last executing test programs: 2m31.684010171s ago: executing program 4 (id=1772): socket$netlink(0x10, 0x3, 0x12) readv(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2m30.314722424s ago: executing program 4 (id=1779): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m30.215338657s ago: executing program 4 (id=1780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000140)=0x6) 2m29.313861677s ago: executing program 4 (id=1782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), 0xffffffffffffffff) r2 = epoll_create1(0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x30000001}) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000003100)=[{&(0x7f0000000040)={0x27, r6, 0x1, 0x3, 0xf, 0xe, "0d5daf5b3f6f1770415ee94bb5137d9055f8cfbeaffb9e97d5282623cbcac50c1fe240cfb040602971a325c213d9227641d48912e3dc5c3e37a4e7539ac480", 0x39}, 0x60, &(0x7f00000000c0)=[{&(0x7f0000001100)="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", 0x1000}], 0x1, &(0x7f0000000280)={0xe8, 0x118, 0xf9a6, "d8fc8488606adaa6db2a5be475ac211eb0e65a6347526cae4f10e27e3d926ca5268eec7ebbb0019c304785c19b512af5c04124aeda7d0739e09d87666638114c2fcf0816e71bf4027d3b5d301265823c7fd170745e8a55b561a432db70719dfd288d4fc63b2ebc5791d51c1d22e918b995d855475494994897ad52fcc95abe5f84b6809cd5543965d563e075e666ae2e497ba7f84ff77e42a52d7c66974fca61f9f315ae9d72923ffb6dba270259b851a61ce092a3cf1c37e5c266962126de336426894608a51cd553ae82e6f7083a9c5b09c239"}, 0xe8, 0x4000}, {&(0x7f0000000380)={0x27, r10, 0xffffffffffffffff, 0x1, 0x9, 0x7f, "40f6281afd7e60c672f3fdcdf6cbb028ca020b36d22316ebc1e695ee84f6b4c100034dedf4e4f0b5c5681520c63e4de85b0aeb1a74d3dfea61aea3474d28ea", 0x28}, 0x60, &(0x7f0000000940)=[{&(0x7f0000000400)="2f4f49cebe79c4da30fc75a0e491c1fe75fbe82c838863246a4446b95c798214937a4bba044bf7556b258d8c8cabd9fdfb0fab050c50718bd39dff8a73e048438a", 0x41}, {&(0x7f0000000480)="9f81cb53e64fb05610f7a5b4e6e95b7ed081d7c88c54355f861084d3eaccba691c5a0e02c7b17de52ff6a3488b89fe538942ebd3f0665a62f0ffbe14a1c8fc095b1ea88550ddd870625b53f1ee9e0e855538083e11bbae7ee9e043e8a5606130d3642ee40be0db678dc27d60d9f95c03e128739211874039fd45af2124582932bbb16c2c0b16545ba4701971f5e33e36", 0x90}, {&(0x7f0000000540)="c3b1ab79751e0dd6fd710a63b6084aad783f063e984145cb02d3bbf8315ed4b3315ea49dd272a827bcc34327bd39900cfdf0a36c6cd00823ef62d169a5a9b0260b045478f83f4093c5e4a6c73eb0fe02148d00375c6350bd061e45b20c6fbe884e6fd1d0fa270c876575dc4804281ee561f09399d0c157f6a254db9f68aa4f0c248a1919455cd06e075ee1ccbd72e0b034ca8b22f2d758fa7bd4e08d50d567dfed6526e0f49731fcf9db0ff3f31df84f1d43b1fbda4d7646db9fb7f0db348befb55df335272db5097998093d801adbc687f47893303743cb35005a8c252bc1b7f8f59482c5511c", 0xe7}, {&(0x7f0000000640)="058529103cecc83900ace2e58631a90c58e53893fbf7cf18c0a17ee87176b8db3b3eaf19f0a24fcf75fc93a713fafb4e33d9220d71cc20aa268d13efafc89bf5fd6850739ebf8a48fcbfbb3f5e7f4d8c48f0e02e7a863417ee22cc3242fb21bc599d19cd73b33241d7778fe3012628b3699d7c00b1014f0282e5281229b9d227e58400f4cac97368e4a5afe489ba2bacc304338ab56da464da5bf495229826f19da95ee16e2a3d2000b9fed61dcfe403460d5045d5051b7910457e6b596d8df51f9b", 0xc2}, {&(0x7f0000000740)="bd4a12f2b36da0702ff708871400438e8423bb433b6ebb95bad1306547905dffdfd6040e49451fd269f062f4870d01f1a352db29d71a41bc17b602bbc3a87f3ac47fa97279b1bcf565a625c0590e6bfb10dc2e93639de2a39ad271096240573c8047acf03104da3c636557e9c194e8212fb40b7df4e574eafca05caf64ac863b55d801858e1ad56c10a19452014a79e730d0118836bd01ee7fa3a6b57aac929aa6924a6b4ac63d4cb4f005fa904985b53664debb4c969cbafe9833171fa5c7ad2a4056401b266dde2b8c8e1f", 0xcc}, {&(0x7f0000000840)="a8fb271706b617580c457e6ed4803ec396b35e47d1472cfcb911fbf75b43520e08792f9199f8f93e6ae3b38bcb85be4e47ea921cb16da9cf29608bd2a82b0a50241b2d1be2edda7928d6a5d3518b3d1e29ef74b65413fdc6b1380eaccfcef2e0692369ef1e53a5168edac8d12fb1faeeb1266ddefe1caf733b38ec968f0b99105e272aa58a6611e3b8ef41b518b47607bb18548d2a6eb013287f3a8961e596cb47f2dd3ae1175eb9e4b5fc6e9469db6faea9242c9fae2c293f1ffdfae8d4906d3e344a6c834adf37f008d2a7197b118765b069d1", 0xd4}, {&(0x7f0000002100)="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", 0x1000}], 0x7, 0x0, 0x0, 0x800}, {&(0x7f00000009c0)={0x27, r11, 0x1, 0x4, 0xff, 0x38, "5b22bb8c92ea3e7b36cd700cb6ab6bd7b3d24fbf5625a3f76a050ae9ef015a90e5115e999a8ca53ab715a29036ed2d7ed90deef63ecc79d5e7b953d29f67a2", 0x2e}, 0x60, &(0x7f0000000c00)=[{&(0x7f0000000a40)="016878e2f7566d559b7a39d15e4bd686a9ebc369088ecceacc5574246b696069cfc5ce349ed1f078e5463f434a3f23d27f3ae57ca2bcd5c5025185773ac101d3555f53c03b8135a09a282ebba0b6de7baf", 0x51}, {&(0x7f0000000180)="996583fc82845a7248403c3e3c63f60cb9b8fe206c9276123888048838607a4a6d7f0c58d68cc14e917d8ac79f19119c96df7c8997ed", 0x36}, {&(0x7f0000000ac0)="94d92321d4d2c30ba9e7af62a8fad4f51c8b491f764b5aa2c1beb246c793e9606a0a2a2199259c44f2ef90a53f1bcd463e6ab6cd0e806835a348784195a61c82008ba91f01c1a9745e2c6344a39a5fe775cbd4dafa938cac27d0419056ecb9d0ce14b39b98da34a93d76b8f2235b4c0284650664db3faa", 0x77}, {&(0x7f0000000200)="705246103baba7", 0x7}, {&(0x7f0000000b40)="0ffeb074f496005a2d1c087879248c079559eb315e0d847fb2a831710629f8001b7c688314a912a1fb9376693d93f0d9682ff08de81c12ce57aa33187e17fd2d78a603103a42e32a9efbe92a78fceab8d666f557eabffd364f88cf25d992e87d6b50f1a673a50aa3750d09fdd8024ac0066768c1621904dee7f989cce1419249f546f90d932affeec47c4e6c3c2c4534d24d35162e047eb28e5e61e9eef13c32daca609cdc9c5900c012b4d158", 0xad}], 0x5, &(0x7f0000000c80)={0x70, 0x104, 0x401, "5d4157ced9494cee3d0f75ced5321fcfd979bc9e7bb06412ae76241d080923ed15589b3fe9b912c4faa6dd0055067e4a3364d4c9a72404f7eca02cbe2c99880119de86c32a50b09acc3f15995a91c247091cb3ccea18e6b183c4b3ed25"}, 0x70, 0x4080}, {&(0x7f0000000d40)={0x27, r12, 0x0, 0x7, 0x8, 0x8, "f5a3e95bdd71366412f6eed01965a65a9d597e90de5e63705a3500fea6d57b406f8423d58b53ab73f439864261ae4b9fefc296ec8a51e2b9584821aa8184a6", 0x1a}, 0x60, &(0x7f0000001000)=[{&(0x7f0000000dc0)="cdb597f29cb5817a4334c4271d7f1c044ab8dc2deb09e69a9a2a86030d01a7a2262d2da029e784199afd09eb76d34a3dd6e16f7d5a5e2b6660d28559af3a7cdae809f7e8ebe6e3ceba99", 0x4a}, {&(0x7f0000000e40)="339764b39dde734e7470bc962586c503dd190aa0a2bab53413b485b95924c7e8f0dfb53d8ef563ccc048eadc30d2fd4866ce40839454d1aab9e63e14b8572f00ad444795c5d2ceabc15a0faf27f891bf5d0cfcd9583d0e20eed366ced188fefddebe2d5bc831f9c0624393ec2afd0b3a67d30095c4740e9726eb7eab59ad24827210b90c2d7d286356ce91f07eeb0b7a6ce8d3598c053c2f6772cd92a7543dfbdce5fa637e437c2ab423036ca98d86e5592295dc1283eab4", 0xb8}, {&(0x7f0000000f00)="41aaf773019877b262cbe20f989fc6bcbd275e632306a995013470b294e160d1599861d58bdc2680340faa99f01a8df8bea5a07ef980d1234021a275e5c2208e8065b16d5238075e1b7a53ec2fe4f476f8b987d13806a0d391f9d1b1c0838b9ec014d8152464c707fbddd5958095b091221259e5da9dc237ec5a6e0921b415c299a81ebee9a5c41098526e9e1e99f6f6b3e38d894ed087be0433408332bd70d134cc3001b4ad7264971941f720e4e97944ce268f7c47112202246f55fdb74fe3bfab5796933c80b18758eec5be32f22b9444b33fe6c97b2c6cd818960f15d99345dda4ea2f017a6b366d1a68626e6401c5", 0xf1}], 0x3, &(0x7f0000001040)={0x10, 0x0, 0x931}, 0x10, 0xd1}], 0x4, 0x8000) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x309, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44040084}, 0x8880) 2m27.995532318s ago: executing program 4 (id=1786): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x6, 0x80000000, 0x0, 0x0, 0x10001, 0xffffffffffffffff}) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/105, 0x69, 0xfff) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0)={0xffffffffffffffff}, 0x1, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7bcde000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 2m26.22901773s ago: executing program 4 (id=1793): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) (async) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000740)={0x0, 0xdce0, 0xd805, 0x7, 0x2, 0x9, 0xfff8, 0x80000000, {0x0, @in={{0x2, 0x4e20, @local}}, 0x7, 0x7, 0x1, 0x3, 0x2}}, &(0x7f0000000580)=0xb0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000600)=@assoc_id=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400df7f08000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x40000022) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000003c0)='afs_call_state\x00', r8, 0x0, 0x100}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r9, 0x0, 0x7}, 0x18) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f0000000100)=@req3={0x12000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r14, 0x4400ae8f, 0x0) (async) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r16, 0xae60) ioctl$KVM_CREATE_PIT2(r16, 0x4040ae77, &(0x7f0000000180)={0x1}) 2m12.106763826s ago: executing program 3 (id=1840): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x545703) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001940)=""/4096, 0xffffffffffffff57}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae00000000008f7cdc2a365460020590c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000000200)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28, 0x2000c000}}], 0x2, 0x88) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x414440) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = dup3(r4, r3, 0x0) accept4$unix(r5, 0xfffffffffffffffe, 0x0, 0x0) write$rfkill(r5, &(0x7f0000000100)={0x1000, 0x1, 0x2, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r6 = getpgrp(0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, 0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000640)='g\xc5\x9ct\xdb\x97W\xd7\xa5\"5\x90\xeb\xc7~s\xd3+\x80.\xdfS\xb4\xae|\xf1H\x10_&\x97}UWJ\xecIh\x1bs3\xbd\xe0)\xaf&\xd2b9\aF\x13V\xd8#c\xee\\-B\xe1\x17\x15cQ\x88'}, 0x30) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x1000000001, 0x20000000, 0x801e, 0x8, 0x1, {0x1}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 2m10.994838201s ago: executing program 3 (id=1845): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"4b1f861206f1c06e90b2c72338119dbc7e6b8f0e0719620e6049c625f009ee8455226409e9778a9d788db3dcffe5f4b5d648636e747a2ce10bfdddf4c525c76c7240919ffaebd5115799f6a50b175733696f77cc47c81fdb4b5313c5c65ff36e9ca731fae47ec77917d2977f0830afccac702f74528a4d88635157beb63ea48bd5a2c4fa3e46396ad020f81f7077d3d028e2dd72d0392df0690ce000d99459d13f66e6fbe2a057a529b10c1b6f99dc5c2c9b03916a2c0f98a6bdc2dd3b6adc798708c8ce34d8adc4be01e0ddb7570e4f9d9508e661bf58e524fed6d5117a2f3d269230caaab7bcfe1f0a391e0ecce93915a66b8051f8d133703b69a93703a4a649a545cf522ffe87f8f45fdb4b429c3207a6a4e7a1e9deffcf7834eb9ed9c17f5ef2b2bd9e78e6cee2fb2861cf5ef4d6e3cca4179e42bbe181d39c286044638a026b634026d35bc9efd0c2602fa192502e67e1d68c5f88b7012069f23f26a1484ec0d6c9641820559c835ecd9646411916fb82e15719bc127226292452aa1f899bc361b8888e0ba03cd8410661b7fe0f8f1670fe55ccb80893a0de50a1f01153b918535ac6f736577c8ab2398373893b3abaef092494dcd68e9f82c96ac915ab877ee32a678799c53308bd964315888c83f37fd7945436d2b71961fcf003d2d7a994f9431344a66af265a6d22622972b5e422cc0f0a80ecb66866a22080c0a1aa063ef70b48fe88d58c9c90af391aa04d09430922ff4661fae3efdc12b5e7bee7a68f3d2f57adb1b159abbdcf8f3b8951e2fc4a4860cf8ff85985b1ca4f77dc6f637458c37674198886b1030e1b1f0b67e269be4914f9de69c8a86508f1c0ddd6fb479e7c84dcd1969c843a204dde320b3ddcedee3c727819f62a94ed684cb973c7b046c59e2b635a0260328094760f6d2fe32d532b570169d1acc062c2923714f20b56aea2ade0fa28a46e967f9247bc330e59a22e6d281aa904f799877e126e26bb5d487eb0ef3a9251f8afa1a96c21cb7f336b5b40ffc178bc673d4e8a05d2f48edbd1dcdbf07f3af38d273c4d4fbba8606ca7d40351077d266806680f3d792453e0f60474e387d72a2dabbe46836b6a4f4599cc4278f4b1ba70475d00a320d9962646addb825218f1cb5183aad1884824f55914d60ff1aeb70cc562831de274ff96f5c430a1809bfb669e98e30936d61b89684089ab1d3f11448348658395bc3f6ed1390d695dbfc65d2932b4f1583149c1bd0a74c9d919db3e17cc55c4113669a6d56c9950a7cc7c478adca5aae63e192a3ae15c337083c4f636d6dd16362353f58a98e7f5fe6607bfca8be7951d830f741ca73e1df2f0b7d85100941733c99fa4ab3423b6f05095de6bfda91f821654d0ded44fe811ad34972351aa431857e6f7bc5c0554cd55891282bd3f72f739f46438ad5d652a7d1ffd9c385188d"}) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0xd0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 2m10.994439886s ago: executing program 32 (id=1793): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) (async) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000740)={0x0, 0xdce0, 0xd805, 0x7, 0x2, 0x9, 0xfff8, 0x80000000, {0x0, @in={{0x2, 0x4e20, @local}}, 0x7, 0x7, 0x1, 0x3, 0x2}}, &(0x7f0000000580)=0xb0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000600)=@assoc_id=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400df7f08000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x40000022) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000003c0)='afs_call_state\x00', r8, 0x0, 0x100}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r9, 0x0, 0x7}, 0x18) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f0000000100)=@req3={0x12000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r14, 0x4400ae8f, 0x0) (async) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r16, 0xae60) ioctl$KVM_CREATE_PIT2(r16, 0x4040ae77, &(0x7f0000000180)={0x1}) 2m9.882763027s ago: executing program 3 (id=1849): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) write$FUSE_ATTR(r0, 0x0, 0x0) 2m7.428729439s ago: executing program 3 (id=1857): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x40000101, &(0x7f0000001e80)=[{0x0, 0x1000}]}) 2m7.149653138s ago: executing program 3 (id=1860): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"4b1f861206f1c06e90b2c72338119dbc7e6b8f0e0719620e6049c625f009ee8455226409e9778a9d788db3dcffe5f4b5d648636e747a2ce10bfdddf4c525c76c7240919ffaebd5115799f6a50b175733696f77cc47c81fdb4b5313c5c65ff36e9ca731fae47ec77917d2977f0830afccac702f74528a4d88635157beb63ea48bd5a2c4fa3e46396ad020f81f7077d3d028e2dd72d0392df0690ce000d99459d13f66e6fbe2a057a529b10c1b6f99dc5c2c9b03916a2c0f98a6bdc2dd3b6adc798708c8ce34d8adc4be01e0ddb7570e4f9d9508e661bf58e524fed6d5117a2f3d269230caaab7bcfe1f0a391e0ecce93915a66b8051f8d133703b69a93703a4a649a545cf522ffe87f8f45fdb4b429c3207a6a4e7a1e9deffcf7834eb9ed9c17f5ef2b2bd9e78e6cee2fb2861cf5ef4d6e3cca4179e42bbe181d39c286044638a026b634026d35bc9efd0c2602fa192502e67e1d68c5f88b7012069f23f26a1484ec0d6c9641820559c835ecd9646411916fb82e15719bc127226292452aa1f899bc361b8888e0ba03cd8410661b7fe0f8f1670fe55ccb80893a0de50a1f01153b918535ac6f736577c8ab2398373893b3abaef092494dcd68e9f82c96ac915ab877ee32a678799c53308bd964315888c83f37fd7945436d2b71961fcf003d2d7a994f9431344a66af265a6d22622972b5e422cc0f0a80ecb66866a22080c0a1aa063ef70b48fe88d58c9c90af391aa04d09430922ff4661fae3efdc12b5e7bee7a68f3d2f57adb1b159abbdcf8f3b8951e2fc4a4860cf8ff85985b1ca4f77dc6f637458c37674198886b1030e1b1f0b67e269be4914f9de69c8a86508f1c0ddd6fb479e7c84dcd1969c843a204dde320b3ddcedee3c727819f62a94ed684cb973c7b046c59e2b635a0260328094760f6d2fe32d532b570169d1acc062c2923714f20b56aea2ade0fa28a46e967f9247bc330e59a22e6d281aa904f799877e126e26bb5d487eb0ef3a9251f8afa1a96c21cb7f336b5b40ffc178bc673d4e8a05d2f48edbd1dcdbf07f3af38d273c4d4fbba8606ca7d40351077d266806680f3d792453e0f60474e387d72a2dabbe46836b6a4f4599cc4278f4b1ba70475d00a320d9962646addb825218f1cb5183aad1884824f55914d60ff1aeb70cc562831de274ff96f5c430a1809bfb669e98e30936d61b89684089ab1d3f11448348658395bc3f6ed1390d695dbfc65d2932b4f1583149c1bd0a74c9d919db3e17cc55c4113669a6d56c9950a7cc7c478adca5aae63e192a3ae15c337083c4f636d6dd16362353f58a98e7f5fe6607bfca8be7951d830f741ca73e1df2f0b7d85100941733c99fa4ab3423b6f05095de6bfda91f821654d0ded44fe811ad34972351aa431857e6f7bc5c0554cd55891282bd3f72f739f46438ad5d652a7d1ffd9c385188d"}) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x6}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0xd0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 2m5.690425588s ago: executing program 3 (id=1864): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x6}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0xd0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 1m50.587962045s ago: executing program 33 (id=1864): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"4b1f861206f1c06e90b2c72338119dbc7e6b8f0e0719620e6049c625f009ee8455226409e9778a9d788db3dcffe5f4b5d648636e747a2ce10bfdddf4c525c76c7240919ffaebd5115799f6a50b175733696f77cc47c81fdb4b5313c5c65ff36e9ca731fae47ec77917d2977f0830afccac702f74528a4d88635157beb63ea48bd5a2c4fa3e46396ad020f81f7077d3d028e2dd72d0392df0690ce000d99459d13f66e6fbe2a057a529b10c1b6f99dc5c2c9b03916a2c0f98a6bdc2dd3b6adc798708c8ce34d8adc4be01e0ddb7570e4f9d9508e661bf58e524fed6d5117a2f3d269230caaab7bcfe1f0a391e0ecce93915a66b8051f8d133703b69a93703a4a649a545cf522ffe87f8f45fdb4b429c3207a6a4e7a1e9deffcf7834eb9ed9c17f5ef2b2bd9e78e6cee2fb2861cf5ef4d6e3cca4179e42bbe181d39c286044638a026b634026d35bc9efd0c2602fa192502e67e1d68c5f88b7012069f23f26a1484ec0d6c9641820559c835ecd9646411916fb82e15719bc127226292452aa1f899bc361b8888e0ba03cd8410661b7fe0f8f1670fe55ccb80893a0de50a1f01153b918535ac6f736577c8ab2398373893b3abaef092494dcd68e9f82c96ac915ab877ee32a678799c53308bd964315888c83f37fd7945436d2b71961fcf003d2d7a994f9431344a66af265a6d22622972b5e422cc0f0a80ecb66866a22080c0a1aa063ef70b48fe88d58c9c90af391aa04d09430922ff4661fae3efdc12b5e7bee7a68f3d2f57adb1b159abbdcf8f3b8951e2fc4a4860cf8ff85985b1ca4f77dc6f637458c37674198886b1030e1b1f0b67e269be4914f9de69c8a86508f1c0ddd6fb479e7c84dcd1969c843a204dde320b3ddcedee3c727819f62a94ed684cb973c7b046c59e2b635a0260328094760f6d2fe32d532b570169d1acc062c2923714f20b56aea2ade0fa28a46e967f9247bc330e59a22e6d281aa904f799877e126e26bb5d487eb0ef3a9251f8afa1a96c21cb7f336b5b40ffc178bc673d4e8a05d2f48edbd1dcdbf07f3af38d273c4d4fbba8606ca7d40351077d266806680f3d792453e0f60474e387d72a2dabbe46836b6a4f4599cc4278f4b1ba70475d00a320d9962646addb825218f1cb5183aad1884824f55914d60ff1aeb70cc562831de274ff96f5c430a1809bfb669e98e30936d61b89684089ab1d3f11448348658395bc3f6ed1390d695dbfc65d2932b4f1583149c1bd0a74c9d919db3e17cc55c4113669a6d56c9950a7cc7c478adca5aae63e192a3ae15c337083c4f636d6dd16362353f58a98e7f5fe6607bfca8be7951d830f741ca73e1df2f0b7d85100941733c99fa4ab3423b6f05095de6bfda91f821654d0ded44fe811ad34972351aa431857e6f7bc5c0554cd55891282bd3f72f739f46438ad5d652a7d1ffd9c385188d"}) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x6}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0xd0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 1m7.249992565s ago: executing program 5 (id=2047): syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES16, @ANYRESDEC, @ANYRES16], 0x48) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r4, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000000c0)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r6]) lchown(&(0x7f0000000040)='./file0\x00', r4, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x64000, 0xffffffffffffffff, 0x3}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000580)=""/103, 0x67, 0x63, &(0x7f0000000680)={0x11, 0x0, r9, 0x1, 0xe6, 0x6, @multicast}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r8, 0xaea936cdb877fd21, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 1m0.418963734s ago: executing program 5 (id=2064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x12) gettid() readv(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 59.858702282s ago: executing program 5 (id=2067): capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd}) openat$comedi(0xffffffffffffff9c, &(0x7f0000001780)='/dev/comedi4\x00', 0x80000, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000080), 0x4) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) splice(r7, 0x0, r6, 0x0, 0x20000000000002, 0x2) 56.965909142s ago: executing program 5 (id=2078): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000500)={0x0, 0x76dd, 0x8201, 0x2, 0x101, 0x7fff, 0x6, 0x10000}, 0x20) bpf$BPF_PROG_DETACH(0x25, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006800e97800000400ffdbdf250a0000000000000008000500", @ANYRES32=r7, @ANYBLOB="9e4a93fec2ea27277c80893db14bd9b6de2acae931859e2fe21d140f2f513a99c18d39bbf8b08124159565f930f92d44c8b52f8e47fc4d4d136c9e1b01"], 0x20}}, 0x8040) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 55.952041868s ago: executing program 5 (id=2080): capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd}) openat$comedi(0xffffffffffffff9c, &(0x7f0000001780)='/dev/comedi4\x00', 0x80000, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0022070000008348b603de3cc17b95117ae7ffec9979be956654c30e45fbc6420e4044999c9d547d9b1645509d9ba9c0463439f13920ca110461b649ea93fe138e124dfdf5c62476c83970c5b59839a276cf785d66f8ef977922781170eafd5c161853fe33fd3c91e0d8e9782a96545d4d8c70daae5314fc099485a2ae2ddddfb5c5c9"], 0x0}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000080), 0x4) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) splice(r6, 0x0, r5, 0x0, 0x20000000000002, 0x2) 54.744322234s ago: executing program 0 (id=2083): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x0, 0x0}) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000240)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x40) accept4$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80800) 53.232493991s ago: executing program 6 (id=2084): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32, @ANYBLOB="80007f0a0a00f0ffffffffffffff0000ff87504c407de9c104ed8e36729caaecc34500"/45], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 53.115468088s ago: executing program 0 (id=2085): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ptrace$getregs(0xc, 0x0, 0x7, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffefffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 52.520088903s ago: executing program 6 (id=2086): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x0, 0x0}) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000240)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x40) accept4$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80800) 52.473944008s ago: executing program 0 (id=2087): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe2981) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2a, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB="189eca7b4320cc0c07834e0e6d7c7a54b0ce2afe3a7c44e4c8808ef3667b5e0ab9711dfcbced0608b80cf9856105df027f84f720df1031ef24", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000183000000200000000000000000000008500000064000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES16], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000"], 0xd0}}, 0x0) socket(0x10, 0x803, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) acct(&(0x7f00000001c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 49.155032777s ago: executing program 0 (id=2089): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000000)='erofs\x00', 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 49.116081282s ago: executing program 6 (id=2091): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000500)={0x0, 0x76dd, 0x8201, 0x2, 0x101, 0x7fff, 0x6, 0x10000}, 0x20) bpf$BPF_PROG_DETACH(0x25, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006800e97800000400ffdbdf250a0000000000000008000500", @ANYRES32=r7, @ANYBLOB="9e4a93fec2ea27277c80893db14bd9b6de2acae931859e2fe21d140f2f513a99c18d39bbf8b08124159565f930f92d44c8b52f8e47fc4d4d136c9e1b01"], 0x20}}, 0x8040) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 48.941896351s ago: executing program 5 (id=2092): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"4b1f861206f1c06e90b2c72338119dbc7e6b8f0e0719620e6049c625f009ee8455226409e9778a9d788db3dcffe5f4b5d648636e747a2ce10bfdddf4c525c76c7240919ffaebd5115799f6a50b175733696f77cc47c81fdb4b5313c5c65ff36e9ca731fae47ec77917d2977f0830afccac702f74528a4d88635157beb63ea48bd5a2c4fa3e46396ad020f81f7077d3d028e2dd72d0392df0690ce000d99459d13f66e6fbe2a057a529b10c1b6f99dc5c2c9b03916a2c0f98a6bdc2dd3b6adc798708c8ce34d8adc4be01e0ddb7570e4f9d9508e661bf58e524fed6d5117a2f3d269230caaab7bcfe1f0a391e0ecce93915a66b8051f8d133703b69a93703a4a649a545cf522ffe87f8f45fdb4b429c3207a6a4e7a1e9deffcf7834eb9ed9c17f5ef2b2bd9e78e6cee2fb2861cf5ef4d6e3cca4179e42bbe181d39c286044638a026b634026d35bc9efd0c2602fa192502e67e1d68c5f88b7012069f23f26a1484ec0d6c9641820559c835ecd9646411916fb82e15719bc127226292452aa1f899bc361b8888e0ba03cd8410661b7fe0f8f1670fe55ccb80893a0de50a1f01153b918535ac6f736577c8ab2398373893b3abaef092494dcd68e9f82c96ac915ab877ee32a678799c53308bd964315888c83f37fd7945436d2b71961fcf003d2d7a994f9431344a66af265a6d22622972b5e422cc0f0a80ecb66866a22080c0a1aa063ef70b48fe88d58c9c90af391aa04d09430922ff4661fae3efdc12b5e7bee7a68f3d2f57adb1b159abbdcf8f3b8951e2fc4a4860cf8ff85985b1ca4f77dc6f637458c37674198886b1030e1b1f0b67e269be4914f9de69c8a86508f1c0ddd6fb479e7c84dcd1969c843a204dde320b3ddcedee3c727819f62a94ed684cb973c7b046c59e2b635a0260328094760f6d2fe32d532b570169d1acc062c2923714f20b56aea2ade0fa28a46e967f9247bc330e59a22e6d281aa904f799877e126e26bb5d487eb0ef3a9251f8afa1a96c21cb7f336b5b40ffc178bc673d4e8a05d2f48edbd1dcdbf07f3af38d273c4d4fbba8606ca7d40351077d266806680f3d792453e0f60474e387d72a2dabbe46836b6a4f4599cc4278f4b1ba70475d00a320d9962646addb825218f1cb5183aad1884824f55914d60ff1aeb70cc562831de274ff96f5c430a1809bfb669e98e30936d61b89684089ab1d3f11448348658395bc3f6ed1390d695dbfc65d2932b4f1583149c1bd0a74c9d919db3e17cc55c4113669a6d56c9950a7cc7c478adca5aae63e192a3ae15c337083c4f636d6dd16362353f58a98e7f5fe6607bfca8be7951d830f741ca73e1df2f0b7d85100941733c99fa4ab3423b6f05095de6bfda91f821654d0ded44fe811ad34972351aa431857e6f7bc5c0554cd55891282bd3f72f739f46438ad5d652a7d1ffd9c385188d"}) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x6}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0xd0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 47.787716235s ago: executing program 6 (id=2094): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x9, 0x10000}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0xffffffffffffffff, 0xa4, 0x8, @scatter={0x7, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000180)=""/222, 0xde}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000380)=""/82, 0x52}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/86, 0x56}, {&(0x7f0000000580)=""/253, 0xfd}]}, &(0x7f0000000700)="bfc12c815e5734356db703b40e8e3e3fcf94ffcf511677204b6163e25f927a32bdea51da814bbecb40a918de7b187fb8988ea0b11855a70938004834fe27144e58a1db0c622bc4b62b2ab111e21fbf91b991fbccbd4b776786836d326e1027641dc8462111c011907858565cdc7c2800d7b386c7eee54a55bae7fb3df644bc7d211869cafa3d194fdb07e6a8457643cf7ae04818f52fdc5823cf514d480928234ee02295", &(0x7f00000007c0)=""/225, 0x4f45, 0x0, 0x3, &(0x7f00000008c0)}) r1 = dup(r0) tkill(0x0, 0x8) syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x2200) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000009c0)={'\x00', 0x6, 0x6, 0xfffffc00, 0x3, 0x3, 0x0}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) r3 = memfd_secret(0x80000) close(r3) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000a80)={0x2, 0x0, &(0x7f0000000a40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000b00)={0x5, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000bc0)={&(0x7f0000000b40)=[0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000c40)={&(0x7f0000000c00)=[r4, r5], 0x2, 0x80000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={0xffffffffffffffff, 0x0, 0x2, 0xfa, &(0x7f0000001900)="c718", &(0x7f0000001940)=""/250, 0x99cd, 0x0, 0x54, 0x42, &(0x7f0000001a40)="0d12c2c20ecf9935355654be631f38ad9f3586d976159bed791c9ac504ccccbaecdc841f610527cae6506030ab8b5eb721ac04394ba606d1c70ce079fa63247da5c8aad3c6b9768633dd3d347498351c0383da51", &(0x7f0000001ac0)="80d0e82d18ce9518048888946df5fc0625bb34252ae38c055069bbe6f5bee49d61772594b335e85bd0d48af739d6af312c46f1290e883dfe2eb5daf6f6c467dc5204", 0x5, 0x0, 0x5}, 0x50) syz_emit_vhci(&(0x7f0000002440)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7, 0x0, 0x2}}}, 0x8) 47.465128096s ago: executing program 6 (id=2095): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x6) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0x6) 47.452132218s ago: executing program 0 (id=2096): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000440)) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x18) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) readv(r11, &(0x7f0000000000)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x2) 45.385492511s ago: executing program 0 (id=2099): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x6}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xd0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 45.38435397s ago: executing program 6 (id=2100): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x6}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0xd0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 33.794894635s ago: executing program 34 (id=2092): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x6}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0xd0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 28.814976464s ago: executing program 35 (id=2099): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x6}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xd0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 28.692770839s ago: executing program 36 (id=2100): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x6}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0xd0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff00000000a4040000000002000f030000000000003404000001ed0a0014040000170000801c400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc0700bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c398ab724577fd742bf44cdd8489086e61aa3cb1d3ab3dac8183102fe6fc8a038e386"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 14.219575524s ago: executing program 9 (id=2184): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = socket$inet(0x2, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x10, 0x2d, 0x25, 0x10, 0x1604, 0x8005, 0xcea8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x3, 0x0, 0x32, 0xcd, 0xda}}]}}]}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xe26, 0x101400) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0xc0045520, &(0x7f00000000c0)=""/92) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r4, 0x6, 0x4002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r7, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r7, &(0x7f00000008c0)}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6cad94b8ff353033a019f48b89625797", @ANYRES16=r10, @ANYBLOB="03022abd7000f9dbdf254400000008000300", @ANYRES32=r11, @ANYBLOB="0a001800030303030303000008006b0006000000"], 0x30}, 0x1, 0x0, 0x0, 0x400c084}, 0x4000) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) 14.146048277s ago: executing program 7 (id=2186): socket$netlink(0x10, 0x3, 0x12) gettid() readv(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 13.014692711s ago: executing program 7 (id=2190): sched_setscheduler(0x0, 0x2, 0x0) getpid() ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r4}) keyctl$link(0x8, r4, r3) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='wlan0\x00', r3) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x440) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) 12.383323888s ago: executing program 7 (id=2193): mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$getregs(0xc, 0x0, 0x7, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffefffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) read(r1, &(0x7f00000000c0)=""/54, 0x36) 10.887490371s ago: executing program 9 (id=2194): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x20000808) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0xfe77) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x35}, 0x28) sigaltstack(&(0x7f0000000040)={0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004340)="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", 0x2000, 0x0) sync() socket$inet6(0xa, 0x80000, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f00000000c0)={0x8, &(0x7f0000000000)=[{0x7, 0x8, 0x0, 0x7}, {0x6, 0x3, 0x9, 0x1}, {0x5, 0xcb, 0xe, 0x5}, {0x401, 0x3, 0x9, 0x4}, {0x6, 0x6, 0x7f, 0x30b4d1d8}, {0x8000, 0x9, 0x81, 0x10001}, {0x5, 0x4, 0x7e, 0xca8a}, {0x6, 0x9, 0x6, 0x7}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003c40)=@newchain={0x1ac, 0x64, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x5, 0x10}, {0xf, 0x2}}, [@f_rsvp={{0x9}, {0x17c, 0x2, [@TCA_RSVP_ACT={0x178, 0x6, [@m_connmark={0xcc, 0xe, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x0, 0x76, 0x5}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1ff, 0x3, 0x0, 0x6}, 0x1cb1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc60, 0x7, 0x4, 0x7, 0x8}, 0x9}}]}, {0x45, 0x6, "bd75706d89ac21e4efa146f8edc9dc74a264135d8be0a15b03b916d2ec926ace8d391e40b7cbcd8dad534b781c86c08e7b433e52df8726554d80eb351982d458c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x78, 0x3, 0x0, 0x0, {{0xc}, {0x4}, {0x49, 0x6, "56e43759954cbeea87a923de98e2286fbcc56acf6b12b311659ef7ea84341210e79a3e6a663ab7df7ca60c9677283b702a416de45c8f60e3ca26f96557c73a5f780d5b0c43"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_police={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x810}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x40, 0xa, 0x16d}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sync() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r4}, 0x18) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60122d9200103afffe8000000000000000002300000000bbff0200000000000013000000ffffff7f880090780101ff000000000000000000"], 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) 10.84075315s ago: executing program 7 (id=2195): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 9.762677754s ago: executing program 7 (id=2201): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) r1 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0x0, 0x101c, 0x4, 0x0, 0x0, 0x5, 0x4}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x4) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) preadv(r5, &(0x7f0000000500)=[{&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000800)=""/187, 0xbb}, {0x0}, {&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f0000000240)}, {&(0x7f0000000440)=""/138, 0x8a}], 0x6, 0x1, 0x76) ioctl$UI_DEV_DESTROY(r4, 0x5502) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x68754fc43003c9b8}, 0x4004080) syz_open_dev$tty20(0xc, 0x4, 0x1) 8.651353483s ago: executing program 8 (id=2204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syslog(0x2, &(0x7f0000000dc0)=""/8, 0x8) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000240)={0x24, @none={0x0, 0x2}}, 0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) syz_usb_connect(0x2, 0x35, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff70790008240206210126ff0905", @ANYRES64, @ANYBLOB], 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x7}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_PHYS_SWITCH_ID={0x1d, 0x24, "72150ab375db07ed48d30a1f9b0c2509fd2fd881592a830303"}, @IFLA_WEIGHT={0x8, 0xf, 0x1ff}]}, 0x74}}, 0x4004080) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x3180, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x9e, &(0x7f0000000780)={&(0x7f0000000440)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x70bd2b, 0x0, {0x2, 0x10, 0x10, 0x0, 0xfe, 0x4, 0xfe, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004a040}, 0x4010) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x3, 0x88, 0x0, 0x0, 0x6}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$int_out(r7, 0x5466, &(0x7f0000000200)) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r9, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffc91) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x2000, @fd_index=0x9, 0x7, &(0x7f0000000180)=[{&(0x7f0000000080)=""/188, 0xbc}, {&(0x7f0000000140)=""/17, 0x11}], 0x2, 0x10, 0x0, {0x0, r8}}) 8.426997997s ago: executing program 9 (id=2205): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180400000000000400"/21], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001600040026bd7000fbdbdf25165c11560a0088ff", @ANYRES32=0x0], 0x18}}, 0x20040800) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$can_raw(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0x2, 0x1, 0x0, 0x0, "054cded48f95b7b5"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xbab3fa9a080f6fe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000280)={'tunl0\x00', r5, 0x700, 0x80, 0x8, 0x3, {{0x1c, 0x4, 0x2, 0x39, 0x70, 0x67, 0x0, 0x81, 0x2f, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0x14, 0x45, 0x1, 0x0, [{@multicast1, 0x7}, {@remote, 0x8}]}, @end, @lsrr={0x83, 0x7, 0x22, [@dev={0xac, 0x14, 0x14, 0xb}]}, @generic={0x58, 0xe, "bbbdcfa499d5263f9a7c751a"}, @cipso={0x86, 0x21, 0xffffffffffffffff, [{0x1, 0x9, "41036f3f9f679e"}, {0x7, 0x4, "b8fc"}, {0x6, 0xe, "45b9ab6716f268cd7350d268"}]}, @rr={0x7, 0xf, 0xb2, [@loopback, @remote, @multicast2]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17000000070000008c00000001"], 0x50) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r12, &(0x7f0000000000), 0xd) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000180)=0x2) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xc1, 0x3}}, @filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffffff}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e24}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_CHAIN={0x8}]}, 0x98}}, 0x24044094) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xfffffff9, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) 7.91241561s ago: executing program 9 (id=2207): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd9b6640da0b7681d98c0102030109021b0001000470000904e10001a049e3000905060eff031c0706dca460db5bd41e076ac2fcf72b79a32a6f7db0be085a6cf0d24b130e94ce6418672a48f44d51ab333932266862a1577378b741ab2e04a35eaffd3b8a3aa594cc23f305a758c2e8d5d6c3c3612e0d5af731a362b7a9b34988348ff92e00f452066c1090b47b36eb7037b0b35d30692d6b9fb5c7883cf042a716b30445792b7c7923a94cece7e5e61c9856037329abf6805c623884d6f78b80655e3b4949fd6ac2e936d620d48d78d3250b000000206add5ddbd7f0"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000012006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040012000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5500f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = gettid() r2 = fsopen(&(0x7f0000000380)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000500"], 0x0, 0x37, 0x0, 0x9, 0x1000}, 0x28) socket$netlink(0x10, 0x3, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r4}, 0x38) unshare(0x20000400) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r4, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) fsopen(&(0x7f0000000040)='incremental-fs\x00', 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) migrate_pages(r1, 0x7, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0x1) 5.358295613s ago: executing program 8 (id=2212): socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000180)) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04221d02aaaac2aaaa12f5066686b1060002aaaaaaaaaa1040f9064ee000015e"], 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r2) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, 0x0) r4 = dup3(r1, r3, 0x80000) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f00000000c0)={0x1, r5, 0x3, 0xe96e, 0xaa, 0x0, 0x61cc, 0xd9ba, 0x8ab}) syz_usb_connect$uac1(0x5, 0xbc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3f, &(0x7f0000000000)=@string={0x3f, 0x3, "fdaea8dd649282241e25b70942c4a8198ffda01fc6983cda504e41fbcb08090b5910aeff7a1b5590c92a907d9d35f8806bcbd0f1b895a00e7c9383c21f"}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @empty, 'geneve0\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000001c0)={0x18, 0x0, {0xfffe, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x0, @local, 'veth0_vlan\x00'}}, 0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x1, 0x1}, 0x20) sendfile(r9, r9, 0x0, 0x38) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001640)=ANY=[@ANYRESOCT=r4], 0xd8}}, 0x0) sendmsg$NFT_BATCH(r11, 0x0, 0x2c040870) 5.082714204s ago: executing program 2 (id=2213): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open(0x0, 0x40, 0x22, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) close(r0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff0b) ioctl$SIOCSIFHWADDR(r0, 0x8b18, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000000c0)=0x565, 0x4) sendmmsg(r4, &(0x7f0000000000)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)}, {&(0x7f0000001c00)="659900c3f7c8e544e1abc41796cae4c9908368acb3abdb908ada84b1c98b91c34352f80ed64e4606a25bcbab94869ac816a7fb9c29a8c768fbffb21ad7f6013ff676da589c2e0865cfd321543070c3dd36bf94deb1d137c220d9c559dd61fb2c8732b6ce023b635b5901ebe508133aeadc8f8f93a2198784aab8ae715ee249968c0429cc80bc8c85c985f4f5f04e3acb0ef2a012f59c82dca7d69dcecf011b0a44b1889cfdfa123ccc8c0cb6469c806560c7681f0c3cae69aeabd2fc80d666e8dd7962495507461967b881a6a840a22962f95d55a722cb40221b16e6a6482bab54591aec3770e27a80974d3e41795c35f7300c2ba523e8486dbf6d7988e56396d13f0c079d856946c3ef2a3aaa0dd0bce7389bfd2c112bed2c5e1ae45ae2be5624016a96be54a1e876acd47e6f3ea1e11f919a12c0db1885930d03ce0d622b1e8ed1bbef406bab5f09a6066b2c1fbc9ba713bf76930cf84520fbd9e3f550b8ea4473b30de57de284951111b723ec7c55d5b9b57022411357766680c60cb193ab17c680e44ebc39a149aba5d5c5d26b021e8275523e832018584a067c1a49a3ea9937d90ce4f04bdcacbe1e3c2dbed7aeed1d85714c7d29c7cbe8fccc9cc9d3bfa4dc80954c69ec3e5abc686ce1735726ef792fe7ffe003fedd7b9a478162e5a33a40014f2dd3a97231df13aa79463896dc0754336e79bd98afad2a36e6efbb4803d543d347cd5b80e4c0fd5333724465f6eddbddb6a176c522347195d64238aa7c6b373d172161f97d267f90fab6a941ddc7670061da257fd46a29919668c492f991e1a16be25638e41c7453d1a40b92a75b07f330a6e07b4b0850989f343998022c5cdb7d7473de1f67ce2ec2ddf0ff6e945dab94bed1abdb959995098a4ad8ca467208febec562fe7c06a8cec88cbe6847b6b24212144da679aa521263aa8c152535a0fbc67dccc7116278f8da118147e9efeb799f37ecde26d9aa2e158bde1bb36bb67218fc9d29eb5ee1a4eb87adb0d9a2c8b6cd04e0d6b3b04f347022afd3ee96f6092dc74e2a09e42a1846afa48c65cd83d2718b95bb2df495da53f6ecafaf5149cfade2ac94517c4765a4522e81b58924bc6471d266541b0f6cf44f0ff636092cb6bd7d2a995b21df583630e4fdbbde7da4da19d6786b9ba3d9c1df5fe2618414940d25d82561fd9bf7b39f704355a51621a86b0bf39dbcc305bd87c4542ac3f852962fc5dee1da8fa4a6d1bf0149f04c06b81f81aedb4f07c9bf0a022a5cc0bcc57819b46931b99b00a0489e79b2bc1edc7d2d0404e09c9742e08867d7eedbc3b511207678c5087c0e01a41538742fdca667f39d8962b876386f6d1d798d09eac55c9587a4c86b4d5e3cfb08c0a0487cc7293ce91a7ec11896140ec8c0074f09497dd9b67382ca77d019bedfe97437429bdff299ba2d27669f6a8533c4a4be188a4e8cd439a6c72b6fe737e7388c5b10680bdba183433e99ccd6f0cf584980712088013aa625f9f78f0141b9fc3491c594229ef182c04a9b0e403511e8fb985918eb5c7bbc1ca5dca429efb209559363283f866c10bb3e05ef2a21182edc045341578e5ac63ba19206d804541fd40e84f5a6c9a20a44d8c76a815c7336c66c24bd9c8e61b95857ba3f06d72b6324d9e63c5672cf5dab0e8002000123c3f98626486e1396c897d92e79e34c6abd10d3f86a968c6b7ec95da7b04799a6419550ad511a45120457907a54296edbb1d7389da99608701c3e5e74d7a814c54e33a8473a8c8c3a6520268fe022d2771076ba921b5dca80301ed5ddda7aa5d3051e15330819abb9ab1da62041b1ebcd1cb38f37b7c13b6afa1351f541fac5539aa442ce2864a9048ce224e2855483a1a8fa12373f2568d7ee56752e67b2b115a7922a9af25c71c9fb67ea62e2bde4c176b57f6bcaa38117a9b0b2802f9b169e615a9e62100aeb1bbd8d03a3a94258a3ceb800c0b7b22af4afe24b0d8656e8fb8b2800c54173d063fd2c2330fe9b66592e144410ffd77207cd55fc317c1e66b98de7396ef3622f98305a460533a17145786910a7cfb3790734855adfeb01a8a0948108258e9a5b6a4d5958024d82079bf032e15666709cf4ed535f5a3a5f2b99377294fe16c24a72a1d6d95e151f478e770b5284c46890901b02b8696f688aa965ec3a70a33bd44346389ae3de7e8fdd4834fabc9afbb6341c6493de8faecf655a259e55944c48e0336660af313d0286f3e221092c0e4dc3834efabbf6931c44a8f8045bb418dbdc5ab9cd454726919a8aded5c679e5f62cf622ce8acd67f0a86634ce09b95677babe70dc216767824e2bbd6b066eebab6e5efc26d07a9a11b0ec4f2a2049b8edd01aa9dada0fc70fe52f1cee95e8df64532348c7317033ac4f54c76e5dfc5b532e237231a15b6bd0700f214a61ad7ace3f546e5f363055ba9f217cbc51ff5d0e4042d51761b8f055c775a305fdcb583c66ae2520c384aaf63d625c569ef2f4d2554d440e9e61118b8fbe1159d0558992a71db056dc5f16430b87fd329af2d7fe5928f430324dbbd247b938e4a4062fa7530da3e04a2b7824d17298e24bd7df0eba8caddfe808fe8a813c93c348eb9cbd651e92da3757450251ba9b2a5c96839fb3e3aadddbddc90a2dbb638b1fb87f990cfa2f96a8bfedf997b89f12dddf259fa1499c430f3cb8340c5cf66c85caf5c172cd0f651d1c2dba1cf26d8b936b17f0385183dfab24fd3bbaabfe866946b290dc278fd8418dc0ddb7785ab7e0f259a85fba0eabaaee55f52305d33339007e73fcded5f2613c710a32caad845b6c99958ccd5712097889f98858223d74042952bd238ee39eb7a1ebe0f0766946709cbb3a92d1551e5feb042452a76c557665fc9fab49768abcc7cb1977f7804d328421c30264b68a7ed05cbb7497a5014e6cdf32df82d41b33f55c67c9c15e723f629af4ac66a62ecc3214140354ef48bc73d3fb0eeb0719473498c2f3d192da0b360e5f3bf8f1ef579ed37a5d0c20eec42714bab59c134d4468736f19f5d32f5b8dc3df45941275264fca42ccb35cacd9965abb06dd7bd3bd0b1d8f32fb4b00d213d5f5d82ebf975b1fb4aeff137783f8b8da73864c3ed63f4142e4b3af5a3b82228eeb95f5d51f671f5b67964d2131c5e8869f8289997811dffe5b58d3dded907839316dbbf75ac8bebf35f036b4f2471808f389f3288ca48a3ae5d78343872df2fa6c67fd69f366c7861bfdde0b5126d5efdf825a03c6520b3a59ecc00469b0c9941f12ddead1f58d37da3ac1582ec701c47532629ae7e038707e3831e9a45f5cad2108f6e48c0c89bdd10bcebf29cb7cc84819cc292ad9c26f767159f2e13d8fc920401c8a682ad3c356d44ca1e7639ddd2c0f92d450069aaa5b778fa713c6c3813cafe6cf610916b02da8fd9ada5e02e0d08326df3dee4b203ddaaeff338be751e769e5c583d1488c5a22f644369d9079f387b36516dd5d706e4a29700d07986cbe1d64271ca0496ffd483fcf12ba1c2e891a2c9d940c61b61406a82a0157648acf3bc598d53046ec5a51c459a8e251ea0641d3d9148883dbb2a27cca1f0937505977689f4c89e045e6e45eec8939bece21fc3f3ff6b3437efe76b4bffdabcf34aaee2d04f21b482e3f2d20f904e723c572f5053e2642ffbf0287be1dc5c75c8e91cd446b1370d9c1c8a076a5eeceb11ad0b0ec959c2df769ae47751530c587b65b1a6feb8915dde7c11ddeaf6947392f746ab6a74630f5ec3a4d5499d46b8561e091c61c522063561ef31d91f680a5f660bf84020257657e79ef0670d93cf9f78c362954ac6f02602492c9f6bca75fe35fd371fe0db76a0a802bb5d04f6cacefb4ec79a3bdb5b0d7ce7b6b1734351b52225a31b16b8414b988f31c6e2aa07efc741e2ca1c3e4d7a382c863540497b12090acb69956e14ed51e569dc52bbbb747c335006a34333c32dac619ffc2d7e3abd7a5b53fde8eccc4f8963e996fabc8a96416d15fa7150faa154b97e685e6316fb73387a616d11aa486120a0d897c2055332eed5f07e50234b0383cb164ddd0501785f5d0109dabbf994be4fdd3e0c81e82cd19dffb63b312678d53c63c05b46739b61e363d944f36d48222476032db59415254879cd368d027fca68361d630fa93422badfc8b91e18e4fdcc2f0532dc7ff57a4100e8b15368a47af303c550542105860542d6fdf78d17e85ab334b7080237c5dd928e07ac0dfcdcd9c34ed4ad8ff47c0c9aa585f0c4f5d227eddf8b65802082a93bb82344162868df6cd2d804e7f9afd6a900f04157e30c796e0ece9998975723a6a9e6ea9f8159ad362bc35abcf779a174791a4aa7c043627075a44a1c93ccdd1df28fdc90d376551548bda51c390b4666c08cc23b1bd76993de97001aa7ccb5dd75dbd74f64b6bb2efdb672797060701e78bc1b5d72c025bba9c2d29c78024425af0e291a3f7386d3791aee91bc20d0f933ee2b2881c4c51720b3a5f5567ba105286c38f64f47b262f83f84e4f46907bca9c936b57e5196b4bbd64c1c8d7ae3e1ed64c598204f5cb90a26efd77ebec403e06f5c37eff5ddff5c30c615d8044e96a0b57a196af2deef36d7be5eada24a40a1eccb50e3466a208b94e2b69c66413ea0dae7eff6cef18fe83ee1717860b2cea2001ad3168f76733c6240c84a9eea9da926f29a74827843d40cf486dfb737ff1d4a9eed5ade6ea400eabea97481a58cdf8697225e71c6b5d22ad66fcfbee3955f3e186bc29a690f1d2874e70f032774a43ac4eec14117a31ef0a00ad6115223e2532dcca9310976ea7222a5c97703b3424bd9c7cf12bc5339d4705cf7dbf03d126b4da27e291a719ff3b1300ed21b425a2e8f7fd2002d137a47af192dd0dd1e26c2a49a16e0204a34fd92b7c3ca69861cdd143a494977e481b0e7c46bea8bedbc995e5a56702c9ab59c0f0cb90cae7a4f2185d50d1c699e4aa2a45177bb6827eb9422b23b8f78d20cec6bc373f62c07872eef3b1b4b7c77838b4e26e9573609f7bef3dcedc2fdf6c2c4aee6ebb9719b8ff578cf5e09933bc39083565e4fe1c18b90b40a72cf45bcfaec0f2c5cad49c606c9588bba24a1ad78be7ab315811c4b02c04b8d04866fa64147bb06f268ea9bc8a35440c4a1f73bd712107e86d5ac2864f592b7fb3aef2661a889475209c80c1adcf2bf165667253a452f1a2f7afb8cdd9ce3aa0b2193220773f11429d4e9f2bcef0c2128d34e632f351fea3b4538dbdf1c699b573b93fbba7a5256e5e3ae42e9fe120940d21f1e00b777031833e8d232283a86fa7ef511a7645d6fc6b0102aebe5b39ddddd4395a5a43dcb2d8a05d2587a4a1799d2239a51e097fadd28b09084148a6209edf2611181c1503c8bb2c5d0bde46d9cb200285ddfa7cb91cd49237ebd57241c3a7bf81da2ac1d95bfcd61faec3d58b52c08ef6c99a65b5a9ce6827705ba1f0d51ae7c84b93abcce96fdfbb2d21a3bc224552d326b65171956cfbd25faa0425bf61647d522b93367a5379c9bd3766ac03b15339e17ea5b0d7173455f6780073a637e8323563f58fe99f8d556a9ba4d8d84fa781ff8eea39bc4f7cb1364bf422bc1e7755cedd3c0c30d6a4930d54adebb81d26b9ba41c1eed62c9ed16a3fb2adc7eeeb2ec6a753878480790a617cacb3a5a590990236d308a2be73b1e1beff9a9b6c22ef627c1453bc6fd2296399821c6f85ed38966d43c9d48dc5000e7fa2c27b6e59dd20109c5cbba36d7532", 0xfdd}], 0x2}}], 0x1, 0x24044015) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/110, 0x6e}], 0x1}, 0x2}], 0x1, 0x2002, 0x0) 5.032341566s ago: executing program 7 (id=2214): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0xd0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 5.030053034s ago: executing program 1 (id=2215): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180400000000000400"/21], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d0000000"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001600040026bd7000fbdbdf25165c11560a0088ff", @ANYRES32=0x0], 0x18}}, 0x20040800) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$can_raw(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0x2, 0x1, 0x0, 0x0, "054cded48f95b7b5"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xbab3fa9a080f6fe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000280)={'tunl0\x00', r5, 0x700, 0x80, 0x8, 0x3, {{0x1c, 0x4, 0x2, 0x39, 0x70, 0x67, 0x0, 0x81, 0x2f, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0x14, 0x45, 0x1, 0x0, [{@multicast1, 0x7}, {@remote, 0x8}]}, @end, @lsrr={0x83, 0x7, 0x22, [@dev={0xac, 0x14, 0x14, 0xb}]}, @generic={0x58, 0xe, "bbbdcfa499d5263f9a7c751a"}, @cipso={0x86, 0x21, 0xffffffffffffffff, [{0x1, 0x9, "41036f3f9f679e"}, {0x7, 0x4, "b8fc"}, {0x6, 0xe, "45b9ab6716f268cd7350d268"}]}, @rr={0x7, 0xf, 0xb2, [@loopback, @remote, @multicast2]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17000000070000008c00000001"], 0x50) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r12, &(0x7f0000000000), 0xd) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000180)=0x2) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xc1, 0x3}}, @filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffffff}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e24}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_CHAIN={0x8}]}, 0x98}}, 0x24044094) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xfffffff9, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) 4.565443607s ago: executing program 9 (id=2216): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r3, 0x5452, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 4.396377238s ago: executing program 2 (id=2217): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0xd0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 3.789446804s ago: executing program 1 (id=2218): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setpriority(0x2, 0x0, 0xb0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004340)=""/102376, 0x18fe8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 3.568933281s ago: executing program 1 (id=2219): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r2, 0x7}, 0x14}}, 0x0) 3.5359945s ago: executing program 1 (id=2220): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x40080) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000002c0)={@private1, @local, @local, 0x5, 0xb, 0x0, 0x100, 0x4, 0x0, r8}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x42, r8}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d000100006000090400800203000000092106040001220500090581032000090807"], 0x0) 2.543889554s ago: executing program 9 (id=2221): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d0000000080211000001"], 0x3c}}, 0x10) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x101) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x3, 0x4, 0x9, 0x1, 0x1}, 0x50) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) write$proc_mixer(0xffffffffffffffff, 0x0, 0x9f) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x822b01) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 2.368516045s ago: executing program 2 (id=2222): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.339546693s ago: executing program 2 (id=2223): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) write$khugepaged_scan(r0, &(0x7f0000000140), 0x8) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x3}}, {{0x4, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x4}, {0x3, 0x1, 0x0, 0x1}}], 0x30) 2.267210363s ago: executing program 2 (id=2224): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) 2.266212462s ago: executing program 8 (id=2225): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000140)='4\x00', 0x2) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hopopts={{0x58, 0x29, 0x36, {0x5e, 0x7, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x3, "2bdb86"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x208}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x2d, 0x2c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.117636956s ago: executing program 8 (id=2226): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$getregs(0xc, 0x0, 0x7, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffefffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) read(r1, &(0x7f00000000c0)=""/54, 0x36) 1.719276148s ago: executing program 8 (id=2227): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x64000600) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x100000}, 0x20) 744.737229ms ago: executing program 8 (id=2228): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setpriority(0x2, 0x0, 0xb0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004340)=""/102376, 0x18fe8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 665.436214ms ago: executing program 2 (id=2229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r3, 0x5452, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 423.724223ms ago: executing program 1 (id=2230): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeee8000}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d0e, &(0x7f0000000180)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) r2 = syz_open_dev$audion(&(0x7f0000000080), 0xfffffffffffffff9, 0x404201) write$evdev(r2, &(0x7f00000000c0)=[{{0x0, 0x2710}, 0x5, 0x7886, 0xbcd}], 0x18) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 0s ago: executing program 1 (id=2231): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setpriority(0x2, 0x0, 0xb0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004340)=""/102376, 0x18fe8) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0xc, 0x0) read$msr(r6, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, 0x0, 0x2, 0x0) sendfile(r8, r8, 0x0, 0x38) memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa0 [ 636.028606][T12663] dump_stack_lvl+0x16c/0x1f0 [ 636.028627][T12663] sysfs_warn_dup+0x7f/0xa0 [ 636.028652][T12663] sysfs_create_dir_ns+0x24b/0x2b0 [ 636.028679][T12663] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 636.028702][T12663] ? find_held_lock+0x2b/0x80 [ 636.028728][T12663] ? do_raw_spin_unlock+0x172/0x230 [ 636.028750][T12663] kobject_add_internal+0x2c4/0x9b0 [ 636.028774][T12663] kobject_add+0x16e/0x240 [ 636.028794][T12663] ? __pfx_kobject_add+0x10/0x10 [ 636.028818][T12663] ? kobject_put+0xab/0x5a0 [ 636.028844][T12663] device_add+0x288/0x1aa0 [ 636.028868][T12663] ? __pfx_dev_set_name+0x10/0x10 [ 636.028893][T12663] ? __pfx_device_add+0x10/0x10 [ 636.028921][T12663] ? hci_conn_add_sysfs+0x88/0x230 [ 636.028941][T12663] hci_conn_add_sysfs+0x17e/0x230 [ 636.028958][T12663] le_conn_complete_evt+0x1260/0x2150 [ 636.028989][T12663] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 636.029014][T12663] ? hci_event_packet+0x459/0x11c0 [ 636.029046][T12663] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 636.029074][T12663] ? skb_pull_data+0x166/0x210 [ 636.029100][T12663] hci_le_meta_evt+0x357/0x5e0 [ 636.029114][T12663] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 636.029142][T12663] hci_event_packet+0x685/0x11c0 [ 636.029167][T12663] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 636.029185][T12663] ? __pfx_hci_event_packet+0x10/0x10 [ 636.029212][T12663] ? hci_send_to_monitor+0x28/0x4c0 [ 636.029239][T12663] hci_rx_work+0x2c5/0x16b0 [ 636.029257][T12663] ? rcu_is_watching+0x12/0xc0 [ 636.029284][T12663] process_one_work+0x9cf/0x1b70 [ 636.029316][T12663] ? __pfx_process_one_work+0x10/0x10 [ 636.029343][T12663] ? assign_work+0x1a0/0x250 [ 636.029365][T12663] worker_thread+0x6c8/0xf10 [ 636.029400][T12663] ? __kthread_parkme+0x19e/0x250 [ 636.029428][T12663] ? __pfx_worker_thread+0x10/0x10 [ 636.029452][T12663] kthread+0x3c5/0x780 [ 636.029472][T12663] ? __pfx_kthread+0x10/0x10 [ 636.029493][T12663] ? rcu_is_watching+0x12/0xc0 [ 636.029517][T12663] ? __pfx_kthread+0x10/0x10 [ 636.029537][T12663] ret_from_fork+0x675/0x7d0 [ 636.029552][T12663] ? __pfx_kthread+0x10/0x10 [ 636.029571][T12663] ret_from_fork_asm+0x1a/0x30 [ 636.029613][T12663] [ 636.029688][T12663] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 636.284912][T12663] Bluetooth: hci2: failed to register connection device [ 636.677533][ T5945] usb 3-1: USB disconnect, device number 39 [ 636.840449][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1750'. [ 637.612506][ T43] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 637.655778][T13026] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 637.691798][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1754'. [ 637.827164][T13032] erofs (device nbd4): cannot find valid erofs superblock [ 637.927093][ T43] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 637.956430][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 637.966706][ T43] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 637.975971][ T43] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 637.986551][ T43] usb 4-1: Product: syz [ 637.990988][ T43] usb 4-1: Manufacturer: syz [ 637.995858][ T43] usb 4-1: SerialNumber: syz [ 638.039531][ T43] usb 4-1: config 0 descriptor?? [ 638.053381][ T43] usb 4-1: selecting invalid altsetting 0 [ 638.256572][T13035] lo speed is unknown, defaulting to 1000 [ 638.383865][T12663] Bluetooth: hci2: command 0x0406 tx timeout [ 639.079394][T13044] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1048580, id = 0 [ 639.443321][T13035] lo speed is unknown, defaulting to 1000 [ 639.947871][ T30] audit: type=1400 audit(1763947407.219:1162): avc: denied { mounton } for pid=13046 comm="syz.4.1758" path="/362/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 640.256440][ T5889] usb 4-1: USB disconnect, device number 46 [ 640.408771][T13058] erofs (device nbd2): cannot find valid erofs superblock [ 640.847957][ T30] audit: type=1400 audit(1763947408.519:1163): avc: denied { read } for pid=13059 comm="syz.4.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 641.134514][T13069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1763'. [ 641.142564][ T911] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 641.464329][ T911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 641.472537][ T911] usb 5-1: not running at top speed; connect to a high speed hub [ 641.527244][ T911] usb 5-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 641.541941][ T911] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f4.4a [ 641.554107][ T911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.621898][ T911] usb 5-1: Product: syz [ 641.636735][ T911] usb 5-1: Manufacturer: ч [ 641.651747][ T911] usb 5-1: SerialNumber: syz [ 641.973403][ T911] usbsevseg 5-1:129.0: USB 7 Segment device now attached [ 642.065968][ T911] usb 5-1: USB disconnect, device number 42 [ 642.252783][ T911] usbsevseg 5-1:129.0: USB 7 Segment now disconnected [ 643.424250][T13092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1771'. [ 643.510026][T13100] FAULT_INJECTION: forcing a failure. [ 643.510026][T13100] name failslab, interval 1, probability 0, space 0, times 0 [ 643.523281][T13100] CPU: 1 UID: 0 PID: 13100 Comm: syz.2.1773 Not tainted syzkaller #0 PREEMPT(full) [ 643.523310][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.523320][T13100] Call Trace: [ 643.523326][T13100] [ 643.523331][T13100] dump_stack_lvl+0x16c/0x1f0 [ 643.523346][T13100] should_fail_ex+0x512/0x640 [ 643.523359][T13100] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 643.523377][T13100] should_failslab+0xc2/0x120 [ 643.523389][T13100] kmem_cache_alloc_node_noprof+0x78/0x770 [ 643.523405][T13100] ? __alloc_skb+0x2b2/0x380 [ 643.523421][T13100] ? __alloc_skb+0x2b2/0x380 [ 643.523432][T13100] ? __pfx_netlink_insert+0x10/0x10 [ 643.523446][T13100] __alloc_skb+0x2b2/0x380 [ 643.523459][T13100] ? __pfx___alloc_skb+0x10/0x10 [ 643.523473][T13100] ? netlink_autobind.isra.0+0xa8/0x370 [ 643.523490][T13100] netlink_alloc_large_skb+0x69/0x140 [ 643.523507][T13100] netlink_sendmsg+0x698/0xdd0 [ 643.523524][T13100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.523545][T13100] ____sys_sendmsg+0xa98/0xc70 [ 643.523556][T13100] ? copy_msghdr_from_user+0x10a/0x160 [ 643.523570][T13100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.523586][T13100] ___sys_sendmsg+0x134/0x1d0 [ 643.523601][T13100] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.523614][T13100] ? __lock_acquire+0x622/0x1c90 [ 643.523640][T13100] __sys_sendmsg+0x16d/0x220 [ 643.523654][T13100] ? __pfx___sys_sendmsg+0x10/0x10 [ 643.523668][T13100] ? fput+0x9b/0xd0 [ 643.523688][T13100] do_syscall_64+0xcd/0xfa0 [ 643.523700][T13100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.523711][T13100] RIP: 0033:0x7f175038f749 [ 643.523719][T13100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.523729][T13100] RSP: 002b:00007f17512dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.523739][T13100] RAX: ffffffffffffffda RBX: 00007f17505e5fa0 RCX: 00007f175038f749 [ 643.523745][T13100] RDX: 0000000000002000 RSI: 0000200000000180 RDI: 0000000000000004 [ 643.523751][T13100] RBP: 00007f17512dd090 R08: 0000000000000000 R09: 0000000000000000 [ 643.523757][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.523763][T13100] R13: 00007f17505e6038 R14: 00007f17505e5fa0 R15: 00007fff5f9e2de8 [ 643.523777][T13100] [ 643.594232][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1772'. [ 644.195368][ T30] audit: type=1326 audit(1763947411.869:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13111 comm="syz.1.1777" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b2bf8f749 code=0x0 [ 644.271127][T13114] erofs (device nbd2): cannot find valid erofs superblock [ 644.328051][T13115] Cannot find add_set index 0 as target [ 644.751169][T13126] erofs (device nbd4): cannot find valid erofs superblock [ 645.580881][ T30] audit: type=1400 audit(1763947413.249:1165): avc: denied { mount } for pid=13131 comm="syz.4.1782" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 646.524164][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1785'. [ 646.792305][T13152] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 647.769231][T13162] input: syz1 as /devices/virtual/input/input68 [ 648.162501][ T5889] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 648.219366][T13170] erofs (device nbd3): cannot find valid erofs superblock [ 648.366641][ T5889] usb 3-1: device descriptor read/64, error -71 [ 648.618093][ T30] audit: type=1326 audit(1763947416.289:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.0.1794" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3233b8f749 code=0x0 [ 648.634703][T13177] smc: removing ib device sz1 [ 648.652847][ T5889] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 648.674435][ T30] audit: type=1400 audit(1763947416.299:1167): avc: denied { watch } for pid=13175 comm="syz.4.1793" path="/370/file0" dev="tmpfs" ino=2029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 648.792586][ T5889] usb 3-1: device descriptor read/64, error -71 [ 648.807997][T13183] erofs (device nbd3): cannot find valid erofs superblock [ 648.891455][T13164] syz.2.1789 (13164): drop_caches: 2 [ 648.930203][ T5889] usb usb3-port1: attempt power cycle [ 649.338860][T13188] lo speed is unknown, defaulting to 1000 [ 649.344876][ T5889] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 649.465247][ T5889] usb 3-1: device descriptor read/8, error -71 [ 649.882526][ T5889] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 649.903150][ T5889] usb 3-1: device descriptor read/8, error -71 [ 649.944571][T13200] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 650.012919][ T5889] usb usb3-port1: unable to enumerate USB device [ 650.073987][ T3095] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 650.573736][ T3095] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 650.582792][ T3095] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.594461][ T3095] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 650.605208][ T3095] usb 4-1: config 1 has no interface number 1 [ 650.611316][ T3095] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 650.626393][ T3095] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 650.635841][ T3095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.644218][ T3095] usb 4-1: Product: syz [ 650.648969][ T3095] usb 4-1: Manufacturer: syz [ 650.653829][ T3095] usb 4-1: SerialNumber: syz [ 650.820590][T13207] Cannot find add_set index 0 as target [ 651.157156][ T3095] usb 4-1: USB disconnect, device number 47 [ 651.182939][T13136] udevd[13136]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.308920][T13219] input: syz1 as /devices/virtual/input/input69 [ 651.749469][T13222] 9pnet_fd: Insufficient options for proto=fd [ 651.845995][ T30] audit: type=1400 audit(1763947419.499:1168): avc: denied { connect } for pid=13223 comm="syz.3.