last executing test programs: 6.811825495s ago: executing program 3 (id=4): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x20008011) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 6.527536769s ago: executing program 3 (id=7): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbdcbbbb0800450000300000000006019078ac1e0001ac1414aa03709078000980"], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) 6.501872627s ago: executing program 2 (id=3): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r1, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x38000000}, {0xa, 0x4e24, 0xec, @mcast1, 0x4}, r1, 0xe2}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) 6.346564602s ago: executing program 2 (id=8): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.868584949s ago: executing program 1 (id=11): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0ffffff0000000003000010850000002c00000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x355}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone3(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000280)={0x5, 0x0, [{0x235, 0x0, 0x7}, {0xae7, 0x0, 0x3}, {0x619, 0x0, 0x2fa}, {0x99f, 0x0, 0x6}, {0x84b, 0x0, 0xd0}]}) prlimit64(0x0, 0xa, 0x0, &(0x7f0000000480)) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) fanotify_mark(r2, 0x21, 0x101a, r2, 0x0) fanotify_mark(r2, 0x22, 0x4000003b, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_rdma(0x10, 0x3, 0x14) syz_extract_tcp_res(&(0x7f0000000100), 0x0, 0x5) 4.803533309s ago: executing program 2 (id=12): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000002c0)={0x40, 0xf}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xa0, 0x4, 0x4}, 0x0}) 4.011149054s ago: executing program 3 (id=13): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) getpgid(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x56595559, 0x0, 0x9}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) close_range(r1, 0xffffffffffffffff, 0x0) 3.993824668s ago: executing program 1 (id=14): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xd5) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2}, 0x10) 3.968152525s ago: executing program 0 (id=1): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi2\x00', 0x0, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000002740)) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x3a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 2.994014901s ago: executing program 1 (id=15): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0xa, @pix={0x3, 0x7fff, 0x3247504d, 0x7, 0x9, 0x184, 0x3, 0x8, 0x1, 0x3, 0x2, 0x5}}) 2.993840303s ago: executing program 4 (id=5): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100000001", @ANYRES32, @ANYRES64, @ANYBLOB="2bd5bb48db59834b9328618036678ec4c6dac89cb841b8b4c8fd04de9f9a66cd495d5a1a543b82ba037c0c6e2fa0b40f4a5b546d90c1166fdd8b667154295b2d4a8097ec97e036e379d59aabd828b8f161c5fa95c5f4965b19d5b1198519c62a8c9a5e881822c07f3fd885ebf2c5f9dbb86654f0ce2bba773c64c3dd907d6f2443419a86b521da094260c5c326d9a0b9394be9c3230a8e7da852a30998bc476ae51f7d3896d507299d2f4ea3110377b9c3fd92ab6ab97f199b667aef67538172"], 0xf0, 0x1}}], 0x1, 0x44015) r0 = socket$inet6(0xa, 0x80001, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a00)="d8dc3e47921ebc404447ab1e58b7c12dd3ba52e9197764190153873925b8d5b7da2f3953a80ff858c77a1eb5b481225e5da83463011a968067297a8dd4e96809ac5e01c83c4961036c73a5cb72da133e1663f9b81d95a41707", 0x59}], 0x1}, 0x20010040) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 2.807427167s ago: executing program 4 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000580)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@weak_handle={0x77682a85, 0x1f, 0x1}, @flat=@handle={0x73682a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000400)={0x0, 0x18, 0xffffffffffffff17}}}], 0x0, 0x0, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40015) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d0381edd7fc6e5539b0d430a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbac5c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ptrace(0x10, 0x0) 2.770110774s ago: executing program 1 (id=17): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001000)="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", 0x100}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x5000, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.762037199s ago: executing program 0 (id=18): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x10000) 2.362928879s ago: executing program 1 (id=19): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x141091, 0x0) rmdir(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r4, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r4, r4, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TCSETS(r6, 0x5402, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) fcntl$addseals(r0, 0x409, 0xb) 2.362774s ago: executing program 0 (id=20): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040b"], 0xe) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) 1.637033073s ago: executing program 4 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008850) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x64, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfe00}, {0x8, 0xb, 0x15}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="7400000010000304020000000000000000000400", @ANYBLOB="0003000000000000540012800b0001006272696467650000440002800c001f00020000000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r4 = syz_io_uring_setup(0x1efb, &(0x7f0000000140)={0x0, 0x729, 0x3010, 0x0, 