last executing test programs: 3.24645641s ago: executing program 1 (id=2): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)={0x0, 0x5, 0xa, [0x255, 0xe, 0x0, 0x7ff, 0x29, 0xf, 0x79, 0x6, 0x4, 0xb7]}, &(0x7f0000000880)=0x1c) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0xd, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000040)=',}#})$\x00', 0x440400, &(0x7f00000000c0)={@align=0x80000000, {0xd7, 0x8, 0x8, 0x8000000000000001}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x9}, {[0xffffffff, 0x5, 0x6, 0x5]}, 0x800000, 0xd0, &(0x7f0000000180)=""/208}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000fffbffff0000000000000000850800005200000085000000500000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0xfffffffffffffeb9, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000440)={r2, 0xfffffc00, 0x1, r2}) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x48}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a", 0x23}], 0x1}, 0x8000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600170008000300", @ANYRES32=r7, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=r7, @ANYBLOB="0ab7137a640778e55681799640258900340002020202020200000a004f005050505050500000"], 0x34}, 0x1, 0x0, 0x0, 0x4044044}, 0x4000000) pselect6(0x40, &(0x7f0000000080)={0x9, 0x7, 0xffff, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7ff}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 2.73253076s ago: executing program 2 (id=3): socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000000c0)={0x0, 0x43, &(0x7f0000000580)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2c, 0x0, {0x2c}}, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0xf29db7ae9ffd573e, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "119b435d82ec9dc3847470fe14fb9ae89519b3987f9eb3305a758f7be41d94214b65280409dbe8e6ae54e502ca0de76c4de3613b4b5b12e228283cb20f0750e25c"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x14c}}, 0x20050800) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x1, 0xa}, {0x5, 0xfc95, 0x8, 0x4, 0x9}}}}, 0x17) sendmsg$nl_xfrm(r2, 0x0, 0x24040800) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000040)}, 0x3000cb08) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x1, 0x0, 0x1, 0x3}) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r6, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 2.62561995s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) unshare(0xa000400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.548734588s ago: executing program 0 (id=1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2c1c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=r6, @ANYBLOB="14000800fe8000000000000000000000000000bb08000500399609c26184414fbed2d8fef0b0cf6ae94dd42b9681df4dfd5aac7826405474ab4d3e50e0ffa3a7abff1fe16fa7", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x1, 0x3eaa08c7, 0x8, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0x8, 0x100}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, 0x0, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) write(r0, &(0x7f0000000340)="23000000010007", 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="1700"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.777729515s ago: executing program 1 (id=5): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1709000000000000000001000000050007000200000008000a00fcffffff060002000000000008001700", @ANYRES32=r3, @ANYBLOB="0800090207180000"], 0x3c}}, 0x840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x9, 0x0, 0xfbfd, 0x2, 0x0, 0x20, 0x3c, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0xe4) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2, 0x2}}}, 0x32) r8 = shmget(0x0, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r8, 0xb) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000007000000140008"], 0x34}}, 0x0) 1.776144573s ago: executing program 2 (id=6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x1000000) 1.775764113s ago: executing program 1 (id=7): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, {0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="b87d5208335d070dea9f4092c34b340742667438222f852cdfbe448611344b0a5f05d0aac524c5c11ebad7d8ab2a50c09a8c18e31cc5a598cdbbd61d3f93bb7eec2b137ad8c0a65da83c4b259d79ad02588390557e7658f1cb9690b0277e25afb1b83e5bbf20cfe5d79828df17190857c8049022", 0x74}, {&(0x7f0000000300)="d33d14077b8fa591bed32300ede6c289c3edcee1db7874f97dc3355c7283b55bf8f1a7cacb41acf11cae5e93a9309b55388e6129d0b1ff2ca452a87b89a2aa1a02cb51ae14be450225b21979c9ac454ab03c52001818764553692e9c6b2539d15d11607ab1e2226830740c0dbaada5c620cea670193652f3c3bdd580bc71b396", 0x80}], 0x2, &(0x7f0000000680)=[@assoc={0x10, 0x117, 0x4, 0xfffffffb}, @iv={0x108, 0x117, 0x2, 0xf6, "003b1b1b0ab574e737f2fc9a3199cba50de098f60e5d47dc34aca8f313731d01d68d6994714baded7621487e79252daf91c6be4e36bd9177cce2d2f36835af02bded491e9e81e5b793492529b7f4445c66ff45bd972b69e0a2e439a5fc36fe20f03eebfc1491d9e07b82ab4357da731dbd7c6a30e4d2b5487e009bc37d6bf7957e2d291e8e743b16bb64c653e51c498489a91bfcdf41210213ab6dbd8c77c08335b502b4387bd2f434e7e71e436d2b3169b2efdce8dc82599dd720ec208651b5479b871c12123dd010863ea648d4f0cc252a81bc288cc5ba1c9ca4048e3ede6e22a02578aca19836cc62435a28916c05423913e2c895"}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}], 0x138, 0x4040845}, {0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000008c0)="9eb7e9f2293f8342472eb08ab3f9daaff6f0f3f1aa19c5", 0x17}, {&(0x7f0000001a80)="83d2b344ae9dad058e978dd2e354ca1ab6ff8fac471e0c28ae053b23dd42bdbc6b920f3f6c2855d0ca9b18ec75cac519d7b2dc19c42bf4ef94673224eb1302f01858d82b8923a5e866be948c79270eecb8a910fa9a7ab97fd05854b8aff82c337bdefc6730c504dd97fffae6ef50cd81e04bcc980ebc9680157d719f149dc34d57ae13df8429efe1c3ca09140e23733e9388d7f3f0c9bfa82c4c487d41cc5cafe0fd1c98e44790621861fbeafcb2d4c45b48a42252c7c5fd89688238f99076ab3140d38fcbb840893027", 0xca}, {&(0x7f0000001b80)="80473479c34729d50d9c80961a45cf9adec6d51fbf45323207e4168b5bfc6170bde8d98d748c9de5d79c29b32068031d84d0972688ee37272b8294b95caff31d1adfe724877a", 0x46}], 0x3, &(0x7f0000001c40)=[@iv={0x1c, 0x117, 0x2, 0xc, "86c1013bcb70134bb0b56d38"}, @assoc={0x10, 0x117, 0x4, 0x2}, @assoc={0x10, 0x117, 0x4, 0x80}, @iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @iv={0x34, 0x117, 0x2, 0x22, "c8a074212c1fed688c47ef16b023e058f711105b21a4b6dd49d1321c0b634fa80b51"}], 0x1080, 0x1}, {0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002cc0)="5615a35c12ca8e1fb1db42b875a079c62fffb673e02621a8", 0x18}, {&(0x7f0000002d00)="6945917c8849f75e990092874d1fbb7d05058c503b641ebca476b2d67201df4864093307a0f2f105764df934aed024edb6c121f6754d5b1dae68de554263723ce841116697747c8fde619157202ed7248d6fbdaf75d61a8c462d3b092067d61dca31388e41b8087e51d56ea6bf63ebcb694d7030c5c317f4430c0b5f25cd597e1131b4af0b1286fcfea48708066fcaa74d0974d32c524e534ff658e24f898fec208965960897d9e7dd053aa3bc8d43a1fd6532dc3e14405af23a99ef9cf26173e0610496a29f5a31fc283cf866681f4f02c7", 