last executing test programs: 19m10.245373156s ago: executing program 32 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map, r6, 0x2f, 0x4}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') syz_emit_vhci(0x0, 0xf8) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000004c0)=@e={0xff, 0x3, 0x0, 0x0, @generic}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000140)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) 19m2.756753986s ago: executing program 1 (id=29): syz_io_uring_setup(0x4a9, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xffffffbc}, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x0) r2 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000180)={{0x33d8f59d358d3316, 0x2, 0x6, 0x1, 0x9}, 0x7fffffff, 0x4}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f0000000740)=0xe8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x40041, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',cache=loose,cache=mmap,mmap,fscache,cache=mmap,msize=0x0000000000000002,mmap,access=client,directio,fsuuid=82efe7c5-cc4f-c639-c863-76394a2V,smackfsdef=,fowner=', @ANYRESDEC=r5, @ANYBLOB=',fowner<', @ANYRESDEC=r9, @ANYBLOB=',subj_role=\x00,obj_type=/dev/bus/usb/00#/00#\x00,ro,\x00']) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd0002800800034000000120140000001000010000000000000000000084000a"], 0xe4}}, 0x20050800) ftruncate(r2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet_smc(0x2b, 0x1, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x740, 0x140) close(r10) socket$kcm(0x29, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 18m55.880212358s ago: executing program 1 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) move_pages(r1, 0x6, &(0x7f0000000040)=[&(0x7f00008e3000/0x1000)=nil, &(0x7f00009e5000/0x1000)=nil, &(0x7f0000225000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000004c000/0x2000)=nil, &(0x7f00002e7000/0x4000)=nil], &(0x7f0000000180)=[0x1ff, 0x8ce7, 0x2, 0x0, 0xa, 0xd4fa], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f000000f140), 0x2, 0x0) ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f000000f280)=@multiplanar_userptr={0x1, 0xa, 0x4, 0x10000, 0x1, {}, {0x2, 0x0, 0x5, 0x7, 0x8, 0x9, "525067fc"}, 0x79, 0x2, {0x0}}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 18m51.955995861s ago: executing program 1 (id=40): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) vmsplice(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f000001b000)}], 0x2, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) getpeername(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x8, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r6, 0x400, 0x1) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000180)={[0x8]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x440, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r7, &(0x7f0000001440)=""/126, 0x7e, 0x41) getsockopt(r5, 0x200000000114, 0x2721, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 18m48.056928291s ago: executing program 1 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x68, 0x75, 0x40, 0xeb1, 0x7007, 0x210, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x55, 0x15, 0xe}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800800124000050000080008400000000012000300686173683a6e65742c706f7274000000050005000a040000050004"], 0x60}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x9, 0x3202, @vifc_lcl_ifindex, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r7 = socket$inet(0x2, 0x2, 0x0) unshare(0x26060400) unshare(0xe000400) bind$inet(r7, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r7, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) chown(&(0x7f0000000340)='./file0\x00', 0xee00, 0xee00) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x0, 0x4e20, 0xfffffffffffffd2a, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afcee67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) mkdirat(r6, &(0x7f0000000300)='./file0\x00', 0x0) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 18m42.679627186s ago: executing program 1 (id=48): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @loopback, 0x10001}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x8, 0x6, 0x698, 0xd0, 0x0, 0xd0, 0xd0, 0x4a8, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private2, [0x0, 0x0, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 'bond_slave_1\x00', 'macvlan0\x00', {}, {0xff}, 0x32, 0x8, 0x4, 0x2c}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1c0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x11, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x33, 0x13, 0x6}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [0x0, 0x0, 0xffffffff], 'hsr0\x00', 'dvmrp1\x00', {}, {}, 0x6c}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xc0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0)=0x5, 0x4) r2 = dup(r1) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) pipe2$9p(&(0x7f0000000080), 0x84800) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800001600000000000000000000000d95000000000000fbdf396f31f5d7a86ee4045539d475bdb7f95fed7a5eb9f13d325565be658c70d18a55613aced402dd60c247150c2e7f0177de7c5f8acbf809bd7b5a9d661b8476f8954efe5b804bd2969052808b1a1fe579a5a8c5e9bf7ed1a404b44fe3ab3144166be5c89fa3b4b291be12e61f114f4c926dbf6ef0071a096b134eb12cf17056dc057ffa21d4a59838b3dc7295f1db20661d0a8a26d9b2e22910d7a831bace67c5ebc0bddec9212a97aee284538f19e491bfadd972e03ee5be3a7e000ff9c2a0f215da5d00"/232], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000003}) 18m37.734150294s ago: executing program 1 (id=52): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) r1 = syz_usb_connect$uac1(0x1, 0xaf, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x1, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x4}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x6, "24f63178"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x7f, 0x4}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xfffe, 0x4, 0x4, "9454"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xa, 0x2, {0x7, 0x25, 0x1, 0x0, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7f}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x7, "41a573966e0c"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xeb0e, 0x0, 0x4, "a7ba818855"}]}, {{0x9, 0x5, 0x82, 0x9, 0x410, 0x7, 0x7, 0x6, {0x7, 0x25, 0x1, 0x81, 0x1, 0x36b}}}}}}}]}}, &(0x7f0000002840)={0x0, 0x0, 0x32, &(0x7f0000000400)={0x5, 0xf, 0x32, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x8, 0x0, 0x6, [0x1fe003f, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xff, 0x6, 0x4, 0x90}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xd, 0x2, 0x6}, @ptm_cap={0x3}]}, 0x5, [{0xe5, &(0x7f0000000480)=@string={0xe5, 0x3, "b5e90cdcd87a09e14561d86c9f12468fc64a43d7fdf1dd7670dc502a353575f778cf7470b7aae06fcee6a1d8e587559d457b722c5677a88ddf5f306cbfb716b871a0504647b614adf1cad4264be86e20b807bc424465bcf1b53dcdc4264383bc48da5b86abe012cd95b68207e3f542db33a03934fdda920bf926a239247cd025d3a17dbf8929f026da2093a25c3646f9ddb1aa11316756290dfdc0fab8b807bed9bfc5d71722fefc5e6b2a482e98740ba43457eb53de91dfaeed491f7c8daccf8e52d4454eda6f34a194214e37272800d732b4a397f433347ea8523db250f9da0c686d"}}, {0xab, &(0x7f00000005c0)=@string={0xab, 0x3, "7cb3733da45e3b9e910cac72441176acb1de8ce86ae9d2ac87204ab28d67736f5788741e0325e3b2566ded848d81d7270c4d8b86c96849f7b9231b750f8e4ef7f51e40808e398bbdb4bb9b94234b3b818da6b8db44547e99ff5dbcd6dbfe1d7fe7fc4243d7181d75937801170bbc15b0670599c233ab3ef45280948cc5ecd098f9a1ae3a589d8c40f3a86988b258b1031b164f2b03434b326604d933338f1f99af7727d2e4de98123e"}}, {0x1c, &(0x7f00000006c0)=@string={0x1c, 0x3, "c0dd55db1df2b77a6bb01dd44dd6dd275ff75ed2c65db12de021"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000002a80)={0x20, 0x11, 0x70, "d4798fde9f2c0c23aac47466f547af4877d53e57e9fa91403a0000000086d72507cff31c9687c000fff8ff040446d59c10711cf51bd503b2cb686c299152abab4d94b44a40cf1369d06ac61323544d10d695ec74ad712f151b9d79b683fb938ba2de4fc49b8200000000eec39f725eee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x42002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) ioctl$COMEDI_INSNLIST(r4, 0x8010640b, &(0x7f0000000040)={0x1, &(0x7f00001219c0)=[{0x8000000, 0xfffffce8, 0x0, 0x0, 0x7}]}) copy_file_range(r3, 0x0, r2, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x6, 0x4, {}, {0x0}, 0x9, 0x3}) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1008418, &(0x7f00000001c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xf1}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize}], [{@dont_appraise}]}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 18m34.988934355s ago: executing program 0 (id=53): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$drirender128(0xffffffffffffff9c, 0x0, 0x100, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bind$l2tp(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @private=0xa010101, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_open(&(0x7f0000000040)='\xc4', 0x1, 0x10, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) creat(0x0, 0x80166a87e08db6a7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x14, r5, 0x301, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 18m22.926091227s ago: executing program 0 (id=56): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x24) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000040)={r7}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x30, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033006c6f0000000000001f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 18m22.511590076s ago: executing program 33 (id=52): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) r1 = syz_usb_connect$uac1(0x1, 0xaf, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x1, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x4}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x6, "24f63178"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x7f, 0x4}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xfffe, 0x4, 0x4, "9454"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xa, 0x2, {0x7, 0x25, 0x1, 0x0, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7f}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x7, "41a573966e0c"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xeb0e, 0x0, 0x4, "a7ba818855"}]}, {{0x9, 0x5, 0x82, 0x9, 0x410, 0x7, 0x7, 0x6, {0x7, 0x25, 0x1, 0x81, 0x1, 0x36b}}}}}}}]}}, &(0x7f0000002840)={0x0, 0x0, 0x32, &(0x7f0000000400)={0x5, 0xf, 0x32, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x8, 0x0, 0x6, [0x1fe003f, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xff, 0x6, 0x4, 0x90}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xd, 0x2, 0x6}, @ptm_cap={0x3}]}, 0x5, [{0xe5, &(0x7f0000000480)=@string={0xe5, 0x3, "b5e90cdcd87a09e14561d86c9f12468fc64a43d7fdf1dd7670dc502a353575f778cf7470b7aae06fcee6a1d8e587559d457b722c5677a88ddf5f306cbfb716b871a0504647b614adf1cad4264be86e20b807bc424465bcf1b53dcdc4264383bc48da5b86abe012cd95b68207e3f542db33a03934fdda920bf926a239247cd025d3a17dbf8929f026da2093a25c3646f9ddb1aa11316756290dfdc0fab8b807bed9bfc5d71722fefc5e6b2a482e98740ba43457eb53de91dfaeed491f7c8daccf8e52d4454eda6f34a194214e37272800d732b4a397f433347ea8523db250f9da0c686d"}}, {0xab, &(0x7f00000005c0)=@string={0xab, 0x3, "7cb3733da45e3b9e910cac72441176acb1de8ce86ae9d2ac87204ab28d67736f5788741e0325e3b2566ded848d81d7270c4d8b86c96849f7b9231b750f8e4ef7f51e40808e398bbdb4bb9b94234b3b818da6b8db44547e99ff5dbcd6dbfe1d7fe7fc4243d7181d75937801170bbc15b0670599c233ab3ef45280948cc5ecd098f9a1ae3a589d8c40f3a86988b258b1031b164f2b03434b326604d933338f1f99af7727d2e4de98123e"}}, {0x1c, &(0x7f00000006c0)=@string={0x1c, 0x3, "c0dd55db1df2b77a6bb01dd44dd6dd275ff75ed2c65db12de021"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000002a80)={0x20, 0x11, 0x70, "d4798fde9f2c0c23aac47466f547af4877d53e57e9fa91403a0000000086d72507cff31c9687c000fff8ff040446d59c10711cf51bd503b2cb686c299152abab4d94b44a40cf1369d06ac61323544d10d695ec74ad712f151b9d79b683fb938ba2de4fc49b8200000000eec39f725eee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x42002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) ioctl$COMEDI_INSNLIST(r4, 0x8010640b, &(0x7f0000000040)={0x1, &(0x7f00001219c0)=[{0x8000000, 0xfffffce8, 0x0, 0x0, 0x7}]}) copy_file_range(r3, 0x0, r2, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x6, 0x4, {}, {0x0}, 0x9, 0x3}) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1008418, &(0x7f00000001c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xf1}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize}], [{@dont_appraise}]}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 18m19.45454421s ago: executing program 0 (id=68): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r3}, 0x18) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@local, @random="fc9c370000f2", @void, {@can={0xc, {{0x3, 0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "2d9e19d3f794ab2c"}}}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x1, 0x5b81, 0xc0, 0x2, 0x6, 0x9, 0x800000000, 0x0, 0xdb}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, 0x0, 0x78) close(r6) open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 18m18.515630652s ago: executing program 0 (id=62): r0 = socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRES64=r0, @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)}], 0x1) msgctl$IPC_INFO(0x0, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) open_by_handle_at(r8, &(0x7f0000000180)=ANY=[], 0x1) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="a50a0000e4ff000061116000000000001800000000000000000000000000000095000000000000008a92bd0889fd521a46de9f2d8bddd189e315ff16f1ca4326cdc90f6cb751eb4042b0b04bb3103b2a5eea1c7a0324e1b0cbb016"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$unix(r9, &(0x7f0000008380), 0x400000000000174, 0x4008890) write$binfmt_elf32(r9, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/2335], 0x91f) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000914010000007c0000000000080001"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 18m15.335875429s ago: executing program 0 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$media(&(0x7f0000000480), 0x0, 0x20004) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000f40)) socket(0x24, 0x3, 0xffffff01) syz_open_dev$video(0x0, 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x14000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) io_uring_setup(0x10d7, &(0x7f00000000c0)={0x0, 0xbfff, 0x400, 0x2, 0x1d}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0x80049367, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 18m13.809662779s ago: executing program 0 (id=66): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r7 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) write(r7, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) dup3(r6, r7, 0x0) r8 = syz_open_procfs(0x0, 0x0) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000140)="fe", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6}, &(0x7f0000000040), &(0x7f00000000c0)=r8}, 0x1c) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f00000001c0)) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_usb_connect(0x4, 0x80b, &(0x7f0000000f40)=ANY=[], &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x251, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x27, 0x0}, {0x78, &(0x7f0000000d80)=@string={0x78, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f5"}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 17m57.747164722s ago: executing program 34 (id=66): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r7 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) write(r7, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) dup3(r6, r7, 0x0) r8 = syz_open_procfs(0x0, 0x0) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000140)="fe", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6}, &(0x7f0000000040), &(0x7f00000000c0)=r8}, 0x1c) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f00000001c0)) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_usb_connect(0x4, 0x80b, &(0x7f0000000f40)=ANY=[], &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x251, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x27, 0x0}, {0x78, &(0x7f0000000d80)=@string={0x78, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f5"}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 13m25.339470533s ago: executing program 3 (id=272): pipe2$9p(&(0x7f0000000240), 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x8, &(0x7f0000000040)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020) writev(r3, &(0x7f0000002140)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x0, 'cpuset'}, {0x2b, 'pids'}, {0x2d, 'blkio'}, {0x2b, 'net_prio'}, {0x2d, 'pids'}, {0x2d, 'cpuset'}, {0x2d, 'cpu'}]}, 0x2f) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = userfaultfd(0x1) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x14) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x40040) 13m22.732918208s ago: executing program 3 (id=275): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000100001040625fd1a62ea8ef707504a8621d2400000000000000000ffff0000", @ANYRES32=0x0, @ANYBLOB="08d10000000000002000128009000100766c616e00000000100002800c0002000e0000000f00000014000300766c616e3000"/60], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x30, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x1}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x40080) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r9 = gettid() syz_open_procfs$namespace(r9, &(0x7f0000000380)='ns/time\x00') r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0xc, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2}, 0x50) 13m15.743405695s ago: executing program 3 (id=282): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x2, 0x10000, 0x4, 0x4, 0x0, 0x8, 0x7, 0xa, 0x0, 0x2, 0x1, 0x1, 0x800, 0x6, 0xb4c, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x1, 0x0, 0xfffffff8]}) ioctl$COMEDI_SUBDINFO(r4, 0x80486402, &(0x7f00000002c0)) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x3e, 0x1, 0x0, 0x2, 0xcf, 0x1, 0x0, 0x5, 0x3, 0x5b, 0x6, 0xb7, 0x401, 0x1800, 0x0, 0x22, {0xb0, 0x101}, 0x0, 0x4}}) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, 0x0, 0x1, 0x4000812, 0xffffffffffffffff, 0x100000) r5 