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 652.805641][T13237] erofs (device nbd3): cannot find valid erofs superblock [ 653.082502][ T911] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 653.435931][T13244] No control pipe specified [ 653.562162][T13246] erofs (device nbd3): cannot find valid erofs superblock [ 653.644312][ T911] usb 3-1: Using ep0 maxpacket: 32 [ 653.671985][ T911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.721164][ T911] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.788417][ T911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 653.823209][ T911] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 653.833132][ T911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.848874][ T911] usb 3-1: config 0 descriptor?? [ 654.010285][T13251] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 654.236716][ T30] audit: type=1400 audit(1763947421.879:1169): avc: denied { bind } for pid=13252 comm="syz.1.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 654.705049][T13258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 655.205969][ T911] usbhid 3-1:0.0: can't add hid device: -71 [ 655.211980][ T911] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 655.245921][ T911] usb 3-1: USB disconnect, device number 44 [ 655.730767][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1818'. [ 655.842660][ T911] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 656.015896][ T911] usb 1-1: config 0 has no interfaces? [ 656.021688][ T911] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 656.039537][ T911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.054403][ T911] usb 1-1: config 0 descriptor?? [ 656.538954][ T30] audit: type=1800 audit(1763947423.829:1170): pid=13287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1820" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 656.712163][T13290] lo speed is unknown, defaulting to 1000 [ 656.893443][ T5889] usb 1-1: USB disconnect, device number 39 [ 659.278937][T13311] erofs (device nbd3): cannot find valid erofs superblock [ 660.349155][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 660.693682][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 660.699893][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 660.757762][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.778797][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 660.792901][ T10] pvrusb2: ********** [ 660.829893][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 660.902462][ T10] pvrusb2: Important functionality might not be entirely working. [ 660.913981][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 660.925553][ T10] pvrusb2: ********** [ 660.975171][ T2335] pvrusb2: Invalid write control endpoint [ 661.133199][T13333] lo speed is unknown, defaulting to 1000 [ 661.247631][T13318] pvrusb2: Invalid write control endpoint [ 661.293334][ T911] usb 3-1: USB disconnect, device number 45 [ 661.414758][ T2335] pvrusb2: Invalid write control endpoint [ 661.423101][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 661.434095][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 661.453123][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 661.463656][ T2335] pvrusb2: Device being rendered inoperable [ 661.470375][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 661.542869][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 661.603739][ T2335] pvrusb2: Attached sub-driver cx25840 [ 661.655873][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 661.675476][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 661.899030][T13347] erofs (device nbd3): cannot find valid erofs superblock [ 661.940347][T13350] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 663.665521][T13355] lo speed is unknown, defaulting to 1000 [ 663.806394][T13374] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 664.066280][T13378] lo speed is unknown, defaulting to 1000 [ 664.166512][T13376] lo speed is unknown, defaulting to 1000 [ 664.485345][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 664.513819][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 664.521639][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 664.529220][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 664.536624][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 664.559187][ T30] audit: type=1400 audit(1763947432.229:1171): avc: denied { mounton } for pid=13382 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 664.610723][T13382] lo speed is unknown, defaulting to 1000 [ 664.987222][T13398] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 665.166894][T13396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 665.258112][T13382] chnl_net:caif_netlink_parms(): no params data found [ 666.124554][T13424] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 666.202634][ T43] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 666.266000][T13424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1852'. [ 666.392207][T13382] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.418365][T13382] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.426051][T13382] bridge_slave_0: entered allmulticast mode [ 666.432887][T13382] bridge_slave_0: entered promiscuous mode [ 666.441362][T13382] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.464522][T13382] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.471743][T13382] bridge_slave_1: entered allmulticast mode [ 666.499941][ T43] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 666.509887][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 666.524059][T13382] bridge_slave_1: entered promiscuous mode [ 666.530692][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 666.542163][ T43] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 666.568927][ T43] usb 1-1: Product: syz [ 666.579803][ T43] usb 1-1: Manufacturer: syz [ 666.592919][T12663] Bluetooth: hci5: command tx timeout [ 666.614937][ T43] usb 1-1: SerialNumber: syz [ 666.629876][T13382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.633867][ T43] usb 1-1: config 0 descriptor?? [ 666.707592][T13382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.724754][ T43] usb 1-1: selecting invalid altsetting 0 [ 666.970196][T13433] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 667.029849][T13433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1856'. [ 667.424831][T13382] team0: Port device team_slave_0 added [ 667.458745][T13382] team0: Port device team_slave_1 added [ 667.564208][T13382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.571179][T13382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.606333][T13382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.618988][T13382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.648098][T13441] input: syz1 as /devices/virtual/input/input70 [ 667.658044][T13382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.687852][T13382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.217742][T13382] hsr_slave_0: entered promiscuous mode [ 668.233270][T13382] hsr_slave_1: entered promiscuous mode [ 668.251015][T13382] debugfs: 'hsr0' already exists in 'hsr' [ 668.271415][T13382] Cannot create hsr debugfs directory [ 668.308766][T13452] lo speed is unknown, defaulting to 1000 [ 668.672649][T12663] Bluetooth: hci5: command tx timeout [ 669.030617][ T911] usb 1-1: USB disconnect, device number 40 [ 669.052839][T13465] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 669.693232][T13382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 669.724375][T13382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 669.759382][T13382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 670.166945][T13382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 670.400176][T13483] lo speed is unknown, defaulting to 1000 [ 670.682702][T13493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 671.012512][T12663] Bluetooth: hci5: command tx timeout [ 671.032586][ T911] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 671.183836][T13382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.210514][T13382] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.244039][ T911] usb 1-1: Using ep0 maxpacket: 32 [ 671.258675][ T911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.269058][ T911] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 671.282511][ T911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 671.292312][ T911] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 671.308229][ T911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.344561][ T911] usb 1-1: config 0 descriptor?? [ 671.369721][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.376857][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.448277][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.455437][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.809709][T13382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.163351][T13382] veth0_vlan: entered promiscuous mode [ 672.196895][T13382] veth1_vlan: entered promiscuous mode [ 672.305868][T13382] veth0_macvtap: entered promiscuous mode [ 672.369051][T13382] veth1_macvtap: entered promiscuous mode [ 672.430744][T13382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.489170][T13382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.552148][ T6449] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.570118][ T6449] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.581521][ T6449] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.602305][ T6449] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.744301][ T6449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.761546][ T6449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.935524][ T752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.948321][ T752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.037671][ T30] audit: type=1400 audit(1763947440.709:1172): avc: denied { mounton } for pid=13382 comm="syz-executor" path="/root/syzkaller.fUEIFP/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 673.090087][T12663] Bluetooth: hci5: command tx timeout [ 673.095863][ T30] audit: type=1400 audit(1763947440.759:1173): avc: denied { mounton } for pid=13382 comm="syz-executor" path="/root/syzkaller.fUEIFP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 673.183547][ T30] audit: type=1400 audit(1763947440.759:1174): avc: denied { mounton } for pid=13382 comm="syz-executor" path="/root/syzkaller.fUEIFP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=42196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 673.246410][ T10] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 673.341899][ T30] audit: type=1400 audit(1763947440.799:1175): avc: denied { mounton } for pid=13382 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 673.351049][ T911] usbhid 1-1:0.0: can't add hid device: -71 [ 673.411635][ T30] audit: type=1400 audit(1763947440.799:1176): avc: denied { mount } for pid=13382 comm="syz-executor" name="/" dev="gadgetfs" ino=6864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 673.426371][ T911] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 673.446158][ T911] usb 1-1: USB disconnect, device number 41 [ 673.458040][ T30] audit: type=1400 audit(1763947441.039:1177): avc: denied { mounton } for pid=13382 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 673.484951][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 673.498190][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 673.517724][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 673.527087][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 673.539128][ T10] usb 3-1: Product: syz [ 673.546523][ T10] usb 3-1: Manufacturer: syz [ 673.554279][ T10] usb 3-1: SerialNumber: syz [ 673.684504][ T10] usb 3-1: config 0 descriptor?? [ 673.698492][ T10] usb 3-1: selecting invalid altsetting 0 [ 674.064723][ T30] audit: type=1400 audit(1763947441.469:1178): avc: denied { getopt } for pid=13523 comm="syz.0.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 675.467717][T13550] erofs (device nbd5): cannot find valid erofs superblock [ 675.524670][T13551] Cannot find add_set index 0 as target [ 675.777883][T13553] lo speed is unknown, defaulting to 1000 [ 675.986323][ T10] usb 3-1: USB disconnect, device number 46 [ 676.402525][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 676.404615][T13569] Attempt to restore checkpoint with obsolete wellknown handles [ 676.564541][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 676.583943][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 676.607505][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 676.616881][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.625418][ T10] usb 3-1: Product: syz [ 676.629634][ T10] usb 3-1: Manufacturer: syz [ 676.634640][ T10] usb 3-1: SerialNumber: syz [ 676.642119][ T10] usb 3-1: config 0 descriptor?? [ 676.662543][ T5875] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 676.813820][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 676.832116][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 676.849767][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 676.884048][ T5875] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 676.904723][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.967941][ T5875] usb 1-1: config 0 descriptor?? [ 676.977387][T13574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1886'. [ 676.991175][T13569] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 677.082026][T13558] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 677.093424][ T5868] usb 3-1: USB disconnect, device number 47 [ 677.419907][ T5875] aureal 0003:0755:2626.000A: unknown main item tag 0x6 [ 677.427341][ T5875] aureal 0003:0755:2626.000A: report_id 29495 is invalid [ 677.434442][ T5875] aureal 0003:0755:2626.000A: item 0 2 1 8 parsing failed [ 677.442217][ T5875] aureal 0003:0755:2626.000A: probe with driver aureal failed with error -22 [ 677.724418][T13582] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 677.933659][T13569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.962709][T13569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.010416][T13569] veth2: entered allmulticast mode [ 678.019621][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1888'. [ 678.094742][ T5889] usb 1-1: USB disconnect, device number 42 [ 678.123345][T13587] erofs (device nbd5): cannot find valid erofs superblock [ 678.133396][T13587] Cannot find add_set index 0 as target [ 678.238575][T13591] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 678.532700][T13592] netlink: 'syz.2.1891': attribute type 1 has an invalid length. [ 679.490298][T13600] Cannot find add_set index 0 as target [ 680.250847][T13605] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1893'. [ 681.010273][T13612] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 681.082329][T13612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1894'. [ 681.532534][ T5875] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 681.701760][T13629] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1898'. [ 682.093635][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 682.103582][ T5875] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 682.117579][ T5875] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 682.127015][ T5875] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.138513][ T5875] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 682.152158][ T5875] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 682.162286][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.170830][ T5875] usb 1-1: Product: syz [ 682.176921][ T5875] usb 1-1: Manufacturer: Ⰹ [ 682.181890][ T5875] usb 1-1: SerialNumber: syz [ 682.202538][ T5868] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 682.341622][T13635] Cannot find add_set index 0 as target [ 682.805168][ T5868] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 682.815079][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 682.824943][ T5868] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 682.834280][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 682.843573][ T5868] usb 3-1: Product: syz [ 682.847783][ T5868] usb 3-1: Manufacturer: syz [ 682.852389][ T5868] usb 3-1: SerialNumber: syz [ 682.860994][ T5868] usb 3-1: config 0 descriptor?? [ 683.027862][ T30] audit: type=1400 audit(1763947450.699:1179): avc: denied { ioctl } for pid=13614 comm="syz.0.1896" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 683.061284][ T5875] usb 1-1: 0:2 : does not exist [ 683.080825][ T5868] usb 3-1: selecting invalid altsetting 0 [ 683.092511][ T5875] usb 1-1: USB disconnect, device number 43 [ 683.780612][T13136] udevd[13136]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.623484][T13666] lo speed is unknown, defaulting to 1000 [ 684.935949][ T5875] usb 3-1: USB disconnect, device number 48 [ 685.316378][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.323118][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.196054][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 686.218380][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 686.226992][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 686.262739][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 686.271135][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 686.314752][T13692] input: syz1 as /devices/virtual/input/input71 [ 686.357278][T13685] lo speed is unknown, defaulting to 1000 [ 686.457078][T13696] overlayfs: failed to clone upperpath [ 686.669391][T13685] chnl_net:caif_netlink_parms(): no params data found [ 686.903064][T13714] Cannot find add_set index 0 as target [ 687.323967][T13685] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.331994][T13685] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.348159][T13685] bridge_slave_0: entered allmulticast mode [ 687.355604][T13685] bridge_slave_0: entered promiscuous mode [ 687.365572][T13685] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.377079][T13685] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.384425][T13685] bridge_slave_1: entered allmulticast mode [ 687.391855][T13685] bridge_slave_1: entered promiscuous mode [ 687.992640][ T5889] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 688.033005][T13685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.045709][T13685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.130398][T13685] team0: Port device team_slave_0 added [ 688.162511][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 688.162984][T13685] team0: Port device team_slave_1 added [ 688.174294][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.220709][ T5889] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 688.243252][ T5889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 688.260124][ T5889] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 688.272656][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.301914][ T5889] usb 1-1: config 0 descriptor?? [ 688.310884][T13685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.320365][T13685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.347179][T13685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.358616][T12663] Bluetooth: hci6: command tx timeout [ 688.393659][T13685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.405120][T13685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.468637][T13685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.656903][T13685] hsr_slave_0: entered promiscuous mode [ 688.688450][T13685] hsr_slave_1: entered promiscuous mode [ 688.701598][T13685] debugfs: 'hsr0' already exists in 'hsr' [ 688.708134][T13685] Cannot create hsr debugfs directory [ 688.761926][T13739] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 689.291299][T13748] erofs (device nbd2): cannot find valid erofs superblock [ 689.301421][T13748] Cannot find add_set index 0 as target [ 689.502275][T13685] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 689.569528][T13685] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 689.677663][T13685] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 689.689580][T13685] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 689.817819][T13685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.830092][ T5889] usbhid 1-1:0.0: can't add hid device: -71 [ 689.909498][T13758] input: syz1 as /devices/virtual/input/input72 [ 689.927117][ T5889] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 689.955315][T13685] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.976341][ T5889] usb 1-1: USB disconnect, device number 44 [ 689.997588][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.004793][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.094770][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.101953][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.357858][ T30] audit: type=1400 audit(1763947457.909:1180): avc: denied { ioctl } for pid=13762 comm="syz.2.1931" path="socket:[42925]" dev="sockfs" ino=42925 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 690.470745][T12663] Bluetooth: hci6: command tx timeout [ 690.502949][T13761] team0: entered allmulticast mode [ 690.508118][T13761] team_slave_0: entered allmulticast mode [ 690.514149][T13761] team_slave_1: entered allmulticast mode [ 690.551874][T13685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 690.872740][T13685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.263425][ T5889] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 691.474272][ T5889] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 691.502563][ T5889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.565392][T13796] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 691.630410][ T5889] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 691.807752][T13685] veth0_vlan: entered promiscuous mode [ 691.846744][T13685] veth1_vlan: entered promiscuous mode [ 691.853566][ T5889] usb 1-1: config 1 has no interface number 1 [ 691.873148][ T5889] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 692.034128][ T5889] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 692.047193][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.057651][ T5889] usb 1-1: Product: syz [ 692.059123][T13685] veth0_macvtap: entered promiscuous mode [ 692.061819][ T5889] usb 1-1: Manufacturer: syz [ 692.073699][ T5889] usb 1-1: SerialNumber: syz [ 692.079562][T13800] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13800 comm=syz.5.1938 [ 692.141615][T13685] veth1_macvtap: entered promiscuous mode [ 692.150934][T13802] erofs (device nbd2): cannot find valid erofs superblock [ 692.171561][T13800] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2584 sclass=netlink_tcpdiag_socket pid=13800 comm=syz.5.1938 [ 692.206149][T13803] Cannot find add_set index 0 as target [ 692.360396][T13800] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=13800 comm=syz.5.1938 [ 692.416800][T13685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.535364][ T52] Bluetooth: hci6: command tx timeout [ 692.560994][T13685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.622196][ T2946] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.641824][ T2946] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.666336][ T2946] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.690530][ T2946] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.013519][ T5889] usb 1-1: USB disconnect, device number 45 [ 693.849963][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.900146][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.942510][T13811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.977268][T13811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.189427][T13835] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 694.278749][T13835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1944'. [ 694.537622][ T30] audit: type=1400 audit(1763947462.209:1181): avc: denied { connect } for pid=13842 comm="syz.6.