0xd2}, {&(0x7f0000002e00)="0191289eefb8575fce49d5e2da4bb5ee128f0604debbbe63b2c08530942e9dd73c4e7a478b836d9a150bbebc5076d5faf4882498d7c661b7cf5cd85dd649ec1f79606ac82b486aee437c6442333b719f9011544c14a86b38fb2d3c077cf37622b8a9724745a49b9ead41772c3d97174c0c5705d69d8ca53b652f48e1ec54f90a54e0e45eec10bbfedae649aed47445201a2c475a1354a8dcef09dba74a757f75861ddf299cf36d9181c17e2adec017020e9511", 0xb3}, {&(0x7f0000002ec0)="11860a50d85476d34e0a6486a49ca2e23aae8ebbbcd0c26993f7a9a21610f55c3127101fb9bf5daf5ce6d5e967c2914a1c15dda5b8ab92c32c757ab7c44e25d4e36401d4e8c58bdd0d2f77efe724f47f4b3fb66fe7", 0x55}, {&(0x7f0000002f40)="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", 0xff}, {&(0x7f0000003040)="b574ed8cacfc85bb0a5dbdf13aa62b706b0679b345f26f5c930820af911109", 0x1f}, {&(0x7f0000003080)="11b901861709ddf7ea7dcd721d0f4aabff7c186c6d57cd00fba7fa113da79d5e13790105605a9ff43ab1f61e9ffba12870473430e638587b02a082293e5864f63dfa60afe697756f7aa00a4a04471bb2a391087f6dd95739ac4a64a2b152cf6f5ba1ac5e7604dba2956ed85e8856a26c7ba52d5b62a1571e9a1f", 0x7a}, {&(0x7f0000003100)="40bb9324e5667823c2d8f93ee9d75174ce1bdad3d8d2be6f4f802c9ab5d7632142bb6302e1060fd6fda44127266d5ee7c0a46c525116e9f9dd4fd0611d9fd392f996598ffc98f4db6ca2d8d6346077607731cf7cd7309ec88a417fd2edc634c596859df940266b0a040197d35deec9464ca65a10906fe6aa1376c62d7f5acd9dd41382176f0f771a807c4dc87d5fedf7ded27a3ca2041d9bf4ae95a37d41fae797c60ff92450fcd16e2cb5c587840740b597858207f84c4416ca86b90db0153a52255e", 0xc3}], 0x8, 0x0, 0x0, 0x8004}, {0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000003240)="18bc1f56dc493c848e0a107f055454545c3120626debfaf49d2f27e56ce5de692034679b9fde1b3cc5c2e35bd26e8829fae8542c976a08c21d540e6fd181b378d83814674b2d0d0ce3d4ec16e21eac2a215fe5ac960aea3f7919676b35ab6c05864affa13a8e9f353cd0998f4aa1e9731e5144c575c4b3353b1f9d414f7cd0d166179ce75f9f97a30fbdb18675", 0x8d}, {&(0x7f0000003300)="c5fc", 0x2}], 0x2, 0x0, 0x0, 0x48810}], 0x5, 0x0) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/158, 0x9e}], 0x1}, 0x8000}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}, 0x8}], 0x2, 0x60002000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000240)) 1.773729015s ago: executing program 2 (id=8): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x48}, 0x2, 0x34005}, 0x0) setns(0xc9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x20, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xd, 0x80, 0x40, 0x0, 0x1, 0x1, 0x6}}, {0x10, 0x2, [0xfffa, 0x4, 0x5, 0x53, 0xfff9, 0x40]}}, {{0x1c, 0x1, {0xb, 0x0, 0x6, 0xf, 0x0, 0x81, 0x7, 0x1}}, {0x6, 0x2, [0xa]}}]}]}, 0x78}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20}, {0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f0000000440)={{0xfffffffffffffffe, 0x4, 0x3, 0x5, 0xfc}, [{0x9, 0x8, 0xca, 0x1}, {0x3ff, 0x3, 0x4, 0x5}, {0x100, 0x7, 0x4, 0x3}, {0x0, 0x3, 0x8, 0x2}, {0x6, 0x7fffffffffffffff, 0xa6, 0x4}, {0x2, 0xa6, 0x6, 0x2}, {0x956, 0x6, 0x69, 0x5}]}) 1.773527813s ago: executing program 2 (id=9): r0 = socket$l2tp6(0xa, 0x2, 0x73) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/wakeup_count', 0x82242, 0x40) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @multicast2}, 0x40, 0x0, 0x0, 0x0, 0x7fff, &(0x7f00000003c0)='rose0\x00', 0xff, 0x35f2, 0xa}) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc25c4110, &(0x7f0000000080)={0x0, [[0x9], [0x4, 0x1ff], [0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1]], '\x00', [{0x6, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}], '\x00', 0x101}) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000140)='proc\x00', 0x2009043, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/bus/pci/devices\x00', 0x0, 0x0) read(r3, &(0x7f0000000600)=""/1024, 0x400) pread64(r3, &(0x7f0000000100)=""/59, 0x3b, 0xbce) read$FUSE(r3, &(0x7f0000000b80)={0x2020}, 0x2020) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000004c0)={0x0, 0xfffffd10, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000200)={r5, 0x2, 0x7, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x80) r7 = syz_ublk_setup_io_uring(0x78bf, &(0x7f0000000300)={0x0, 0x2c55, 0x1000, 0x20003, 0x2004016c}, &(0x7f00000002c0)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, 0x0, r9, &(0x7f0000000440)=@IORING_OP_UNLINKAT={0x24, 0x14, 0x0, r3, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_ublk_add_dev(r7, r8, 0x0, r9, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x840, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.773439428s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000001c0)='off', 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) write(r0, &(0x7f0000000180)='on', 0x2) 1.594844586s ago: executing program 0 (id=11): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000"], 0x48) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) tkill(r2, 0x12) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_udp_encap(r3, 0x11, 0x68, &(0x7f0000000100)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x50) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000004c0)='./file1\x00', 0x0, 0x10}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000a29453206dccf484fc4c794388339b689091801ce5e5d08a1804d7f24744f48f09ce8db2e8be65997097fd07fff93971c516006c4c12a80385094d225469139097d728b4dddc4fa13c7b158cd61811e7b2268b220a0981f7d8600815f405ba18513290fb4388c4fcccaa48cd93b412cffc7e3c5d785fe75d7dfc16c1cfe3ee9dc59dd7607f583dbc3719290e4aed3a898013205b9551983d8ca37e6522f6e661cd1b5314", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f0000000740)={{r1, &(0x7f0000000500)='),.\']:::\x00', 0x0, &(0x7f0000000540)={@_ha_fsid={[0xa]}, {0x6, 0x2, 0x1, 0x2}}, 0x4, &(0x7f0000000580), 0x0}, {[0x9, 0x10000, 0x2, 0x12]}, 0x5, 0xdf, &(0x7f0000000640)=""/223}) ioctl$EVIOCGEFFECTS(r8, 0x80044584, &(0x7f0000000780)=""/30) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x7, r7, 0x0}]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x23, &(0x7f0000000000)=0xff, 0x4) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYRES8, @ANYRES8=r4, @ANYRESDEC], 0x18}, 0x1, 0x0, 0x0, 0x4000844}, 0x805) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r11, 0x6) 1.483709881s ago: executing program 3 (id=12): openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x1, 0x3, 0xffffff30, 0x401, 0xffffffffffffefc0}}]}}}]}, 0x78}}, 0x20000000) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)="e7fd379780c24b198c9ebd2cbb2b697c63dcb2ad9924f068956ae9bff5b6d902955f083d7b63744819e97a58eda43c74e9d230bc284b81001b09ce5be3d9c808be0e4a06f04cd3b92717af30809bcb8660e838655d1f593b3d2d6ce2116da270d9f579336fae578558549f2b72b6eee49171b323c4b04f482877197be535fddd8c7710c5df4ff18be68856f2cdc2c9150a734c9e873ddb095f7c8d8520dab8b358b59a2c2dc5baf56eb7b8892847da1da3352bd078a54b58c147e25793a3318dd3b60e0b1f4de4bf6cf33d916ca1fdd2091c257cdac954320967", 0xda}], 0x1}}], 0x1, 0x20048814) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000000)='n', 0x1, 0xc008001, &(0x7f0000004ff0)={0x2, 0x4e22, @rand_addr=0xfffffffd}, 0x10) listen(r4, 0xda91) accept4(r4, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, 