0x1}, &(0x7f0000000100), &(0x7f0000000480)) r5 = epoll_create(0xaf2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) epoll_pwait(r5, &(0x7f00000002c0)=[{}], 0x1, 0x80000001, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0xe000200f}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') close_range(r6, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000"], 0xe4}}, 0x4000000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 1.594244112s ago: executing program 2 (id=22): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0ffffff0000000003000010850000002c00000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x355}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone3(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000280)={0x5, 0x0, [{0x235, 0x0, 0x7}, {0xae7, 0x0, 0x3}, {0x619, 0x0, 0x2fa}, {0x99f, 0x0, 0x6}, {0x84b, 0x0, 0xd0}]}) prlimit64(0x0, 0xa, 0x0, &(0x7f0000000480)) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) fanotify_mark(r2, 0x21, 0x101a, r2, 0x0) fanotify_mark(r2, 0x22, 0x4000003b, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_rdma(0x10, 0x3, 0x14) syz_extract_tcp_res(&(0x7f0000000100), 0x0, 0x5) 1.182991506s ago: executing program 0 (id=23): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x222040, 0x0) 0s ago: executing program 1 (id=24): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$packet(r0, 0x0, &(0x7f0000000380)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 82.237816][ T5808] cgroup: Unknown subsys name 'net' [ 82.367348][ T5808] cgroup: Unknown subsys name 'cpuset' [ 82.376450][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.027076][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.307608][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.312811][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.317702][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.323744][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.332370][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.342963][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.343950][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.355568][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.360136][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.372264][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.374715][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.384080][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.395529][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.403514][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.405501][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.418106][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.419177][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.426293][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.440004][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.441304][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.455476][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.458923][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.470103][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.471067][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.495902][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.242841][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 87.425882][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 87.472651][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 87.557014][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 87.637331][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 87.652528][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.660459][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.668469][ T5821] bridge_slave_0: entered allmulticast mode [ 87.676607][ T5821] bridge_slave_0: entered promiscuous mode [ 87.739526][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.747076][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.754816][ T5821] bridge_slave_1: entered allmulticast mode [ 87.762780][ T5821] bridge_slave_1: entered promiscuous mode [ 87.907603][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.963744][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.973248][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.980715][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.988945][ T5820] bridge_slave_0: entered allmulticast mode [ 87.996982][ T5820] bridge_slave_0: entered promiscuous mode [ 88.060517][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.068055][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.075689][ T5820] bridge_slave_1: entered allmulticast mode [ 88.083959][ T5820] bridge_slave_1: entered promiscuous mode [ 88.091686][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.099021][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.106593][ T5819] bridge_slave_0: entered allmulticast mode [ 88.114589][ T5819] bridge_slave_0: entered promiscuous mode [ 88.187944][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.196438][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.204014][ T5819] bridge_slave_1: entered allmulticast mode [ 88.212165][ T5819] bridge_slave_1: entered promiscuous mode [ 88.220094][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.227741][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.235125][ T5823] bridge_slave_0: entered allmulticast mode [ 88.243049][ T5823] bridge_slave_0: entered promiscuous mode [ 88.251093][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.259044][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.266786][ T5822] bridge_slave_0: entered allmulticast