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 694.599027][T13848] FAULT_INJECTION: forcing a failure. [ 694.599027][T13848] name failslab, interval 1, probability 0, space 0, times 0 [ 694.611845][ T52] Bluetooth: hci6: command tx timeout [ 694.728103][ T30] audit: type=1400 audit(1763947462.209:1182): avc: denied { write } for pid=13842 comm="syz.6.1908" path="socket:[44348]" dev="sockfs" ino=44348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 694.760509][T13848] CPU: 1 UID: 0 PID: 13848 Comm: syz.2.1941 Not tainted syzkaller #0 PREEMPT(full) [ 694.760535][T13848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 694.760546][T13848] Call Trace: [ 694.760552][T13848] [ 694.760559][T13848] dump_stack_lvl+0x16c/0x1f0 [ 694.760582][T13848] should_fail_ex+0x512/0x640 [ 694.760604][T13848] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 694.760634][T13848] should_failslab+0xc2/0x120 [ 694.760664][T13848] kmem_cache_alloc_noprof+0x75/0x6e0 [ 694.760690][T13848] ? getname_flags.part.0+0x4c/0x550 [ 694.760720][T13848] ? getname_flags.part.0+0x4c/0x550 [ 694.760742][T13848] getname_flags.part.0+0x4c/0x550 [ 694.760769][T13848] getname_flags+0x93/0xf0 [ 694.760787][T13848] do_sys_openat2+0xb8/0x1d0 [ 694.760809][T13848] ? __pfx_do_sys_openat2+0x10/0x10 [ 694.760835][T13848] ? __fget_files+0x20e/0x3c0 [ 694.760858][T13848] __x64_sys_openat+0x174/0x210 [ 694.760882][T13848] ? __pfx___x64_sys_openat+0x10/0x10 [ 694.760903][T13848] ? ksys_write+0x1ac/0x250 [ 694.760930][T13848] do_syscall_64+0xcd/0xfa0 [ 694.760949][T13848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.760967][T13848] RIP: 0033:0x7f175038f749 [ 694.760981][T13848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.760998][T13848] RSP: 002b:00007f175129b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 694.761016][T13848] RAX: ffffffffffffffda RBX: 00007f17505e6180 RCX: 00007f175038f749 [ 694.761027][T13848] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 694.761038][T13848] RBP: 00007f175129b090 R08: 0000000000000000 R09: 0000000000000000 [ 694.761048][T13848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.761059][T13848] R13: 00007f17505e6218 R14: 00007f17505e6180 R15: 00007fff5f9e2de8 [ 694.761084][T13848] [ 696.052438][ T30] audit: type=1326 audit(1763947463.719:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.0.1950" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3233b8f749 code=0x0 [ 696.609952][T13879] input: syz1 as /devices/virtual/input/input73 [ 696.782873][T13891] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 697.943072][T13905] fuse: Unknown parameter 'group_i00000000000000000000' [ 699.815180][T13929] lo speed is unknown, defaulting to 1000 [ 700.364311][ T30] audit: type=1326 audit(1763947468.019:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13938 comm="syz.2.1965" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f175038f749 code=0x0 [ 700.632902][T13946] input: syz1 as /devices/virtual/input/input74 [ 701.085722][T13970] erofs (device nbd6): cannot find valid erofs superblock [ 701.098608][T13970] Cannot find add_set index 0 as target [ 701.181596][T13971] fuse: Unknown parameter 'group_i00000000000000000000' [ 702.595423][T13989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 702.964052][T13988] input: syz1 as /devices/virtual/input/input75 [ 703.232879][ T911] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 703.384353][ T911] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 703.393192][ T911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.449056][ T911] usb 6-1: config 0 has no interface number 0 [ 703.467593][ T911] usb 6-1: too many endpoints for config 0 interface 255 altsetting 245: 31, using maximum allowed: 30 [ 703.918068][T12663] Bluetooth: hci5: command tx timeout [ 703.918485][ T911] usb 6-1: config 0 interface 255 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 703.937260][ T911] usb 6-1: config 0 interface 255 has no altsetting 0 [ 703.945023][ T911] usb 6-1: New USB device found, idVendor=041f, idProduct=97c1, bcdDevice= 0.00 [ 703.967386][ T911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.030953][ T911] usb 6-1: config 0 descriptor?? [ 704.172628][ T5889] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 704.460657][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 704.480176][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.492523][ T5889] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 704.539610][ T5889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 704.563840][ T5889] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 704.899557][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.915572][ T5889] usb 3-1: config 0 descriptor?? [ 704.926356][ T30] audit: type=1326 audit(1763947472.599:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13984 comm="syz.5.1976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1645d8f749 code=0x0 [ 705.695730][T14017] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 705.911597][T14021] erofs (device nbd6): cannot find valid erofs superblock [ 705.931132][T14021] Cannot find add_set index 0 as target [ 706.227888][ T5945] usb 6-1: USB disconnect, device number 2 [ 706.307115][ T5889] usbhid 3-1:0.0: can't add hid device: -71 [ 706.342827][ T5889] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 706.362092][ T5889] usb 3-1: USB disconnect, device number 49 [ 706.500914][T14026] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 706.654073][T14026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1986'. [ 706.746651][T14030] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1987'. [ 707.772960][T14045] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.512946][ T8873] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 708.692530][ T8873] usb 6-1: Using ep0 maxpacket: 32 [ 708.707331][ T8873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.742804][ T8873] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 708.812498][ T8873] usb 6-1: config 0 interface 0 has no altsetting 0 [ 708.819343][ T8873] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 708.828843][ T8873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.843486][ T8873] usb 6-1: config 0 descriptor?? [ 710.354918][T14068] input: syz1 as /devices/virtual/input/input76 [ 711.072486][ T5953] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 711.078658][ T8873] usbhid 6-1:0.0: can't add hid device: -71 [ 711.092090][ T8873] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 711.140375][ T8873] usb 6-1: USB disconnect, device number 3 [ 711.208162][ T10] libceph: connect (1)[c::]:6789 error -101 [ 711.216119][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 711.226223][ T10] libceph: connect (1)[c::]:6789 error -101 [ 711.232441][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 711.243035][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 711.249906][ T5953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.262242][T14077] ceph: No mds server is up or the cluster is laggy [ 711.270448][ T5953] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.283715][ T5953] usb 3-1: config 0 interface 0 has no altsetting 0 [ 711.290349][ T5953] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 711.299562][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.311400][ T5953] usb 3-1: config 0 descriptor?? [ 711.642042][T14092] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2000'. [ 712.018885][T14095] Cannot find add_set index 0 as target [ 712.362873][T14103] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 712.922348][T14105] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 714.011210][ T5953] usbhid 3-1:0.0: can't add hid device: -71 [ 714.021368][ T5953] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 714.032292][ T5953] usb 3-1: USB disconnect, device number 50 [ 714.212951][T14104] input: syz1 as /devices/virtual/input/input77 [ 715.077584][T14119] lo speed is unknown, defaulting to 1000 [ 715.822656][ T43] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 716.421482][ T43] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 716.577369][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.609223][ T43] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 716.635776][ T43] usb 3-1: config 1 has no interface number 1 [ 716.641910][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 716.712584][ T8873] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 716.745254][T14143] erofs (device nbd0): cannot find valid erofs superblock [ 716.910895][T14148] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 716.927909][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 716.961698][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.992657][T12663] Bluetooth: hci6: command tx timeout [ 716.998419][ T8873] usb 6-1: Using ep0 maxpacket: 32 [ 717.025745][ T43] usb 3-1: Product: syz [ 717.035751][ T8873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.052527][ T43] usb 3-1: Manufacturer: syz [ 717.057272][ T43] usb 3-1: SerialNumber: syz [ 717.070304][ T8873] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 717.104018][ T8873] usb 6-1: config 0 interface 0 has no altsetting 0 [ 717.110994][ T8873] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 717.120167][ T8873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.207822][ T8873] usb 6-1: config 0 descriptor?? [ 717.290105][T14151] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 718.255545][ T43] usb 3-1: USB disconnect, device number 51 [ 718.297354][T13136] udevd[13136]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 718.835550][ T8873] usbhid 6-1:0.0: can't add hid device: -71 [ 718.870241][T14173] lo speed is unknown, defaulting to 1000 [ 718.953967][ T8873] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 719.032964][ T8873] usb 6-1: USB disconnect, device number 4 [ 719.707763][T12663] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 719.717179][T12663] CPU: 0 UID: 0 PID: 12663 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 719.717197][T12663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 719.717204][T12663] Workqueue: hci3 hci_rx_work [ 719.717221][T12663] Call Trace: [ 719.717225][T12663] [ 719.717231][T12663] dump_stack_lvl+0x16c/0x1f0 [ 719.717245][T12663] sysfs_warn_dup+0x7f/0xa0 [ 719.717260][T12663] sysfs_create_dir_ns+0x24b/0x2b0 [ 719.717275][T12663] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 719.717289][T12663] ? find_held_lock+0x2b/0x80 [ 719.717310][T12663] ? do_raw_spin_unlock+0x172/0x230 [ 719.717332][T12663] kobject_add_internal+0x2c4/0x9b0 [ 719.717357][T12663] kobject_add+0x16e/0x240 [ 719.717376][T12663] ? __pfx_kobject_add+0x10/0x10 [ 719.717389][T12663] ? do_raw_spin_unlock+0x172/0x230 [ 719.717402][T12663] ? kobject_put+0xab/0x5a0 [ 719.717430][T12663] device_add+0x288/0x1aa0 [ 719.717446][T12663] ? __pfx_dev_set_name+0x10/0x10 [ 719.717463][T12663] ? __pfx_device_add+0x10/0x10 [ 719.717478][T12663] ? mgmt_send_event_skb+0x2fb/0x460 [ 719.717498][T12663] hci_conn_add_sysfs+0x17e/0x230 [ 719.717511][T12663] le_conn_complete_evt+0x1260/0x2150 [ 719.717532][T12663] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 719.717549][T12663] ? hci_event_packet+0x459/0x11c0 [ 719.717569][T12663] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 719.717589][T12663] ? skb_pull_data+0x166/0x210 [ 719.717604][T12663] hci_le_meta_evt+0x357/0x5e0 [ 719.717614][T12663] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 719.717632][T12663] hci_event_packet+0x685/0x11c0 [ 719.717648][T12663] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 719.717658][T12663] ? __pfx_hci_event_packet+0x10/0x10 [ 719.717677][T12663] ? kcov_remote_start+0x3c9/0x6d0 [ 719.717690][T12663] ? lockdep_hardirqs_on+0x7c/0x110 [ 719.717705][T12663] hci_rx_work+0x2c5/0x16b0 [ 719.717715][T12663] ? rcu_is_watching+0x12/0xc0 [ 719.717731][T12663] process_one_work+0x9cf/0x1b70 [ 719.717749][T12663] ? __pfx_process_one_work+0x10/0x10 [ 719.717765][T12663] ? assign_work+0x1a0/0x250 [ 719.717777][T12663] worker_thread+0x6c8/0xf10 [ 719.717793][T12663] ? __kthread_parkme+0x19e/0x250 [ 719.717809][T12663] ? __pfx_worker_thread+0x10/0x10 [ 719.717821][T12663] kthread+0x3c5/0x780 [ 719.717831][T12663] ? __pfx_kthread+0x10/0x10 [ 719.717843][T12663] ? rcu_is_watching+0x12/0xc0 [ 719.717856][T12663] ? __pfx_kthread+0x10/0x10 [ 719.717868][T12663] ret_from_fork+0x675/0x7d0 [ 719.717877][T12663] ? __pfx_kthread+0x10/0x10 [ 719.717888][T12663] ret_from_fork_asm+0x1a/0x30 [ 719.717911][T12663] [ 720.005003][T12663] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 720.018860][T12663] Bluetooth: hci3: failed to register connection device [ 720.307870][T14194] Cannot find add_set index 0 as target [ 722.032708][T12663] Bluetooth: hci3: command 0x0406 tx timeout [ 722.836047][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 722.867429][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'. [ 722.972500][ T8873] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 723.076556][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 723.176562][ T8873] usb 7-1: Using ep0 maxpacket: 32 [ 723.191801][ T30] audit: type=1326 audit(1763947490.849:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14230 comm="syz.5.2034" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1645d8f749 code=0x0 [ 723.262921][ T8873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.299095][ T8873] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 723.348782][ T8873] usb 7-1: config 0 interface 0 has no altsetting 0 [ 723.892909][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 723.905528][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 723.915066][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.924352][ T10] usb 1-1: Product: syz [ 723.928526][ T10] usb 1-1: Manufacturer: syz [ 723.942535][ T10] usb 1-1: SerialNumber: syz [ 723.943562][ T8873] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 723.949709][ T10] usb 1-1: config 0 descriptor?? [ 723.998287][ T8873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.056592][ T8873] usb 7-1: config 0 descriptor?? [ 724.398350][T14242] erofs (device nbd2): cannot find valid erofs superblock [ 724.456107][T14243] Cannot find add_set index 0 as target [ 724.839001][T14244] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 725.366870][ T8873] usbhid 7-1:0.0: can't add hid device: -71 [ 725.379184][ T8873] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 725.534294][ T8873] usb 7-1: USB disconnect, device number 2 [ 725.631676][T14252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2039'. [ 725.916443][T14255] input: syz1 as /devices/virtual/input/input78 [ 726.163557][T14263] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2042'. [ 726.581453][T14261] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 726.698082][T14261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2041'. [ 727.040896][ T5875] usb 1-1: USB disconnect, device number 46 [ 727.626656][ T30] audit: type=1326 audit(1763947495.299:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.0.2046" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3233b8f749 code=0x0 [ 728.945269][ T5875] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 729.221899][ T5875] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 729.247210][ T5875] usb 6-1: config 0 interface 0 has no altsetting 0 [ 729.574102][ T5875] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 729.584290][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 729.592676][ T5875] usb 6-1: Product: syz [ 729.596985][ T5875] usb 6-1: Manufacturer: syz [ 729.601579][ T5875] usb 6-1: SerialNumber: syz [ 729.609160][ T5875] usb 6-1: config 0 descriptor?? [ 729.709949][ T5875] usb 6-1: selecting invalid altsetting 0 [ 729.866471][T14291] Cannot find add_set index 0 as target [ 730.690186][T14297] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 731.915854][ T5861] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 732.112698][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 732.133875][ T5861] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.183728][ T5861] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 732.267541][T14311] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2053'. [ 732.772599][ T5861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 732.779441][ T5861] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 732.788805][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.838414][ T5861] usb 3-1: config 0 descriptor?? [ 732.896994][ T5861] usb 3-1: can't set config #0, error -71 [ 732.973217][ T5861] usb 3-1: USB disconnect, device number 52 [ 733.342331][ T30] audit: type=1400 audit(1763947500.999:1188): avc: denied { getopt } for pid=14322 comm="syz.6.