0x80000) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000040)='lo\x00', 0x185440, &(0x7f0000000140)={@_ha_fsid={[0x10000, 0x2fd]}, {0x0, 0x7, 0x1, 0x6}}, 0x7, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000200)=0x8}) ioctl$NILFS_IOCTL_GET_CPINFO(r5, 0x80186e82, &(0x7f0000000300)={&(0x7f0000000280)=[{0x2, 0x0, 0xa1a, 0x4, 0x3, 0x6, 0x6, 0x6}, {0x3, 0x0, 0xa0e, 0x4, 0x401, 0x8000010, 0x80000000, 0x9}], 0x2}) 1.474297623s ago: executing program 1 (id=13): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/udp\x00') pread64(r0, &(0x7f0000000180)=""/121, 0xfdcd, 0x101) 1.355969279s ago: executing program 1 (id=14): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000080)=@raw=[@alu={0x4, 0x0, 0x8, 0x1, 0x5, 0x8, 0x10}, @jmp={0x5, 0x1, 0xa, 0x0, 0x0, 0x10, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xb115}, @jmp={0x5, 0x1, 0xc, 0x3, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xb, 0x0, 0x3, 0xffffffffffffffff, 0xfffffffffffffff0}], &(0x7f00000000c0)='syzkaller\x00', 0x8000, 0x62, &(0x7f0000000180)=""/98, 0x41100, 0x56, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0x2, 0x6, 0x200000}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x4, 0x5, 0xc, 0x6}], 0x10, 0x8cd}, 0x94) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, 0x0, &(0x7f0000000100)) dup2(r0, r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_open_dev$vbi(&(0x7f0000000380), 0x3, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000280)="05", 0x1, 0x400d, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r8, 0x0, 0x0, 0x0) 1.269987606s ago: executing program 3 (id=15): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000087000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="f20f79df66b9800000c00f326635002000000f30f30f2217660f73f039ba6100b071eeba200066edb86a098ed083b62b3a5bba4200b80c00efdab01f00", 0x3d}], 0x1, 0x28, &(0x7f0000000200)=[@dstype0={0x6, 0xb}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) read(r6, &(0x7f0000002000)=""/165, 0xa5) splice(r5, 0x0, r7, 0x0, 0x38f9, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') getdents64(r8, &(0x7f0000000000)=""/64, 0x40) getdents(r8, &(0x7f00000005c0)=""/180, 0xb4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000657000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x7, 0x2) 662.379572ms ago: executing program 0 (id=16): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/udp\x00') pread64(r0, &(0x7f0000000180)=""/121, 0xfdcd, 0x101) (fail_nth: 2) 500.745981ms ago: executing program 0 (id=17): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x88, 0x80, &(0x7f0000000000)='/\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 486.2731ms ago: executing program 2 (id=18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffef81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x13}]}}}]}, 0x44}}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(0x0) kcmp(r4, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xfffffffffffff6ff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r6, 0x4068aea3, &(0x7f0000000040)) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x403) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') lseek(r8, 0x6, 0x0) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f0000000040)) 430.941327ms ago: executing program 0 (id=19): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000480)=[@in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000080)=0x29) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0xfffffffd, 0x8010, 0xffff05dc, 0x4, 0xce034d, 0xffffffff, 0x2}, 0x9c) 350.31517ms ago: executing program 0 (id=20): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000200)=[{&(0x7f00000005c0)="480000001400190d7e070000000000000084d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0xa, 0x2400000001, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0xa, 0xfffffff9, 0x0, 0x6, 0x0, 0x2}}) getrlimit(0xc, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r0, 0x20, &(0x7f0000000640)={&(0x7f0000000400)=""/167, 0xa7, 0x0, &(0x7f0000000500)=""/162, 0xa2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) connect$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @none, 0x7f}, 0xa) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4001, 0x94) write(r7, &(0x7f0000000200)='p:my_probe ./file0:0x', 0x15) ioprio_set$uid(0x3, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) 0s ago: executing program 3 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000001c0)='off', 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) write(r0, &(0x7f0000000180)='on', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:16067' (ED25519) to the list of known hosts. [ 41.096479][ T5715] cgroup: Unknown subsys name 'net' [ 41.209035][ T5715] cgroup: Unknown subsys name 'cpuset' [ 41.215413][ T5715] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.125632][ T5715] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.828740][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.830978][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.836503][ T5738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.837745][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.843621][ T5738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.843828][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.847548][ T5738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.851300][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.853220][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.853256][ T5738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.853383][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.853761][ T5738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.854703][ T5738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.855635][ T5738] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.856092][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.864140][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.866844][ T5738] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.875503][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.885305][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.889459][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.516257][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.518984][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.521310][ T5734] bridge_slave_0: entered allmulticast mode [ 46.523982][ T5734] bridge_slave_0: entered promiscuous mode [ 46.528030][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.530295][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.532472][ T5734] bridge_slave_1: entered allmulticast mode [ 46.535115][ T5734] bridge_slave_1: entered promiscuous mode [ 46.577865][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.582968][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.585375][ T5735] bridge_slave_0: entered allmulticast mode [ 46.588061][ T5735] bridge_slave_0: entered promiscuous mode [ 