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f3330102030109021200010000000009"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xfc}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f00000000c0)={0x40000, 0xeeee0000, 0x0, 0xfc, 0x1}) r9 = syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000280)={&(0x7f00000001c0)=[{0x7, 0x211, 0x0, 0x0}, {0x50, 0x4000, 0x0, 0x0}], 0x2}) 13m8.680092125s ago: executing program 3 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00fb000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000018110000a258dc1452cec704752b07bad90cfcdce23d1de81027c2090ee6bcb4c5437d5e99a0921de4a346265a1eb61bab0c15289912cf46fe09fd64aadac1dfce343a20c36e71a5d64d2737870778edcfcd09c748d36566f6a7fd8cae3b20dd76290c2c6e5a5f5a12a44ee77f38c85f56acbfd53d95b3bc3a6424f31318977cd5e8173c2ef6e5b358284aeeec54e73b04ffb98a402162e6f84228a7eabce4200233527d30700eaeae3df2b33dbc3fdcf6078056a737d63fe66ca9d8b6e10c9e455804213e6c576200c9e7ae38c0e64ac4", @ANYRES32, @ANYRESDEC, @ANYRESHEX=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = eventfd(0xc) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x4, 0x870, 0x870}}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) 13m5.84985989s ago: executing program 3 (id=290): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket(0x5, 0x7ac3514b074c48b0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x301) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x100, 0x0) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, &(0x7f0000000040)={0x0, 0x6, 0x0, 0xb9f}) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x917}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8, &(0x7f00000002c0)) 13m2.011541401s ago: executing program 3 (id=294): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x0) fallocate(r0, 0x3, 0x0, 0x8003) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000240)={0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x58}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x45, 0x0, 0x7fff0000}]}) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) mknod(&(0x7f0000000400)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) fadvise64(r5, 0x8, 0xb098, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfe, {0x60, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x9, 0xc}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xb6ea}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x3, 0x7, 0x2, 0x0, 0x6, 0x800009}}, {0x3}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4002001}, 0x3000c81c) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0xc508, 0x0, 0x337}, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={r8, 0x55b7}, 0x8) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={r8}, &(0x7f0000000200)=0x8) 12m46.409194217s ago: executing program 35 (id=294): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x0) fallocate(r0, 0x3, 0x0, 0x8003) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000240)={0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x58}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x45, 0x0, 0x7fff0000}]}) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) mknod(&(0x7f0000000400)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) fadvise64(r5, 0x8, 0xb098, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfe, {0x60, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x9, 0xc}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xb6ea}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x3, 0x7, 0x2, 0x0, 0x6, 0x800009}}, {0x3}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4002001}, 0x3000c81c) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0xc508, 0x0, 0x337}, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={r8, 0x55b7}, 0x8) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={r8}, &(0x7f0000000200)=0x8) 7m23.833143667s ago: executing program 6 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000280)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r8}) fcntl$setown(0xffffffffffffffff, 0x8, r2) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000370400", @ANYRES32=0x0, @ANYBLOB], 0x64}}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000640)={0x0, 0xfb, 0xb8, 0x1, 0x9, "1deadf94d353e6e58e2c7bd39f0934ad", "8416e8f008d00414e8fa1d21a8dfd975c6f722dce0fa093576f56428f50f0b26b57d7d1689505c4e24952424471172f4721042e7fd168f44dd0ade758ce0e17618fb1c66532559422ab0e86f04d938756792747b4355d522d6bf4e3680ffcf29fac82a5157972c38dca2416c6b29993af45442949034a150315a2c18928acb42f94565ee631ca1e15e7959ebaaaafade6ec3ae0bade64c9fac1dbf3c0e7f8f9e6cb706"}, 0xb8, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 7m21.938634657s ago: executing program 6 (id=585): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000500)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xfffffffffffffffd, {0xfffffffffffffffd, 0x200, 0x0, {0x6, 0x0, 0x0, 0x5, 0x0, 0x2000000006, 0x200, 0xbaa4, 0x5, 0x8000, 0x0, r7, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) socket(0x3, 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 7m19.098960378s ago: executing program 7 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00fb000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000018110000a258dc1452cec704752b07bad90cfcdce23d1de81027c2090ee6bcb4c5437d5e99a0921de4a346265a1eb61bab0c15289912cf46fe09fd64aadac1dfce343a20c36e71a5d64d2737870778edcfcd09c748d36566f6a7fd8cae3b20dd76290c2c6e5a5f5a12a44ee77f38c85f56acbfd53d95b3bc3a6424f31318977cd5e8173c2ef6e5b358284aeeec54e73b04ffb98a402162e6f84228a7eabce4200233527d30700eaeae3df2b33dbc3fdcf6078056a737d63fe66ca9d8b6e10c9e455804213e6c576200c9e7ae38c0e64ac4", @ANYRES32=r1, @ANYRESDEC=r1, @ANYRESHEX=r2], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername(r0, &(0x7f00000000c0)=@rc, &(0x7f0000000240)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000000)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x4, 0x870, 0x870}}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) 7m17.660586356s ago: executing program 6 (id=591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001040), 0x101000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) getpid() io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) io_uring_setup(0xd4b, &(0x7f0000000280)) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 7m15.491111026s ago: executing program 6 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r4, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d4"], 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1f080045000024000000020011907800000000000020000000000700109078e2fd000180000000"], 0x0) r6 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000380)={0x1d, r9, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r8, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x4004080, 0x0, 0x0) read$qrtrtun(r7, &(0x7f00000004c0)=""/57, 0x39) fsopen(&(0x7f0000000000)='msdos\x00', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x78, 0x0, 0x3, {0x0, 0x0, 0x0, {0x4, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x3, 0x0, 0x0, 0x4000, 0x25daa903, 0xffffffffffffffff, r10, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x888000, &(0x7f0000000400)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[], [{@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '\x91('}}]}}) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 7m14.227023685s ago: executing program 6 (id=598): syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x14000005) sendmmsg$unix(r6, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r4, 0x7, &(0x7f0000000080)=0x6e) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r8, 0x1) ioprio_get$uid(0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000060000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="35000e00800000000802110000010802110000005050505050500000000000000000000064000100250301040e7206030303030303000000080026006c090000080027000100000008000c006400000008000d0000000000b549dc45f3d1dceaaa3b0813f33f2a20aa540b61f254e5e02cf1900ec1733b0587a71e6f3af4546591d3702561e0bafd618148c3feb2"], 0x74}}, 0x20000014) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c) gettid() 7m8.387466836s ago: executing program 7 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17e6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000baf25b737bd74b5d97d071775457e5fa02d0359eaf15d82cca2da009ff0a00c50cdc16f0339585b52a4f5f1c3293e1f79bac68047e86e9d96715f48c2a566d40f989c9666dc2da313c0b05558c363ab7ad35d53a37"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0xe8, 0x0, 0x260, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x87, 0x6, 0x4, 0xa}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbc, 0x7, 0x5aa9, @remote, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3980}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000000}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), r6) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010828bd7000fddbdf251000000005000f000400000008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x94) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000128bd7000fbdbdf250200000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x95) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) 7m6.415842344s ago: executing program 7 (id=604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00fb000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getpeername(r1, &(0x7f00000000c0)=@rc, &(0x7f0000000240)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, 0x0, &(0x7f0000000000)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x4, 0x870, 0x870}}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) 7m3.287442756s ago: executing program 7 (id=607): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x4, &(0x7f00000004c0)="9bb9bb65cedfbf4f1b49a037e8ca58a2a3932e4d8662c8d00fd82bac59985169f6e1472aee233478d2449763ccbb92a1ca69afe835a4faf947a62cf61afec25e4d29afbcaadd61deb97fcc2e978f2e3538ace7a2d13cebda74d7e89bbea78eddfde3f93869dab2ef89468e925441ad466992ef4de40a6447ada9db7bf0286dbea29f", 0x4d) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f00000001c0)={0x0, "9800003de8f644ad6c8a55930700", 0x3}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x1, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) execve(0x0, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, &(0x7f0000000200)={0x9, 0x2, 0x80000000, 0x5, '\x00', 0x13}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x4000000}) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[0x0]}, 0x0) 7m3.186025998s ago: executing program 7 (id=608): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x240000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x54) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) unshare(0x22020600) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x4) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r9, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r10, 0x80044940, &(0x7f0000000240)=0x14) ioctl$IMDELTIMER(r10, 0x80044941, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x3}}}, 0x24}}, 0x40004) 7m2.02947651s ago: executing program 7 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00fb000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000018110000a258dc1452cec704752b07bad90cfcdce23d1de81027c2090ee6bcb4c5437d5e99a0921de4a346265a1eb61bab0c15289912cf46fe09fd64aadac1dfce343a20c36e71a5d64d2737870778edcfcd09c748d36566f6a7fd8cae3b20dd76290c2c6e5a5f5a12a44ee77f38c85f56acbfd53d95b3bc3a6424f31318977cd5e8173c2ef6e5b358284aeeec54e73b04ffb98a402162e6f84228a7eabce4200233527d30700eaeae3df2b33dbc3fdcf6078056a737d63fe66ca9d8b6e10c9e455804213e6c576200c9e7ae38c0e64ac4", @ANYRES32=r1, @ANYRESDEC=r1, @ANYRESHEX=r2], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername(r0, &(0x7f00000000c0)=@rc, &(0x7f0000000240)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000000)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x4, 0x870, 0x870}}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) 6m58.807982431s ago: executing program 36 (id=598): syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x14000005) sendmmsg$unix(r6, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r4, 0x7, &(0x7f0000000080)=0x6e) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r8, 0x1) ioprio_get$uid(0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000060000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="35000e00800000000802110000010802110000005050505050500000000000000000000064000100250301040e7206030303030303000000080026006c090000080027000100000008000c006400000008000d0000000000b549dc45f3d1dceaaa3b0813f33f2a20aa540b61f254e5e02cf1900ec1733b0587a71e6f3af4546591d3702561e0bafd618148c3feb2"], 0x74}}, 0x20000014) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c) gettid() 6m46.234381679s ago: executing program 37 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00fb000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000018110000a258dc1452cec704752b07bad90cfcdce23d1de81027c2090ee6bcb4c5437d5e99a0921de4a346265a1eb61bab0c15289912cf46fe09fd64aadac1dfce343a20c36e71a5d64d2737870778edcfcd09c748d36566f6a7fd8cae3b20dd76290c2c6e5a5f5a12a44ee77f38c85f56acbfd53d95b3bc3a6424f31318977cd5e8173c2ef6e5b358284aeeec54e73b04ffb98a402162e6f84228a7eabce4200233527d30700eaeae3df2b33dbc3fdcf6078056a737d63fe66ca9d8b6e10c9e455804213e6c576200c9e7ae38c0e64ac4", @ANYRES32=r1, @ANYRESDEC=r1, @ANYRESHEX=r2], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername(r0, &(0x7f00000000c0)=@rc, &(0x7f0000000240)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000000)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x4, 0x870, 0x870}}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) 5m38.811557944s ago: executing program 8 (id=686): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r1 = openat$vcsu(0xffffff9c, 0x0, 0x288a80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x48) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendto$inet6(r2, &(0x7f0000000140)="80003ee9620ca1ce", 0x8, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8000003}}], 0x18}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r5}}, 0x30) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c00020006000000000000001400010001007d48f225caf14f09b3000000000000000000000000000150bb2d6f67d29d6fabadb107d0def40588ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d962fbc08c029d1608a487f26fbe816b89f7cb81060000000000000056555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f07976773b2ec1a875f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f0000"], 0x114}], 0x1}, 0x0) syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x101000) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0xffffffff}}, 0x10) 5m35.423525351s ago: executing program 8 (id=689): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xfffc, 0x1008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r7, &(0x7f0000001400)=[{0x0, 0x3, 0x0, 0x0, @tick, {}, {0x8}, @connect={{0xfd, 0x4}, {0x2, 0x6}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) r8 = syz_io_uring_setup(0x49b, &(0x7f00000000c0)={0x0, 0x7079, 0x800, 0x7, 0x221}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc00", 0xe) 5m33.71666465s ago: executing program 8 (id=691): creat(&(0x7f0000000040)='./bus\x00', 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r4}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdn', @ANYBLOB=',\x00']) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x30, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033006c6f0000000000001f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 5m30.509529196s ago: executing program 8 (id=693): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x24) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={r6}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdn', @ANYBLOB=',\x00']) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x30, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033006c6f0000000000001f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 5m28.094288137s ago: executing program 8 (id=696): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xb0, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0xd, 0x6, "9638ff", 0x7a, 0x6, 0x1, @private2, @empty, {[@srh={0x16, 0x4, 0x4, 0x2, 0x1, 0x40, 0xffff, [@private2={0xfc, 0x2, '\x00', 0x1}, @empty]}], {{0x4e24, 0x4e23, r8, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x6, {[@mss={0x2, 0x4, 0xb}]}}, {"613cb06ba353358e5d1d42c84ff14774ae1dd2ef1ee80f654ee2b77f3796c63d7e6a2d6c71c82a9698aca25cdc37f8cfddb99bfabf957ec35df8"}}}}}}}, 0x0) signalfd4(r7, &(0x7f00000000c0)={[0xff]}, 0x8, 0x80800) 5m26.035447984s ago: executing program 8 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='syz', 0xfffffffffffffff8) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000540)="31f4ab74", 0x4, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100040008010400440008004b000100000018004c000bac0f0001ac0f000fac0f0014ac0f000dac0f0004001e013400fe005b4b2efefbd21e89ebe44fed4ccafef683d6d2b615eaae470d346b912171f3b7964aa23b2b1cebf9b5e719d408580a7b08004b000100000008004c0013ac0f002400fe001c239bb7fafedd4381bff31d77124bfb354d84daed80e404deb71fdbdd2e3e6f08000c006400000008000d"], 0xe8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x2, 0x1, 0x2, 0xa, 0xc53e, 0x8}, 0x20) r7 = socket(0x1e, 0x1, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x100}) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5603, 0x10000000000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x28, r9, 0x403, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4008000) socket$nl_generic(0x10, 0x3, 0x10) gettid() 5m10.810042344s ago: executing program 38 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='syz', 0xfffffffffffffff8) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000540)="31f4ab74", 0x4, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100040008010400440008004b000100000018004c000bac0f0001ac0f000fac0f0014ac0f000dac0f0004001e013400fe005b4b2efefbd21e89ebe44fed4ccafef683d6d2b615eaae470d346b912171f3b7964aa23b2b1cebf9b5e719d408580a7b08004b000100000008004c0013ac0f002400fe001c239bb7fafedd4381bff31d77124bfb354d84daed80e404deb71fdbdd2e3e6f08000c006400000008000d"], 0xe8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x2, 0x1, 0x2, 0xa, 0xc53e, 0x8}, 0x20) r7 = socket(0x1e, 