syz [ 81.405325][ T5869] usb 4-1: config 0 descriptor?? [ 81.709240][ T9] cfg80211: failed to load regulatory.db [ 82.047753][ T5956] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 82.511912][ T5943] ODEBUG: Out of memory. ODEBUG disabled [ 82.652031][ T5955] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.652563][ T5955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.652576][ T5955] IPv6: NLM_F_CREATE should be set when creating new route [ 82.671395][ T1230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.871936][ T1230] usb 5-1: Using ep0 maxpacket: 8 [ 82.889756][ T1230] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 82.889810][ T1230] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.889831][ T1230] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.889852][ T1230] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.889873][ T1230] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.889912][ T1230] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.889933][ T1230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.004002][ T5869] rc_core: IR keymap rc-hauppauge not found [ 83.004021][ T5869] Registered IR keymap rc-empty [ 83.005016][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 83.021929][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 83.073364][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 83.077371][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 83.181938][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 83.192700][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.202182][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 83.203149][ T1230] usb 5-1: GET_CAPABILITIES returned 0 [ 83.203188][ T1230] usbtmc 5-1:16.0: can't read capabilities [ 83.223778][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 83.251948][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 83.291365][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 83.312068][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 83.331411][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 83.351441][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 83.371523][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 83.391706][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 83.440205][ T5869] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 83.440229][ T5869] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 83.489540][ T5869] usb 4-1: USB disconnect, device number 2 [ 83.985472][ T808] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 84.310342][ T808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.310359][ T808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.310431][ T808] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.350340][ T808] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.350357][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.350366][ T808] usb 2-1: Product: syz [ 84.350373][ T808] usb 2-1: Manufacturer: syz [ 84.350380][ T808] usb 2-1: SerialNumber: syz [ 84.506930][ T808] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 84.506961][ T808] cdc_ncm 2-1:1.0: bind() failure [ 84.622665][ T5937] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.744633][ T5975] netlink: 452 bytes leftover after parsing attributes in process `syz.1.12'. [ 85.100957][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.100977][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.100988][ T5937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.101011][ T5937] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.101022][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.952065][ T5978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.150309][ T5937] usb 1-1: config 0 descriptor?? [ 86.183886][ T5902] usb 2-1: USB disconnect, device number 2 [ 86.962571][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.056213][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.290140][ T6029] Bluetooth: MGMT ver 1.23 [ 88.290172][ T6029] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 88.616890][ T5937] usbhid 1-1:0.0: can't add hid device: -71 [ 88.617231][ T5937] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 88.659965][ T5937] usb 1-1: USB disconnect, device number 2 [ 89.231987][ T6018] usb 5-1: USB disconnect, device number 2 [ 89.291312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.291353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.291385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.291415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.291446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.291477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.291508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.291539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.291569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 91.307497][ C1] ------------[ cut here ]------------ [ 91.307512][ C1] 1 [ 91.307524][ C1] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#1: ktimers/1/29 [ 91.307566][ C1] Modules linked in: [ 91.307601][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 91.307622][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.307639][ C1] RIP: 0010:stub_timer+0xa/0x20 [ 91.307659][ C1] Code: 