46.591216][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.593510][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.595981][ T5735] bridge_slave_1: entered allmulticast mode [ 46.598676][ T5735] bridge_slave_1: entered promiscuous mode [ 46.612270][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.616923][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.690926][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.715284][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.719225][ T5734] team0: Port device team_slave_0 added [ 46.722809][ T5734] team0: Port device team_slave_1 added [ 46.724854][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.727220][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.729556][ T5733] bridge_slave_0: entered allmulticast mode [ 46.732199][ T5733] bridge_slave_0: entered promiscuous mode [ 46.761304][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.763688][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.766020][ T5733] bridge_slave_1: entered allmulticast mode [ 46.768731][ T5733] bridge_slave_1: entered promiscuous mode [ 46.790247][ T5735] team0: Port device team_slave_0 added [ 46.793096][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.795441][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.803369][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.823078][ T5735] team0: Port device team_slave_1 added [ 46.825363][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.827595][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.835879][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.840719][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.845418][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.848406][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.850874][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.853218][ T5732] bridge_slave_0: entered allmulticast mode [ 46.856806][ T5732] bridge_slave_0: entered promiscuous mode [ 46.885064][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.888169][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.891235][ T5732] bridge_slave_1: entered allmulticast mode [ 46.895224][ T5732] bridge_slave_1: entered promiscuous mode [ 46.912130][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.915609][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.926999][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.933589][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.937216][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.946831][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.958187][ T5733] team0: Port device team_slave_0 added [ 46.992924][ T5733] team0: Port device team_slave_1 added [ 47.011494][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.015868][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.039078][ T5734] hsr_slave_0: entered promiscuous mode [ 47.041452][ T5734] hsr_slave_1: entered promiscuous mode [ 47.054117][ T5735] hsr_slave_0: entered promiscuous mode [ 47.056469][ T5735] hsr_slave_1: entered promiscuous mode [ 47.058579][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 47.060416][ T5735] Cannot create hsr debugfs directory [ 47.087653][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.089938][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.098240][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.102705][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.105267][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.113387][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.122121][ T5732] team0: Port device team_slave_0 added [ 47.158894][ T5732] team0: Port device team_slave_1 added [ 47.177354][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.179552][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.187901][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.195514][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.197720][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.205813][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.243231][ T5733] hsr_slave_0: entered promiscuous mode [ 47.245908][ T5733] hsr_slave_1: entered promiscuous mode [ 47.248482][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 47.250335][ T5733] Cannot create hsr debugfs directory [ 47.313587][ T5732] hsr_slave_0: entered promiscuous mode [ 47.316955][ T5732] hsr_slave_1: entered promiscuous mode [ 47.319701][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 47.321993][ T5732] Cannot create hsr debugfs directory [ 47.516993][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.524798][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.528870][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.533348][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.542568][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.546452][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.554019][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.559622][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.585940][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.593038][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.599463][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.607105][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.610069][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.615739][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.618930][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.625519][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.680876][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.689374][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.692444][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.698495][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.703561][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.711135][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.713830][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.719380][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.782090][ T5733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.786902][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.790606][ T5733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.795522][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.798762][ T5733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.802611][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.809210][ T5733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.813719][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.839023][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.872903][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.878647][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.885061][ T5748] Bluetooth: hci2: command tx timeout [ 