0x1, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x100}) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5603, 0x10000000000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x28, r9, 0x403, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4008000) socket$nl_generic(0x10, 0x3, 0x10) gettid() 3m0.225642084s ago: executing program 5 (id=877): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x44, 0x39, 0xdc, 0x40, 0x1660, 0x1921, 0x1f84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0xf6, 0x62, 0x70}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0x0, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m55.849160923s ago: executing program 5 (id=894): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000004c40)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="9300a000000000002e064accfcd7f5fab2bbccff494dd317f6d01dd0a7aa512f2c32f79bb680a18fd2a5c33695"], 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) 2m51.963264427s ago: executing program 5 (id=890): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000004c40)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) close(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r8, &(0x7f0000000000)=""/42, 0x2a) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) 2m49.007343165s ago: executing program 5 (id=892): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef51d"], 0xf8) 2m48.40756821s ago: executing program 5 (id=895): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2m44.750925669s ago: executing program 5 (id=903): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000100001040625fd1a62ea8ef707504a8621d2400000000000000000ffff0000", @ANYRES32=0x0, @ANYBLOB="08d10000000000002000128009000100766c616e00000000100002800c0002000e0000000f00000014000300766c616e3000"/60], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x1}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x40080) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) fchdir(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/time\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0xc, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2}, 0x50) setns(0xffffffffffffffff, 0x8020000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fc, 0x0) 2m27.36273939s ago: executing program 39 (id=903): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000100001040625fd1a62ea8ef707504a8621d2400000000000000000ffff0000", @ANYRES32=0x0, @ANYBLOB="08d10000000000002000128009000100766c616e00000000100002800c0002000e0000000f00000014000300766c616e3000"/60], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x1}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x40080) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) fchdir(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/time\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0xc, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2}, 0x50) setns(0xffffffffffffffff, 0x8020000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fc, 0x0) 1m58.940850791s ago: executing program 9 (id=968): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f00000036c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="aa", 0x1}], 0x1}}], 0x1, 0x8040) 1m58.607824746s ago: executing program 9 (id=971): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1m57.600279335s ago: executing program 9 (id=976): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x100) 1m56.084125916s ago: executing program 2 (id=977): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}, 0x6}, 0x1c) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0xa, 0x0, @loopback}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000001ac0)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee4235ea51f69b999879d8fc01b488bd07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f3645a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9b65077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e051e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b82719", 0xfed}, {&(0x7f0000000340)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2", 0x2d}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x11, 0x29, 0x4, 0xfc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x48}, 0x80) 1m55.822276035s ago: executing program 9 (id=978): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x1}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4c441, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r3 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000040)=""/210, 0xd2}], 0x1, 0xfffffff8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffd) execve(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'gre0\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x8, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0xb, 0xf, 0xff, 0x0, 0x3, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xf4, 0x2], 0x1, [0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 1m55.675480752s ago: executing program 2 (id=979): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x8924, 0x0) 1m54.49355623s ago: executing program 2 (id=981): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x6}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x9, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}, {0xfffffffffffffc7f}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1m49.972409035s ago: executing program 4 (id=985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1m49.962889086s ago: executing program 9 (id=986): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 1m49.821952687s ago: executing program 2 (id=987): symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) 1m49.718947536s ago: executing program 4 (id=988): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCL_SETSEL(r0, 0x40087101, &(0x7f0000000180)={0x2, {0x2, 0x4, 0x800, 0x7, 0x5}}) 1m49.652799007s ago: executing program 2 (id=989): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xaea3, 0x0) 1m49.479860929s ago: executing program 4 (id=990): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x40, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@cipso={0x86, 0x1c, 0x3, [{0x1, 0xd, "ecbb63cf7869d31acee81b"}, {0x1, 0x9, "1206b44392d071"}]}]}}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) 1m49.314157795s ago: executing program 4 (id=991): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d446c098cfc27eb8549d66e79219c2c3385e4508546e551a0de59631719ba089"}}}}}}}, 0x0) 1m49.281425061s ago: executing program 2 (id=992): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000004c40)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="9300a000000000002e064accfcd7f5fab2bbccff494dd317f6d01dd0a7aa512f2c32f79bb680a18fd2a5c33695"], 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) 1m49.156058923s ago: executing program 9 (id=993): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) keyctl$clear(0x5, 0xffffffffffffffff) r1 = getpid() syz_pidfd_open(r1, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1132200345c010203010902630002040828072406020000000524001c620d240f0100000000020005f29011cc03080353ee97050a2401f90a00020102092403060703020208"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x0, 0x2, &(0x7f0000000180)="fae969a2", 0x4) prlimit64(r2, 0x7, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0xfff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0xffff, 0x100}}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m49.124803136s ago: executing program 4 (id=994): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x22, 0x38, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x31}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x29, 0x780, 0x64, 0x7ff, 0xc1, 0x1, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, '*\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 1m48.898749266s ago: executing program 4 (id=995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) 1m15.855900789s ago: executing program 40 (id=992): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000004c40)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="9300a000000000002e064accfcd7f5fab2bbccff494dd317f6d01dd0a7aa512f2c32f79bb680a18fd2a5c33695"], 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) 0s ago: executing program 41 (id=993): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) keyctl$clear(0x5, 0xffffffffffffffff) r1 = getpid() syz_pidfd_open(r1, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1132200345c010203010902630002040828072406020000000524001c620d240f0100000000020005f29011cc03080353ee97050a2401f90a00020102092403060703020208"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x0, 0x2, &(0x7f0000000180)="fae969a2", 0x4) prlimit64(r2, 0x7, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0xfff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0xffff, 0x100}}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) kernel console output (not intermixed with test programs): 1.703117][ T9234] team0: Port device team_slave_0 added [ 821.706129][ T9299] team0: Port device team_slave_0 added [ 821.712847][ T9234] team0: Port device team_slave_1 added [ 821.925169][ T9299] team0: Port device team_slave_1 added [ 822.304501][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.304520][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.304559][ T9234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.541894][ T1022] hsr_slave_0: left promiscuous mode [ 822.560432][ T1022] hsr_slave_1: left promiscuous mode [ 822.562443][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.611507][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.763198][ T1022] hsr_slave_0: left promiscuous mode [ 822.800475][ T1022] hsr_slave_1: left promiscuous mode [ 822.801467][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.831507][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.992728][ T1022] hsr_slave_0: left promiscuous mode [ 823.013368][ T1022] hsr_slave_1: left promiscuous mode [ 823.014364][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.061395][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.662118][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 823.667675][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 823.669081][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 823.683727][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 823.684767][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 824.091504][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 824.261129][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 825.661598][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 825.800482][ T6375] Bluetooth: hci0: command tx timeout [ 825.816730][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 827.141571][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 827.317575][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 827.883132][ T6375] Bluetooth: hci0: command tx timeout [ 828.005901][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.005916][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.005936][ T9234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.007050][ T9299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.007062][ T9299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.007081][ T9299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.007521][ T9043] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 828.181358][ T9299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.181376][ T9299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.181406][ T9299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.754896][ T9234] hsr_slave_0: entered promiscuous mode [ 828.768352][ T9234] hsr_slave_1: entered promiscuous mode [ 829.229895][ T9299] hsr_slave_0: entered promiscuous mode [ 829.232607][ T9299] hsr_slave_1: entered promiscuous mode [ 829.233736][ T9299] debugfs: 'hsr0' already exists in 'hsr' [ 829.233765][ T9299] Cannot create hsr debugfs directory [ 829.235186][ T9328] lo speed is unknown, defaulting to 1000 [ 829.497290][ T9328] lo speed is unknown, defaulting to 1000 [ 829.980544][ T6375] Bluetooth: hci0: command tx timeout [ 831.555535][ T9234] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 831.628683][ T9234] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 831.734852][ T9234] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 831.779539][ T9328] chnl_net:caif_netlink_parms(): no params data found [ 831.889237][ T9234] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 832.040955][ T6375] Bluetooth: hci0: command tx timeout [ 832.942874][ T9299] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 833.009204][ T9328] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.009355][ T9328] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.009570][ T9328] bridge_slave_0: entered allmulticast mode [ 833.021260][ T9328] bridge_slave_0: entered promiscuous mode [ 833.027787][ T9299] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 833.087975][ T9328] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.088222][ T9328] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.088492][ T9328] bridge_slave_1: entered allmulticast mode [ 833.102074][ T9328] bridge_slave_1: entered promiscuous mode [ 833.117293][ T9299] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 833.317776][ T9299] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 833.503663][ T9328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.917285][ T9328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.240557][ T9328] team0: Port device team_slave_0 added [ 834.324312][ T9328] team0: Port device team_slave_1 added [ 834.617436][ T9328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.617455][ T9328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.617480][ T9328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.626510][ T9328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.626530][ T9328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.626564][ T9328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.997366][ T1022] bridge_slave_1: left allmulticast mode [ 834.997401][ T1022] bridge_slave_1: left promiscuous mode [ 834.997671][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.052075][ T1022] bridge_slave_0: left allmulticast mode [ 835.052108][ T1022] bridge_slave_0: left promiscuous mode [ 835.053106][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.461353][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.542908][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.618949][ T1022] bond0 (unregistering): Released all slaves [ 835.668677][ T9328] hsr_slave_0: entered promiscuous mode [ 835.669659][ T9328] hsr_slave_1: entered promiscuous mode [ 835.685235][ T9328] debugfs: 'hsr0' already exists in 'hsr' [ 835.685265][ T9328] Cannot create hsr debugfs directory [ 836.160645][ T1022] hsr_slave_0: left promiscuous mode [ 836.184013][ T1022] hsr_slave_1: left promiscuous mode [ 836.184760][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.224696][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.931238][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 837.094074][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 838.079319][ T9234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.373664][ T9234] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.408885][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.409097][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.469530][ T9299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.652520][ T3925] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.652752][ T3925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.841650][ T9299] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.986564][ T3925] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.986752][ T3925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.030951][ T3925] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.031070][ T3925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.556491][ T9328] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 839.604886][ T9328] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 839.677891][ T9328] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 839.730501][ T9328] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 839.928591][ T9234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.014455][ T9299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.338097][ T9328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.429415][ T9328] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.479682][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.479956][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.515753][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.515978][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.818747][ T9234] veth0_vlan: entered promiscuous mode [ 840.915589][ T9234] veth1_vlan: entered promiscuous mode [ 840.989410][ T9299] veth0_vlan: entered promiscuous mode [ 841.074859][ T9299] veth1_vlan: entered promiscuous mode [ 841.182676][ T9234] veth0_macvtap: entered promiscuous mode [ 841.216625][ T9234] veth1_macvtap: entered promiscuous mode [ 841.266766][ T9328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.316828][ T9299] veth0_macvtap: entered promiscuous mode [ 841.351584][ T9234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.360870][ T9299] veth1_macvtap: entered promiscuous mode [ 841.421820][ T9234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.477030][ T5955] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.477619][ T5955] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.479154][ T5955] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.485602][ T5955] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.489919][ T9299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.547164][ T9299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.589799][ T6127] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.596252][ T6127] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.606917][ T6127] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.667227][ T6127] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.171621][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.171642][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.301228][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.301252][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.371421][ T6127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.371444][ T6127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.502198][ T9328] veth0_vlan: entered promiscuous mode [ 842.502432][ T6127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.502450][ T6127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.565867][ T9328] veth1_vlan: entered promiscuous mode [ 843.782851][ T9328] veth0_macvtap: entered promiscuous mode [ 843.807814][ T9328] veth1_macvtap: entered promiscuous mode [ 844.252232][ T9477] netlink: 68 bytes leftover after parsing attributes in process `syz.6.57'. [ 847.539805][ T9328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.636648][ T9328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.725016][ T6029] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.725073][ T6029] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.725112][ T6029] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.725149][ T6029] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.188910][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.977764][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.557035][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.627412][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.679172][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.047916][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.106822][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.157052][ T9518] bridge0: entered allmulticast mode [ 852.171358][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.171378][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.258588][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.248332][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.636572][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.063971][ T9535] sctp: failed to load transform for md5: -2 [ 854.176354][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.608267][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.258476][ T5152] Bluetooth: hci0: command 0x0405 tx timeout [ 856.777214][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.777230][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.428297][ C0] vkms_vblank_simulate: vblank timer overrun [ 864.582608][ C0] vkms_vblank_simulate: vblank timer overrun [ 864.735575][ C0] vkms_vblank_simulate: vblank timer overrun [ 864.938416][ T9606] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 864.938477][ T9606] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 864.938518][ T9606] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 864.938518][ T9606] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 864.938564][ T9606] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 864.938605][ T9606] CUSE: DEVNAME unspecified [ 864.955555][ C0] vkms_vblank_simulate: vblank timer overrun [ 865.356074][ C0] vkms_vblank_simulate: vblank timer overrun [ 865.381778][ T38] audit: type=1326 audit(1756386440.538:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9602 comm="syz.5.609" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5dc33bebe9 code=0x0 [ 865.773684][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.061612][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.068805][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.401893][ T9615] syz.4.610 (9615) used greatest stack depth: 17208 bytes left [ 867.433347][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.672489][ C0] vkms_vblank_simulate: vblank timer overrun [ 868.004717][ T9621] netlink: 116 bytes leftover after parsing attributes in process `syz.8.613'. [ 868.199246][ C0] vkms_vblank_simulate: vblank timer overrun [ 868.513336][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.004428][ T9636] program syz.5.616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 869.005152][ T9631] Driver unsupported XDP return value 0 on prog (id 187) dev N/A, expect packet loss! [ 873.051726][ T6375] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 873.071868][ T6375] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 873.074443][ T6375] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 873.101216][ T6375] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 873.117514][ T6375] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 873.529413][ T9654] lo speed is unknown, defaulting to 1000 [ 873.552360][ T9654] lo speed is unknown, defaulting to 1000 [ 875.492484][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.498035][ T6375] Bluetooth: hci3: command tx timeout [ 875.677617][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.5.621'. [ 876.578965][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.8.624'. [ 876.766584][ T9684] netlink: 'syz.8.624': attribute type 2 has an invalid length. [ 876.766656][ T9684] netlink: 'syz.8.624': attribute type 2 has an invalid length. [ 876.766719][ T9684] netlink: 'syz.8.624': attribute type 2 has an invalid length. [ 876.766795][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.8.624'. [ 877.560396][ T6375] Bluetooth: hci3: command tx timeout [ 879.640517][ T6375] Bluetooth: hci3: command tx timeout [ 880.723686][ C1] vkms_vblank_simulate: vblank timer overrun [ 883.415554][ T6375] Bluetooth: hci3: command tx timeout [ 883.417734][ T38] audit: type=1107 audit(1756386458.648:75): pid=9691 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 898.508793][ T9730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 898.652000][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.932209][ T9741] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 900.107710][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 900.125529][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 900.127456][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 900.128906][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 900.131518][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 900.489945][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.781740][ C1] vkms_vblank_simulate: vblank timer overrun [ 901.124238][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.280269][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.314810][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.371515][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.420958][ T6375] Bluetooth: hci1: command tx timeout [ 903.211867][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.404903][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.609093][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.855597][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.042275][ T9771] siw: device registration error -23 [ 904.067484][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.213967][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.340788][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.473988][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.513102][ T6375] Bluetooth: hci1: command tx timeout [ 904.535659][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.663353][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.988130][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.288062][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.474205][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.152291][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.520598][ T5152] Bluetooth: hci1: command tx timeout [ 906.964861][ T9770] tipc: Started in network mode [ 906.964893][ T9770] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 906.965226][ T9770] tipc: Enabled bearer , priority 10 [ 907.211337][ T9790] netlink: 52 bytes leftover after parsing attributes in process `syz.4.643'. [ 907.278214][ T9654] chnl_net:caif_netlink_parms(): no params data found [ 908.655282][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ed8bc00: rx timeout, send abort [ 908.656500][ T5152] Bluetooth: hci1: command tx timeout [ 908.723558][ T45] tipc: Node number set to 10005162 [ 909.065514][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.155406][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ed8bc00: abort rx timeout. Force session deactivation [ 910.102248][ C1] vkms_vblank_simulate: vblank timer overrun [ 910.668169][ C1] vkms_vblank_simulate: vblank timer overrun [ 910.763395][ C1] vkms_vblank_simulate: vblank timer overrun [ 910.961981][ C1] vkms_vblank_simulate: vblank timer overrun [ 911.036963][ T9746] lo speed is unknown, defaulting to 1000 [ 911.290107][ C1] vkms_vblank_simulate: vblank timer overrun [ 911.467357][ C1] vkms_vblank_simulate: vblank timer overrun [ 911.642523][ C1] vkms_vblank_simulate: vblank timer overrun [ 912.072007][ C1] vkms_vblank_simulate: vblank timer overrun [ 912.485069][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.596399][ T9746] lo speed is unknown, defaulting to 1000 [ 912.930089][ T9826] netlink: 28 bytes leftover after parsing attributes in process `syz.8.648'. [ 912.930288][ T9826] netlink: 28 bytes leftover after parsing attributes in process `syz.8.648'. [ 912.984172][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.859471][ C1] vkms_vblank_simulate: vblank timer overrun [ 915.118488][ C1] vkms_vblank_simulate: vblank timer overrun [ 916.538417][ T9654] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.543656][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.606678][ T9654] bridge_slave_0: entered allmulticast mode [ 916.999133][ T9654] bridge_slave_0: entered promiscuous mode [ 917.237887][ T9654] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.263843][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.264127][ T9654] bridge_slave_1: entered allmulticast mode [ 917.267050][ T9654] bridge_slave_1: entered promiscuous mode [ 917.607769][ T9853] siw: device registration error -23 [ 919.568491][ T9864] netlink: 76 bytes leftover after parsing attributes in process `syz.8.655'. [ 920.949595][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.827953][ T9879] tmpfs: Unknown parameter 'usrquotaization' [ 921.865674][ C1] vkms_vblank_simulate: vblank timer overrun [ 922.336797][ C1] vkms_vblank_simulate: vblank timer overrun [ 922.564167][ T9884] netlink: 52 bytes leftover after parsing attributes in process `syz.5.659'. [ 922.677014][ T9654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.446995][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.538370][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.976270][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036288000: rx timeout, send abort [ 924.033249][ T9654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.561408][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036288000: abort rx timeout. Force session deactivation [ 928.470860][ T12] bridge_slave_1: left allmulticast mode [ 928.470901][ T12] bridge_slave_1: left promiscuous mode [ 928.500454][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.896026][ T12] bridge_slave_0: left allmulticast mode [ 928.896063][ T12] bridge_slave_0: left promiscuous mode [ 928.897009][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.905483][ T6375] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 929.937575][ T6375] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 929.949546][ T6375] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 929.962847][ T6375] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 929.963819][ T6375] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 930.342973][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.083738][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.362886][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.423118][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.503132][ C1] vkms_vblank_simulate: vblank timer overrun [ 932.044660][ T5152] Bluetooth: hci4: command tx timeout [ 932.530621][ C1] vkms_vblank_simulate: vblank timer overrun [ 932.884354][ C1] vkms_vblank_simulate: vblank timer overrun [ 932.902100][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.792590][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.822555][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.897670][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.900607][ T5152] Bluetooth: hci6: command 0x0406 tx timeout [ 934.101574][ C1] vkms_vblank_simulate: vblank timer overrun [ 934.121671][ T5152] Bluetooth: hci4: command tx timeout [ 936.210415][ T6375] Bluetooth: hci4: command tx timeout [ 936.340681][ T9958] netlink: 80 bytes leftover after parsing attributes in process `syz.5.672'. [ 936.942316][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.312298][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.399155][ T9967] vivid-002: disconnect [ 937.411229][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.462625][ T12] bond0 (unregistering): Released all slaves [ 937.505154][ T9967] Bluetooth: MGMT ver 1.23 [ 938.303698][ T6375] Bluetooth: hci4: command tx timeout [ 939.332137][ T9964] vivid-002: reconnect [ 940.346982][ T9983] netlink: 52 bytes leftover after parsing attributes in process `syz.8.677'. [ 940.520042][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.879030][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.728434][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.729266][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030d07800: rx timeout, send abort [ 941.790377][ T9927] lo speed is unknown, defaulting to 1000 [ 942.212327][ T9995] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 942.397502][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.399050][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030d07800: abort rx timeout. Force session deactivation [ 942.907691][ C0] vkms_vblank_simulate: vblank timer overrun [ 943.327813][ C0] vkms_vblank_simulate: vblank timer overrun [ 943.480959][ C0] vkms_vblank_simulate: vblank timer overrun [ 943.913270][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.035344][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 944.066021][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 944.067454][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 944.068790][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 944.070082][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 944.244508][ C0] vkms_vblank_simulate: vblank timer overrun [ 945.366578][ C0] vkms_vblank_simulate: vblank timer overrun [ 946.486142][ T9927] lo speed is unknown, defaulting to 1000 [ 946.487550][T10025] siw: device registration error -23 [ 946.597657][ T5152] Bluetooth: hci3: command tx timeout [ 946.982518][T10030] Bluetooth: MGMT ver 1.23 [ 947.687188][T10012] lo speed is unknown, defaulting to 1000 [ 947.689966][T10012] lo speed is unknown, defaulting to 1000 [ 948.890481][ T5152] Bluetooth: hci3: command tx timeout [ 950.794657][T10038] netlink: 'syz.8.686': attribute type 1 has an invalid length. [ 950.794675][T10038] netlink: 224 bytes leftover after parsing attributes in process `syz.8.686'. [ 951.161443][ T5152] Bluetooth: hci3: command tx timeout [ 952.054928][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.479457][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.714691][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.996719][T10062] virtio-fs: tag not found [ 953.854177][ T5152] Bluetooth: hci3: command tx timeout [ 953.916960][ C0] vkms_vblank_simulate: vblank timer overrun [ 955.018079][T10070] siw: device registration error -23 [ 955.055440][ C0] vkms_vblank_simulate: vblank timer overrun [ 955.664300][ C0] vkms_vblank_simulate: vblank timer overrun [ 957.773224][T10086] siw: device registration error -23 [ 959.110409][ T12] hsr_slave_0: left promiscuous mode [ 959.223231][ T12] hsr_slave_1: left promiscuous mode [ 959.254720][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.255001][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.326518][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.326556][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.877060][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.695'. [ 961.037008][ T12] veth1_macvtap: left promiscuous mode [ 961.037135][ T12] veth0_macvtap: left promiscuous mode [ 961.037447][ T12] veth1_vlan: left promiscuous mode [ 961.037660][ T12] veth0_vlan: left promiscuous mode [ 966.631062][ T12] team0 (unregistering): Port device team_slave_1 removed [ 967.861021][ T12] team0 (unregistering): Port device team_slave_0 removed [ 971.137108][T10137] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 971.780463][ T9986] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 971.993450][ T9986] usb 5-1: unable to get BOS descriptor or descriptor too short [ 971.995209][ T9986] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.995236][ T9986] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 972.029856][ T9986] usb 5-1: string descriptor 0 read error: -22 [ 972.030030][ T9986] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 972.030056][ T9986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.105021][ T9986] usb 5-1: invalid UAC_HEADER (v1) [ 972.578223][ T9986] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 973.695886][ T9] usb 5-1: USB disconnect, device number 11 [ 979.522490][ T6375] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 979.554307][ T6375] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 979.597234][ T6375] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 980.903115][ T6375] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 980.904205][ T6375] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 981.836917][ T9927] chnl_net:caif_netlink_parms(): no params data found [ 982.006610][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.719'. [ 982.006638][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.719'. [ 982.801291][T10200] program syz.5.712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 982.971013][ C0] vkms_vblank_simulate: vblank timer overrun [ 983.560587][ T5152] Bluetooth: hci0: command tx timeout [ 984.803576][ T38] audit: type=1400 audit(1756387012.965:76): lsm=SMACK fn=smack_inode_remove_acl action=denied subject="w" object="_" requested=w pid=10206 comm="syz.5.713" name="file1" dev="tmpfs" ino=219 [ 985.674591][ T5152] Bluetooth: hci0: command tx timeout [ 987.730992][ C0] vkms_vblank_simulate: vblank timer overrun [ 987.731201][ T5152] Bluetooth: hci0: command tx timeout [ 987.778922][T10172] lo speed is unknown, defaulting to 1000 [ 987.781611][T10012] chnl_net:caif_netlink_parms(): no params data found [ 988.860524][ T9927] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 988.900204][T10172] lo speed is unknown, defaulting to 1000 [ 990.170269][ T5152] Bluetooth: hci0: command tx timeout [ 991.213568][ T6375] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 991.257023][ T6375] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 991.259950][ T6375] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 991.269911][ T6375] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 991.272214][ T6375] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 991.372116][T10259] netlink: 'syz.4.722': attribute type 6 has an invalid length. [ 991.375713][T10259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.722'. [ 992.530651][T10263] syz.4.722 (10263): attempted to duplicate a private mapping with mremap. This is not supported. [ 992.531530][ T38] audit: type=1326 audit(1756387021.115:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10256 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320460ebe9 code=0x7ffc0000 [ 992.531584][ T38] audit: type=1326 audit(1756387021.115:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10256 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320460ebe9 code=0x7ffc0000 [ 992.634293][ T38] audit: type=1326 audit(1756387021.205:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10256 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f320460ebe9 code=0x7ffc0000 [ 993.351430][ T5152] Bluetooth: hci1: command tx timeout [ 994.084467][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.084696][T10012] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.084974][T10012] bridge_slave_0: entered allmulticast mode [ 994.088337][T10012] bridge_slave_0: entered promiscuous mode [ 994.236955][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.237119][T10012] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.237387][T10012] bridge_slave_1: entered allmulticast mode [ 994.276367][T10012] bridge_slave_1: entered promiscuous mode [ 995.138396][T10012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.214754][T10297] block nbd5: Attempted send on invalid socket [ 995.214781][T10297] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 995.215089][T10297] EXT4-fs (nbd5): unable to read superblock [ 995.226161][T10012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.273696][T10300] No control pipe specified [ 995.684085][ T5152] Bluetooth: hci1: command tx timeout [ 995.939026][T10260] lo speed is unknown, defaulting to 1000 [ 997.720819][ T5152] Bluetooth: hci1: command tx timeout [ 998.379863][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.773251][ T5152] Bluetooth: hci1: command tx timeout [ 1001.738085][T10260] lo speed is unknown, defaulting to 1000 [ 1004.721623][ T38] audit: type=1326 audit(1756387033.245:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10334 comm="syz.5.730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dc33bebe9 code=0x0 [ 1005.325368][ T6375] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1005.345351][ T6375] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1005.346820][ T6375] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1005.348878][ T6375] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1005.349805][ T6375] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1005.399097][T10345] netlink: 'syz.4.731': attribute type 1 has an invalid length. [ 1005.508864][T10347] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1005.943819][T10350] syz.5.732 uses obsolete (PF_INET,SOCK_PACKET) [ 1007.483403][ T6375] Bluetooth: hci4: command tx timeout [ 1009.560558][ T6375] Bluetooth: hci4: command tx timeout [ 1011.217991][T10369] netlink: 52 bytes leftover after parsing attributes in process `syz.4.739'. [ 1011.258913][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.739'. [ 1011.258940][T10369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.739'. [ 1011.298257][T10172] chnl_net:caif_netlink_parms(): no params data found [ 1011.621383][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.640638][ T6375] Bluetooth: hci4: command tx timeout [ 1012.173344][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.302749][T10343] lo speed is unknown, defaulting to 1000 [ 1012.333752][T10343] lo speed is unknown, defaulting to 1000 [ 1012.475117][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.829359][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.870958][T10172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.871204][T10172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.871479][T10172] bridge_slave_0: entered allmulticast mode [ 1012.874375][T10172] bridge_slave_0: entered promiscuous mode [ 1012.906683][T10172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.906829][T10172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.907093][T10172] bridge_slave_1: entered allmulticast mode [ 1012.910028][T10172] bridge_slave_1: entered promiscuous mode [ 1013.194185][T10172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.233978][T10172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.684630][T10172] team0: Port device team_slave_0 added [ 1013.724676][ T5152] Bluetooth: hci4: command tx timeout [ 1013.835199][T10172] team0: Port device team_slave_1 added [ 1014.277445][T10172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.277465][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.277495][T10172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.295042][T10260] chnl_net:caif_netlink_parms(): no params data found [ 1014.309752][T10172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.309774][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.309810][T10172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.666672][ T12] bridge_slave_1: left allmulticast mode [ 1014.666697][ T12] bridge_slave_1: left promiscuous mode [ 1014.666870][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.732020][ T12] bridge_slave_0: left allmulticast mode [ 1014.732056][ T12] bridge_slave_0: left promiscuous mode [ 1014.732381][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.817260][ T12] bridge_slave_1: left promiscuous mode [ 1014.817581][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.872039][ T12] bridge_slave_0: left allmulticast mode [ 1014.872075][ T12] bridge_slave_0: left promiscuous mode [ 1014.872393][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.380530][ T12] bond0 (unregistering): Released all slaves [ 1015.722668][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.802890][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.874868][ T12] bond0 (unregistering): Released all slaves [ 1017.929113][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.991042][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.037372][ T12] bond0 (unregistering): Released all slaves [ 1018.408374][ T12] : left promiscuous mode [ 1018.577934][T10172] hsr_slave_0: entered promiscuous mode [ 1018.579418][T10172] hsr_slave_1: entered promiscuous mode [ 1019.184249][T10343] chnl_net:caif_netlink_parms(): no params data found [ 1019.195962][ T12] tipc: Disabling bearer [ 1019.294942][ T12] tipc: Left network mode [ 1019.295206][T10260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.295353][T10260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.295631][T10260] bridge_slave_0: entered allmulticast mode [ 1019.298710][T10260] bridge_slave_0: entered promiscuous mode [ 1019.376765][T10260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.376987][T10260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.377228][T10260] bridge_slave_1: entered allmulticast mode [ 1019.380935][T10260] bridge_slave_1: entered promiscuous mode [ 1020.116016][T10260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.168096][T10260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.071976][T10260] team0: Port device team_slave_0 added [ 1021.103229][T10343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.103553][T10343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.103770][T10343] bridge_slave_0: entered allmulticast mode [ 1021.111329][T10343] bridge_slave_0: entered promiscuous mode [ 1021.119758][T10260] team0: Port device team_slave_1 added [ 1021.165287][T10343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.165443][T10343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.165694][T10343] bridge_slave_1: entered allmulticast mode [ 1021.193795][T10343] bridge_slave_1: entered promiscuous mode [ 1021.544042][T10260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.544073][T10260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.544098][T10260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.880619][T10343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.881594][T10260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.881609][T10260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.881638][T10260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.060332][ T12] hsr_slave_0: left promiscuous mode [ 1022.110668][ T12] hsr_slave_1: left promiscuous mode [ 1022.111661][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.111693][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.252501][ T12] veth1_macvtap: left promiscuous mode [ 1022.252633][ T12] veth0_macvtap: left promiscuous mode [ 1022.252931][ T12] veth1_vlan: left promiscuous mode [ 1022.253157][ T12] veth0_vlan: left promiscuous mode [ 1025.851345][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1026.142342][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1029.374144][T10343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.417450][ T5899] lo speed is unknown, defaulting to 1000 [ 1029.417480][ T5899] infiniband 3yz0: ib_query_port failed (-19) [ 1029.905631][T10343] team0: Port device team_slave_0 added [ 1030.315577][T10343] team0: Port device team_slave_1 added [ 1030.550924][T10260] hsr_slave_0: entered promiscuous mode [ 1030.552474][T10260] hsr_slave_1: entered promiscuous mode [ 1030.553336][T10260] debugfs: 'hsr0' already exists in 'hsr' [ 1030.553360][T10260] Cannot create hsr debugfs directory [ 1030.940067][T10343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.941886][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.941921][T10343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.949531][T10343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.949547][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.949577][T10343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.741066][T10343] hsr_slave_0: entered promiscuous mode [ 1031.742630][T10343] hsr_slave_1: entered promiscuous mode [ 1031.743702][T10343] debugfs: 'hsr0' already exists in 'hsr' [ 1031.743728][T10343] Cannot create hsr debugfs directory [ 1032.404569][T10172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1032.492371][T10172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1032.602854][T10172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1032.767300][T10172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1033.193200][T10260] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1033.254184][T10260] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1033.615588][T10260] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1033.674028][T10260] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1034.587085][ T12] bridge_slave_1: left allmulticast mode [ 1034.587120][ T12] bridge_slave_1: left promiscuous mode [ 1034.587393][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.645222][ T12] bridge_slave_0: left allmulticast mode [ 1034.645259][ T12] bridge_slave_0: left promiscuous mode [ 1034.645546][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.911138][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.001268][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.069401][ T12] bond0 (unregistering): Released all slaves [ 1036.564114][T10343] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1036.690210][T10343] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1036.745518][T10260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.753527][T10343] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1036.825383][T10343] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1036.925886][ T6375] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1036.943713][ T6375] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1036.946516][ T6375] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1036.948189][ T6375] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1036.949898][ T6375] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1036.966956][T10260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.072394][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.080395][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.084103][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.084370][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.618859][T10425] lo speed is unknown, defaulting to 1000 [ 1039.080768][ T5152] Bluetooth: hci3: command tx timeout [ 1039.157184][T10343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.195462][T10260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.200869][T10425] chnl_net:caif_netlink_parms(): no params data found [ 1039.593516][T10343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.875742][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.875974][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.021779][T10425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.021934][T10425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.022166][T10425] bridge_slave_0: entered allmulticast mode [ 1040.026046][T10425] bridge_slave_0: entered promiscuous mode [ 1040.048311][T10425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.048470][T10425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.048790][T10425] bridge_slave_1: entered allmulticast mode [ 1040.058969][T10425] bridge_slave_1: entered promiscuous mode [ 1040.064544][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.064723][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.175205][ T12] bridge_slave_1: left allmulticast mode [ 1040.175242][ T12] bridge_slave_1: left promiscuous mode [ 1040.175508][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.242099][ T12] bridge_slave_0: left allmulticast mode [ 1040.242135][ T12] bridge_slave_0: left promiscuous mode [ 1040.242437][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.160573][ T5152] Bluetooth: hci3: command tx timeout [ 1041.232733][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1041.323020][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.394288][ T12] bond0 (unregistering): Released all slaves [ 1041.544060][T10425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.598819][T10425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.869460][T10425] team0: Port device team_slave_0 added [ 1042.006731][ T12] hsr_slave_0: left promiscuous mode [ 1042.021970][ T12] hsr_slave_1: left promiscuous mode [ 1042.022806][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1042.071851][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.935288][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1043.108797][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1043.250747][ T5152] Bluetooth: hci3: command tx timeout [ 1043.985837][T10425] team0: Port device team_slave_1 added [ 1044.290888][T10425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.290926][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.290956][T10425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.316705][T10425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.316727][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.316761][T10425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.638896][T10260] veth0_vlan: entered promiscuous mode [ 1044.657025][T10425] hsr_slave_0: entered promiscuous mode [ 1044.659241][T10425] hsr_slave_1: entered promiscuous mode [ 1044.947864][T10260] veth1_vlan: entered promiscuous mode [ 1045.321100][ T5152] Bluetooth: hci3: command tx timeout [ 1045.601231][T10343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.776197][T10260] veth0_macvtap: entered promiscuous mode [ 1045.832226][T10260] veth1_macvtap: entered promiscuous mode [ 1046.084033][T10260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.141300][T10260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.228160][T10343] veth0_vlan: entered promiscuous mode [ 1046.255331][ T9777] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.256539][ T9777] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.256834][ T9777] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.257107][ T9777] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.317132][T10343] veth1_vlan: entered promiscuous mode [ 1046.819934][ T5971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.819957][ T5971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.922427][T10343] veth0_macvtap: entered promiscuous mode [ 1046.989764][T10343] veth1_macvtap: entered promiscuous mode [ 1047.003753][T10425] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1047.052224][T10425] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1047.089320][ T6022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.089344][ T6022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.125769][T10425] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1047.172003][T10425] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1047.279028][T10343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.332108][T10343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.382494][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.415461][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.426328][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.472321][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.201865][T10467] 9pnet_fd: Insufficient options for proto=fd [ 1049.864342][T10463] openvswitch: netlink: IP tunnel dst address not specified [ 1050.864959][ T38] audit: type=1326 audit(1756387079.425:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10476 comm="syz.9.741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde66afebe9 code=0x0 [ 1051.599375][T10484] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 1052.666556][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.744'. [ 1053.561436][T10496] netlink: 24 bytes leftover after parsing attributes in process `syz.5.745'. [ 1055.118948][ T6131] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.432561][T10501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1055.471578][T10503] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1056.955443][ C0] vkms_vblank_simulate: vblank timer overrun [ 1057.065283][ C0] vkms_vblank_simulate: vblank timer overrun [ 1057.209168][T10514] syz.4.750 (10514) used greatest stack depth: 16744 bytes left [ 1057.259701][ T6131] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.354639][ T31] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1057.541147][ C0] vkms_vblank_simulate: vblank timer overrun [ 1057.568223][ T31] usb 10-1: config 0 has an invalid interface number: 128 but max is 0 [ 1057.568274][ T31] usb 10-1: config 0 has no interface number 0 [ 1057.568316][ T31] usb 10-1: config 0 interface 128 has no altsetting 0 [ 1057.581600][ T31] usb 10-1: New USB device found, idVendor=04e2, idProduct=1411, bcdDevice=46.25 [ 1057.581642][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.581667][ T31] usb 10-1: Product: syz [ 1057.581690][ T31] usb 10-1: Manufacturer: syz [ 1057.581708][ T31] usb 10-1: SerialNumber: syz [ 1057.588725][ T31] usb 10-1: config 0 descriptor?? [ 1057.619880][ T6131] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.690997][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.691020][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.824867][ T31] usb 10-1: USB disconnect, device number 2 [ 1058.103559][ T6131] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.176961][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.176986][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.275639][T10425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.458922][T10425] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.348638][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.349626][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.572293][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.575859][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.633203][ T5152] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 1059.950911][ C0] vkms_vblank_simulate: vblank timer overrun [ 1059.959261][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.972144][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1060.089588][ C0] vkms_vblank_simulate: vblank timer overrun [ 1061.076954][ C0] vkms_vblank_simulate: vblank timer overrun [ 1061.090225][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1061.119098][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.177646][ T9] usb 6-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1061.177690][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.177712][ T9] usb 6-1: Product: syz [ 1061.177728][ T9] usb 6-1: Manufacturer: syz [ 1061.177741][ T9] usb 6-1: SerialNumber: syz [ 1061.358013][ T9] usb 6-1: config 0 descriptor?? [ 1061.524319][ T38] audit: type=1326 audit(1756387090.105:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10541 comm="syz.2.754" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f960800ebe9 code=0x0 [ 1061.550569][ T5152] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1062.078898][ T9] cdc_phonet 6-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1062.222567][ T9] usb 6-1: USB disconnect, device number 2 [ 1062.263847][ T6131] bridge_slave_1: left allmulticast mode [ 1062.263884][ T6131] bridge_slave_1: left promiscuous mode [ 1062.264169][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.476084][ T6131] bridge_slave_0: left allmulticast mode [ 1062.476120][ T6131] bridge_slave_0: left promiscuous mode [ 1062.476417][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.562536][ T5152] Bluetooth: hci6: unexpected event for opcode 0x200a [ 1063.230306][ T8136] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1063.402189][ T8136] usb 3-1: Using ep0 maxpacket: 16 [ 1063.429178][ T8136] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=d9.10 [ 1063.429211][ T8136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.429242][ T8136] usb 3-1: Product: syz [ 1063.429257][ T8136] usb 3-1: Manufacturer: syz [ 1063.429272][ T8136] usb 3-1: SerialNumber: syz [ 1063.526844][ T8136] usb 3-1: config 0 descriptor?? [ 1064.214496][ T8136] usbsevseg 3-1:0.0: USB 7 Segment device now attached [ 1064.726817][ T9985] usb 3-1: USB disconnect, device number 2 [ 1064.758902][ T9985] usbsevseg 3-1:0.0: USB 7 Segment now disconnected [ 1066.685815][T10612] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1068.719939][ T5152] Bluetooth: Unexpected continuation frame (len 16) [ 1069.274997][ T6034] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1069.449139][ T6034] usb 10-1: Using ep0 maxpacket: 8 [ 1069.454262][ T6034] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1069.529192][ T6034] usb 10-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=1c.76 [ 1069.529217][ T6034] usb 10-1: New USB device strings: Mfr=27, Product=2, SerialNumber=3 [ 1069.529232][ T6034] usb 10-1: Product: syz [ 1069.529242][ T6034] usb 10-1: Manufacturer: syz [ 1069.529259][ T6034] usb 10-1: SerialNumber: syz [ 1069.771920][ T6034] ldusb 10-1:7.0: Interrupt in endpoint not found [ 1069.791177][ T6034] usb 10-1: USB disconnect, device number 3 [ 1070.215940][ T6131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.278202][ T6131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.321884][ T6131] bond0 (unregistering): Released all slaves [ 1070.982935][T10650] lo speed is unknown, defaulting to 1000 [ 1070.984087][T10650] lo speed is unknown, defaulting to 1000 [ 1071.032489][T10650] lo speed is unknown, defaulting to 1000 [ 1072.485524][T10650] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1072.583037][T10650] lo speed is unknown, defaulting to 1000 [ 1072.587102][T10650] lo speed is unknown, defaulting to 1000 [ 1072.590152][T10650] lo speed is unknown, defaulting to 1000 [ 1072.597006][T10650] lo speed is unknown, defaulting to 1000 [ 1072.603393][T10650] lo speed is unknown, defaulting to 1000 [ 1072.608462][T10650] lo speed is unknown, defaulting to 1000 [ 1072.891661][ T9734] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1073.055984][ T9734] usb 6-1: config 0 has an invalid interface number: 229 but max is 0 [ 1073.056015][ T9734] usb 6-1: config 0 has no interface number 0 [ 1073.056085][ T9734] usb 6-1: config 0 interface 229 altsetting 0 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 1073.056115][ T9734] usb 6-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1073.059711][ T9734] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 1073.059743][ T9734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.059763][ T9734] usb 6-1: Product: syz [ 1073.059778][ T9734] usb 6-1: Manufacturer: syz [ 1073.059801][ T9734] usb 6-1: SerialNumber: syz [ 1073.196534][ T9734] usb 6-1: config 0 descriptor?? [ 1073.198714][T10655] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1073.518857][ T9734] usb 6-1: USB disconnect, device number 3 [ 1073.788383][ T9985] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1074.102240][ T9985] usb 10-1: config 0 has an invalid interface number: 133 but max is 0 [ 1074.102290][ T9985] usb 10-1: config 0 has no interface number 0 [ 1074.102343][ T9985] usb 10-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1074.170913][ T9985] usb 10-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1074.170942][ T9985] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.170962][ T9985] usb 10-1: Product: syz [ 1074.170974][ T9985] usb 10-1: Manufacturer: syz [ 1074.170987][ T9985] usb 10-1: SerialNumber: syz [ 1074.204014][ T9985] usb 10-1: config 0 descriptor?? [ 1074.547150][ T9985] keyspan 10-1:0.133: Keyspan 1 port adapter converter detected [ 1074.547522][ T9985] keyspan 10-1:0.133: unsupported endpoint type 0 [ 1074.570496][ T9985] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 81 [ 1074.570598][ T9985] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 1 [ 1074.570696][ T9985] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 2 [ 1074.607132][ T9985] usb 10-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1074.809389][ T9985] usb 10-1: USB disconnect, device number 4 [ 1074.834419][ T45] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1074.929943][ T9985] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1074.930818][ T9985] keyspan 10-1:0.133: device disconnected [ 1074.999672][ T45] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1074.999705][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.999738][ T45] usb 5-1: Product: syz [ 1074.999753][ T45] usb 5-1: Manufacturer: syz [ 1074.999767][ T45] usb 5-1: SerialNumber: syz [ 1075.021850][ T45] usb 5-1: config 0 descriptor?? [ 1075.284965][ T45] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1075.296948][ T45] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1075.359095][ T45] usb 5-1: USB disconnect, device number 12 [ 1075.949320][T10706] ubi31: attaching mtd0 [ 1075.979350][T10706] ubi31: scanning is finished [ 1076.476911][ T9734] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1076.605069][T10706] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1076.789088][ T9734] usb 6-1: config 0 has an invalid interface number: 179 but max is 0 [ 1076.789120][ T9734] usb 6-1: config 0 has no interface number 0 [ 1076.798605][ T9734] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 1076.798637][ T9734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.798658][ T9734] usb 6-1: Product: syz [ 1076.798673][ T9734] usb 6-1: Manufacturer: syz [ 1076.798688][ T9734] usb 6-1: SerialNumber: syz [ 1076.827683][ T9734] usb 6-1: config 0 descriptor?? [ 1076.859275][ T31] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1077.025155][ T9734] usb-storage 6-1:0.179: USB Mass Storage device detected [ 1077.178463][ T9734] usb-storage 6-1:0.179: device ignored [ 1077.189193][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 1077.205495][ T31] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 1077.205525][ T31] usb 5-1: config 95 has no interface number 0 [ 1077.205561][ T31] usb 5-1: config 95 interface 1 has no altsetting 0 [ 1077.208329][ T31] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1077.208351][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.208365][ T31] usb 5-1: Product: syz [ 1077.208376][ T31] usb 5-1: Manufacturer: syz [ 1077.208386][ T31] usb 5-1: SerialNumber: syz [ 1078.053795][ T9734] usb 6-1: USB disconnect, device number 4 [ 1079.236087][T10725] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1079.406893][ T31] usb 5-1: USB disconnect, device number 13 [ 1079.612112][T10425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.684665][T10737] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1079.854491][T10675] udevd[10675]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1080.312641][ T6131] hsr_slave_0: left promiscuous mode [ 1080.426699][ T6131] hsr_slave_1: left promiscuous mode [ 1080.427755][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.427786][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.525472][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.525507][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.925650][ T6131] veth1_macvtap: left promiscuous mode [ 1080.925777][ T6131] veth0_macvtap: left promiscuous mode [ 1080.940108][ T6131] veth1_vlan: left promiscuous mode [ 1080.940357][ T6131] veth0_vlan: left promiscuous mode [ 1081.056482][ T5152] Bluetooth: hci6: unexpected event for opcode 0x1405 [ 1084.085374][T10798] siw: device registration error -23 [ 1085.109490][ T5152] Bluetooth: hci4: unexpected cc 0x2002 length: 65 > 4 [ 1085.126085][ T5152] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1085.126243][ T5152] Bluetooth: hci6: Injecting HCI hardware error event [ 1085.131820][ T6375] Bluetooth: hci6: hardware error 0x00 [ 1087.616747][ T6375] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1090.957151][ T6131] team0 (unregistering): Port device team_slave_1 removed [ 1091.247675][ T6131] team0 (unregistering): Port device team_slave_0 removed [ 1094.226453][ T6375] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1094.226688][ T6375] Bluetooth: hci4: Injecting HCI hardware error event [ 1094.249864][ T5152] Bluetooth: hci4: hardware error 0x00 [ 1096.313584][T10425] veth0_vlan: entered promiscuous mode [ 1096.544408][ T5152] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1096.559644][T10425] veth1_vlan: entered promiscuous mode [ 1096.958070][ T6034] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1097.031476][T10871] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 1097.031506][T10871] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 1097.117327][ T6034] usb 3-1: Using ep0 maxpacket: 16 [ 1097.120395][ T6034] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.125979][ T6034] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1097.126009][ T6034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.126031][ T6034] usb 3-1: Product: syz [ 1097.126045][ T6034] usb 3-1: Manufacturer: syz [ 1097.126060][ T6034] usb 3-1: SerialNumber: syz [ 1097.179898][ T6034] usb 3-1: config 0 descriptor?? [ 1097.343886][ T6034] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1097.460603][ T6022] usb 3-1: Failed to submit usb control message: -71 [ 1097.460642][ T6022] usb 3-1: unable to send the bmi data to the device: -71 [ 1097.460662][ T6022] usb 3-1: unable to get target info from device [ 1097.460693][ T6022] usb 3-1: could not get target info (-71) [ 1097.460721][ T6022] usb 3-1: could not probe fw (-71) [ 1097.512060][ T6034] usb 3-1: USB disconnect, device number 3 [ 1101.169218][T10921] siw: device registration error -23 [ 1101.654874][ T6375] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1101.817988][ T6375] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1101.839254][ T6375] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1101.848433][ T6375] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1101.861103][ T6375] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1102.762385][ T5152] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 1103.005120][ T8034] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1103.086803][T10952] netlink: 52 bytes leftover after parsing attributes in process `syz.2.862'. [ 1103.165804][ T8034] usb 10-1: Using ep0 maxpacket: 8 [ 1103.168819][ T8034] usb 10-1: config 8 has an invalid interface number: 125 but max is 0 [ 1103.168850][ T8034] usb 10-1: config 8 has no interface number 0 [ 1103.173057][ T8034] usb 10-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 1103.173086][ T8034] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.173107][ T8034] usb 10-1: Product: syz [ 1103.173121][ T8034] usb 10-1: Manufacturer: syz [ 1103.173135][ T8034] usb 10-1: SerialNumber: syz [ 1103.300638][ T8034] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1103.374183][T10919] lo speed is unknown, defaulting to 1000 [ 1103.383542][T10919] lo speed is unknown, defaulting to 1000 [ 1104.006924][ T8034] gspca_m5602: Failed to find a sensor [ 1104.006939][ T8034] ALi m5602 10-1:8.125: ALi m5602 webcam failed [ 1104.034345][ T8034] usb 10-1: USB disconnect, device number 5 [ 1104.177178][T10967] siw: device registration error -23 [ 1104.261889][ T5152] Bluetooth: hci0: command tx timeout [ 1104.407232][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dd62000: rx timeout, send abort [ 1104.909624][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dd62000: abort rx timeout. Force session deactivation [ 1105.968544][T10919] chnl_net:caif_netlink_parms(): no params data found [ 1106.009585][T10987] netlink: 96 bytes leftover after parsing attributes in process `syz.4.873'. [ 1106.361791][ T5152] Bluetooth: hci0: command tx timeout [ 1107.615153][ T9985] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1107.731174][T11011] siw: device registration error -23 [ 1108.306303][ T9985] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 1108.306334][ T9985] usb 6-1: config 0 has no interface number 0 [ 1108.324699][ T9985] usb 6-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 1108.324732][ T9985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.324755][ T9985] usb 6-1: Product: syz [ 1108.324770][ T9985] usb 6-1: Manufacturer: syz [ 1108.324786][ T9985] usb 6-1: SerialNumber: syz [ 1108.365845][ T9985] usb 6-1: config 0 descriptor?? [ 1108.438603][ T5152] Bluetooth: hci0: command tx timeout [ 1108.620005][ T9985] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 1108.684727][ T9985] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1108.686650][ T9985] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 1108.686761][ T9985] usb 6-1: media controller created [ 1108.733446][ T5152] Bluetooth: hci2: unexpected event for opcode 0x2064 [ 1108.786528][ T9985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1108.881770][ T9985] DVB: Unable to find symbol dib7000p_attach() [ 1108.881803][ T9985] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 1109.151659][ T9985] rc_core: IR keymap rc-dib0700-rc5 not found [ 1109.151683][ T9985] Registered IR keymap rc-empty [ 1109.155933][ T9985] dvb-usb: could not initialize remote control. [ 1109.155949][ T9985] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 1109.360130][ T9985] usb 6-1: USB disconnect, device number 5 [ 1110.367019][ T9985] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 1110.527116][ T5152] Bluetooth: hci0: command tx timeout [ 1110.671617][T11036] netlink: 52 bytes leftover after parsing attributes in process `syz.2.884'. [ 1113.648096][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028dd7c00: rx timeout, send abort [ 1114.150077][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028dd7c00: abort rx timeout. Force session deactivation [ 1117.052517][T10919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.052639][T10919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.052893][T10919] bridge_slave_0: entered allmulticast mode [ 1117.059075][T10919] bridge_slave_0: entered promiscuous mode [ 1117.097983][T10919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.098127][T10919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.098386][T10919] bridge_slave_1: entered allmulticast mode [ 1117.172448][T10919] bridge_slave_1: entered promiscuous mode [ 1119.058555][ T6375] Bluetooth: hci1: command 0x0406 tx timeout [ 1119.107371][T10919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.115282][T11093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.116205][T11093] batadv_slave_0: entered promiscuous mode [ 1119.116239][T11093] batadv_slave_0: entered allmulticast mode [ 1119.235521][T10919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.580954][ T6056] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1119.765834][ T6056] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1119.765867][ T6056] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.765887][ T6056] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1119.765945][ T6056] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.765973][ T6056] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.768447][ T6056] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1119.768476][ T6056] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1119.768497][ T6056] usb 6-1: Product: syz [ 1119.768512][ T6056] usb 6-1: Manufacturer: syz [ 1119.864486][ T6056] cdc_wdm 6-1:1.0: skipping garbage [ 1119.864506][ T6056] cdc_wdm 6-1:1.0: skipping garbage [ 1119.870694][T10919] team0: Port device team_slave_0 added [ 1119.919543][T10919] team0: Port device team_slave_1 added [ 1119.928763][ T6056] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1119.928808][ T6056] cdc_wdm 6-1:1.0: Unknown control protocol [ 1120.097744][ T9] usb 6-1: USB disconnect, device number 6 [ 1121.538911][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.839649][T11126] netlink: 52 bytes leftover after parsing attributes in process `syz.5.903'. [ 1123.155063][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805eb93000: rx timeout, send abort [ 1123.656793][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805eb93000: abort rx timeout. Force session deactivation [ 1136.534310][T10919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.534333][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.534365][T10919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.588853][T10919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.588870][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.588901][T10919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.610056][ T6131] bridge_slave_1: left allmulticast mode [ 1139.611875][ T6131] bridge_slave_1: left promiscuous mode [ 1139.612203][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.806945][ T6131] bridge_slave_0: left allmulticast mode [ 1139.806980][ T6131] bridge_slave_0: left promiscuous mode [ 1139.807263][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.931099][ T6375] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1140.936834][ T6375] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1140.938301][ T6375] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1140.939559][ T6375] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1140.940535][ T6375] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1143.029382][ T6375] Bluetooth: hci3: command tx timeout [ 1145.117101][ T6375] Bluetooth: hci3: command tx timeout [ 1147.363902][ T6375] Bluetooth: hci3: command tx timeout [ 1149.558851][ T6375] Bluetooth: hci3: command tx timeout [ 1152.370886][ T6131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1153.468107][ T6131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1153.574870][ T6131] bond0 (unregistering): Released all slaves [ 1155.525246][T10919] hsr_slave_0: entered promiscuous mode [ 1155.532715][T10919] hsr_slave_1: entered promiscuous mode [ 1155.533661][T10919] debugfs: 'hsr0' already exists in 'hsr' [ 1155.533689][T10919] Cannot create hsr debugfs directory [ 1155.548918][ T5844] lo speed is unknown, defaulting to 1000 [ 1155.551107][ T6056] lo speed is unknown, defaulting to 1000 [ 1155.828821][T11290] random: crng reseeded on system resumption [ 1157.009949][ T6131] hsr_slave_0: left promiscuous mode [ 1157.050337][ T6131] hsr_slave_1: left promiscuous mode [ 1157.051533][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1157.091551][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1157.365702][ T6131] veth1_vlan: left promiscuous mode [ 1157.365968][ T6131] veth0_vlan: left promiscuous mode [ 1158.105194][ T5152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1158.127573][ T5152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1158.130159][ T5152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1158.149161][ T5152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1158.159588][ T5152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1159.119395][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.422727][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.505447][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.673365][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.731645][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.800486][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.935759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.996007][ C1] vkms_vblank_simulate: vblank timer overrun [ 1160.096829][ C1] vkms_vblank_simulate: vblank timer overrun [ 1160.217346][ T6131] team0 (unregistering): Port device team_slave_1 removed [ 1160.265491][ T6375] Bluetooth: hci5: command tx timeout [ 1160.496823][ T6131] team0 (unregistering): Port device team_slave_0 removed [ 1160.537663][ C1] vkms_vblank_simulate: vblank timer overrun [ 1160.834264][ C1] vkms_vblank_simulate: vblank timer overrun [ 1161.098734][ C1] vkms_vblank_simulate: vblank timer overrun [ 1161.214468][ C1] vkms_vblank_simulate: vblank timer overrun [ 1161.439682][ C1] vkms_vblank_simulate: vblank timer overrun [ 1161.585744][ C1] vkms_vblank_simulate: vblank timer overrun [ 1161.765137][ C1] vkms_vblank_simulate: vblank timer overrun [ 1161.832978][ C1] vkms_vblank_simulate: vblank timer overrun [ 1162.082464][ C1] vkms_vblank_simulate: vblank timer overrun [ 1162.349333][ T6375] Bluetooth: hci5: command tx timeout [ 1163.526610][T11299] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1163.526753][T11299] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1163.526971][T11299] veth0_to_bridge: entered allmulticast mode [ 1163.529758][T11299] veth0_to_bridge: entered promiscuous mode [ 1163.529991][T11299] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1163.530800][T11299] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1163.535447][T11299] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1163.642870][T11180] lo speed is unknown, defaulting to 1000 [ 1163.645713][T11180] lo speed is unknown, defaulting to 1000 [ 1163.917141][T11313] lo speed is unknown, defaulting to 1000 [ 1163.921097][T11313] lo speed is unknown, defaulting to 1000 [ 1165.179278][ T6375] Bluetooth: hci5: command tx timeout [ 1167.430195][ T6375] Bluetooth: hci5: command tx timeout [ 1167.903067][T11389] random: crng reseeded on system resumption [ 1168.203731][T11386] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1168.207337][T11386] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1168.330373][T11393] gretap0: entered promiscuous mode [ 1168.330841][T11393] vlan2: entered promiscuous mode [ 1168.680141][ T5899] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1169.104186][ T5899] usb 5-1: config 13 has an invalid interface number: 144 but max is 0 [ 1169.104214][ T5899] usb 5-1: config 13 has no interface number 0 [ 1169.104244][ T5899] usb 5-1: config 13 interface 144 has no altsetting 0 [ 1169.107134][ T5899] usb 5-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 1.01 [ 1169.107160][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.107178][ T5899] usb 5-1: Product: syz [ 1169.107190][ T5899] usb 5-1: Manufacturer: syz [ 1169.107203][ T5899] usb 5-1: SerialNumber: syz [ 1170.406640][ T5899] usb 5-1: Found UVC 0.00 device syz (19ab:1000) [ 1170.406685][ T5899] usb 5-1: No valid video chain found. [ 1170.491990][ T5899] usb 5-1: USB disconnect, device number 14 [ 1170.828488][T11180] chnl_net:caif_netlink_parms(): no params data found [ 1171.873290][T11313] chnl_net:caif_netlink_parms(): no params data found [ 1172.625682][ T6131] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.511830][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 1176.511896][T11445] netlink: 'syz.2.981': attribute type 7 has an invalid length. [ 1176.933845][ T6131] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.098769][ T38] audit: type=1400 audit(1756387205.273:83): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=11480 comm="syz.4.990" src=1 dest=20000 [ 1177.195354][T11472] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.986'. [ 1178.389753][T11503] ubi31: attaching mtd0 [ 1178.392753][T11503] ubi31: scanning is finished [ 1178.423136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.453928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.478241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.478744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.479204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.479674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.480138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.480588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.481064][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.481529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1183.431023][ C1] net_ratelimit: 16750 callbacks suppressed [ 1183.431044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1183.431372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.431748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.432048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1183.432443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.432844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.433156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1183.433505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.433986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.434353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1184.210849][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.447445][ C1] net_ratelimit: 13525 callbacks suppressed [ 1188.447470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1188.447873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1188.447931][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.448451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.448831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1188.449291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.449533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1188.449804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.450171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1188.450643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.462947][ C1] net_ratelimit: 13322 callbacks suppressed [ 1193.462971][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.463451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.463509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1193.464055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.464501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.464992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.465080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1193.465556][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.465972][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.466483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.478377][ C1] net_ratelimit: 13778 callbacks suppressed [ 1198.478400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.478863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.479376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.479465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1198.479743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.480232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.480746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.481105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1198.481151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.481589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.493031][ C1] net_ratelimit: 13639 callbacks suppressed [ 1203.493056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1203.493525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.494040][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.494365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1203.494410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1203.494863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.495379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.495769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1203.496147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1203.496186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.507421][ C1] net_ratelimit: 13912 callbacks suppressed [ 1208.507445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.507913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1208.507997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.508428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1208.508975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.509487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1208.509543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.510234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1208.510670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.511025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1213.521859][ C1] net_ratelimit: 13691 callbacks suppressed [ 1213.521898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1213.522219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1213.522342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.522916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.523286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1213.523728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.523979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1213.524216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.524577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1213.525024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.535363][ C1] net_ratelimit: 13741 callbacks suppressed [ 1218.535386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.535872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.536216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1218.536227][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1218.536651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.537148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.537501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1218.537689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1218.537922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.538411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.549134][ C1] net_ratelimit: 13762 callbacks suppressed [ 1223.549161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.549667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.550046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1223.550472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.550951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.551307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1223.551745][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.552233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.552584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1223.552996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.562462][ C1] net_ratelimit: 13571 callbacks suppressed [ 1228.562487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.563007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.563102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1228.563558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.563954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.564414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.564570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1228.564994][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.565388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.565918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.575522][ C0] net_ratelimit: 13774 callbacks suppressed [ 1233.575547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1233.575613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.576025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1233.576490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.577002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.577047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1233.577393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1233.577823][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.578329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.578562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1238.588100][ C1] net_ratelimit: 13700 callbacks suppressed [ 1238.588124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.588582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1238.589123][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.589462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1238.589743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.590178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1238.590698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.590933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1238.591299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.591724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.600603][ C1] net_ratelimit: 13392 callbacks suppressed [ 