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 733.582592][ T5861] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 733.621916][T14327] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 733.831651][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.889969][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.902525][ T5861] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 733.911660][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.955995][ T5861] usb 7-1: config 0 descriptor?? [ 733.961741][ T911] usb 6-1: USB disconnect, device number 5 [ 733.968817][T14326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2059'. [ 734.281899][T14332] delete_channel: no stack [ 734.422517][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2063'. [ 734.532900][T14339] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 734.627911][T14339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2064'. [ 734.632822][ T5861] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 734.767401][ T5861] hid-led 0003:0FC5:B080.000B: item fetching failed at offset 1/3 [ 734.788980][ T5861] hid-led 0003:0FC5:B080.000B: probe with driver hid-led failed with error -22 [ 734.926484][T14343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2066'. [ 735.235748][T12663] Bluetooth: hci6: link tx timeout [ 735.241195][T12663] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 735.252066][ T52] Bluetooth: hci6: link tx timeout [ 735.258132][ T52] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 735.345417][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 735.355090][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 735.355116][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 735.355129][ T52] Workqueue: hci1 hci_rx_work [ 735.355152][ T52] Call Trace: [ 735.355161][ T52] [ 735.355170][ T52] dump_stack_lvl+0x16c/0x1f0 [ 735.355191][ T52] sysfs_warn_dup+0x7f/0xa0 [ 735.355216][ T52] sysfs_create_dir_ns+0x24b/0x2b0 [ 735.355242][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 735.355291][ T52] kobject_add_internal+0x2c4/0x9b0 [ 735.355318][ T52] kobject_add+0x16e/0x240 [ 735.355339][ T52] ? __pfx_kobject_add+0x10/0x10 [ 735.355370][ T52] ? kobject_put+0xab/0x5a0 [ 735.355397][ T52] device_add+0x288/0x1aa0 [ 735.355421][ T52] ? __pfx_dev_set_name+0x10/0x10 [ 735.355446][ T52] ? __pfx_device_add+0x10/0x10 [ 735.355469][ T52] ? mgmt_send_event_skb+0x2fb/0x460 [ 735.355503][ T52] hci_conn_add_sysfs+0x17e/0x230 [ 735.355524][ T52] le_conn_complete_evt+0x1260/0x2150 [ 735.355559][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 735.355596][ T52] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 735.355624][ T52] ? skb_pull_data+0x166/0x210 [ 735.355651][ T52] hci_le_meta_evt+0x357/0x5e0 [ 735.355668][ T52] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 735.355700][ T52] hci_event_packet+0x685/0x11c0 [ 735.355726][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 735.355745][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 735.355776][ T52] ? kcov_remote_start+0x3d9/0x6d0 [ 735.355806][ T52] hci_rx_work+0x2c5/0x16b0 [ 735.355830][ T52] process_one_work+0x9cf/0x1b70 [ 735.355867][ T52] ? __pfx_process_one_work+0x10/0x10 [ 735.355897][ T52] ? assign_work+0x1a0/0x250 [ 735.355919][ T52] worker_thread+0x6c8/0xf10 [ 735.355951][ T52] ? __pfx_worker_thread+0x10/0x10 [ 735.355971][ T52] kthread+0x3c5/0x780 [ 735.355990][ T52] ? __pfx_kthread+0x10/0x10 [ 735.356010][ T52] ? rcu_is_watching+0x12/0xc0 [ 735.356035][ T52] ? __pfx_kthread+0x10/0x10 [ 735.356054][ T52] ret_from_fork+0x675/0x7d0 [ 735.356071][ T52] ? __pfx_kthread+0x10/0x10 [ 735.356090][ T52] ret_from_fork_asm+0x1a/0x30 [ 735.356130][ T52] [ 735.356323][ T52] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 735.602296][ T52] Bluetooth: hci1: failed to register connection device [ 735.612716][ T52] Bluetooth: hci6: link tx timeout [ 735.618126][ T52] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 735.628992][ T52] Bluetooth: hci6: link tx timeout [ 735.634246][ T52] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 737.022129][ T5953] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 737.172534][ T5953] usb 1-1: device descriptor read/64, error -71 [ 737.324347][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 737.417856][T12663] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 737.427292][T12663] CPU: 1 UID: 0 PID: 12663 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 737.427318][T12663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 737.427332][T12663] Workqueue: hci3 hci_rx_work [ 737.427354][T12663] Call Trace: [ 737.427361][T12663] [ 737.427371][T12663] dump_stack_lvl+0x16c/0x1f0 [ 737.427392][T12663] sysfs_warn_dup+0x7f/0xa0 [ 737.427416][T12663] sysfs_create_dir_ns+0x24b/0x2b0 [ 737.427442][T12663] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 737.427477][T12663] kobject_add_internal+0x2c4/0x9b0 [ 737.427505][T12663] kobject_add+0x16e/0x240 [ 737.427526][T12663] ? __pfx_kobject_add+0x10/0x10 [ 737.427552][T12663] ? kobject_put+0xab/0x5a0 [ 737.427580][T12663] device_add+0x288/0x1aa0 [ 737.427605][T12663] ? __pfx_dev_set_name+0x10/0x10 [ 737.427631][T12663] ? __pfx_device_add+0x10/0x10 [ 737.427654][T12663] ? mgmt_send_event_skb+0x2fb/0x460 [ 737.427689][T12663] hci_conn_add_sysfs+0x17e/0x230 [ 737.427709][T12663] le_conn_complete_evt+0x1260/0x2150 [ 737.427743][T12663] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 737.427770][T12663] ? hci_event_packet+0x459/0x11c0 [ 737.427804][T12663] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 737.427833][T12663] ? skb_pull_data+0x166/0x210 [ 737.427860][T12663] hci_le_meta_evt+0x357/0x5e0 [ 737.427878][T12663] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 737.427909][T12663] hci_event_packet+0x685/0x11c0 [ 737.427937][T12663] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 737.427955][T12663] ? __pfx_hci_event_packet+0x10/0x10 [ 737.427987][T12663] ? kcov_remote_start+0x3d9/0x6d0 [ 737.428017][T12663] hci_rx_work+0x2c5/0x16b0 [ 737.428041][T12663] process_one_work+0x9cf/0x1b70 [ 737.428072][T12663] ? __pfx_process_one_work+0x10/0x10 [ 737.428101][T12663] ? assign_work+0x1a0/0x250 [ 737.428122][T12663] worker_thread+0x6c8/0xf10 [ 737.428150][T12663] ? __kthread_parkme+0x19e/0x250 [ 737.428178][T12663] ? __pfx_worker_thread+0x10/0x10 [ 737.428198][T12663] kthread+0x3c5/0x780 [ 737.428217][T12663] ? __pfx_kthread+0x10/0x10 [ 737.428237][T12663] ? rcu_is_watching+0x12/0xc0 [ 737.428261][T12663] ? __pfx_kthread+0x10/0x10 [ 737.428288][T12663] ret_from_fork+0x675/0x7d0 [ 737.428305][T12663] ? __pfx_kthread+0x10/0x10 [ 737.428324][T12663] ret_from_fork_asm+0x1a/0x30 [ 737.428363][T12663] [ 737.428500][T12663] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 737.642487][ T5953] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 737.647406][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 737.678682][T12663] Bluetooth: hci3: failed to register connection device [ 737.711877][ T911] usb 7-1: USB disconnect, device number 3 [ 737.823221][ T5953] usb 1-1: device descriptor read/64, error -71 [ 737.991014][T14392] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 738.213165][T14393] netlink: 'syz.6.2077': attribute type 1 has an invalid length. [ 738.773877][T14393] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 738.813288][T12663] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 738.821296][ T5953] usb usb1-port1: attempt power cycle [ 738.823538][T12663] CPU: 1 UID: 0 PID: 12663 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 738.823560][T12663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 738.823572][T12663] Workqueue: hci5 hci_rx_work [ 738.823592][T12663] Call Trace: [ 738.823598][T12663] [ 738.823604][T12663] dump_stack_lvl+0x16c/0x1f0 [ 738.823622][T12663] sysfs_warn_dup+0x7f/0xa0 [ 738.823645][T12663] sysfs_create_dir_ns+0x24b/0x2b0 [ 738.823665][T12663] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 738.823685][T12663] ? find_held_lock+0x2b/0x80 [ 738.823711][T12663] ? do_raw_spin_unlock+0x172/0x230 [ 738.823730][T12663] kobject_add_internal+0x2c4/0x9b0 [ 738.823752][T12663] kobject_add+0x16e/0x240 [ 738.823770][T12663] ? __pfx_kobject_add+0x10/0x10 [ 738.823788][T12663] ? do_raw_spin_unlock+0x172/0x230 [ 738.823806][T12663] ? kobject_put+0xab/0x5a0 [ 738.823829][T12663] device_add+0x288/0x1aa0 [ 738.823850][T12663] ? __pfx_dev_set_name+0x10/0x10 [ 738.823872][T12663] ? __pfx_device_add+0x10/0x10 [ 738.823891][T12663] ? mgmt_send_event_skb+0x2fb/0x460 [ 738.823920][T12663] hci_conn_add_sysfs+0x17e/0x230 [ 738.823937][T12663] le_conn_complete_evt+0x1260/0x2150 [ 738.823966][T12663] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 738.823988][T12663] ? hci_event_packet+0x459/0x11c0 [ 738.824016][T12663] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 738.824040][T12663] ? skb_pull_data+0x166/0x210 [ 738.824063][T12663] hci_le_meta_evt+0x357/0x5e0 [ 738.824078][T12663] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 738.824105][T12663] hci_event_packet+0x685/0x11c0 [ 738.824127][T12663] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 738.824143][T12663] ? __pfx_hci_event_packet+0x10/0x10 [ 738.824168][T12663] ? kcov_remote_start+0x3c9/0x6d0 [ 738.824188][T12663] ? lockdep_hardirqs_on+0x7c/0x110 [ 738.824209][T12663] hci_rx_work+0x2c5/0x16b0 [ 738.824229][T12663] process_one_work+0x9cf/0x1b70 [ 738.824257][T12663] ? __pfx_process_one_work+0x10/0x10 [ 738.824281][T12663] ? assign_work+0x1a0/0x250 [ 738.824299][T12663] worker_thread+0x6c8/0xf10 [ 738.824323][T12663] ? __kthread_parkme+0x19e/0x250 [ 738.824347][T12663] ? __pfx_worker_thread+0x10/0x10 [ 738.824363][T12663] kthread+0x3c5/0x780 [ 738.824380][T12663] ? __pfx_kthread+0x10/0x10 [ 738.824397][T12663] ? rcu_is_watching+0x12/0xc0 [ 738.824417][T12663] ? __pfx_kthread+0x10/0x10 [ 738.824434][T12663] ret_from_fork+0x675/0x7d0 [ 738.824448][T12663] ? __pfx_kthread+0x10/0x10 [ 738.824464][T12663] ret_from_fork_asm+0x1a/0x30 [ 738.824503][T12663] [ 738.824522][T12663] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 739.110739][T12663] Bluetooth: hci5: failed to register connection device [ 739.732659][T12663] Bluetooth: hci3: command 0x0406 tx timeout [ 739.920727][T12663] Bluetooth: hci6: link tx timeout [ 739.927425][T12663] Bluetooth: hci6: link tx timeout [ 739.933560][T12663] Bluetooth: hci6: link tx timeout [ 739.938980][T12663] Bluetooth: hci6: link tx timeout [ 739.944290][T12663] Bluetooth: hci6: link tx timeout [ 739.949648][T12663] Bluetooth: hci6: link tx timeout [ 739.957992][ T5953] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 740.281267][ T5953] usb 1-1: device not accepting address 49, error -71 [ 741.153007][T12663] Bluetooth: hci5: command tx timeout [ 741.484846][ T30] audit: type=1326 audit(1763947508.079:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14413 comm="syz.0.2083" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3233b8f749 code=0x0 [ 742.072786][T14427] Cannot find add_set index 0 as target [ 742.595675][T14432] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2087'. [ 743.032876][ T30] audit: type=1326 audit(1763947510.709:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14428 comm="syz.6.2086" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f864f58f749 code=0x0 [ 745.389128][T14440] erofs (device nbd2): cannot find valid erofs superblock [ 745.415663][T14440] Cannot find add_set index 0 as target [ 746.018679][T14447] Cannot find add_set index 0 as target [ 746.298783][T12663] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 746.308591][T12663] CPU: 1 UID: 0 PID: 12663 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 746.308619][T12663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 746.308632][T12663] Workqueue: hci3 hci_rx_work [ 746.308654][T12663] Call Trace: [ 746.308661][T12663] [ 746.308669][T12663] dump_stack_lvl+0x16c/0x1f0 [ 746.308693][T12663] sysfs_warn_dup+0x7f/0xa0 [ 746.308721][T12663] sysfs_create_dir_ns+0x24b/0x2b0 [ 746.308749][T12663] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 746.308773][T12663] ? find_held_lock+0x2b/0x80 [ 746.308805][T12663] ? do_raw_spin_unlock+0x172/0x230 [ 746.308830][T12663] kobject_add_internal+0x2c4/0x9b0 [ 746.308856][T12663] kobject_add+0x16e/0x240 [ 746.308878][T12663] ? __pfx_kobject_add+0x10/0x10 [ 746.308903][T12663] ? do_raw_spin_unlock+0x172/0x230 [ 746.308926][T12663] ? kobject_put+0xab/0x5a0 [ 746.308954][T12663] device_add+0x288/0x1aa0 [ 746.308988][T12663] ? __pfx_dev_set_name+0x10/0x10 [ 746.309016][T12663] ? __pfx_device_add+0x10/0x10 [ 746.309042][T12663] ? mgmt_send_event_skb+0x2fb/0x460 [ 746.309078][T12663] hci_conn_add_sysfs+0x17e/0x230 [ 746.309098][T12663] le_conn_complete_evt+0x1260/0x2150 [ 746.309133][T12663] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 746.309170][T12663] ? hci_event_packet+0x459/0x11c0 [ 746.309205][T12663] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 746.309237][T12663] ? skb_pull_data+0x166/0x210 [ 746.309266][T12663] hci_le_meta_evt+0x357/0x5e0 [ 746.309284][T12663] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 746.309319][T12663] hci_event_packet+0x685/0x11c0 [ 746.309347][T12663] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 746.309366][T12663] ? __pfx_hci_event_packet+0x10/0x10 [ 746.309397][T12663] ? kcov_remote_start+0x3c9/0x6d0 [ 746.309420][T12663] ? lockdep_hardirqs_on+0x7c/0x110 [ 746.309445][T12663] hci_rx_work+0x2c5/0x16b0 [ 746.309462][T12663] ? rcu_is_watching+0x12/0xc0 [ 746.309489][T12663] process_one_work+0x9cf/0x1b70 [ 746.309516][T12663] ? __pfx_rxrpc_peer_keepalive_worker+0x10/0x10 [ 746.309542][T12663] ? __pfx_process_one_work+0x10/0x10 [ 746.309569][T12663] ? assign_work+0x1a0/0x250 [ 746.309590][T12663] worker_thread+0x6c8/0xf10 [ 746.309621][T12663] ? __kthread_parkme+0x19e/0x250 [ 746.309650][T12663] ? __pfx_worker_thread+0x10/0x10 [ 746.309671][T12663] kthread+0x3c5/0x780 [ 746.309690][T12663] ? __pfx_kthread+0x10/0x10 [ 746.309711][T12663] ? rcu_is_watching+0x12/0xc0 [ 746.309736][T12663] ? __pfx_kthread+0x10/0x10 [ 746.309756][T12663] ret_from_fork+0x675/0x7d0 [ 746.309773][T12663] ? __pfx_kthread+0x10/0x10 [ 746.309792][T12663] ret_from_fork_asm+0x1a/0x30 [ 746.309834][T12663] [ 746.564373][T12663] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 746.595519][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 746.605317][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 746.605346][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 746.605359][ T52] Workqueue: hci6 hci_rx_work [ 746.605383][ T52] Call Trace: [ 746.605389][ T52] [ 746.605397][ T52] dump_stack_lvl+0x16c/0x1f0 [ 746.605424][ T52] sysfs_warn_dup+0x7f/0xa0 [ 746.605452][ T52] sysfs_create_dir_ns+0x24b/0x2b0 [ 746.605477][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 746.605501][ T52] ? find_held_lock+0x2b/0x80 [ 746.605530][ T52] ? do_raw_spin_unlock+0x172/0x230 [ 746.605554][ T52] kobject_add_internal+0x2c4/0x9b0 [ 746.605579][ T52] kobject_add+0x16e/0x240 [ 746.605600][ T52] ? __pfx_kobject_add+0x10/0x10 [ 746.605622][ T52] ? do_raw_spin_unlock+0x172/0x230 [ 746.605643][ T52] ? kobject_put+0xab/0x5a0 [ 746.605669][ T52] device_add+0x288/0x1aa0 [ 746.605694][ T52] ? __pfx_dev_set_name+0x10/0x10 [ 746.605718][ T52] ? __pfx_device_add+0x10/0x10 [ 746.605742][ T52] ? mgmt_send_event_skb+0x2fb/0x460 [ 746.605775][ T52] hci_conn_add_sysfs+0x17e/0x230 [ 746.605795][ T52] le_conn_complete_evt+0x1260/0x2150 [ 746.605829][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 746.605857][ T52] ? hci_event_packet+0x459/0x11c0 [ 746.605889][ T52] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 746.605918][ T52] ? skb_pull_data+0x166/0x210 [ 746.605945][ T52] hci_le_meta_evt+0x357/0x5e0 [ 746.605962][ T52] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 746.605993][ T52] hci_event_packet+0x685/0x11c0 [ 746.606020][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 746.606039][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 746.606069][ T52] ? kcov_remote_start+0x3c9/0x6d0 [ 746.606093][ T52] ? lockdep_hardirqs_on+0x7c/0x110 [ 746.606118][ T52] hci_rx_work+0x2c5/0x16b0 [ 746.606136][ T52] ? rcu_is_watching+0x12/0xc0 [ 746.606163][ T52] process_one_work+0x9cf/0x1b70 [ 746.606195][ T52] ? __pfx_process_one_work+0x10/0x10 [ 746.606222][ T52] ? assign_work+0x1a0/0x250 [ 746.606248][ T52] worker_thread+0x6c8/0xf10 [ 746.606279][ T52] ? __pfx_worker_thread+0x10/0x10 [ 746.606300][ T52] kthread+0x3c5/0x780 [ 746.606320][ T52] ? __pfx_kthread+0x10/0x10 [ 746.606340][ T52] ? rcu_is_watching+0x12/0xc0 [ 746.606364][ T52] ? __pfx_kthread+0x10/0x10 [ 746.606383][ T52] ret_from_fork+0x675/0x7d0 [ 746.606400][ T52] ? __pfx_kthread+0x10/0x10 [ 746.606425][ T52] ret_from_fork_asm+0x1a/0x30 [ 746.606464][ T52] [ 746.606545][ T52] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 746.916258][T12663] Bluetooth: hci3: failed to register connection device [ 746.925270][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.936331][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.942779][ T52] Bluetooth: hci6: failed to register connection device [ 747.248584][T14458] lo speed is unknown, defaulting to 1000 [ 747.260269][T14462] erofs (device nbd2): cannot find valid erofs superblock [ 747.442243][T14468] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 747.612692][T14469] netlink: 'syz.0.2096': attribute type 1 has an invalid length. [ 748.993413][T14469] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 749.062863][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 749.077955][ T5818] Bluetooth: hci6: command 0x0406 tx timeout [ 749.112474][T14477] Cannot find add_set index 0 as target [ 749.902805][ T8873] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 750.143758][ T8873] usb 3-1: Using ep0 maxpacket: 32 [ 750.151450][ T8873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.162231][ T8873] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 750.185444][ T8873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 750.624297][ T8873] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 750.633579][ T8873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.837547][ T8873] usb 3-1: config 0 descriptor?? [ 750.924120][T14494] lo speed is unknown, defaulting to 1000 [ 751.382238][T14506] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 751.542745][T14507] netlink: 'syz.1.2102': attribute type 1 has an invalid length. [ 752.399198][ T8873] usbhid 3-1:0.0: can't add hid device: -71 [ 752.405300][ T8873] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 752.433753][ T8873] usb 3-1: USB disconnect, device number 53 [ 752.848474][T14507] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 752.937170][T14500] lo speed is unknown, defaulting to 1000 [ 753.356784][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 753.366535][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 753.366563][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 753.366577][ T52] Workqueue: hci1 hci_rx_work [ 753.366602][ T52] Call Trace: [ 753.366609][ T52] [ 753.366619][ T52] dump_stack_lvl+0x16c/0x1f0 [ 753.366642][ T52] sysfs_warn_dup+0x7f/0xa0 [ 753.366668][ T52] sysfs_create_dir_ns+0x24b/0x2b0 [ 753.366693][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 753.366721][ T52] ? preempt_schedule_thunk+0x16/0x30 [ 753.366760][ T52] kobject_add_internal+0x2c4/0x9b0 [ 753.366788][ T52] kobject_add+0x16e/0x240 [ 753.366810][ T52] ? __pfx_kobject_add+0x10/0x10 [ 753.366837][ T52] ? kobject_put+0xab/0x5a0 [ 753.366865][ T52] device_add+0x288/0x1aa0 [ 753.366890][ T52] ? __pfx_dev_set_name+0x10/0x10 [ 753.366916][ T52] ? __pfx_device_add+0x10/0x10 [ 753.366940][ T52] ? mgmt_send_event_skb+0x2fb/0x460 [ 753.366974][ T52] hci_conn_add_sysfs+0x17e/0x230 [ 753.366994][ T52] le_conn_complete_evt+0x1260/0x2150 [ 753.367029][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 753.367059][ T52] ? lockdep_hardirqs_on+0x7c/0x110 [ 753.367083][ T52] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 753.367112][ T52] ? skb_pull_data+0x166/0x210 [ 753.367139][ T52] hci_le_meta_evt+0x357/0x5e0 [ 753.367155][ T52] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 753.367201][ T52] hci_event_packet+0x685/0x11c0 [ 753.367230][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 753.367250][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 753.367286][ T52] ? kcov_remote_start+0x3d9/0x6d0 [ 753.367316][ T52] hci_rx_work+0x2c5/0x16b0 [ 753.367340][ T52] process_one_work+0x9cf/0x1b70 [ 753.367373][ T52] ? __pfx_process_one_work+0x10/0x10 [ 753.367401][ T52] ? assign_work+0x1a0/0x250 [ 753.367423][ T52] worker_thread+0x6c8/0xf10 [ 753.367461][ T52] ? __pfx_worker_thread+0x10/0x10 [ 753.367482][ T52] kthread+0x3c5/0x780 [ 753.367502][ T52] ? __pfx_kthread+0x10/0x10 [ 753.367522][ T52] ? rcu_is_watching+0x12/0xc0 [ 753.367547][ T52] ? __pfx_kthread+0x10/0x10 [ 753.367567][ T52] ret_from_fork+0x675/0x7d0 [ 753.367584][ T52] ? __pfx_kthread+0x10/0x10 [ 753.367605][ T52] ret_from_fork_asm+0x1a/0x30 [ 753.367645][ T52] [ 753.367804][ T52] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 753.520631][T14512] input: syz1 as /devices/virtual/input/input79 [ 753.527124][ T52] Bluetooth: hci1: failed to register connection device [ 754.299193][T14529] Cannot find add_set index 0 as target [ 754.338387][T14531] Cannot find add_set index 0 as target [ 754.997670][T14536] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 755.672607][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 755.955338][T14550] lo speed is unknown, defaulting to 1000 [ 756.345897][T14553] lo speed is unknown, defaulting to 1000 [ 757.322698][ T8873] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 757.495075][ T8873] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 757.505005][ T8873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 757.515824][ T8873] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 757.524997][ T8873] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 757.533357][ T8873] usb 3-1: Product: syz [ 757.537543][ T8873] usb 3-1: Manufacturer: syz [ 757.542149][ T8873] usb 3-1: SerialNumber: syz [ 757.548498][ T8873] usb 3-1: config 0 descriptor?? [ 757.556366][ T8873] usb 3-1: selecting invalid altsetting 0 [ 760.108435][T14096] usb 3-1: USB disconnect, device number 54 [ 760.149874][T14572] fuse: Bad value for 'fd' [ 760.727158][T14576] Cannot find add_set index 0 as target [ 761.056238][ T30] audit: type=1326 audit(1763947528.729:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14581 comm="syz.1.2123" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b2bf8f749 code=0x0 [ 761.147242][ T5818] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 761.156825][ T5818] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 761.165614][ T5818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 761.173386][ T5818] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 761.180829][ T5818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 761.211519][T14584] lo speed is unknown, defaulting to 1000 [ 761.299608][T14584] chnl_net:caif_netlink_parms(): no params data found [ 761.376738][T14584] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.384110][T14584] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.391346][T14584] bridge_slave_0: entered allmulticast mode [ 761.399380][T14584] bridge_slave_0: entered promiscuous mode [ 761.413377][T14584] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.420620][T14584] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.428172][T14584] bridge_slave_1: entered allmulticast mode [ 761.436586][T14584] bridge_slave_1: entered promiscuous mode [ 