47.896185][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.898801][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.912227][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.914486][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.936659][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.949174][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.951669][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.954552][ T5748] Bluetooth: hci1: command tx timeout [ 47.954644][ T5741] Bluetooth: hci3: command tx timeout [ 47.957871][ T5748] Bluetooth: hci0: command tx timeout [ 47.962896][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.983853][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.986617][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.012556][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.030936][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.037079][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.039587][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.063659][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.066536][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.098543][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.111395][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.113731][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.123988][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.126334][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.319912][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.349113][ T5732] veth0_vlan: entered promiscuous mode [ 48.358479][ T5732] veth1_vlan: entered promiscuous mode [ 48.379740][ T5732] veth0_macvtap: entered promiscuous mode [ 48.389698][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.392481][ T5732] veth1_macvtap: entered promiscuous mode [ 48.418102][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.426264][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.433965][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.452100][ T5734] veth0_vlan: entered promiscuous mode [ 48.456441][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.478771][ T5734] veth1_vlan: entered promiscuous mode [ 48.535689][ T5733] veth0_vlan: entered promiscuous mode [ 48.554873][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.556458][ T5733] veth1_vlan: entered promiscuous mode [ 48.560013][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.568002][ T5734] veth0_macvtap: entered promiscuous mode [ 48.573948][ T5734] veth1_macvtap: entered promiscuous mode [ 48.581588][ T5735] veth0_vlan: entered promiscuous mode [ 48.587143][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.590722][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.603166][ T5733] veth0_macvtap: entered promiscuous mode [ 48.610293][ T5735] veth1_vlan: entered promiscuous mode [ 48.617156][ T5733] veth1_macvtap: entered promiscuous mode [ 48.621663][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.627299][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.632355][ T5732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.634390][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.654023][ T5732] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.658521][ T5813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.658644][ T5813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.658755][ T5813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.669502][ T5732] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.670284][ T5813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.674758][ T5732] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.687285][ T5732] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.695336][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.700268][ T5735] veth0_macvtap: entered promiscuous mode [ 48.713586][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.721395][ T5735] veth1_macvtap: entered promiscuous mode [ 48.758007][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.767234][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.772072][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.784833][ T5813] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.801595][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.824403][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.834921][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.837904][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.845192][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.851844][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.859512][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.881566][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.901694][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.933299][ T5887] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 48.945125][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.969088][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.990501][ T5887] team0: Port device dummy0 added [ 49.050663][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.054734][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.059139][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.117277][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.122911][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.147680][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.158693][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.186415][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.299969][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.385133][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.467968][ T42] audit: type=1326 audit(1786279801.416:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 49.482777][ T42] audit: type=1326 audit(1786279801.416:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 49.505962][ T42] audit: type=1326 audit(1786279801.416:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 49.514838][ T42] audit: type=1326 audit(1786279801.416:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 49.523430][ T42] audit: type=1326 audit(1786279801.416:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 49.532185][ T42] audit: type=1326 audit(1786279801.416:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e74eb code=0x7ffc0000 [ 49.540910][ T42] audit: type=1326 audit(1786279801.416:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 49.549530][ T42] audit: type=1326 audit(1786279801.416:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 49.566780][ T42] audit: type=1326 audit(1786279801.426:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 49.575725][ T42] audit: type=1326 audit(1786279801.426:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 49.719429][ T5900] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.731776][ T5900] __vm_enough_memory: pid: 5900, comm: syz.3.4, bytes: 4294963200 not enough memory for the allocation [ 49.763976][ T5903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5'. [ 49.822146][ T5901] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.879299][ T5901] Bluetooth: MGMT ver 1.23 [ 49.954757][ T5748] Bluetooth: hci2: command tx timeout [ 50.034608][ T5748] Bluetooth: hci0: command tx timeout [ 50.037289][ T5748] Bluetooth: hci1: command tx timeout [ 50.039501][ T5748] Bluetooth: hci3: command tx timeout [ 50.145645][ T5913] smpboot: CPU 1 is now offline [ 50.278346][ T5913] smpboot: CPU 3 is now offline [ 50.307400][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.369604][ T5914] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 50.406123][ T5914] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 50.466896][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 50.481662][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 50.495700][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 50.504035][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.523607][ T5911] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.537607][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 50.598253][ T5916] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.601060][ T5916] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 50.656110][ T5929] syzkaller0: entered promiscuous mode [ 50.658905][ T5929] syzkaller0: entered allmulticast mode [ 50.677868][ T5916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.694852][ T5916] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 50.719520][ T5916] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.724472][ T5916] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 50.746542][ T5916] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.749791][ T5916] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 50.828149][ T9] usb 7-1: USB disconnect, device number 2 [ 51.293020][ T5958] FAULT_INJECTION: forcing a failure. [ 51.293020][ T5958] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.298396][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 51.298411][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.298421][ T5958] Call Trace: [ 51.298431][ T5958] [ 51.298436][ T5958] dump_stack_lvl+0x100/0x190 [ 51.298454][ T5958] should_fail_ex.cold+0x5/0xa [ 51.298467][ T5958] _copy_to_iter+0x5a4/0x1720 [ 51.298487][ T5958] ? __pfx__copy_to_iter+0x10/0x10 [ 51.298501][ T5958] ? __local_bh_enable_ip+0x9e/0x120 [ 51.298515][ T5958] ? udp_seq_stop+0x121/0x170 [ 51.298533][ T5958] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 51.298554][ T5958] seq_read_iter+0x691/0x1270 [ 51.298571][ T5958] ? aa_file_perm+0x7f3/0x14d0 [ 51.298592][ T5958] seq_read+0x344/0x4d0 [ 51.298608][ T5958] ? __pfx_seq_read+0x10/0x10 [ 51.298626][ T5958] ? get_pid_task+0xfc/0x250 [ 51.298639][ T5958] ? get_pid_task+0xfc/0x250 [ 51.298656][ T5958] ? __pfx_seq_read+0x10/0x10 [ 51.298672][ T5958] proc_reg_read+0x240/0x330 [ 51.298684][ T5958] ? __pfx_proc_reg_read+0x10/0x10 [ 51.298695][ T5958] vfs_read+0x1e4/0xb40 [ 51.298708][ T5958] ? __pfx_vfs_read+0x10/0x10 [ 51.298716][ T5958] ? find_held_lock+0x2b/0x80 [ 51.298730][ T5958] ? __fget_files+0x215/0x3d0 [ 51.298739][ T5958] ? __fget_files+0x215/0x3d0 [ 51.298751][ T5958] ? __fget_files+0x21f/0x3d0 [ 51.298764][ T5958] ksys_pread64+0x161/0x1a0 [ 51.298775][ T5958] ? __pfx_ksys_pread64+0x10/0x10 [ 51.298784][ T5958] ? ksys_write+0x1ac/0x250 [ 51.298794][ T5958] ? __pfx_ksys_write+0x10/0x10 [ 51.298806][ T5958] __do_fast_syscall_32+0xe7/0x970 [ 51.298823][ T5958] ? lockdep_hardirqs_on+0x78/0x100 [ 51.298838][ T5958] do_fast_syscall_32+0x32/0x70 [ 51.298854][ T5958] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.298868][ T5958] RIP: 0023:0xf7fe8fec [ 51.298882][ T5958] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 51.298894][ T5958] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 00000000000000b4 [ 51.298905][ T5958] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 51.298912][ T5958] RDX: 000000000000fdcd RSI: 0000000000000101 RDI: 0000000000000000 [ 51.298918][ T5958] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.298923][ T5958] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.298929][ T5958] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.298942][ T5958] [ 51.532660][ T5969] bridge1: entered promiscuous mode [ 51.536313][ T5969] bridge1: entered allmulticast mode [ 52.088418][ T5981] smpboot: CPU 1 is now offline [ 52.285581][ T5981] smpboot: CPU 3 is now offline [ 52.311144][ T5982] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 52.337099][ T5974] ------------[ cut here ]------------ [ 52.337669][ T5974] [ 52.337675][ T5974] ====================================================== [ 52.337685][ T5974] WARNING: possible circular locking dependency detected [ 52.337690][ T5974] syzkaller #0 Not tainted [ 52.337695][ T5974] ------------------------------------------------------ [ 52.337699][ T5974] syz.0.20/5974 is trying to acquire lock: [ 52.337704][ T5974] ffffffff8eaf3f60 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 52.337734][ T5974] [ 52.337734][ T5974] but task is already holding lock: [ 52.337737][ T5974] ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 52.337759][ T5974] [ 52.337759][ T5974] which lock already depends on the new lock. [ 52.337759][ T5974] [ 52.337762][ T5974] [ 52.337762][ T5974] the existing dependency chain (in reverse order) is: [ 52.337765][ T5974] [ 52.337765][ T5974] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 52.337778][ T5974] lock_acquire+0x1b9/0x370 [ 52.337787][ T5974] _raw_spin_lock_nested+0x31/0x40 [ 52.337805][ T5974] raw_spin_rq_lock_nested+0x2c/0x140 [ 52.337815][ T5974] _task_rq_lock+0xcf/0x500 [ 52.337825][ T5974] cgroup_move_task+0x81/0x320 [ 52.337838][ T5974] css_set_move_task+0x285/0x600 [ 52.337848][ T5974] cgroup_post_fork+0x1f9/0x9a0 [ 52.337861][ T5974] copy_process+0x6b7a/0x8030 [ 52.337873][ T5974] kernel_clone+0x176/0x9d0 [ 52.337883][ T5974] user_mode_thread+0xcc/0x110 [ 52.337894][ T5974] rest_init+0x21/0x260 [ 52.337903][ T5974] start_kernel+0x48e/0x490 [ 52.337918][ T5974] x86_64_start_reservations+0x24/0x30 [ 52.337934][ T5974] x86_64_start_kernel+0x12b/0x130 [ 52.337948][ T5974] common_startup_64+0x13e/0x158 [ 52.337963][ T5974] [ 52.337963][ T5974] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 52.337975][ T5974] lock_acquire+0x1b9/0x370 [ 52.337983][ T5974] _raw_spin_lock_irqsave+0x3a/0x60 [ 52.337995][ T5974] try_to_wake_up+0xbd/0x1c90 [ 52.338004][ T5974] __wake_up_common+0x135/0x1f0 [ 52.338019][ T5974] __wake_up+0x31/0x60 [ 52.338031][ T5974] tty_port_default_wakeup+0x47/0x60 [ 52.338047][ T5974] serial8250_tx_chars+0x68f/0x860 [ 52.338062][ T5974] serial8250_handle_irq_locked+0x770/0x9a0 [ 52.338076][ T5974] serial8250_handle_irq.part.0+0xb4/0x530 [ 52.338090][ T5974] serial8250_default_handle_irq+0xc2/0x280 [ 52.338105][ T5974] serial8250_interrupt+0xf8/0x1b0 [ 52.338114][ T5974] __handle_irq_event_percpu+0x232/0x880 [ 52.338126][ T5974] handle_irq_event+0xab/0x1e0 [ 52.338137][ T5974] handle_edge_irq+0x34c/0x950 [ 52.338147][ T5974] __common_interrupt+0xd8/0x2f0 [ 52.338157][ T5974] common_interrupt+0xb9/0xe0 [ 52.338166][ T5974] asm_common_interrupt+0x26/0x40 [ 52.338176][ T5974] pv_native_safe_halt+0xf/0x20 [ 52.338189][ T5974] default_idle+0x9/0x10 [ 52.338202][ T5974] default_idle_call+0x6c/0xb0 [ 52.338210][ T5974] do_idle+0x3a7/0x5b0 [ 52.338220][ T5974] cpu_startup_entry+0x4f/0x60 [ 52.338231][ T5974] start_secondary+0x21d/0x2d0 [ 52.338242][ T5974] common_startup_64+0x13e/0x158 [ 52.338255][ T5974] [ 52.338255][ T5974] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 52.338267][ T5974] lock_acquire+0x1b9/0x370 [ 52.338275][ T5974] _raw_spin_lock_irqsave+0x3a/0x60 [ 52.338286][ T5974] __wake_up+0x1c/0x60 [ 52.338298][ T5974] tty_port_default_wakeup+0x47/0x60 [ 52.338312][ T5974] serial8250_tx_chars+0x68f/0x860 [ 52.338325][ T5974] serial8250_handle_irq_locked+0x770/0x9a0 [ 52.338339][ T5974] serial8250_handle_irq.part.0+0xb4/0x530 [ 52.338353][ T5974] serial8250_default_handle_irq+0xc2/0x280 [ 52.338368][ T5974] serial8250_interrupt+0xf8/0x1b0 [ 52.338376][ T5974] __handle_irq_event_percpu+0x232/0x880 [ 52.338388][ T5974] handle_irq_event+0xab/0x1e0 [ 52.338399][ T5974] handle_edge_irq+0x34c/0x950 [ 52.338409][ T5974] __common_interrupt+0xd8/0x2f0 [ 52.338418][ T5974] common_interrupt+0xb9/0xe0 [ 52.338427][ T5974] asm_common_interrupt+0x26/0x40 [ 52.338436][ T5974] pv_native_safe_halt+0xf/0x20 [ 52.338448][ T5974] default_idle+0x9/0x10 [ 52.338462][ T5974] default_idle_call+0x6c/0xb0 [ 52.338470][ T5974] do_idle+0x3a7/0x5b0 [ 52.338479][ T5974] cpu_startup_entry+0x4f/0x60 [ 52.338489][ T5974] start_secondary+0x21d/0x2d0 [ 52.338499][ T5974] common_startup_64+0x13e/0x158 [ 52.338513][ T5974] [ 52.338513][ T5974] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 52.338525][ T5974] lock_acquire+0x1b9/0x370 [ 52.338533][ T5974] _raw_spin_lock_irqsave+0x3a/0x60 [ 52.338544][ T5974] serial8250_console_write+0x177/0x1a50 [ 52.338559][ T5974] console_flush_one_record+0x790/0xe50 [ 52.338571][ T5974] console_unlock+0x103/0x260 [ 52.338581][ T5974] vprintk_emit+0x407/0x6b0 [ 52.338592][ T5974] _printk+0xcf/0x110 [ 52.338601][ T5974] register_console.cold+0xc0/0x248 [ 52.338610][ T5974] univ8250_console_init+0x6f/0x80 [ 52.338623][ T5974] console_init+0x3d5/0x5b0 [ 52.338634][ T5974] start_kernel+0x314/0x490 [ 52.338647][ T5974] x86_64_start_reservations+0x24/0x30 [ 52.338662][ T5974] x86_64_start_kernel+0x12b/0x130 [ 52.338677][ T5974] common_startup_64+0x13e/0x158 [ 52.338690][ T5974] [ 52.338690][ T5974] -> #0 (console_owner){-...}-{0:0}: [ 52.338702][ T5974] check_prev_add+0xeb/0xe60 [ 52.338716][ T5974] __lock_acquire+0x136c/0x1a40 [ 52.338724][ T5974] lock_acquire+0x1b9/0x370 [ 52.338732][ T5974] console_lock_spinning_enable+0x72/0x80 [ 52.338742][ T5974] console_flush_one_record+0x739/0xe50 [ 52.338754][ T5974] console_unlock+0x103/0x260 [ 52.338764][ T5974] vprintk_emit+0x407/0x6b0 [ 52.338775][ T5974] _printk+0xcf/0x110 [ 52.338783][ T5974] __report_bug.cold+0x34/0x141 [ 52.338796][ T5974] report_bug+0xb2/0x220 [ 52.338809][ T5974] handle_bug+0x16a/0x2a0 [ 52.338823][ T5974] exc_invalid_op+0x17/0x50 [ 52.338830][ T5974] asm_exc_invalid_op+0x1a/0x20 [ 52.338839][ T5974] update_rq_clock+0x40a/0xd20 [ 52.338849][ T5974] __schedule+0x1e2d/0x6730 [ 52.338860][ T5974] schedule+0xdd/0x2c0 [ 52.338871][ T5974] irqentry_exit+0x37f/0xa00 [ 52.338883][ T5974] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 52.338893][ T5974] [ 52.338893][ T5974] other info that might help us debug this: [ 52.338893][ T5974] [ 52.338896][ T5974] Chain exists of: [ 52.338896][ T5974] console_owner --> &p->pi_lock --> &rq->__lock [ 52.338896][ T5974] [ 52.338909][ T5974] Possible unsafe locking scenario: [ 52.338909][ T5974] [ 52.338912][ T5974] CPU0 CPU1 [ 52.338915][ T5974] ---- ---- [ 52.338917][ T5974] lock(&rq->__lock); [ 52.338923][ T5974] lock(&p->pi_lock); [ 52.338929][ T5974] lock(&rq->__lock); [ 52.338935][ T5974] lock(console_owner); [ 52.338941][ T5974] [ 52.338941][ T5974] *** DEADLOCK *** [ 52.338941][ T5974] [ 52.338943][ T5974] 3 locks held by syz.0.20/5974: [ 52.338948][ T5974] #0: ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 52.338971][ T5974] #1: ffffffff8ebd43a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 52.338992][ T5974] #2: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 52.339016][ T5974] [ 52.339016][ T5974] stack backtrace: [ 52.339021][ T5974] CPU: 0 UID: 0 PID: 5974 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 52.339033][ T5974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.339039][ T5974] Call Trace: [ 52.339043][ T5974] [ 52.339047][ T5974] dump_stack_lvl+0x100/0x190 [ 52.339057][ T5974] print_circular_bug.cold+0x178/0x1c7 [ 52.339074][ T5974] check_noncircular+0x146/0x160 [ 52.339090][ T5974] check_prev_add+0xeb/0xe60 [ 52.339106][ T5974] __lock_acquire+0x136c/0x1a40 [ 52.339117][ T5974] lock_acquire+0x1b9/0x370 [ 52.339125][ T5974] ? console_lock_spinning_enable+0x61/0x80 [ 52.339137][ T5974] ? console_lock_spinning_enable+0x4a/0x80 [ 52.339150][ T5974] console_lock_spinning_enable+0x72/0x80 [ 52.339162][ T5974] ? console_lock_spinning_enable+0x61/0x80 [ 52.339173][ T5974] console_flush_one_record+0x739/0xe50 [ 52.339187][ T5974] ? __pfx_console_flush_one_record+0x10/0x10 [ 52.339201][ T5974] ? is_printk_cpu_sync_owner+0x32/0x40 [ 52.339215][ T5974] console_unlock+0x103/0x260 [ 52.339226][ T5974] ? __pfx_console_unlock+0x10/0x10 [ 52.339239][ T5974] ? do_raw_spin_unlock+0x145/0x1e0 [ 52.339251][ T5974] ? _printk+0xcf/0x110 [ 52.339260][ T5974] vprintk_emit+0x407/0x6b0 [ 52.339272][ T5974] ? __pfx_vprintk_emit+0x10/0x10 [ 52.339285][ T5974] ? __lock_acquire+0x49f/0x1a40 [ 52.339294][ T5974] _printk+0xcf/0x110 [ 52.339303][ T5974] ? __pfx__printk+0x10/0x10 [ 52.339313][ T5974] ? __report_bug.cold+0x24/0x141 [ 52.339323][ T5974] ? __report_bug+0x2ab/0x440 [ 52.339337][ T5974] __report_bug.cold+0x34/0x141 [ 52.339346][ T5974] ? update_rq_clock+0x40a/0xd20 [ 52.339357][ T5974] ? __pfx___report_bug+0x10/0x10 [ 52.339370][ T5974] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 52.339380][ T5974] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 52.339392][ T5974] ? update_rq_clock+0x40a/0xd20 [ 52.339403][ T5974] report_bug+0xb2/0x220 [ 52.339416][ T5974] ? update_rq_clock+0x40a/0xd20 [ 52.339426][ T5974] handle_bug+0x16a/0x2a0 [ 52.339441][ T5974] exc_invalid_op+0x17/0x50 [ 52.339450][ T5974] asm_exc_invalid_op+0x1a/0x20 [ 52.339459][ T5974] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 52.339471][ T5974] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 52.339481][ T5974] RSP: 0000:ffffc90006c77d28 EFLAGS: 00010046 [ 52.339489][ T5974] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 52.339496][ T5974] RDX: 0000000000000046 RSI: ffffffff8e17ce80 RDI: ffffffff8c3fe580 [ 52.339502][ T5974] RBP: ffffc90006c77ed0 R08: 0000000000000001 R09: 0000000000000001 [ 52.339507][ T5974] R10: ffffffff9121bad7 R11: 0000000000000000 R12: ffffffff9121ee84 [ 52.339513][ T5974] R13: ffff88802b33c4e0 R14: ffff88801c35ca80 