0f 94 c0 5b 41 5e e9 05 1d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 91.307681][ C1] RSP: 0018:ffffc90000a3fa38 EFLAGS: 00010246 [ 91.307697][ C1] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801d2bbc80 [ 91.307710][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 91.307723][ C1] RBP: ffffc90000a3fb30 R08: 0000000000000000 R09: 0000000000000100 [ 91.307737][ C1] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000001 [ 91.307750][ C1] R13: 00000000ffffad40 R14: 1ffff92000147f4c R15: ffff88805c7c0848 [ 91.307766][ C1] FS: 0000000000000000(0000) GS:ffff888126440000(0000) knlGS:0000000000000000 [ 91.307783][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.307797][ C1] CR2: 0000001b2ed23ffc CR3: 000000003c526000 CR4: 00000000003526f0 [ 91.307816][ C1] Call Trace: [ 91.307828][ C1] [ 91.307837][ C1] call_timer_fn+0x192/0x640 [ 91.307861][ C1] ? __pfx_stub_timer+0x10/0x10 [ 91.307879][ C1] ? call_timer_fn+0xd4/0x640 [ 91.307899][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 91.307936][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.307965][ C1] ? __pfx_stub_timer+0x10/0x10 [ 91.307986][ C1] __run_timer_base+0x6a3/0x9f0 [ 91.308036][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 91.308088][ C1] run_timer_softirq+0xb7/0x170 [ 91.308122][ C1] handle_softirqs+0x1de/0x6f0 [ 91.308160][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 91.308191][ C1] run_ktimerd+0x69/0x100 [ 91.308226][ C1] smpboot_thread_fn+0x541/0xa50 [ 91.308262][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 91.308305][ C1] kthread+0x388/0x470 [ 91.308329][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 91.308380][ C1] ? __pfx_kthread+0x10/0x10 [ 91.308405][ C1] ret_from_fork+0x51e/0xb90 [ 91.308446][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 91.308476][ C1] ? __switch_to+0xc7d/0x1450 [ 91.308507][ C1] ? __pfx_kthread+0x10/0x10 [ 91.308531][ C1] ret_from_fork_asm+0x1a/0x30 [ 91.308570][ C1] [ 91.308582][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.308596][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 91.308619][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.308631][ C1] Call Trace: [ 91.308640][ C1] [ 91.308648][ C1] vpanic+0x56c/0xa60 [ 91.308681][ C1] ? __pfx__printk+0x10/0x10 [ 91.308705][ C1] ? __pfx_vpanic+0x10/0x10 [ 91.308735][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 91.308765][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 91.308805][ C1] panic+0xc5/0xd0 [ 91.308837][ C1] ? __pfx_panic+0x10/0x10 [ 91.308880][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 91.308907][ C1] __warn+0x315/0x4f0 [ 91.308938][ C1] ? stub_timer+0xa/0x20 [ 91.308959][ C1] ? stub_timer+0xa/0x20 [ 91.308979][ C1] __report_bug+0x29a/0x540 [ 91.309017][ C1] ? stub_timer+0xa/0x20 [ 91.309036][ C1] ? __pfx___report_bug+0x10/0x10 [ 91.309063][ C1] ? add_lock_to_list+0xc7/0x100 [ 91.309091][ C1] ? lockdep_unlock+0x5d/0xd0 [ 91.309122][ C1] ? __lock_acquire+0x146e/0x2cf0 [ 91.309146][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 91.309164][ C1] ? stub_timer+0xa/0x20 [ 91.309179][ C1] report_bug+0x16a/0x220 [ 91.309205][ C1] ? stub_timer+0xa/0x20 [ 91.309220][ C1] ? stub_timer+0xc/0x20 [ 91.309237][ C1] handle_bug+0x98/0x200 [ 91.309269][ C1] exc_invalid_op+0x1a/0x50 [ 91.309300][ C1] asm_exc_invalid_op+0x1a/0x20 [ 91.309317][ C1] RIP: 0010:stub_timer+0xa/0x20 [ 91.309331][ C1] Code: 0f 94 c0 5b 41 5e e9 05 1d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 91.309344][ C1] RSP: 0018:ffffc90000a3fa38 EFLAGS: 00010246 [ 91.309357][ C1] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801d2bbc80 [ 91.309368][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 91.309378][ C1] RBP: ffffc90000a3fb30 R08: 0000000000000000 R09: 0000000000000100 [ 91.309389][ C1] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000001 [ 91.309402][ C1] R13: 00000000ffffad40 R14: 1ffff92000147f4c R15: ffff88805c7c0848 [ 91.309418][ C1] ? __pfx_stub_timer+0x10/0x10 [ 91.309433][ C1] ? stub_timer+0x9/0x20 [ 91.309460][ C1] ? stub_timer+0x9/0x20 [ 91.309475][ C1] call_timer_fn+0x192/0x640 [ 91.309494][ C1] ? __pfx_stub_timer+0x10/0x10 [ 91.309511][ C1] ? call_timer_fn+0xd4/0x640 [ 91.309530][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 91.309561][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.309589][ C1] ? __pfx_stub_timer+0x10/0x10 [ 91.309610][ C1] __run_timer_base+0x6a3/0x9f0 [ 91.309659][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 91.309708][ C1] run_timer_softirq+0xb7/0x170 [ 91.309740][ C1] handle_softirqs+0x1de/0x6f0 [ 91.309782][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 91.309815][ C1] run_ktimerd+0x69/0x100 [ 91.309847][ C1] smpboot_thread_fn+0x541/0xa50 [ 91.309881][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 91.309924][ C1] kthread+0x388/0x470 [ 91.309948][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 91.309980][ C1] ? __pfx_kthread+0x10/0x10 [ 91.310005][ C1] ret_from_fork+0x51e/0xb90 [ 91.310040][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 91.310069][ C1] ? __switch_to+0xc7d/0x1450 [ 91.310101][ C1] ? __pfx_kthread+0x10/0x10 [ 91.310126][ C1] ret_from_fork_asm+0x1a/0x30 [ 91.310166][ C1] [ 91.310526][ C1] Kernel Offset: disabled