last executing test programs: 3.097148332s ago: executing program 2 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xd0}, 0x1, 0x0, 0x200000000000000, 0x20004010}, 0x20050800) 2.83537538s ago: executing program 4 (id=5): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0xfffffffffffffffc, &(0x7f0000000140)=0xfa) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x22401) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x220e01) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @val=@tcx}, 0x1c) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000900)='auth.unix.ip/channel\x00', 0x2, 0x0) r6 = openat(r4, &(0x7f0000000d00)='nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000e00)='localhost 1 \\x00000001 2000000000 /\n', 0x24) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) syz_open_dev$sndctrl(&(0x7f0000000340), 0x4, 0x80002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) 2.760746744s ago: executing program 3 (id=4): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x42000, 0x974}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x2000000) 2.678023992s ago: executing program 2 (id=6): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x9c2, 0x2, 0xac7d, 0x1fd, 0x1, 0x1}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @remote, 0x6e}, 0x1c) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 2.558191681s ago: executing program 0 (id=1): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) (fail_nth: 4) 2.325226919s ago: executing program 0 (id=7): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0x168, 0x1000, 0x4, 0x107}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x900) close(0x4) write(r0, 0x0, 0x0) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r4, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000005c0)="2592e3e623a236b6d9f2ec7d723e7590590e3687789e2e8428a759356c430643331c874bba57fb24e721a8955ada588ecc93489ae1885013b5afef4f15e2b45fceb4e3fdcae20595e4c963067633c592e36bd6ce8893b62671d418865c436685537213e699a1a9940ccc7105dcb97dd46efb984c4fa9ad0fe884b0e23285c089955b8bb74ee25602d9bffc1fe8ee7dad04038ca7e1cc365ce4a32edef76a3ba614a962f2a8679decd18328d71a402354dab73014991b0255bfe93027ba24df6378da457613329b81a905fcd86f758929237b016449ddfaed9afb2b879f00ba5d5a751fab82fd31f07472207cfc2137b15730ab272e4e55f200826733acff7b2e4d2cf434c11d2ce50cdbdefe13291eb61b5ebcef19a0a1b274eac8a6a1603d7296e0007d5ec8dc1db78bd5f27e9463bd49211ed3eb9b2771474a9b7c296d5255c7e2b9a830de50c56ea0a4173908d12a05de4bebd78482601d236045d1bba202823b91bbbd719fb4928b7004bd7cb6828889eac9bb8297", 0x177, 0x200408f4, 0x0, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x3, 0xfffffffffffffffd, 0x9, 0x0, 0x0, 0x40000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x0, 0x3c}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x8, "0610c0", "9d55eb953bde8ec9d11f4b0378c96e2842ff2a9ffda6eb14ff29ff745d230927c0cb1d6821eb8988a99e3095426227a5489d6c9054373044fda3f9424701f1b0988a48c2a66fb713ddb2d6fc7587283cb574c390b40a8aeea34d78c9c154b176f64d254fc0fce441bc7689d04e0c7a59b9651d537cfdc7b4104ae8230f6c42c170c62b283bce1a4212360079a0d0bd0236b0c489c090c07c1a4c7129023a027a323484b22d0bad35971a0ade77b86e1c0f5bb5b6e4ff49df26931b233fc8e765c0a9db50ec931ff03d14e5bcf6cda66e9d0ac8f9bb2f6f86c80e17c400c4df29f8f3c996cc118673927c9695f6bdfd3a7ec6e192742ac3a5abfe81efa9fcfc57"}}, 0x110) pipe2(&(0x7f0000000100), 0x880) 2.045280959s ago: executing program 3 (id=8): r0 = socket$igmp6(0xa, 0x3, 0x2) pselect6(0x40, &(0x7f0000000040)={0x9f7, 0x8001, 0x3, 0x8, 0xdbe, 0x3, 0x4a97, 0x100}, &(0x7f00000000c0)={0x2, 0x2, 0xfffffffffffeffff, 0x2, 0x4, 0xbfe, 0x2, 0x9}, &(0x7f0000000100)={0x46, 0x80000000, 0x4, 0x9, 0x215f, 0x457, 0x8, 0x7}, &(0x7f0000000140), &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x57, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x0, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006001700800a0000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 1.956682015s ago: executing program 1 (id=2): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) poll(&(0x7f0000000040)=[{r0, 0x9000}], 0x1, 0x2f6) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100366003308801b02e32b8c010203010902340003fa01106609043bff03fd494a0509050f000002090e7f0705c2"], &(0x7f0000000340)={0xffffffdd, 0x0, 0x0, 0x0}) 1.916697208s ago: executing program 3 (id=9): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000340)={0x3, {{0x2, 0x4e1f, @multicast1}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000befcbf0000006bfd00b50bcd0c4b2f31f35a9c299f100000000000000000000b00000000"], 0x50) syz_io_uring_setup(0x6243, &(0x7f0000000400)={0x0, 0xe77a, 0x10000, 0x0, 0x50, 0x0, r5}, &(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000040)) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/536, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x224) syz_open_procfs(0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x84edb000) r7 = userfaultfd(0x80001) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r11, @ANYRES16=r8], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) pipe2(&(0x7f00000000c0), 0x0) 1.588123054s ago: executing program 4 (id=10): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_usb_connect(0x1, 0xa1a, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x71, 0xf, 0xcf, 0x8, 0x19d2, 0x426, 0x4e76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa08, 0x2, 0x8, 0x5, 0x40, 0x77, "", [{{0x9, 0x4, 0xf0, 0x6, 0xc, 0xd8, 0x58, 0x35, 0xed, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1000, 0x6, 0x3, 0xf6}, @as_header={0x7, 0x24, 0x1, 0x54, 0x9, 0x1002}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x9, 0x0, 0x80, "6acc17"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xad, 0x5, 0xc6, 0x80, 0x1}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0x0, 0x4, "33a77f13921c16"}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "7d9173"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x8, 0x37}, [@acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x8}, @mdlm_detail={0xf9, 0x24, 0x13, 0x3d, "1aa8db0ee997ef7c5a561a581c37e9f8f6ae067b22c54789169d604f81d17070c0f66dccc905152e8d351c9d65a71de68dfbecddb90e6dd2c4d13aa7404f467f7ddc4b20d5a804d80a818d7cf75eda359c4a20dee872b5135049db794e6fa84191b560192267ad4e92e9109b351c294d4660d07fbce9982cbae5ead13952cac016c6bb9e34b2d5207f7e7e4533bad9e0d720a477c85c6481af2005bc245deeb21101af6c808fd75be7539bf4893df64079d468030cfc3fcf53e050537d1c38aa4412acb851bf1306876bbcbcb762a5f493b24f16d0b477704bc81037918f32551fab392613d83c8ca192fb403556d08d8fd57022bc"}, @country_functional={0x8, 0x24, 0x7, 0x16, 0xb, [0xfe]}]}], [{{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x4, 