761.470875][T14584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.484125][T14584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.831002][T14584] team0: Port device team_slave_0 added [ 761.846396][T14584] team0: Port device team_slave_1 added [ 761.880674][T14584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.892663][T14584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.922964][T14584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.944771][T14584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.951814][T14584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.017870][T14584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.062740][T14598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2125'. [ 762.124257][T14584] hsr_slave_0: entered promiscuous mode [ 762.133644][T14584] hsr_slave_1: entered promiscuous mode [ 762.153431][T14584] debugfs: 'hsr0' already exists in 'hsr' [ 762.159199][T14584] Cannot create hsr debugfs directory [ 762.295893][T14607] tipc: Started in network mode [ 762.300918][T14607] tipc: Node identity ac14140f, cluster identity 4711 [ 762.308497][T14607] tipc: New replicast peer: 255.255.255.255 [ 762.316116][T14607] tipc: Enabled bearer , priority 10 [ 762.578867][T14584] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 762.802534][ T5945] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 762.849697][T14584] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 762.864808][T14584] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 762.876451][T14584] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 762.928353][T14584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.944929][T14584] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.964447][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.971547][ T6441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.979886][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 762.993451][ T5945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.005915][ T5945] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 763.020695][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.027860][ T6441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.035808][ T5945] usb 3-1: config 0 interface 0 has no altsetting 0 [ 763.042579][ T5945] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 763.053276][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.071677][ T5945] usb 3-1: config 0 descriptor?? [ 763.233280][ T5818] Bluetooth: hci7: command tx timeout [ 763.244015][T14584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.281680][ T30] audit: type=1400 audit(1763947530.949:1192): avc: denied { ioctl } for pid=14612 comm="syz.1.2131" path="/473/file0" dev="tmpfs" ino=2605 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 763.314000][ T8873] tipc: Node number set to 2886997007 [ 763.416819][T14584] veth0_vlan: entered promiscuous mode [ 763.428464][T14584] veth1_vlan: entered promiscuous mode [ 763.455707][T14584] veth0_macvtap: entered promiscuous mode [ 763.464423][T14584] veth1_macvtap: entered promiscuous mode [ 763.478963][T14584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.495996][T14584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.509091][T13811] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.518633][T13811] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.527536][T13811] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.541242][T13811] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.599135][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.607690][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.629073][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.637526][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.704473][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2122'. [ 763.978867][T14641] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14641 comm=syz.7.2133 [ 763.999548][T14641] netlink: 'syz.7.2133': attribute type 1 has an invalid length. [ 764.007564][T14641] netlink: 'syz.7.2133': attribute type 2 has an invalid length. [ 764.390456][T14648] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 765.562976][ T5818] Bluetooth: hci7: command tx timeout [ 765.779589][ T5945] usbhid 3-1:0.0: can't add hid device: -71 [ 765.802440][ T5945] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 765.881560][ T5945] usb 3-1: USB disconnect, device number 55 [ 766.404759][T14662] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2139'. [ 766.945917][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 766.956999][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 766.967823][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 766.975643][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 766.986834][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 767.206079][T14666] lo speed is unknown, defaulting to 1000 [ 767.496946][ T5818] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 767.532349][ T5818] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 767.543901][ T5818] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 767.551772][ T5818] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 767.559637][ T5818] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 767.635441][ T5818] Bluetooth: hci7: command tx timeout [ 767.650271][T14681] Cannot find add_set index 0 as target [ 767.702038][T14671] lo speed is unknown, defaulting to 1000 [ 767.859252][T14689] erofs (device nbd7): cannot find valid erofs superblock [ 767.908216][T14666] chnl_net:caif_netlink_parms(): no params data found [ 767.947641][T14689] Cannot find add_set index 0 as target [ 768.145045][T14666] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.160488][T14666] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.178833][T14666] bridge_slave_0: entered allmulticast mode [ 768.217019][T14666] bridge_slave_0: entered promiscuous mode [ 768.231555][T14666] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.240177][T14666] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.247669][T14666] bridge_slave_1: entered allmulticast mode [ 768.255872][T14666] bridge_slave_1: entered promiscuous mode [ 768.392974][ T5818] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 768.404693][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 768.404721][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 768.404735][ T5818] Workqueue: hci3 hci_rx_work [ 768.404758][ T5818] Call Trace: [ 768.404764][ T5818] [ 768.404774][ T5818] dump_stack_lvl+0x16c/0x1f0 [ 768.404795][ T5818] sysfs_warn_dup+0x7f/0xa0 [ 768.404821][ T5818] sysfs_create_dir_ns+0x24b/0x2b0 [ 768.404845][ T5818] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 768.404869][ T5818] ? find_held_lock+0x2b/0x80 [ 768.404900][ T5818] ? do_raw_spin_unlock+0x172/0x230 [ 768.404925][ T5818] kobject_add_internal+0x2c4/0x9b0 [ 768.404951][ T5818] kobject_add+0x16e/0x240 [ 768.404971][ T5818] ? __pfx_kobject_add+0x10/0x10 [ 768.405002][ T5818] ? kobject_put+0xab/0x5a0 [ 768.405029][ T5818] device_add+0x288/0x1aa0 [ 768.405053][ T5818] ? __pfx_dev_set_name+0x10/0x10 [ 768.405078][ T5818] ? __pfx_device_add+0x10/0x10 [ 768.405106][ T5818] ? hci_conn_add_sysfs+0x88/0x230 [ 768.405128][ T5818] hci_conn_add_sysfs+0x17e/0x230 [ 768.405148][ T5818] le_conn_complete_evt+0x1260/0x2150 [ 768.405184][ T5818] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 768.405211][ T5818] ? hci_event_packet+0x459/0x11c0 [ 768.405246][ T5818] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 768.405275][ T5818] ? skb_pull_data+0x166/0x210 [ 768.405302][ T5818] hci_le_meta_evt+0x357/0x5e0 [ 768.405319][ T5818] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 768.405350][ T5818] hci_event_packet+0x685/0x11c0 [ 768.405377][ T5818] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 768.405396][ T5818] ? __pfx_hci_event_packet+0x10/0x10 [ 768.405428][ T5818] ? kcov_remote_start+0x3d9/0x6d0 [ 768.405458][ T5818] hci_rx_work+0x2c5/0x16b0 [ 768.405482][ T5818] process_one_work+0x9cf/0x1b70 [ 768.405513][ T5818] ? __pfx_process_one_work+0x10/0x10 [ 768.405541][ T5818] ? assign_work+0x1a0/0x250 [ 768.405562][ T5818] worker_thread+0x6c8/0xf10 [ 768.405594][ T5818] ? __pfx_worker_thread+0x10/0x10 [ 768.405614][ T5818] kthread+0x3c5/0x780 [ 768.405633][ T5818] ? __pfx_kthread+0x10/0x10 [ 768.405654][ T5818] ? rcu_is_watching+0x12/0xc0 [ 768.405678][ T5818] ? __pfx_kthread+0x10/0x10 [ 768.405697][ T5818] ret_from_fork+0x675/0x7d0 [ 768.405714][ T5818] ? __pfx_kthread+0x10/0x10 [ 768.405734][ T5818] ret_from_fork_asm+0x1a/0x30 [ 768.405774][ T5818] [ 768.407595][ T5818] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 768.652315][ T5818] Bluetooth: hci3: failed to register connection device [ 768.778230][T14666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.829132][T14666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.343553][ T5818] Bluetooth: hci8: command tx timeout [ 769.403700][T14666] team0: Port device team_slave_0 added [ 769.419840][T14666] team0: Port device team_slave_1 added [ 769.527927][T14666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.553049][T14666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.585205][T14096] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 769.640125][T14666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.643162][ T5818] Bluetooth: hci9: command tx timeout [ 769.684537][T14671] chnl_net:caif_netlink_parms(): no params data found [ 769.704316][T14666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.713069][ T5818] Bluetooth: hci7: command tx timeout [ 769.729278][T14666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.757255][T14666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.772513][T14096] usb 8-1: Using ep0 maxpacket: 32 [ 769.793184][T14096] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.817782][T14096] usb 8-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 769.838993][T14096] usb 8-1: config 0 interface 0 has no altsetting 0 [ 769.846070][T14096] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 769.855425][T14096] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.868319][T14096] usb 8-1: config 0 descriptor?? [ 770.004524][T14666] hsr_slave_0: entered promiscuous mode [ 770.013015][T14666] hsr_slave_1: entered promiscuous mode [ 770.019780][T14666] debugfs: 'hsr0' already exists in 'hsr' [ 770.026257][T14666] Cannot create hsr debugfs directory [ 770.119674][T14671] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.135428][T14671] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.152880][T14671] bridge_slave_0: entered allmulticast mode [ 770.160988][T14671] bridge_slave_0: entered promiscuous mode [ 770.169921][T14671] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.177749][T14671] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.185319][T14671] bridge_slave_1: entered allmulticast mode [ 770.193838][T14671] bridge_slave_1: entered promiscuous mode [ 770.285368][T14671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.336240][T14671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.390049][T14671] team0: Port device team_slave_0 added [ 770.399971][T14671] team0: Port device team_slave_1 added [ 770.461267][T14671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.468548][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.511889][T14671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.638187][ T5818] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 770.648225][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 770.648252][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 770.648267][ T5818] Workqueue: hci1 hci_rx_work [ 770.648290][ T5818] Call Trace: [ 770.648298][ T5818] [ 770.648308][ T5818] dump_stack_lvl+0x16c/0x1f0 [ 770.648333][ T5818] sysfs_warn_dup+0x7f/0xa0 [ 770.648360][ T5818] sysfs_create_dir_ns+0x24b/0x2b0 [ 770.648386][ T5818] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 770.648411][ T5818] ? find_held_lock+0x2b/0x80 [ 770.648441][ T5818] ? do_raw_spin_unlock+0x172/0x230 [ 770.648464][ T5818] kobject_add_internal+0x2c4/0x9b0 [ 770.648491][ T5818] kobject_add+0x16e/0x240 [ 770.648512][ T5818] ? __pfx_kobject_add+0x10/0x10 [ 770.648537][ T5818] ? kobject_put+0xab/0x5a0 [ 770.648565][ T5818] device_add+0x288/0x1aa0 [ 770.648589][ T5818] ? __pfx_dev_set_name+0x10/0x10 [ 770.648615][ T5818] ? __pfx_device_add+0x10/0x10 [ 770.648648][ T5818] hci_conn_add_sysfs+0x17e/0x230 [ 770.648669][ T5818] le_conn_complete_evt+0x1260/0x2150 [ 770.648702][ T5818] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 770.648729][ T5818] ? hci_event_packet+0x459/0x11c0 [ 770.648763][ T5818] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 770.648792][ T5818] ? skb_pull_data+0x166/0x210 [ 770.648819][ T5818] hci_le_meta_evt+0x357/0x5e0 [ 770.648836][ T5818] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 770.648868][ T5818] hci_event_packet+0x685/0x11c0 [ 770.648895][ T5818] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 770.648914][ T5818] ? __pfx_hci_event_packet+0x10/0x10 [ 770.648946][ T5818] ? kcov_remote_start+0x3d9/0x6d0 [ 770.648975][ T5818] hci_rx_work+0x2c5/0x16b0 [ 770.648999][ T5818] process_one_work+0x9cf/0x1b70 [ 770.649031][ T5818] ? __pfx_process_one_work+0x10/0x10 [ 770.649059][ T5818] ? assign_work+0x1a0/0x250 [ 770.649081][ T5818] worker_thread+0x6c8/0xf10 [ 770.649114][ T5818] ? __pfx_worker_thread+0x10/0x10 [ 770.649135][ T5818] kthread+0x3c5/0x780 [ 770.649154][ T5818] ? __pfx_kthread+0x10/0x10 [ 770.649175][ T5818] ? rcu_is_watching+0x12/0xc0 [ 770.649199][ T5818] ? __pfx_kthread+0x10/0x10 [ 770.649224][ T5818] ret_from_fork+0x675/0x7d0 [ 770.649241][ T5818] ? __pfx_kthread+0x10/0x10 [ 770.649260][ T5818] ret_from_fork_asm+0x1a/0x30 [ 770.649301][ T5818] [ 770.757978][T14671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.796291][ T5818] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 770.806439][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 770.901814][T14735] input: syz1 as /devices/virtual/input/input80 [ 770.911909][ T5818] Bluetooth: hci1: failed to register connection device [ 770.929480][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.955821][T14671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.098676][T14671] hsr_slave_0: entered promiscuous mode [ 771.215936][T14671] hsr_slave_1: entered promiscuous mode [ 771.229755][T14671] debugfs: 'hsr0' already exists in 'hsr' [ 771.237246][T14671] Cannot create hsr debugfs directory [ 771.354695][T14740] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 771.522774][T14741] netlink: 'syz.1.2157': attribute type 1 has an invalid length. [ 771.665528][ T52] Bluetooth: hci8: command tx timeout [ 771.713149][ T52] Bluetooth: hci9: command tx timeout [ 772.268374][T14741] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 772.275269][T14096] usbhid 8-1:0.0: can't add hid device: -71 [ 772.633525][T14096] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 772.654388][T14096] usb 8-1: USB disconnect, device number 2 [ 772.943886][T14666] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 772.965298][T14666] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 772.998094][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 773.021724][T14666] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 773.220268][T14666] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 773.334547][T14750] input: syz1 as /devices/virtual/input/input81 [ 773.435327][T14671] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 773.447147][T14671] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 773.472536][T14671] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 773.513237][T14671] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 773.598243][T14666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.629611][T14666] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.649243][T14754] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.656396][T14754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.678845][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.686016][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.713509][ T52] Bluetooth: hci8: command tx timeout [ 773.771632][T14671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.794040][ T52] Bluetooth: hci9: command tx timeout [ 773.804431][T14096] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 773.821787][T14671] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.842426][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.849530][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.858800][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.866026][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.964340][T14096] usb 3-1: config 0 has an invalid interface number: 225 but max is 0 [ 773.971294][T14666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.984492][T14096] usb 3-1: config 0 has no interface number 0 [ 773.990622][T14096] usb 3-1: config 0 interface 225 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 774.059537][T14096] usb 3-1: New USB device found, idVendor=0bda, idProduct=8176, bcdDevice=8c.d9 [ 774.230809][T14096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.277000][T14096] usb 3-1: Product: syz [ 774.288038][T14096] usb 3-1: Manufacturer: syz [ 774.292759][T14096] usb 3-1: SerialNumber: syz [ 774.303465][T14096] usb 3-1: config 0 descriptor?? [ 774.309010][T14768] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 775.301857][T14797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2167'. [ 775.322933][ T43] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 775.336357][T14671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.474187][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 775.489319][ T43] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.513558][ T43] usb 8-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 775.546130][ T43] usb 8-1: config 0 interface 0 has no altsetting 0 [ 775.575038][ T43] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 775.589775][T14666] veth0_vlan: entered promiscuous mode [ 775.601738][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.621187][T14666] veth1_vlan: entered promiscuous mode [ 775.626254][T14096] usb 3-1: USB disconnect, device number 56 [ 775.654774][ T43] usb 8-1: config 0 descriptor?? [ 775.725086][T14666] veth0_macvtap: entered promiscuous mode [ 775.754968][T14666] veth1_macvtap: entered promiscuous mode [ 775.770157][T14671] veth0_vlan: entered promiscuous mode [ 775.785329][T14671] veth1_vlan: entered promiscuous mode [ 775.792676][ T52] Bluetooth: hci8: command tx timeout [ 775.800775][T14812] program syz.2.2169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 775.823892][T14666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.836299][T14666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.867004][ T752] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.877516][ T52] Bluetooth: hci9: command tx timeout [ 775.891890][T14671] veth0_macvtap: entered promiscuous mode [ 775.902230][ T752] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.912814][ T752] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.921542][ T752] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.014119][T14671] veth1_macvtap: entered promiscuous mode [ 776.126138][T14812] syz.2.2169 (14812): drop_caches: 2 [ 776.160049][T14671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.268811][T14671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.317039][ T6441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.338930][ T6441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.377145][ T752] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.392663][ T752] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.419008][ T752] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.439493][ T6441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.447936][ T752] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.460436][ T6441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.549856][ T6441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.558371][ T6441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.698719][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.708720][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.728851][T14819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14819 comm=syz.1.2170 [ 777.020152][T14831] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 778.506570][ T43] usbhid 8-1:0.0: can't add hid device: -71 [ 778.581496][ T43] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 778.631338][ T43] usb 8-1: USB disconnect, device number 3 [ 778.941634][T14841] syzkaller0: entered promiscuous mode [ 778.952699][T14841] syzkaller0: entered allmulticast mode [ 779.062428][ T52] Bluetooth: hci7: unknown advertising packet type: 0x6c [ 779.062481][ T52] Bluetooth: hci7: Dropping invalid advertising data [ 779.077564][ T52] Bluetooth: hci7: unknown advertising packet type: 0x20 [ 779.077582][ T52] Bluetooth: hci7: Malformed LE Event: 0x02 [ 779.102573][ T8873] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 779.298170][ T8873] usb 3-1: Using ep0 maxpacket: 16 [ 779.312536][T14846] batadv_slave_0: entered promiscuous mode [ 779.321488][T14846] macvtap1: entered promiscuous mode [ 779.340682][ T8873] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 779.354530][T14846] macvtap1: entered allmulticast mode [ 779.356586][ T8873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.372475][T14846] batadv_slave_0: entered allmulticast mode [ 779.383118][ T8873] usb 3-1: Product: syz [ 779.385324][T14846] batman_adv: batadv0: Adding interface: macvtap1 [ 779.393750][ T8873] usb 3-1: Manufacturer: syz [ 779.393770][ T8873] usb 3-1: SerialNumber: syz [ 779.405954][ T8873] usb 3-1: config 0 descriptor?? [ 779.411615][T14846] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.416010][ T8873] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 779.450380][T14846] batman_adv: batadv0: Interface activated: macvtap1 [ 779.456879][T14855] input: syz1 as /devices/virtual/input/input82 [ 780.214051][ T8873] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 780.811026][T14873] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 780.853935][ T8873] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 781.006975][T14873] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2186'. [ 781.023042][ T8873] usb 10-1: Using ep0 maxpacket: 16 [ 781.061460][ T8873] usb 10-1: config 0 has an invalid interface number: 217 but max is 0 [ 781.078741][ T8873] usb 10-1: config 0 has no interface number 0 [ 781.091112][ T8873] usb 10-1: config 0 interface 217 has no altsetting 0 [ 781.187378][ T8873] usb 10-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=ce.a8 [ 781.648191][ T8873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.658451][ T8873] usb 10-1: Product: syz [ 781.664794][ T8873] usb 10-1: Manufacturer: syz [ 781.669487][ T8873] usb 10-1: SerialNumber: syz [ 781.684582][ T8873] usb 10-1: config 0 descriptor?? [ 781.867779][T14884] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2190'. [ 782.176065][ T5953] usb 3-1: USB disconnect, device number 57 [ 782.634097][T14899] xt_CT: You must specify a L4 protocol and not use inversions on it [ 783.472314][T14901] lo speed is unknown, defaulting to 1000 [ 783.488534][ T5875] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 783.800817][ T5945] usb 10-1: USB disconnect, device number 2 [ 783.959462][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 783.988237][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.120702][ T5875] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 784.184832][ T5875] usb 3-1: config 0 interface 0 has no altsetting 0 [ 784.190908][T14912] erofs (device nbd7): cannot find valid erofs superblock [ 784.205400][ T5875] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 784.216556][T14912] Cannot find add_set index 0 as target [ 784.260265][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.283171][ T5875] usb 3-1: config 0 descriptor?? [ 784.452769][ T5945] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 784.537410][T14917] input: syz1 as /devices/virtual/input/input83 [ 784.634174][ T5945] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 784.643311][ T5945] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.655206][ T5945] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 784.664888][ T5945] usb 10-1: config 1 has no interface number 1 [ 784.671190][ T5945] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 784.688019][ T5945] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 784.697606][ T5945] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.705971][ T5945] usb 10-1: Product: syz [ 784.710408][ T5945] usb 10-1: Manufacturer: syz [ 784.715335][ T5945] usb 10-1: SerialNumber: syz [ 785.280410][T14929] Cannot find add_set index 0 as target [ 785.616625][ T5875] usbhid 3-1:0.0: can't add hid device: -71 [ 785.725998][ T5875] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 785.754263][ T5945] usb 10-1: USB disconnect, device number 3 [ 785.917693][T13136] udevd[13136]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.982107][ T5875] usb 3-1: USB disconnect, device number 58 [ 786.022326][T14936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2202'. [ 786.251941][T14941] Unsupported ieee802154 address type: 0 [ 786.252461][ T5868] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 786.270314][T14941] 9pnet_fd: Insufficient options for proto=fd [ 786.435161][ T5868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 786.497553][ T5868] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 786.531017][ T5868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 786.542529][ T5889] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 786.557849][ T5868] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 786.610259][ T5868] usb 8-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 786.631417][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.642456][ T5868] usb 8-1: Product: syz [ 786.648837][ T5868] usb 8-1: Manufacturer: syz [ 786.656435][ T5868] usb 8-1: SerialNumber: syz [ 786.703073][ T5868] usb 8-1: config 0 descriptor?? [ 786.729793][ T5868] ums-isd200 8-1:0.0: USB Mass Storage device detected [ 786.765631][T14950] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 786.867942][ T5889] usb 9-1: config 0 has an invalid interface number: 151 but max is 0 [ 786.885817][ T5889] usb 9-1: config 0 has no interface number 0 [ 786.892289][ T5889] usb 9-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 786.904206][ T5889] usb 9-1: config 0 interface 151 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 786.918120][ T5889] usb 9-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 786.928334][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.938430][ T5889] usb 9-1: Product: syz [ 786.943502][ T5889] usb 9-1: Manufacturer: syz [ 786.948085][ T5889] usb 9-1: SerialNumber: syz [ 786.954785][ T5889] usb 9-1: config 0 descriptor?? [ 786.960396][T14941] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 787.047926][T14932] input: syz1 as /devices/virtual/input/input84 [ 787.132694][ T5861] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 787.180467][T14940] ip6erspan0: entered promiscuous mode [ 787.262905][ T5889] usb 9-1: USB disconnect, device number 2 [ 787.304154][ T5861] usb 10-1: config 0 has an invalid interface number: 225 but max is 0 [ 787.312781][ T5861] usb 10-1: config 0 has no interface number 0 [ 787.322708][ T5861] usb 10-1: config 0 interface 225 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 787.336161][ T5861] usb 10-1: New USB device found, idVendor=0bda, idProduct=8176, bcdDevice=8c.d9 [ 787.345930][ T5861] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.349891][T13136] udevd[13136]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 787.355067][ T5861] usb 10-1: Product: syz [ 787.384167][T14958] input: syz1 as /devices/virtual/input/input85 [ 787.429146][ T5861] usb 10-1: Manufacturer: syz [ 787.523940][T14960] tipc: Enabling of bearer rejected, failed to enable media [ 787.542824][ T5861] usb 10-1: SerialNumber: syz [ 787.561832][ T5861] usb 10-1: config 0 descriptor?? [ 787.568394][T14954] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 787.593350][T14962] ksmbd: Unknown IPC event: 0, ignore. [ 789.466839][ T5868] scsi host1: usb-storage 8-1:0.0 [ 789.607407][ T5868] usb 8-1: USB disconnect, device number 4 [ 789.712195][ T5889] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 789.956601][ T5889] usb 9-1: Using ep0 maxpacket: 8 [ 790.104715][ T5889] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 790.122432][ T5889] usb 9-1: config 0 has no interface number 0 [ 790.141154][ T5889] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 790.203835][ T5861] usb 10-1: USB disconnect, device number 4 [ 790.349175][ T5889] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 790.373597][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.409394][ T5889] usb 9-1: config 0 descriptor?? [ 790.439622][T14993] erofs (device nbd9): cannot find valid erofs superblock [ 790.449805][T14993] Cannot find add_set index 0 as target [ 790.474649][ T5889] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 790.588954][T14987] lo speed is unknown, defaulting to 1000 [ 790.847301][ T5889] usb 9-1: USB disconnect, device number 3 [ 790.853225][ C0] iowarrior 9-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 791.522685][ T5889] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 791.575968][T15010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 792.006880][T15000] lo speed is unknown, defaulting to 1000 [ 792.287603][ T5889] usb 9-1: Using ep0 maxpacket: 8 [ 792.299663][ T5889] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 792.312673][ T5889] usb 9-1: config 0 has no interface number 0 [ 792.318982][ T5889] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 792.330054][ T5889] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 792.339449][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.350736][ T5889] usb 9-1: config 0 descriptor?? [ 792.367850][ T5889] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 792.457750][ T5889] usb 9-1: USB disconnect, device number 4 [ 792.523221][ T5875] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 792.541309][T15022] erofs (device nbd2): cannot find valid erofs superblock [ 792.553208][T15022] Cannot find add_set index 0 as target [ 792.717925][ T5875] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 792.883056][ T5875] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 792.920472][ T5875] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 792.930527][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.941710][ T5875] usb 10-1: Product: syz [ 792.947429][ T5875] usb 10-1: Manufacturer: syz [ 792.952282][ T5875] usb 10-1: SerialNumber: syz [ 792.996128][ T5875] usb 10-1: config 0 descriptor?? [ 793.370048][T15031] lo speed is unknown, defaulting to 1000 [ 793.969364][T15034] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 794.213825][ T5953] usb 10-1: USB disconnect, device number 5 [ 794.753461][ T31] INFO: task kworker/u8:3:51 blocked for more than 143 seconds. [ 794.761937][ T31] Not tainted syzkaller #0 [ 794.774554][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 794.787060][ T31] task:kworker/u8:3 state:D stack:23720 pid:51 tgid:51 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 794.807862][ T31] Workqueue: netns cleanup_net [ 794.812983][ T31] Call Trace: [ 794.826545][ T31] [ 794.829570][ T31] __schedule+0x1190/0x5de0 [ 794.835344][ T31] ? __lock_acquire+0x622/0x1c90 [ 794.835472][T15045] erofs (device nbd2): cannot find valid erofs superblock [ 794.840386][ T31] ? __pfx___schedule+0x10/0x10 [ 794.852345][ T31] ? find_held_lock+0x2b/0x80 [ 794.857489][ T31] ? schedule+0x2d7/0x3a0 [ 794.861858][ T31] ? rdma_dev_change_netns+0x30/0x320 [ 794.867275][ T31] schedule+0xe7/0x3a0 [ 794.871325][ T31] schedule_preempt_disabled+0x13/0x30 [ 794.890387][ T31] __mutex_lock+0x818/0x1060 [ 794.895448][T15045] Cannot find add_set index 0 as target [ 794.911070][ T31] ? rdma_dev_change_netns+0x30/0x320 [ 794.917288][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 794.924040][ T31] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 794.933208][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 794.939204][ T31] ? find_held_lock+0x2b/0x80 [ 794.944254][ T31] ? rdma_dev_change_netns+0x30/0x320 [ 794.949627][ T31] rdma_dev_change_netns+0x30/0x320 [ 794.954907][ T31] rdma_dev_exit_net+0x2dd/0x590 [ 794.959849][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 794.965407][ T31] ? cfg80211_pernet_exit+0x27/0x150 [ 794.970685][ T31] ? __pfx___might_resched+0x10/0x10 [ 794.976070][ T31] ? cfg80211_pernet_exit+0x75/0x150 [ 794.981347][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 794.989083][ T31] ops_undo_list+0x2ee/0xab0 [ 794.993771][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 794.998890][ T31] ? cleanup_net+0x347/0x8b0 [ 795.003574][ T31] ? idr_destroy+0x62/0x2e0 [ 795.008140][ T31] cleanup_net+0x41b/0x8b0 [ 795.012632][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 795.017617][ T31] ? rcu_is_watching+0x12/0xc0 [ 795.022493][ T31] process_one_work+0x9cf/0x1b70 [ 795.027624][ T31] ? __pfx_l2tp_session_del_work+0x10/0x10 [ 795.033554][ T31] ? __pfx_process_one_work+0x10/0x10 [ 795.038921][ T31] ? assign_work+0x1a0/0x250 [ 795.043527][ T31] worker_thread+0x6c8/0xf10 [ 795.048116][ T31] ? __pfx_worker_thread+0x10/0x10 [ 795.053276][ T31] kthread+0x3c5/0x780 [ 795.057335][ T31] ? __pfx_kthread+0x10/0x10 [ 795.062164][ T31] ? rcu_is_watching+0x12/0xc0 [ 795.067166][ T31] ? __pfx_kthread+0x10/0x10 [ 795.071758][ T31] ret_from_fork+0x675/0x7d0 [ 795.076479][ T31] ? __pfx_kthread+0x10/0x10 [ 795.081066][ T31] ret_from_fork_asm+0x1a/0x30 [ 795.085952][ T31] [ 795.089173][ T31] INFO: task syz.4.1793:13177 blocked for more than 143 seconds. [ 795.097119][ T31] Not tainted syzkaller #0 [ 795.102044][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 795.135551][ T31] task:syz.4.1793 state:D stack:23544 pid:13177 tgid:13175 ppid:5815 task_flags:0x400140 flags:0x00080003 [ 795.147628][ T31] Call Trace: [ 795.150909][ T31] [ 795.154200][ T31] __schedule+0x1190/0x5de0 [ 795.158722][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 795.164684][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 795.169918][ T31] ? __lock_acquire+0x622/0x1c90 [ 795.174951][ T31] ? __pfx___schedule+0x10/0x10 [ 795.179815][ T31] ? find_held_lock+0x2b/0x80 [ 795.184639][ T31] ? schedule+0x2d7/0x3a0 [ 795.188976][ T31] schedule+0xe7/0x3a0 [ 795.193139][ T31] schedule_timeout+0x257/0x290 [ 795.197993][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 795.203449][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 795.208869][ T31] __wait_for_common+0x2fc/0x4e0 [ 795.213873][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 795.219247][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 795.224753][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 795.230131][ T31] disable_device+0x16f/0x280 [ 795.234904][ T31] ? __pfx_disable_device+0x10/0x10 [ 795.240106][ T31] __ib_unregister_device+0x2b4/0x480 [ 795.245526][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 795.251427][ T31] ib_unregister_device_and_put+0x5a/0x80 [ 795.257257][ T31] nldev_dellink+0x21f/0x320 [ 795.261845][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 795.267103][ T31] ? cap_capable+0xb3/0x250 [ 795.271596][ T31] ? bpf_lsm_capable+0x9/0x10 [ 795.276313][ T31] ? security_capable+0x7e/0x260 [ 795.281254][ T31] ? ns_capable+0xd7/0x110 [ 795.285695][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 795.290803][ T31] rdma_nl_rcv_msg+0x38a/0x6e0 [ 795.295662][ T31] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 795.300962][ T31] ? __lock_acquire+0x622/0x1c90 [ 795.305944][ T31] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 795.312404][ T31] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 795.319339][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 795.324722][ T31] netlink_unicast+0x5aa/0x870 [ 795.329486][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 795.335074][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 795.339851][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.345210][ T31] ____sys_sendmsg+0xa98/0xc70 [ 795.349964][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 795.355444][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 795.360720][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 795.366104][ T31] ___sys_sendmsg+0x134/0x1d0 [ 795.370786][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.376023][ T31] ? __lock_acquire+0x622/0x1c90 [ 795.380989][ T31] __sys_sendmsg+0x16d/0x220 [ 795.385701][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 795.390808][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 795.397056][ T31] do_syscall_64+0xcd/0xfa0 [ 795.401603][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.407585][ T31] RIP: 0033:0x7f8c0758f749 [ 795.411991][ T31] RSP: 002b:00007f8c057f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.420417][ T31] RAX: ffffffffffffffda RBX: 00007f8c077e5fa0 RCX: 00007f8c0758f749 [ 795.428457][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 795.438604][ T31] RBP: 00007f8c07613f91 R08: 0000000000000000 R09: 0000000000000000 [ 795.446661][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.454766][ T31] R13: 00007f8c077e6038 R14: 00007f8c077e5fa0 R15: 00007ffe485375c8 [ 795.462789][ T31] [ 795.465840][ T31] [ 795.465840][ T31] Showing all locks held in the system: [ 795.475183][ T31] 1 lock held by ksoftirqd/0/15: [ 795.480140][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 795.491389][ T31] 1 lock held by khungtaskd/31: [ 795.496326][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 795.506276][ T31] 4 locks held by kworker/u8:3/51: [ 795.511367][ T31] #0: ffff88801ba94948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 795.522482][ T31] #1: ffffc90000bc7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 795.532445][ T31] #2: ffffffff900d1910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 795.541959][ T31] #3: ffff888055dd8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 795.553368][ T31] 3 locks held by kworker/u8:7/2946: [ 795.558641][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 795.568551][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 795.577287][ T31] #2: ffff8880b8425b18 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6b8/0xd30 [ 795.586315][ T31] 1 lock held by klogd/5173: [ 795.590888][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 795.600853][ T31] 2 locks held by getty/5572: [ 795.605535][ T31] #0: ffff88814dc3d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 795.615353][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 795.625519][ T31] 2 locks held by syz.4.1793/13177: [ 795.630705][ T31] #0: ffffffff9ae685d8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 795.641346][ T31] #1: ffff888055dd8700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 795.652862][ T31] 2 locks held by syz.3.1864/13483: [ 795.658046][ T31] #0: ffffffff900d1910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 795.667475][ T31] #1: ffff888055dd8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 795.678724][ T31] 2 locks held by syz.5.2092/14458: [ 795.683934][ T31] #0: ffffffff900d1910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 795.693366][ T31] #1: ffff888055dd8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 795.704691][ T31] 2 locks held by syz.6.2100/14494: [ 795.709878][ T31] #0: ffffffff900d1910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 795.719307][ T31] #1: ffff888055dd8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 795.730547][ T31] 2 locks held by syz.0.2099/14500: [ 795.735776][ T31] #0: ffffffff900d1910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 795.745574][ T31] #1: ffff888055dd8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 795.756866][ T31] 2 locks held by syz.7.2214/14987: [ 795.762056][ T31] #0: ffffffff900d1910 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 795.771499][ T31] #1: ffff888055dd8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 795.782770][ T31] [ 795.785082][ T31] ============================================= [ 795.785082][ T31] [ 795.795800][ T31] NMI backtrace for cpu 0 [ 795.795813][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 795.795832][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.795843][ T31] Call Trace: [ 795.795849][ T31] [ 795.795856][ T31] dump_stack_lvl+0x116/0x1f0 [ 795.795879][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 795.795903][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 795.795931][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 795.795956][ T31] watchdog+0xf3f/0x1170 [ 795.795983][ T31] ? rcu_is_watching+0x12/0xc0 [ 795.796006][ T31] ? __pfx_watchdog+0x10/0x10 [ 795.796026][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 795.796045][ T31] ? __kthread_parkme+0x19e/0x250 [ 795.796073][ T31] ? __pfx_watchdog+0x10/0x10 [ 795.796099][ T31] kthread+0x3c5/0x780 [ 795.796118][ T31] ? __pfx_kthread+0x10/0x10 [ 795.796136][ T31] ? rcu_is_watching+0x12/0xc0 [ 795.796159][ T31] ? __pfx_kthread+0x10/0x10 [ 795.796178][ T31] ret_from_fork+0x675/0x7d0 [ 795.796193][ T31] ? __pfx_kthread+0x10/0x10 [ 795.796212][ T31] ret_from_fork_asm+0x1a/0x30 [ 795.796248][ T31] [ 795.796254][ T31] Sending NMI from CPU 0 to CPUs 1: [ 795.917960][ C1] NMI backtrace for cpu 1 [ 795.917974][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 795.917991][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.917999][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 795.918026][ C1] Code: a7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 55 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 795.918039][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 795.918053][ C1] RAX: 00000000039e346b RBX: 0000000000000001 RCX: ffffffff8b60d2a9 [ 795.918062][ C1] RDX: 0000000000000000 RSI: ffffffff8da2c59c RDI: ffffffff8bf073c0 [ 795.918071][ C1] RBP: ffffed1003b54490 R08: 0000000000000001 R09: ffffed10170a6655 [ 795.918080][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 795.918089][ C1] R13: ffff88801daa2480 R14: ffffffff908216d0 R15: 0000000000000000 [ 795.918098][ C1] FS: 0000000000000000(0000) GS:ffff888124b05000(0000) knlGS:0000000000000000 [ 795.918113][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 795.918122][ C1] CR2: 00007f3b39fb7198 CR3: 0000000077a76000 CR4: 00000000003526f0 [ 795.918131][ C1] Call Trace: [ 795.918137][ C1] [ 795.918142][ C1] default_idle+0x13/0x20 [ 795.918158][ C1] default_idle_call+0x6c/0xb0 [ 795.918173][ C1] do_idle+0x38d/0x500 [ 795.918193][ C1] ? __pfx_do_idle+0x10/0x10 [ 795.918209][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 795.918227][ C1] cpu_startup_entry+0x4f/0x60 [ 795.918243][ C1] start_secondary+0x21d/0x2b0 [ 795.918263][ C1] ? __pfx_start_secondary+0x10/0x10 [ 795.918284][ C1] common_startup_64+0x13e/0x148 [ 795.918303][ C1] [ 800.032491][ T5818] Bluetooth: hci5: command 0x0406 tx timeout