mode [ 88.275489][ T5822] bridge_slave_0: entered promiscuous mode [ 88.288051][ T5821] team0: Port device team_slave_0 added [ 88.327984][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.335954][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.344697][ T5823] bridge_slave_1: entered allmulticast mode [ 88.354012][ T5823] bridge_slave_1: entered promiscuous mode [ 88.378213][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.385694][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.393105][ T5822] bridge_slave_1: entered allmulticast mode [ 88.401119][ T5822] bridge_slave_1: entered promiscuous mode [ 88.412488][ T5821] team0: Port device team_slave_1 added [ 88.423456][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.492434][ T5835] Bluetooth: hci2: command tx timeout [ 88.496267][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.525661][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.539867][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.554421][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.571753][ T5835] Bluetooth: hci4: command tx timeout [ 88.571760][ T5839] Bluetooth: hci0: command tx timeout [ 88.582157][ T5839] Bluetooth: hci3: command tx timeout [ 88.584120][ T5837] Bluetooth: hci1: command tx timeout [ 88.643102][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.658025][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.669581][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.676675][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.702842][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.717424][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.724546][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.750735][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.765883][ T5820] team0: Port device team_slave_0 added [ 88.776153][ T5820] team0: Port device team_slave_1 added [ 88.812418][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.849370][ T5819] team0: Port device team_slave_0 added [ 88.915340][ T5819] team0: Port device team_slave_1 added [ 88.922750][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.929869][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.955886][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.970309][ T5823] team0: Port device team_slave_0 added [ 88.980364][ T5822] team0: Port device team_slave_0 added [ 88.990773][ T5822] team0: Port device team_slave_1 added [ 89.012446][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.019673][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.045764][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.060877][ T5823] team0: Port device team_slave_1 added [ 89.157262][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.164381][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.190509][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.226323][ T5821] hsr_slave_0: entered promiscuous mode [ 89.233736][ T5821] hsr_slave_1: entered promiscuous mode [ 89.242685][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.249676][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.275769][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.288884][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.296099][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.322710][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.344858][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.352086][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.378472][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.392557][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.399638][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.426113][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.439667][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.446923][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.473396][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.533879][ T5820] hsr_slave_0: entered promiscuous mode [ 89.541340][ T5820] hsr_slave_1: entered promiscuous mode [ 89.548936][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 89.555255][ T5820] Cannot create hsr debugfs directory [ 89.659545][ T5819] hsr_slave_0: entered promiscuous mode [ 89.667294][ T5819] hsr_slave_1: entered promiscuous mode [ 89.689487][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 89.698987][ T5819] Cannot create hsr debugfs directory [ 89.822523][ T5822] hsr_slave_0: entered promiscuous mode [ 89.829819][ T5822] hsr_slave_1: entered promiscuous mode [ 89.837132][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 89.842950][ T5822] Cannot create hsr debugfs directory [ 89.881722][ T5823] hsr_slave_0: entered promiscuous mode [ 89.888774][ T5823] hsr_slave_1: entered promiscuous mode [ 89.895929][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 89.901736][ T5823] Cannot create hsr debugfs directory [ 90.548549][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.565764][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.573137][ T5837] Bluetooth: hci2: command tx timeout [ 90.602844][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.625940][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.651399][ T5835] Bluetooth: hci4: command tx timeout [ 90.656855][ T5837] Bluetooth: hci1: command tx timeout [ 90.662549][ T5835] Bluetooth: hci3: command tx timeout [ 90.662886][ T5839] Bluetooth: hci0: command tx timeout [ 