0xaf, 0x6}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x5, 0x6, 0xfa}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x2, 0x6, 0xe}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0x2a, 0x96, 0x3, [@generic={0xf1, 0x0, "14d67cca643a36a8b48c85fedd80054509a8b40046db178ecc4b7c78c78ec055ceca75147e4afc02f36e6589a19aaba5b537fdb46f0f4df47ab8bcae9bd2be73e40eed33bfaf97b1e5cb2a18b1952689ce4d6dc63cc58a92314a339fadfbb6d4fc36aff560f9fcb3b47ba1c5b5c26cb6f7690003a9017573ed4d08008fad794b0ec391734157264ccbe1bd29c3d8c379f346c17fded160ee9805da1fd7c1198c23e1c29b65455fdbdf61ae7751977ae344d4940bcaaf9c95030ab6921ed6bf920e55aa1af82d22e95f513c66f044c58807e31e1c2c2d2d4812f9ea12f6d293ce4bf0dc4dbf1fe822d3929b81f907f2"}, @generic={0xf6, 0x4, "03760314bb52fd3cf593545816840fdfac8c97068c5978631f3e45ff2025c38a44e09bc55441dd30fd105c2b75976c64b041004e9a3cd0c7cf037e5d84efcb368ca673a1996c0b113ea424b4ef5ee34a87054aa896f7c8e163ae258e6ab48de7f6b3f953a46a2014c3ae48b0a5cc7a8b8b0f63f461a94ba9ac38e2d56bad0e71b2bda1e850e22a9683b908a41ffaa9e660d16929e57f8f261fe7d973cff5a214650951a2300f53a8be79016ed58b5837186b03417392ccd1b3d1646a7bed6b8aaca8b02f64ead1f1066b65c4519c7b73342dcaddf74811435704ec66f3a1ab3736318a964666757777cfb096ae0978da6a5fe3ed"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x97, 0x9, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x52}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x7000}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0xf, 0xd0, 0xea}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x7, 0x5d, 0x6, [@generic={0x9e, 0xb, "0fa470ecc853b7ac8eb18aea1abe0c095e748cad15395a87d45f98a8fe9ee6e44fdf6d6e6168d23f0cb3b931b803df48c43bb4d50e6cf16059d7b5a840dddd36dfb498dfa71b78e94654f1568db5bbc104891884cb38548f433c115162585ff398593a6b15db0ee4573c18d63484f90f08f5ea3296bc6712df187a931db0153ea605ecf2137950a8a3c946173dd04c2aae855f86129fca10b986597a"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x0, 0x56, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x10, 0x72, 0xb}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x9d, 0x7f, 0xb}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0xb, 0x59, 0x4, [@generic={0xad, 0x5, "fba7fe271e132ee35eca1c16ae92624e88f5fc1d8941bb7a631316789ef8230873b998bd3cffa1c55e4918bd1a3c0d45e1e1eb628c54c0da69f44c8db48172ab08b2115aa941a13445fcc33f5949c751cbc3da5954ae8328f1bf87c9aaf708810645126bb143aff5c3dcd194240e85e28f81b371c67ab34b0146ea11f0c0c5598869d611bdb9bf808909e34298289f1f48fd2556c9ba9fd0b33f696e3d0bf2a080c11b1c285246a94c9838"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x39, 0x0, 0x2}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x4, 0x7, 0x0, [@generic={0x6f, 0xe, "e7094e235212012dcdd84198235d1c4d597784bc0584990d2274f1b41acfb227addbe1c2ee19b5fd5158bab51a3d9fb1506a9fe9706dfa5c038d8282b559077917182985868fb74e530fd402d7d84816a4556e9978c5ae47aec88df58c526856fbe82080bc1213e041f8b6f4f8"}]}}]}}, {{0x9, 0x4, 0x3d, 0xc, 0xb, 0x1f, 0xd8, 0x14, 0x61, [@hid_hid={0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0xe0f}}, @hid_hid={0x9, 0x21, 0x702, 0x7, 0x1, {0x22, 0x668}}], [{{0x9, 0x5, 0xe, 0x10, 0x40, 0xb, 0xc, 0x37}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x81, 0x43, 0x8, [@generic={0x7b, 0x30, "bf68c5e7a784f20ca8bbad864e2bb7ea6b3756bcbe5b4998014f03dee03b2bc94fd69b4661a9601006e1f1465429a4001ca969469b8b97b1a5945d4329361d8e47e4ac1745fb4d81bb7d0252f9e85b9c72cf54caa75ab21dea8a322b92875e20280dcbe14e60adc6b882e70b0783e95f3583b1ef89b0438df0"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x3, 0x1, 0x4}}, {{0x9, 0x5, 0xa, 0x3c9e5190f1709e9b, 0x400, 0x7e, 0x8, 0x5, [@generic={0x77, 0x24, "e6f4296b033c4d82c8cd0da19b057c043e6dee7303973b066fae1371379665f4947027765af15f51de9866cb1faa035ff3b8473279f32a7c5f9a7ba45923be57b0bc2a0e1a842ede7e3f13f4aa9c5e81c89ddfbc8e1bb06124c2c0e7251bc45a1d586a2d5272e510a1f3e5998834e44bc141c65351"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x78, 0x6b12}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x8, 0x8, 0x7, [@generic={0x86, 0x30, "878ae600132307325cee336161db9491c37f2f65a036b8ac086df50d4a50af65b6eb3c49f41cbf3edebcfe5848e847ca66132aa2260bfc1ca4fb946feb7f3f90791af86c30a5a861227fffa9a902e529b558aec1ac45c301976bf4ec3b448700c5d1585e253cef118b83f85f96a90e06578ffdd92d4e83f4ebb2fffca6532fdce6679fed"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0xbd, 0x4}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xc0, 0x80, 0x9, [@generic={0x1c, 0x7, "9041fb78d9a3bb03720749b853e1448a5484ad49936828858425"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x38, 0x6}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x6, 0x4, 0xa, [@generic={0x71, 0xd, "be97937168bc85d717a9d465bddf22f3a4f98cbef0e40ca8e0215ad83b006c5624b84cda0365491c5ffc863f99db50e64b56478cd50a72bb0ba1568c59b3734270dfac6f6284cc35bddb9721e2c975f0201c38792b09be223f134c70893ae921ca17e35408546c15bc165885df5295"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x0, 0x7f, 0x10, [@generic={0x62, 0x23, "82d9058508527dfba1d5b14900df7394b4c4b2df926953e992ebc9b5e0ed77e59548aa2306153c22a2c4fae23ab280201a5c60a67b3897734aa4803ce2cf41df05f9ded008ea19e4b093400a07c5affc17b54ba1e71d02800ec97fab0aa5b8cb"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xce97}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x5, 0x6, [@generic={0xc0, 0x4, "d2e1ed9ae27b311f74d1d430eb457894b724c2c92491fca10bb579948b0f6275d1418704f3484c64237cceda8fd1e3e52d67882891c0aa5e8907682fc819a620235fcb9cd2ba7f3f5f3c6481fcf791ad5c8fa27739c3e21866c0712774ed4b5a16e8bba4500e8104445940c0d5fbded1df787189839fd6dd6678b9eab26135425f751ca3ba1c42dd6b97a16c86d77cb5dc93cb15722f11c3f3df10f4851747e667bff7f499f6a9725861d213ab70316d0a1ae308bff573670f628392bc45"}, @generic={0xa3, 0x9, "b0b662c17a452c6d66b341288f3d0859a431db397fb25b49395c7cecb62be6e12c18cdb7fa5ad96e9ebbb259e32dbb2c4d6cc6810cdbfefc89c5ad1f9106703ac358f0a77cd33207e00f758cb24b0748df44d973125a78f96efc8bbcf48c0953fac3b3d517733803cdf90943a9438acb5ff5388939adfc8276dc72ec576d353aa1ccb96243699b1e3d5e6cfe6331e6ef1a7bc59ed540d1e242e7f4e964ace9f5ce"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x7, 0x0, 0x26, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x3}]}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x200, 0xa2, 0x0, 0xa, 0x40, 0x3}, 0x17a, &(0x7f0000000cc0)={0x5, 0xf, 0x17a, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x32, 0x7, 0x82, 0x4, 0x8}, @generic={0xbe, 0x10, 0xa, "af41029fdb16506efc915fdc0b8b353886aa319f1c08044f75aa3747521221e05b70b54553dd1286c740076acd90719e75ecde803333eea72175a75de07e66ae4b0666cebe11719d88b2518cfd8d685a7dee015e50917392acd8570a955348193b9b05f106168b0f3f5a9846ad180e8e4c9acec1864a76fa0cb7b2893ee597da39e888a435fd2d2f6d8e8a3e88bdeaefd9693fcbdc18ac49619181353cf20468f19306c90d7af44facf150502b8e0f3895997272eb934c21ae7a8c"}, @generic={0x97, 