R15: ffff88802b23c198 [ 52.339522][ T5974] ? update_rq_clock+0x9c/0xd20 [ 52.339534][ T5974] __schedule+0x1e2d/0x6730 [ 52.339549][ T5974] ? __pfx___schedule+0x10/0x10 [ 52.339561][ T5974] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 52.339577][ T5974] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 52.339589][ T5974] schedule+0xdd/0x2c0 [ 52.339601][ T5974] irqentry_exit+0x37f/0xa00 [ 52.339615][ T5974] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 52.339625][ T5974] RIP: 0023:0xf70eb38a [ 52.339632][ T5974] Code: 8b 50 08 8b 78 0c 83 c0 08 89 fe 39 ca 19 ee 72 ef 89 44 24 08 89 54 24 10 8b 73 f8 8d 53 f8 8b 5b fc 89 e8 39 f1 19 d8 73 27 <2e> 8d b4 26 00 00 00 00 2e 8d b4 26 00 00 00 00 8d b6 00 00 00 00 [ 52.339642][ T5974] RSP: 002b:00000000ffcde050 EFLAGS: 00000297 [ 52.339649][ T5974] RAX: 00000000ffffffff RBX: 00000000ffffffff RCX: 00000000894fa8ff [ 52.339655][ T5974] RDX: 00000000f6fc07d8 RSI: 00000000894fa964 RDI: 00000000ffffffff [ 52.339660][ T5974] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 52.339666][ T5974] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 52.339672][ T5974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.339680][ T5974] [ 52.690404][ T5974] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 52.690413][ T5974] WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x40a/0xd20, CPU#0: syz.0.20/5974 [ 52.695833][ T5974] Modules linked in: [ 52.697073][ T5974] CPU: 0 UID: 0 PID: 5974 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 52.699877][ T5974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.702973][ T5974] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 52.704694][ T5974] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 52.710634][ T5974] RSP: 0000:ffffc90006c77d28 EFLAGS: 00010046 [ 52.712535][ T5974] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 52.715001][ T5974] RDX: 0000000000000046 RSI: ffffffff8e17ce80 RDI: ffffffff8c3fe580 [ 52.717483][ T5974] RBP: ffffc90006c77ed0 R08: 0000000000000001 R09: 0000000000000001 [ 52.719932][ T5974] R10: ffffffff9121bad7 R11: 0000000000000000 R12: ffffffff9121ee84 [ 52.722428][ T5974] R13: ffff88802b33c4e0 R14: ffff88801c35ca80 R15: ffff88802b23c198 [ 52.724893][ T5974] FS: 0000000000000000(0000) GS:ffff888096bf3000(0063) knlGS:0000000058024480 [ 52.727663][ T5974] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 52.729725][ T5974] CR2: 00000000f507e2bd CR3: 000000006af3e000 CR4: 0000000000352ef0 [ 52.732199][ T5974] Call Trace: [ 52.733267][ T5974] [ 52.734195][ T5974] __schedule+0x1e2d/0x6730 [ 52.735624][ T5974] ? __pfx___schedule+0x10/0x10 [ 52.737139][ T5974] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 52.739050][ T5974] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 52.740915][ T5974] schedule+0xdd/0x2c0 [ 52.742204][ T5974] irqentry_exit+0x37f/0xa00 [ 52.743652][ T5974] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 52.745350][ T5974] RIP: 0023:0xf70eb38a [ 52.746634][ T5974] Code: 8b 50 08 8b 78 0c 83 c0 08 89 fe 39 ca 19 ee 72 ef 89 44 24 08 89 54 24 10 8b 73 f8 8d 53 f8 8b 5b fc 89 e8 39 f1 19 d8 73 27 <2e> 8d b4 26 00 00 00 00 2e 8d b4 26 00 00 00 00 8d b6 00 00 00 00 [ 52.752555][ T5974] RSP: 002b:00000000ffcde050 EFLAGS: 00000297 [ 52.754467][ T5974] RAX: 00000000ffffffff RBX: 00000000ffffffff RCX: 00000000894fa8ff [ 52.756918][ T5974] RDX: 00000000f6fc07d8 RSI: 00000000894fa964 RDI: 00000000ffffffff [ 52.759367][ T5974] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 52.761811][ T5974] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 52.764251][ T5974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.766700][ T5974] [ 52.767704][ T5974] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 52.769974][ T5974] CPU: 0 UID: 0 PID: 5974 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 52.772771][ T5974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.775876][ T5974] Call Trace: [ 52.776938][ T5974] [ 52.777899][ T5974] dump_stack_lvl+0x100/0x190 [ 52.779381][ T5974] vpanic+0x552/0x970 [ 52.780643][ T5974] ? __pfx_vpanic+0x10/0x10 [ 52.782079][ T5974] ? lock_release+0x24d/0x310 [ 52.783555][ T5974] panic+0xd1/0xe0 [ 52.784751][ T5974] ? __pfx_panic+0x10/0x10 [ 52.786148][ T5974] ? check_panic_on_warn+0x1f/0x90 [ 52.787769][ T5974] check_panic_on_warn.cold+0x19/0x34 [ 52.789441][ T5974] ? update_rq_clock+0x40a/0xd20 [ 52.790991][ T5974] __warn.cold+0x191/0x318 [ 52.792402][ T5974] __report_bug+0x30f/0x440 [ 52.793835][ T5974] ? update_rq_clock+0x40a/0xd20 [ 52.795374][ T5974] ? __pfx___report_bug+0x10/0x10 [ 52.796957][ T5974] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 52.798659][ T5974] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 52.800352][ T5974] ? update_rq_clock+0x40a/0xd20 [ 52.801921][ T5974] report_bug+0xb2/0x220 [ 52.803254][ T5974] ? update_rq_clock+0x40a/0xd20 [ 52.804813][ T5974] handle_bug+0x16a/0x2a0 [ 52.806170][ T5974] exc_invalid_op+0x17/0x50 [ 52.807603][ T5974] asm_exc_invalid_op+0x1a/0x20 [ 52.809132][ T5974] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 52.810849][ T5974] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 52.816762][ T5974] RSP: 0000:ffffc90006c77d28 EFLAGS: 00010046 [ 52.818652][ T5974] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 52.821101][ T5974] RDX: 0000000000000046 RSI: ffffffff8e17ce80 RDI: ffffffff8c3fe580 [ 52.823544][ T5974] RBP: ffffc90006c77ed0 R08: 0000000000000001 R09: 0000000000000001 [ 52.825995][ T5974] R10: ffffffff9121bad7 R11: 0000000000000000 R12: ffffffff9121ee84 [ 52.828446][ T5974] R13: ffff88802b33c4e0 R14: ffff88801c35ca80 R15: ffff88802b23c198 [ 52.830905][ T5974] ? update_rq_clock+0x9c/0xd20 [ 52.832438][ T5974] __schedule+0x1e2d/0x6730 [ 52.833880][ T5974] ? __pfx___schedule+0x10/0x10 [ 52.835406][ T5974] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 52.837302][ T5974] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 52.839162][ T5974] schedule+0xdd/0x2c0 [ 52.840445][ T5974] irqentry_exit+0x37f/0xa00 [ 52.841918][ T5974] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 52.843607][ T5974] RIP: 0023:0xf70eb38a [ 52.844894][ T5974] Code: 8b 50 08 8b 78 0c 83 c0 08 89 fe 39 ca 19 ee 72 ef 89 44 24 08 89 54 24 10 8b 73 f8 8d 53 f8 8b 5b fc 89 e8 39 f1 19 d8 73 27 <2e> 8d b4 26 00 00 00 00 2e 8d b4 26 00 00 00 00 8d b6 00 00 00 00 [ 52.850795][ T5974] RSP: 002b:00000000ffcde050 EFLAGS: 00000297 [ 52.852691][ T5974] RAX: 00000000ffffffff RBX: 00000000ffffffff RCX: 00000000894fa8ff [ 52.855140][ T5974] RDX: 00000000f6fc07d8 RSI: 00000000894fa964 RDI: 00000000ffffffff [ 52.857600][ T5974] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 52.860034][ T5974] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 52.862530][ T5974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.864987][ T5974] [ 53.942681][ T5974] Shutting down cpus with NMI [ 53.944862][ T5974] Kernel Offset: disabled [ 53.946214][ T5974] Rebooting in 86400 seconds..