90.693765][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.716533][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.748112][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.770070][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.846126][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.859766][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.873411][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.912557][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.013819][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.026299][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.038127][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.083072][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.217592][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.251708][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.279407][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.289787][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.302184][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.368784][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.399700][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.459297][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.497320][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.505021][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.549990][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.557517][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.567156][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.574617][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.605547][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.612944][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.640384][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.687219][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.739843][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.789619][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.796945][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.832860][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.864957][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.872156][ T490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.882676][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.889947][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.943033][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.950305][ T490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.105666][ T24] cfg80211: failed to load regulatory.db [ 92.118502][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.227801][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.326277][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.333541][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.363169][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.370495][ T490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.490136][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.609807][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.654021][ T5839] Bluetooth: hci2: command tx timeout [ 92.720979][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.732398][ T5833] Bluetooth: hci3: command tx timeout [ 92.737887][ T5833] Bluetooth: hci4: command tx timeout [ 92.744554][ T5837] Bluetooth: hci0: command tx timeout [ 92.745689][ T5839] Bluetooth: hci1: command tx timeout [ 92.868427][ T5821] veth0_vlan: entered promiscuous mode [ 92.945240][ T5821] veth1_vlan: entered promiscuous mode [ 92.966948][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.984756][ T5819] veth0_vlan: entered promiscuous mode [ 93.037651][ T5819] veth1_vlan: entered promiscuous mode [ 93.109271][ T5822] veth0_vlan: entered promiscuous mode [ 93.148990][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.170668][ T5822] veth1_vlan: entered promiscuous mode [ 93.197481][ T5821] veth0_macvtap: entered promiscuous mode [ 93.254807][ T5821] veth1_macvtap: entered promiscuous mode [ 93.295082][ T5819] veth0_macvtap: entered promiscuous mode [ 93.334162][ T5819] veth1_macvtap: entered promiscuous mode [ 93.380477][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.419614][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.448472][ T5822] veth0_macvtap: entered promiscuous mode [ 93.492583][ T5822] veth1_macvtap: entered promiscuous mode [ 93.502906][ T1145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.518418][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.527901][ T1109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.561040][ T1109] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.572652][ T1109] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.607500][ T5823] veth0_vlan: entered promiscuous mode [ 93.628603][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.675977][ T1109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.718988][ T490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.728340][ T490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.750281][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.773322][ T5823] veth1_vlan: entered promiscuous mode [ 93.782173][ T490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.815431][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.825784][ T5820] veth0_vlan: entered promiscuous mode [ 93.848071][ T490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.857537][ T490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.890693][ T5820] veth1_vlan: entered promiscuous mode [ 93.946837][ T490] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.956038][ T490] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.992767][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.000918][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.021829][ T490] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.047375][ T490] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.072869][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.080794][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.148188][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.177483][ T5823] veth0_macvtap: entered promiscuous mode [ 94.214145][ T5823] veth1_macvtap: entered promiscuous mode [ 94.272381][ T5820] veth0_macvtap: entered promiscuous mode [ 94.292011][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.300071][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.343521][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.354163][ T5820] veth1_macvtap: entered promiscuous mode [ 94.361560][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.741370][ T5839] Bluetooth: hci2: command tx timeout [ 94.775034][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.811385][ T5833] Bluetooth: hci4: command tx timeout [ 94.811492][ T5835] Bluetooth: hci0: command tx timeout [ 94.817172][ T5833] Bluetooth: hci3: command tx timeout [ 94.828399][ T5839] Bluetooth: hci1: command tx timeout [ 94.963417][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.986479][ T490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.001429][ T490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.085847][ T5942] Zero length message leads to an empty skb [ 95.090591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.123531][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.159751][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.187940][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.220776][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.260158][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.316023][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.419820][ T490] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.459671][ T490] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.528020][ T490] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.565608][ T490] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.582295][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 95.702657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.805050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.981240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.078985][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.109210][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 96.197966][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 128, setting to 64 [ 96.223866][ T10] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 96.255437][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.278004][ T490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.281606][ T10] usb 4-1: Product: syz [ 96.290232][ T10] usb 4-1: Manufacturer: syz [ 96.301486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.311482][ T490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.321952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.526161][ T5963] overlayfs: overlapping lowerdir path [ 96.571445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.623963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.624708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.711519][ T10] usb 4-1: SerialNumber: syz [ 96.726578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.847899][ T10] usb 4-1: config 0 descriptor?? [ 96.868239][ T5949] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.044500][ T10] rc_core: IR keymap rc-streamzap not found [ 97.050599][ T10] Registered IR keymap rc-empty [ 97.071054][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.098293][ T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 97.121316][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.361511][ T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 97.451256][ T1218] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.695402][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.705564][ T10] usb 4-1: USB disconnect, device number 2 [ 97.734851][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.848346][ T1218] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.912300][ T1218] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.959169][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.971505][ T1218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.997784][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.044946][ T1218] usb 3-1: config 0 descriptor?? [ 98.097695][ T1218] pwc: Askey VC010 type 2 USB webcam detected. [ 98.148967][ T5981] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.825084][ T1218] pwc: recv_control_msg error -32 req 02 val 2b00 [ 98.833623][ T1218] pwc: recv_control_msg error -32 req 02 val 2700 [ 99.103523][ T1218] pwc: recv_control_msg error -71 req 04 val 1000 [ 99.130476][ T1218] pwc: recv_control_msg error -71 req 04 val 1300 [ 99.165847][ T1218] pwc: recv_control_msg error -71 req 04 val 1400 [ 99.201957][ T1218] pwc: recv_control_msg error -71 req 02 val 2000 [ 99.213623][ T1218] pwc: recv_control_msg error -71 req 02 val 2100 [ 99.220727][ T1218] pwc: recv_control_msg error -71 req 04 val 1500 [ 99.228332][ T1218] pwc: recv_control_msg error -71 req 02 val 2500 [ 99.236308][ T1218] pwc: recv_control_msg error -71 req 02 val 2400 [ 99.243799][ T1218] pwc: recv_control_msg error -71 req 02 val 2600 [ 99.274677][ T1218] pwc: recv_control_msg error -71 req 02 val 2900 [ 99.311034][ T1218] pwc: recv_control_msg error -71 req 02 val 2800 [ 99.340530][ T1218] pwc: recv_control_msg error -71 req 