0x10, 0x3, "67c80c3c9b705acb375e9ff3bcafae150c31645843e70b95215ce422643e9ef4b6ba7a48a5f24607dab308adcab1abb8da3c8b972ae7f63c3107faef54997ef2625bf523ecabd390a00835feb5c78255ad0f0d835b89e09a1fd27ff3449a0a3deee5b9bdd3bc48bd281302c883a2d5b6e2b3b99153af567e10c471c14dd8f59f39ca6d906a93d8a08d3f0d9733664661403c5dcc"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x8, 0x9, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x8, 0x101}]}, 0x9, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0xc3a}}, {0x69, &(0x7f0000000e80)=@string={0x69, 0x3, "ffb76fddbfbdcb34fca2e74ad9614d10223740460ad4d66bd943552e7b410b1327756ca84319837c26341e26384321ba9b3cbc2afd8f22ecb84bd24d5e629c8b87ddc63bce4c3b3f92c98be5c66d5970b717aa8c61e2bb289fbb7a01ab6f3f240c19c4319c7fc6"}}, {0xb5, &(0x7f0000000f00)=@string={0xb5, 0x3, "7cc2129223af8f818b6c0afdb8db35737b1e68279da863cf45d94e9e6382f42b35e737dcdf84f8721dd1d0f53ac6c4010dbd7a6e2f663d252b2f4bb4384c764e596d0699ea2d199c72477569e53c578dccc9b55648ec98ee8380d90d29e6085f2acdcbe98531d9653908aa76fdc2150a6ded41a45c722f002bd2d4e0df287ba99b68775e5e243b42e8f451161f1ad119a07fe9c5a4cfa2724231117a7268cec1e5a1f68ec3940bb7f7fa59d02502b8725a19bb"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x77, &(0x7f0000001040)=@string={0x77, 0x3, "9c665b04827d010c205c314b56a5d1acf823faa719d7f962b795647e96c0f41ec0c3d0caa4bfdf42089f447f35735eaac1e3a6b9c4f67b2d9b8b4ec7225aeacb9be5d86ec1fe8060f322be807bec1dddc9814e833e3a1b1f09e9408db66329fd48fa8c8534837843551dfc3cd0272d3eb7928ca53c"}}, {0x92, &(0x7f00000010c0)=@string={0x92, 0x3, "515c2bf5b4b69f36602d79c5ae3d1794429a3a05419739f36218523ac9cb16f549dbe956a94f751a6b8c331e8a17fc0e9fc532e61588129933a2e9dcdd6159b17ca75e1d44bfb421e4f14d03c7731aa9950b132e4018eb9e31d2764f3ab2575c779e3d97ebc9d15e1b9ca11fbadb79cd4226e297dfd55608edb8f1b8b2c8071ee9de73f60a6085e55cac36d7b563ece7"}}, {0x24, &(0x7f0000001180)=@string={0x24, 0x3, "3d7a799f044f33ce5dccc95f2981c9bca4c1020badc992eb119e06e7599dcd7af3d5"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x280a}}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000340)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x406, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x20000000000002, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e1d, 0x3, @private2, 0x390b83d0}, {0xa, 0x4e1f, 0x10004, @mcast1, 0x1}, r5, 0x3}}, 0x48) 1.56933559s ago: executing program 2 (id=11): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x1554}}, 0x7, 0x0, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x100005}}, 0xfffffff7, 0x106, 0xffff1896, 0x3, 0x26, 0xb3ab, 0x1a}, 0x9c) 1.405321151s ago: executing program 3 (id=12): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x49, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x7, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x9b54, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000183, 0x2, 0x7, 0xf2, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x8000b, 0x7, 0xfffffffffffffff8, 0x9, 0x4], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.347990302s ago: executing program 2 (id=13): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x60, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.2646299s ago: executing program 0 (id=14): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f82420"], 0x7) 957.542616ms ago: executing program 0 (id=15): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x34}}, 0x20042000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10) 254.607622ms ago: executing program 1 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x2c, r1, 0x333, 0x0, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}}, 0x0) 205.25596ms ago: executing program 3 (id=17): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x24}}, 0x24004000) 171.868719ms ago: executing program 2 (id=18): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) 71.285939ms ago: executing program 0 (id=19): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x21e2, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x2100, 0x0) 0s ago: executing program 3 (id=20): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 71.232392][ T5605] cgroup: Unknown subsys name 'net' [ 71.292746][ T5605] cgroup: Unknown subsys name 'cpuset' [ 71.296382][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.673523][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.383050][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.385264][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.386513][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.388132][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.388684][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.406346][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.407099][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.407582][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.408077][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.409101][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.411051][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.411784][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.412747][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.413726][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.415705][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.415894][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.417674][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.418095][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.421761][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.422690][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.424354][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.426368][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.428534][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.429106][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.433542][ T4934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.334992][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.335744][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.335898][ T5637] bridge_slave_0: entered allmulticast mode [ 77.337942][ T5637] bridge_slave_0: entered promiscuous mode [ 77.393944][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.394041][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.394171][ T5637] bridge_slave_1: entered allmulticast mode [ 77.397112][ T5637] bridge_slave_1: entered promiscuous mode [ 77.508827][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.536973][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.647153][ T5637] team0: Port device team_slave_0 added [ 77.664368][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.664466][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.664594][ T5635] bridge_slave_0: entered allmulticast mode [ 77.666381][ T5635] bridge_slave_0: entered promiscuous mode [ 77.677866][ T5637] team0: Port device team_slave_1 added [ 77.693201][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.693518][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.693938][ T5633] bridge_slave_0: entered allmulticast mode [ 77.695625][ T5633] bridge_slave_0: entered promiscuous mode [ 77.701275][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.701435][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.702035][ T5633] bridge_slave_1: entered allmulticast mode [ 77.703826][ T5633] bridge_slave_1: entered promiscuous mode [ 77.706487][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.706591][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.706711][ T5635] bridge_slave_1: entered allmulticast mode [ 77.708361][ T5635] bridge_slave_1: entered promiscuous mode [ 77.815737][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.815838][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.815951][ T5634] bridge_slave_0: entered allmulticast mode [ 77.817405][ T5634] bridge_slave_0: entered promiscuous mode [ 77.848009][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.848155][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.848297][ T5634] bridge_slave_1: entered allmulticast mode [ 77.861318][ T5634] bridge_slave_1: entered promiscuous mode [ 77.863040][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.863133][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.863274][ T5636] bridge_slave_0: entered allmulticast mode [ 77.865273][ T5636] bridge_slave_0: entered promiscuous mode [ 77.868811][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.868825][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.868848][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.874952][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.874967][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.874991][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.913635][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.917137][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.933030][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.933212][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.933325][ T5636] bridge_slave_1: entered allmulticast mode [ 77.935288][ T5636] bridge_slave_1: entered promiscuous mode [ 77.973284][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.989146][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.024867][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.070272][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.090113][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.092079][ T5633] team0: Port device team_slave_0 added [ 78.108002][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.116015][ T5637] hsr_slave_0: entered promiscuous mode [ 78.117133][ T5637] hsr_slave_1: entered promiscuous mode [ 78.135277][ T5633] team0: Port device team_slave_1 added [ 78.137670][ T5635] team0: Port device team_slave_0 added [ 78.179531][ T5635] team0: Port device team_slave_1 added [ 78.190121][ T5634] team0: Port device team_slave_0 added [ 78.193246][ T5636] team0: Port device team_slave_0 added [ 78.228418][ T5634] team0: Port device team_slave_1 added [ 78.234146][ T5636] team0: Port device team_slave_1 added [ 78.236684][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.236705][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.236729][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.278652][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.278669][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.278700][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.312170][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.312201][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.312226][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.348553][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.348570][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.348594][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.350345][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.350357][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.350381][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.356719][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.356734][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.356758][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.419407][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.419423][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.419447][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.449438][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.449456][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.449480][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.498177][ T4934] Bluetooth: hci1: command tx timeout [ 78.498198][ T5627] Bluetooth: hci3: command tx timeout [ 78.531072][ T5633] hsr_slave_0: entered promiscuous mode [ 78.532117][ T5633] hsr_slave_1: entered promiscuous mode [ 78.532855][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 78.532942][ T5633] Cannot create hsr debugfs directory [ 78.553932][ T5627] Bluetooth: hci4: command tx timeout [ 78.554063][ T5627] Bluetooth: hci2: command tx timeout [ 78.559383][ T5627] Bluetooth: hci0: command tx timeout [ 78.578368][ T5635] hsr_slave_0: entered promiscuous mode [ 78.580508][ T5635] hsr_slave_1: entered promiscuous mode [ 78.581303][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 78.581330][ T5635] Cannot create hsr debugfs directory [ 78.703494][ T5636] hsr_slave_0: entered promiscuous mode [ 78.704326][ T5636] hsr_slave_1: entered promiscuous mode [ 78.704724][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 78.704742][ T5636] Cannot create hsr debugfs directory [ 78.741177][ T5634] hsr_slave_0: entered promiscuous mode [ 78.741806][ T5634] hsr_slave_1: entered promiscuous mode [ 78.742290][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 78.742308][ T5634] Cannot create hsr debugfs directory [ 79.122737][ T5637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.127913][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.161690][ T5637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.165564][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.185002][ T5637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.188234][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.188896][ T5637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.204275][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.264465][ T5633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.268301][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.269027][ T5633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.292764][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.293563][ T5633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.296256][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.297001][ T5633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.302219][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.416577][ T5635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.421533][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.423124][ T5635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.430542][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.451775][ T5635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.454541][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.455183][ T5635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.457891][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.540022][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.571065][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.573944][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.574418][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.576312][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.590650][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.604253][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.624088][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.637544][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.649780][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.649974][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.652920][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.652984][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.658582][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.670355][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.694200][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.749784][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.749894][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.784544][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.784624][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.822565][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.825927][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.846527][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.848856][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.863922][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.867714][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.868434][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.874869][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.003973][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.064177][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.067071][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.087135][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.118112][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.120417][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.120777][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.148907][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.148973][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.172263][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.172354][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.185143][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.212165][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.212226][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.257240][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.297657][ T5633] veth0_vlan: entered promiscuous mode [ 80.325787][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.344824][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.344889][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.382914][ T5633] veth1_vlan: entered promiscuous mode [ 80.387062][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.387122][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.398575][ T5636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.431231][ T5637] veth0_vlan: entered promiscuous mode [ 80.485199][ T5637] veth1_vlan: entered promiscuous mode [ 80.501202][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.537970][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.549953][ T4934] Bluetooth: hci1: command tx timeout [ 80.559722][ T4934] Bluetooth: hci3: command tx timeout [ 80.580544][ T5633] veth0_macvtap: entered promiscuous mode [ 80.606479][ T5633] veth1_macvtap: entered promiscuous mode [ 80.618458][ T5637] veth0_macvtap: entered promiscuous mode [ 80.630249][ T4934] Bluetooth: hci0: command tx timeout [ 80.630282][ T4934] Bluetooth: hci2: command tx timeout [ 80.630305][ T4934] Bluetooth: hci4: command tx timeout [ 80.645353][ T5636] veth0_vlan: entered promiscuous mode [ 80.648053][ T5637] veth1_macvtap: entered promiscuous mode [ 80.663445][ T5636] veth1_vlan: entered promiscuous mode [ 80.711460][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.736297][ T5636] veth0_macvtap: entered promiscuous mode [ 80.750019][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.753373][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.754885][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.758679][ T5636] veth1_macvtap: entered promiscuous mode [ 80.774721][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.779115][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.791537][ T79] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.791738][ T79] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.791790][ T79] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.791884][ T79] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.840320][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.874072][ T79] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.890113][ T5635] veth0_vlan: entered promiscuous mode [ 80.921589][ T79] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.930691][ T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.930735][ T79] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.930769][ T79] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.930803][ T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.930836][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.930868][ T79] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.936409][ T5634] veth0_vlan: entered promiscuous mode [ 80.944109][ T5634] veth1_vlan: entered promiscuous mode [ 80.971431][ T5634] veth0_macvtap: entered promiscuous mode [ 80.975723][ T5634] veth1_macvtap: entered promiscuous mode [ 80.999688][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.047058][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.106348][ T5635] veth1_vlan: entered promiscuous mode [ 81.158983][ T279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.159007][ T279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.183824][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.183844][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.209425][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.209469][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.209501][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.209534][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.273935][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.273952][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.309450][ T5635] veth0_macvtap: entered promiscuous mode [ 81.326843][ T5635] veth1_macvtap: entered promiscuous mode [ 81.334612][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.337127][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.422882][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.422903][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.446894][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.446914][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.466588][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.501867][ T5636] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.544108][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.580440][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.580463][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.580695][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.631354][ T1169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.635734][ T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.753403][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.766036][ T279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.766056][ T279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.023352][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.023375][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.137440][ T5720] netlink: 'syz.3.4': attribute type 16 has an invalid length. [ 82.137474][ T5720] netlink: 'syz.3.4': attribute type 17 has an invalid length. [ 82.207454][ T5725] FAULT_INJECTION: forcing a failure. [ 82.207454][ T5725] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.207496][ T5725] CPU: 1 UID: 0 PID: 5725 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 82.207517][ T5725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.207534][ T5725] Call Trace: [ 82.207545][ T5725] [ 82.207553][ T5725] dump_stack_lvl+0xe8/0x150 [ 82.207592][ T5725] should_fail_ex+0x410/0x560 [ 82.207617][ T5725] _copy_from_iter+0x1d3/0x1660 [ 82.207639][ T5725] ? __alloc_skb+0x27a/0x7a0 [ 82.207662][ T5725] ? __alloc_skb+0x27a/0x7a0 [ 82.207684][ T5725] ? __alloc_skb+0x27a/0x7a0 [ 82.207705][ T5725] ? __pfx__copy_from_iter+0x10/0x10 [ 82.207723][ T5725] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 82.207751][ T5725] ? __alloc_skb+0x27a/0x7a0 [ 82.207769][ T5725] ? __alloc_skb+0x27a/0x7a0 [ 82.207793][ T5725] ? netlink_sendmsg+0x650/0xb40 [ 82.207818][ T5725] ? skb_put+0x112/0x210 [ 82.207843][ T5725] netlink_sendmsg+0x6c0/0xb40 [ 82.207878][ T5725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.207912][ T5725] ? apparmor_socket_sendmsg+0x98/0x360 [ 82.207935][ T5725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.207961][ T5725] sock_sendmsg_nosec+0x13a/0x180 [ 82.207993][ T5725] ____sys_sendmsg+0x54e/0x850 [ 82.208022][ T5725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.208054][ T5725] ? import_iovec+0x73/0xa0 [ 82.208080][ T5725] ___sys_sendmsg+0x2a5/0x360 [ 82.208103][ T5725] ? __lock_acquire+0x747/0x2de0 [ 82.208126][ T5725] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.208181][ T5725] ? __fget_files+0x2a/0x420 [ 82.208207][ T5725] ? __fget_files+0x3a2/0x420 [ 82.208246][ T5725] __x64_sys_sendmsg+0x1b1/0x290 [ 82.208274][ T5725] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 82.208325][ T5725] do_syscall_64+0x166/0x520 [ 82.208345][ T5725] ? trace_irq_disable+0x3b/0x140 [ 82.208365][ T5725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.208385][ T5725] ? clear_bhb_loop+0x70/0xc0 [ 82.208409][ T5725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.208426][ T5725] RIP: 0033:0x7fef4e79e159 [ 82.208451][ T5725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.208469][ T5725] RSP: 002b:00007fef4f747028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.208496][ T5725] RAX: ffffffffffffffda RBX: 00007fef4ea25fa0 RCX: 00007fef4e79e159 [ 82.208510][ T5725] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 82.208522][ T5725] RBP: 00007fef4f747090 R08: 0000000000000000 R09: 0000000000000000 [ 82.208534][ T5725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.208545][ T5725] R13: 00007fef4ea26038 R14: 00007fef4ea25fa0 R15: 00007fef4eb4fa48 [ 82.208576][ T5725] [ 82.508628][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.508649][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.630097][ T4934] Bluetooth: hci1: command tx timeout [ 82.630178][ T5617] Bluetooth: hci3: command tx timeout [ 82.674630][ T5731] xt_hashlimit: size too large, truncated to 1048576 [ 82.674685][ T5731] xt_hashlimit: invalid rate [ 82.677460][ T5731] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 82.710034][ T4934] Bluetooth: hci0: command tx timeout [ 82.710067][ T4934] Bluetooth: hci2: command tx timeout [ 82.710171][ T5617] Bluetooth: hci4: command tx timeout [ 83.241504][ T5699] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.278344][ T5748] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.399638][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 83.415222][ T5699] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.415338][ T5699] usb 2-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=8c.2b [ 83.436841][ T5706] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 83.456769][ T5699] usb 2-1: config 250 has an invalid interface number: 59 but max is 2 [ 83.456798][ T5699] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 83.456818][ T5699] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 3 [ 83.456840][ T5699] usb 2-1: config 250 has no interface number 0 [ 83.456888][ T5699] usb 2-1: config 250 interface 59 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 83.456914][ T5699] usb 2-1: config 250 interface 59 altsetting 255 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 83.456939][ T5699] usb 2-1: config 250 interface 59 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 83.456960][ T5699] usb 2-1: config 250 interface 59 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.456984][ T5699] usb 2-1: config 250 interface 59 has no altsetting 0 [ 83.553671][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.553699][ T5699] usb 2-1: Product: syz [ 83.553712][ T5699] usb 2-1: Manufacturer: syz [ 83.553725][ T5699] usb 2-1: SerialNumber: syz [ 83.654932][ T5706] usb 5-1: New USB device found, idVendor=19d2, idProduct=0426, bcdDevice=4e.76 [ 83.670187][ T5706] usb 5-1: config 8 has an invalid interface number: 240 but max is 1 [ 83.670217][ T5706] usb 5-1: config 8 has an invalid interface number: 3 but max is 1 [ 83.670236][ T5706] usb 5-1: config 8 has an invalid interface number: 61 but max is 1 [ 83.670279][ T5706] usb 5-1: config 8 has an invalid interface number: 210 but max is 1 [ 83.670298][ T5706] usb 5-1: config 8 has 4 interfaces, different from the descriptor's value: 2 [ 83.670318][ T5706] usb 5-1: config 8 has no interface number 0 [ 83.670333][ T5706] usb 5-1: config 8 has no interface number 1 [ 83.670346][ T5706] usb 5-1: config 8 has no interface number 2 [ 83.670454][ T5706] usb 5-1: config 8 interface 240 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 83.670477][ T5706] usb 5-1: config 8 interface 240 altsetting 6 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 83.670504][ T5706] usb 5-1: config 8 interface 240 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 8 [ 83.670529][ T5706] usb 5-1: config 8 interface 240 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 83.670574][ T5706] usb 5-1: config 8 interface 240 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 12 [ 83.670611][ T5706] usb 5-1: config 8 interface 3 altsetting 118 endpoint 0x8 has invalid maxpacket 512, setting to 8 [ 83.670637][ T5706] usb 5-1: config 8 interface 3 altsetting 118 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 83.670663][ T5706] usb 5-1: config 8 interface 3 altsetting 118 endpoint 0x2 has invalid maxpacket 64, setting to 8 [ 83.670709][ T5706] usb 5-1: config 8 interface 3 altsetting 118 has 9 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.670746][ T5706] usb 5-1: config 8 interface 61 altsetting 12 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 83.670770][ T5706] usb 5-1: config 8 interface 61 altsetting 12 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 83.670792][ T5706] usb 5-1: config 8 interface 61 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 83.670812][ T5706] usb 5-1: config 8 interface 61 altsetting 12 has a duplicate endpoint with address 0xA, skipping [ 83.670862][ T5706] usb 5-1: config 8 interface 61 altsetting 12 endpoint 0xF has invalid maxpacket 64, setting to 8 [ 83.670886][ T5706] usb 5-1: config 8 interface 61 altsetting 12 endpoint 0x9 is Bulk; changing to Interrupt [ 83.670907][ T5706] usb 5-1: config 8 interface 61 altsetting 12 endpoint 0x6 has invalid maxpacket 512, setting to 8 [ 83.670931][ T5706] usb 5-1: config 8 interface 61 altsetting 12 has a duplicate endpoint with address 0xE, skipping [ 83.670950][ T5706] usb 5-1: config 8 interface 61 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 83.670969][ T5706] usb 5-1: config 8 interface 61 altsetting 12 has a duplicate endpoint with address 0xA, skipping [ 83.671012][ T5706] usb 5-1: config 8 interface 61 altsetting 12 has 10 endpoint descriptors, different from the interface descriptor's value: 11 [ 83.671037][ T5706] usb 5-1: too many endpoints for config 8 interface 210 altsetting 225: 237, using maximum allowed: 30 [ 83.671073][ T5706] usb 5-1: config 8 interface 210 altsetting 225 has a duplicate endpoint with address 0xD, skipping [ 83.671092][ T5706] usb 5-1: config 8 interface 210 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 237 [ 83.671115][ T5706] usb 5-1: config 8 interface 240 has no altsetting 0 [ 83.671155][ T5706] usb 5-1: config 8 interface 3 has no altsetting 0 [ 83.671171][ T5706] usb 5-1: config 8 interface 61 has no altsetting 0 [ 83.671188][ T5706] usb 5-1: config 8 interface 210 has no altsetting 0 [ 83.677452][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.677477][ T5706] usb 5-1: Product: 쉼鈒꼣膏沋ﴊ猵ṻ❨ꢝ콣鹎艣⯴蓟狸턝옺DŽ봍湺是┽⼫둋䰸乶浙餆ⷪ鰙䝲極㳥赗짌嚵肃ෙ弈촪ㆅ旙࠹皪싽ਕꑁ牜/툫⣟ꥻ梛幷⑞䈻ᙑ᨟᧑羠엩쾤犢ㅂ稑桲쇎ꇥ軶铃뜋﫷큙ȥ犸ᥚ [ 83.677500][ T5706] usb 5-1: Manufacturer: 럿붿㓋ꋼ䫧懙၍㜢䙀퐊毖䏙⹕䅻ጋ甧ꡬ᥃粃㐦☞䌸먡㲛⪼追䮸䷒扞讜㯆䳎㼻즒淆灙ិ貪⢻뮟ź澫␿ᤌ㇄羜 [ 83.677517][ T5706] usb 5-1: SerialNumber: ࠇ [ 83.754858][ T5759] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 83.796028][ T5759] bridge_slave_0: left allmulticast mode [ 83.796054][ T5759] bridge_slave_0: left promiscuous mode [ 83.797009][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.917585][ T5759] bridge_slave_1: left allmulticast mode [ 83.917612][ T5759] bridge_slave_1: left promiscuous mode [ 83.918103][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.934321][ T5699] em28xx 2-1:250.59: New device syz syz @ 480 Mbps (1b80:e302, interface 59, class 59) [ 83.934358][ T5699] em28xx 2-1:250.59: Video interface 59 found: [ 84.091698][ T5699] em28xx 2-1:250.59: unknown em28xx chip ID (0) [ 84.092893][ T5759] bond0: (slave bond_slave_0): Releasing backup interface [ 84.199562][ T5759] bond0: (slave bond_slave_1): Releasing backup interface [ 84.202374][ T5699] em28xx 2-1:250.59: reading from i2c device at 0xa0 failed (error=-5) [ 84.202439][ T5699] em28xx 2-1:250.59: board has no eeprom [ 84.245495][ T5744] binder: 5743:5744 ioctl c0306201 200000000040 returned -14 [ 84.258281][ T5759] team0: Port device team_slave_0 removed [ 84.277204][ T5759] team0: Port device team_slave_1 removed [ 84.278095][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.278123][ T5759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.284033][ T5699] em28xx 2-1:250.59: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 84.284071][ T5699] em28xx 2-1:250.59: analog set to bulk mode. [ 84.299031][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.299054][ T5759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.302548][ T5706] option 5-1:8.240: GSM modem (1-port) converter detected [ 84.336170][ T5759] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 84.363120][ T5699] usb 2-1: USB disconnect, device number 2 [ 84.438888][ T5713] em28xx 2-1:250.59: Registering V4L2 extension [ 84.447867][ T5699] em28xx 2-1:250.59: Disconnecting em28xx [ 84.465936][ T5760] team0: Port device xfrm0 added [ 84.466060][ T5761] tipc: Started in network mode [ 84.466088][ T5761] tipc: Node identity 1264d4e1db2d, cluster identity 4711 [ 84.466353][ T5761] tipc: Enabled bearer , priority 0 [ 84.472472][ T5706] option 5-1:8.61: GSM modem (1-port) converter detected [ 84.542896][ T5713] em28xx 2-1:250.59: Config register raw data: 0xffffffed [ 84.542924][ T5713] em28xx 2-1:250.59: AC97 chip type couldn't be determined [ 84.542938][ T5713] em28xx 2-1:250.59: No AC97 audio processor [ 84.615525][ T5713] usb 2-1: Decoder not found [ 84.615546][ T5713] em28xx 2-1:250.59: failed to create media graph [ 84.615572][ T5713] em28xx 2-1:250.59: V4L2 device video103 deregistered [ 84.628189][ T5706] option 5-1:8.210: GSM modem (1-port) converter detected [ 84.696786][ T5713] INFO: trying to register non-static key. [ 84.702641][ T5713] The code is fine but needs lockdep annotation, or maybe [ 84.709759][ T5713] you didn't initialize this object before use? [ 84.716003][ T5713] turning off the locking correctness validator. [ 84.722433][ T5713] CPU: 0 UID: 0 PID: 5713 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 84.731822][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.741882][ T5713] Workqueue: events request_module_async [ 84.747535][ T5713] Call Trace: [ 84.750815][ T5713] [ 84.753745][ T5713] dump_stack_lvl+0xe8/0x150 [ 84.758340][ T5713] assign_lock_key+0x133/0x150 [ 84.763112][ T5713] register_lock_class+0xcc/0x2e0 [ 84.768157][ T5713] __lock_acquire+0x10c/0x2de0 [ 84.772939][ T5713] ? __mutex_trylock_common+0x15f/0x270 [ 84.778608][ T5713] ? __pfx___mutex_trylock_common+0x10/0x10 [ 84.784526][ T5713] lock_acquire+0x115/0x350 [ 84.789056][ T5713] ? __wake_up_common_lock+0x30/0x1f0 [ 84.794461][ T5713] ? rcu_is_watching+0x16/0xb0 [ 84.799235][ T5713] _raw_spin_lock_irqsave+0x40/0x60 [ 84.804443][ T5713] ? __wake_up_common_lock+0x30/0x1f0 [ 84.809993][ T5713] __wake_up_common_lock+0x30/0x1f0 [ 84.815192][ T5713] ? __pfx___mutex_lock+0x10/0x10 [ 84.820316][ T5713] __vb2_queue_cancel+0x2de/0xde0 [ 84.825350][ T5713] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 84.830728][ T5713] vb2_core_queue_release+0x2f/0x150 [ 84.836027][ T5713] vb2_video_unregister_device+0x15b/0x200 [ 84.841844][ T5713] em28xx_v4l2_init+0x1c89/0x3150 [ 84.846898][ T5713] em28xx_init_extension+0x120/0x1d0 [ 84.852232][ T5713] ? process_scheduled_works+0x97a/0x1630 [ 84.857957][ T5713] process_scheduled_works+0xc3d/0x1630 [ 84.863532][ T5713] ? __pfx_process_scheduled_works+0x10/0x10 [ 84.869514][ T5713] ? assign_work+0x3cf/0x5d0 [ 84.874103][ T5713] worker_thread+0xa47/0xfb0 [ 84.878783][ T5713] ? __kthread_parkme+0x71/0x1f0 [ 84.883718][ T5713] kthread+0x38b/0x480 [ 84.887786][ T5713] ? __pfx_worker_thread+0x10/0x10 [ 84.892892][ T5713] ? __pfx_kthread+0x10/0x10 [ 84.897499][ T5713] ret_from_fork+0x514/0xb70 [ 84.902096][ T5713] ? __pfx_ret_from_fork+0x10/0x10 [ 84.907301][ T5713] ? __switch_to+0xc89/0x1420 [ 84.911975][ T5713] ? __pfx_kthread+0x10/0x10 [ 84.916560][ T5713] ret_from_fork_asm+0x1a/0x30 [ 84.922204][ T5713] [ 84.925287][ T5713] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 84.937165][ T5713] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 84.945577][ T5713] CPU: 0 UID: 0 PID: 5713 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 84.954949][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.965006][ T5713] Workqueue: events request_module_async [ 84.970649][ T5713] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 84.976625][ T5713] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 0c a2 97 00 48 ba 00 00 00 00 00 fc [ 84.996220][ T5713] RSP: 0018:ffffc900046bf880 EFLAGS: 00010046 [ 85.002281][ T5713] RAX: 0000000000000000 RBX: ffff88807b641740 RCX: 0000000000000001 [ 85.010243][ T5713] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900046bf7e0 [ 85.018268][ T5713] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 85.026243][ T5713] R10: dffffc0000000000 R11: fffff520008d7efc R12: 0000000000000000 [ 85.034214][ T5713] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807b6417d0 [ 85.042184][ T5713] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 85.051116][ T5713] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.057691][ T5713] CR2: 00007f23fd35da08 CR3: 000000007e330000 CR4: 00000000003526f0 [ 85.065661][ T5713] Call Trace: [ 85.068934][ T5713] [ 85.071858][ T5713] __vb2_queue_cancel+0x2de/0xde0 [ 85.076885][ T5713] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 85.082255][ T5713] vb2_core_queue_release+0x2f/0x150 [ 85.087534][ T5713] vb2_video_unregister_device+0x15b/0x200 [ 85.093342][ T5713] em28xx_v4l2_init+0x1c89/0x3150 [ 85.098368][ T5713] em28xx_init_extension+0x120/0x1d0 [ 85.103653][ T5713] ? process_scheduled_works+0x97a/0x1630 [ 85.109365][ T5713] process_scheduled_works+0xc3d/0x1630 [ 85.115003][ T5713] ? __pfx_process_scheduled_works+0x10/0x10 [ 85.120978][ T5713] ? assign_work+0x3cf/0x5d0 [ 85.125568][ T5713] worker_thread+0xa47/0xfb0 [ 85.130163][ T5713] ? __kthread_parkme+0x71/0x1f0 [ 85.135098][ T5713] kthread+0x38b/0x480 [ 85.139159][ T5713] ? __pfx_worker_thread+0x10/0x10 [ 85.144262][ T5713] ? __pfx_kthread+0x10/0x10 [ 85.148866][ T5713] ret_from_fork+0x514/0xb70 [ 85.153460][ T5713] ? __pfx_ret_from_fork+0x10/0x10 [ 85.158584][ T5713] ? __switch_to+0xc89/0x1420 [ 85.163267][ T5713] ? __pfx_kthread+0x10/0x10 [ 85.167850][ T5713] ret_from_fork_asm+0x1a/0x30 [ 85.172618][ T5713] [ 85.175624][ T5713] Modules linked in: [ 85.179525][ T5713] ---[ end trace 0000000000000000 ]--- [ 85.184973][ T5713] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 85.185001][ T5713] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 0c a2 97 00 48 ba 00 00 00 00 00 fc [ 85.185016][ T5713] RSP: 0018:ffffc900046bf880 EFLAGS: 00010046 [ 85.185035][ T5713] RAX: 0000000000000000 RBX: ffff88807b641740 RCX: 0000000000000001 [ 85.185046][ T5713] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900046bf7e0 [ 85.185057][ T5713] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 85.185066][ T5713] R10: dffffc0000000000 R11: fffff520008d7efc R12: 0000000000000000 [ 85.185077][ T5713] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807b6417d0 [ 85.185088][ T5713] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 85.185101][ T5713] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.185112][ T5713] CR2: 00007f23fd35da08 CR3: 000000007e330000 CR4: 00000000003526f0 [ 85.185128][ T5713] Kernel panic - not syncing: Fatal exception [ 85.286541][ T5713] Kernel Offset: disabled [ 85.290861][ T5713] Rebooting in 86400 seconds..