04 val 1100 [ 99.371902][ T1218] pwc: recv_control_msg error -71 req 04 val 1200 [ 99.434092][ T1218] pwc: Registered as video103. [ 100.173446][ T1218] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 100.223281][ T1218] usb 3-1: USB disconnect, device number 2 [ 100.352685][ T5839] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 102.413126][ T5833] Bluetooth: hci4: command 0x2016 tx timeout [ 102.423611][ T5833] ------------[ cut here ]------------ [ 102.429450][ T5833] refcnt < 0 [ 102.429500][ T5833] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0xff/0x2c0, CPU#0: kworker/u9:3/5833 [ 102.444575][ T5833] Modules linked in: [ 102.448753][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 102.458591][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.472237][ T5833] Workqueue: hci4 hci_conn_timeout [ 102.477556][ T5833] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 102.483291][ T5833] Code: 48 89 df e8 83 99 09 00 eb 07 e8 9c 77 23 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 87 a8 fe ff e8 82 77 23 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 102.507092][ T5833] RSP: 0018:ffffc90003bb7b10 EFLAGS: 00010293 [ 102.513497][ T5833] RAX: ffffffff8aa22ece RBX: ffff88802be48000 RCX: ffff88807d121e80 [ 102.521711][ T5833] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 102.529797][ T5833] RBP: 00000000ffffffff R08: ffff88802be48013 R09: 1ffff110057c9002 [ 102.538017][ T5833] R10: dffffc0000000000 R11: ffffed10057c9003 R12: dffffc0000000000 [ 102.546292][ T5833] R13: 1ffff1100fa24468 R14: ffff88802be48a40 R15: ffff88802be48010 [ 102.554463][ T5833] FS: 0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 102.567252][ T5833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.580762][ T5833] CR2: 00007fe07edb4d58 CR3: 000000007942c000 CR4: 00000000003526f0 [ 102.589049][ T5833] Call Trace: [ 102.592745][ T5833] [ 102.595913][ T5833] ? process_one_work+0x87c/0x1650 [ 102.604874][ T5833] process_one_work+0x949/0x1650 [ 102.610110][ T5833] ? __pfx_process_one_work+0x10/0x10 [ 102.615730][ T5833] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.620919][ T5833] worker_thread+0xb46/0x1140 [ 102.626242][ T5833] kthread+0x388/0x470 [ 102.630427][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 102.635886][ T5833] ? __pfx_kthread+0x10/0x10 [ 102.640690][ T5833] ret_from_fork+0x51e/0xb90 [ 102.645596][ T5833] ? __pfx_ret_from_fork+0x10/0x10 [ 102.650856][ T5833] ? __switch_to+0xc7d/0x1450 [ 102.655908][ T5833] ? __pfx_kthread+0x10/0x10 [ 102.660631][ T5833] ret_from_fork_asm+0x1a/0x30 [ 102.668681][ T5833] [ 102.671880][ T5833] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.679228][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 102.689739][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.699828][ T5833] Workqueue: hci4 hci_conn_timeout [ 102.705066][ T5833] Call Trace: [ 102.708374][ T5833] [ 102.711338][ T5833] vpanic+0x56c/0xa60 [ 102.715363][ T5833] ? __pfx__printk+0x10/0x10 [ 102.720011][ T5833] ? __pfx_vpanic+0x10/0x10 [ 102.724535][ T5833] ? is_bpf_text_address+0x292/0x2b0 [ 102.729839][ T5833] ? is_bpf_text_address+0x26/0x2b0 [ 102.735166][ T5833] panic+0xc5/0xd0 [ 102.738909][ T5833] ? __pfx_panic+0x10/0x10 [ 102.743347][ T5833] ? ret_from_fork_asm+0x1a/0x30 [ 102.748466][ T5833] __warn+0x315/0x4f0 [ 102.752460][ T5833] ? hci_conn_timeout+0xff/0x2c0 [ 102.757597][ T5833] ? hci_conn_timeout+0xff/0x2c0 [ 102.762546][ T5833] __report_bug+0x29a/0x540 [ 102.767065][ T5833] ? hci_conn_timeout+0xff/0x2c0 [ 102.772122][ T5833] ? __pfx___report_bug+0x10/0x10 [ 102.777160][ T5833] ? __pfx___schedule+0x10/0x10 [ 102.782035][ T5833] ? hci_conn_timeout+0xff/0x2c0 [ 102.786980][ T5833] report_bug+0x16a/0x220 [ 102.791332][ T5833] ? hci_conn_timeout+0xff/0x2c0 [ 102.796545][ T5833] ? hci_conn_timeout+0x101/0x2c0 [ 102.801577][ T5833] handle_bug+0x9c/0x200 [ 102.805869][ T5833] exc_invalid_op+0x1a/0x50 [ 102.810378][ T5833] asm_exc_invalid_op+0x1a/0x20 [ 102.815343][ T5833] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 102.821096][ T5833] Code: 48 89 df e8 83 99 09 00 eb 07 e8 9c 77 23 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 87 a8 fe ff e8 82 77 23 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 102.840992][ T5833] RSP: 0018:ffffc90003bb7b10 EFLAGS: 00010293 [ 102.847086][ T5833] RAX: ffffffff8aa22ece RBX: ffff88802be48000 RCX: ffff88807d121e80 [ 102.855082][ T5833] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 102.863088][ T5833] RBP: 00000000ffffffff R08: ffff88802be48013 R09: 1ffff110057c9002 [ 102.871081][ T5833] R10: dffffc0000000000 R11: ffffed10057c9003 R12: dffffc0000000000 [ 102.879096][ T5833] R13: 1ffff1100fa24468 R14: ffff88802be48a40 R15: ffff88802be48010 [ 102.887116][ T5833] ? hci_conn_timeout+0xfe/0x2c0 [ 102.892240][ T5833] ? process_one_work+0x87c/0x1650 [ 102.897528][ T5833] process_one_work+0x949/0x1650 [ 102.902512][ T5833] ? __pfx_process_one_work+0x10/0x10 [ 102.907905][ T5833] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.912980][ T5833] worker_thread+0xb46/0x1140 [ 102.917798][ T5833] kthread+0x388/0x470 [ 102.922039][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 102.927171][ T5833] ? __pfx_kthread+0x10/0x10 [ 102.931832][ T5833] ret_from_fork+0x51e/0xb90 [ 102.936549][ T5833] ? __pfx_ret_from_fork+0x10/0x10 [ 102.942152][ T5833] ? __switch_to+0xc7d/0x1450 [ 102.946884][ T5833] ? __pfx_kthread+0x10/0x10 [ 102.951553][ T5833] ret_from_fork_asm+0x1a/0x30 [ 102.956363][ T5833] [ 102.960001][ T5833] Kernel Offset: disabled [ 102.964344][ T5833] Rebooting in 86400 seconds..