1243.600628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.601067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.601457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1243.601533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.602234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.602621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.602931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1243.603045][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.603560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.603916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.613571][ C1] net_ratelimit: 13281 callbacks suppressed [ 1248.613596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.613603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1248.614049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.614571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.615086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1248.615291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.615736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.616249][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.616652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1248.616955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1253.625347][ C1] net_ratelimit: 13326 callbacks suppressed [ 1253.625370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.625735][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1253.626113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1253.626172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.626687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.627049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1253.627468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.627647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1253.627965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.628324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1258.637607][ C1] net_ratelimit: 13313 callbacks suppressed [ 1258.637632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.638160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.638543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1258.638562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1258.639018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.639594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.640010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1258.640048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1258.640474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.641479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1263.649341][ C1] net_ratelimit: 13707 callbacks suppressed [ 1263.649364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.649881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.649987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1263.650255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1263.650726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.651259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.651645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1263.651882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1263.652082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.652586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1267.590359][ T5152] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1268.660967][ C1] net_ratelimit: 14048 callbacks suppressed [ 1268.660990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.661479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.661974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1268.662093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.662506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.663022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.663390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1268.663592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.663998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.664483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.796702][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 1273.672438][ C1] net_ratelimit: 13733 callbacks suppressed [ 1273.672463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.672873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1273.673104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1273.673339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.673901][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.674332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1273.674726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1273.674848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.675401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.675811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.683998][ C1] net_ratelimit: 13955 callbacks suppressed [ 1278.684023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.684525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.684930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1278.685024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.685378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.685830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.686319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.686336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1278.686678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.687125][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1280.217181][T11558] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1283.695376][ C1] net_ratelimit: 13907 callbacks suppressed [ 1283.695400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1283.695802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.696306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.696691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1283.697095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1283.697109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.697630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.697985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1283.698407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.698582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1286.539528][ T9930] Bluetooth: hci5: command tx timeout [ 1288.706646][ C1] net_ratelimit: 13833 callbacks suppressed [ 1288.706677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.707092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1288.707571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.707605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1288.708141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.708612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1288.709079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1288.709136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.709834][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.710274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.717694][ C0] net_ratelimit: 13330 callbacks suppressed [ 1293.717717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1293.717898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.718458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.719018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.719518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.719764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1293.720067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.720437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.720862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.721363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.728884][ C1] net_ratelimit: 13508 callbacks suppressed [ 1298.728908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.729005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1298.729417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.729791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1298.730219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.730524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1298.730711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.731121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1298.731547][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.731970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1303.739986][ C0] net_ratelimit: 13431 callbacks suppressed [ 1303.740010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1303.740227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.740626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1303.741073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.741506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1303.741590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.741951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1303.742369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.742893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.742963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1308.750875][ C1] net_ratelimit: 14764 callbacks suppressed [ 1308.750898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.751382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1308.751400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.751755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1308.751853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1308.752203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.752726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.753080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1308.753394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1308.753505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.761607][ C1] net_ratelimit: 15543 callbacks suppressed [ 1313.761629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1313.762025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.762492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.762838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1313.763249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.763696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.764071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1313.764251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1313.764527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.764784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1318.772567][ C1] net_ratelimit: 15166 callbacks suppressed [ 1318.772590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.772990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1318.773036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1318.773429][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.773534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1318.773946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.774312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1318.774752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.775168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1318.775249][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.783441][ C1] net_ratelimit: 14996 callbacks suppressed [ 1323.783465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.783906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1323.783983][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.784344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1323.784403][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.784916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.785287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.785740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.785855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1323.786173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1326.806971][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1328.795501][ C0] net_ratelimit: 14479 callbacks suppressed [ 1328.795525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1328.795950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1328.798453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1328.798914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1328.801422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1328.801876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1328.804444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1328.804883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1328.807474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1328.807927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:42:11:39:0c:77, vlan:0) [ 1328.837305][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1330.874128][ T39] INFO: task kworker/u8:6:1040 blocked for more than 146 seconds. [ 1330.874166][ T39] Not tainted syzkaller #0 [ 1330.874178][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.[ 1330.874178][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1330.874189][ T39] task:kworker/u8:6 state:D stack:19880 pid:1040 tgid:1040 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1330.874255][ T39] Workqueue: events_unbound linkwatch_event [ 1330.874301][ T39] Call Trace: [ 1330.874308][ T39] [ 1330.874322][ T39] __schedule+0x16f3/0x4c20 [ 1330.874368][ T39] ? pick_task_fair+0x2b2/0x520 [ 1330.874401][ T39] ? __pfx___schedule+0x10/0x10 [ 1330.874485][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1330.874526][ T39] rt_mutex_schedule+0x77/0xf0 [ 1330.874548][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1330.874571][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1330.874614][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1330.874640][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1330.874663][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1330.874699][ T39] ? linkwatch_event+0xe/0x60 [ 1330.874738][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1330.874772][ T39] ? linkwatch_event+0xe/0x60 [ 1330.874802][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1330.874822][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1330.874850][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1330.874881][ T39] linkwatch_event+0xe/0x60 [ 1330.874909][ T39] process_scheduled_works+0xade/0x17b0 [ 1330.874967][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 1330.875014][ T39] worker_thread+0x8a0/0xda0 [ 1330.875072][ T39] kthread+0x711/0x8a0 [ 1330.875109][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1330.875136][ T39] ? __pfx_kthread+0x10/0x10 [ 1330.875175][ T39] ? __pfx_kthread+0x10/0x10 [ 1330.875211][ T39] ret_from_fork+0x3fc/0x770 [ 1330.875245][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1330.875281][ T39] ? __switch_to_asm+0x39/0x70 [ 1330.875303][ T39] ? __switch_to_asm+0x33/0x70 [ 1330.875323][ T39] ? __pfx_kthread+0x10/0x10 [ 1330.875358][ T39] ret_from_fork_asm+0x1a/0x30 [ 1330.875400][ T39] [ 1330.875532][ T39] INFO: task syz-executor:11180 blocked for more than 146 seconds. [ 1330.875549][ T39] Not tainted syzkaller #0 [ 1330.875559][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1330.875570][ T39] task:syz-executor state:D stack:22232 pid:11180 tgid:11180 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1330.875638][ T39] Call Trace: [ 1330.875645][ T39] [ 1330.875659][ T39] __schedule+0x16f3/0x4c20 [ 1330.875705][ T39] ? __kernel_text_address+0xd/0x40 [ 1330.875732][ T39] ? __pfx___schedule+0x10/0x10 [ 1330.875778][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1330.875809][ T39] rt_mutex_schedule+0x77/0xf0 [ 1330.875830][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1330.875852][ T39] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 1330.875893][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1330.875918][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1330.875941][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1330.875975][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1330.876007][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1330.876037][ T39] ? bpf_lsm_capable+0x9/0x20 [ 1330.876064][ T39] ? security_capable+0x7e/0x2e0 [ 1330.876099][ T39] ? rtnl_newlink+0x8db/0x1c70 [ 1330.876123][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1330.876143][ T39] ? rtnl_newlink+0x8db/0x1c70 [ 1330.876172][ T39] rtnl_newlink+0x8db/0x1c70 [ 1330.876207][ T39] ? __lock_acquire+0xab9/0xd20 [ 1330.876238][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1330.876274][ T39] ? __lock_acquire+0xab9/0xd20 [ 1330.876376][ T39] ? __lock_acquire+0xab9/0xd20 [ 1330.876433][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1330.876458][ T39] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1330.876483][ T39] ? __lock_acquire+0xab9/0xd20 [ 1330.876519][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1330.876544][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1330.876590][ T39] netlink_rcv_skb+0x205/0x470 [ 1330.876614][ T39] ? __lock_acquire+0xab9/0xd20 [ 1330.876642][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1330.876670][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1330.876710][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1330.876746][ T39] netlink_unicast+0x843/0xa10 [ 1330.876781][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 1330.876807][ T39] ? netlink_sendmsg+0x642/0xb30 [ 1330.876832][ T39] ? skb_put+0x11b/0x210 [ 1330.876865][ T39] netlink_sendmsg+0x805/0xb30 [ 1330.876903][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1330.876939][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1330.876962][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1330.876990][ T39] __sock_sendmsg+0x219/0x270 [ 1330.877018][ T39] __sys_sendto+0x3c7/0x520 [ 1330.877048][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 1330.877092][ T39] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 1330.877147][ T39] ? rcu_is_watching+0x15/0xb0 [ 1330.877186][ T39] __x64_sys_sendto+0xde/0x100 [ 1330.877220][ T39] do_syscall_64+0xfa/0x3b0 [ 1330.877247][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1330.877273][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.877295][ T39] ? clear_bhb_loop+0x60/0xb0 [ 1330.877321][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.877349][ T39] RIP: 0033:0x7fcb92430a7c [ 1330.877373][ T39] RSP: 002b:00007ffc33558390 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1330.877393][ T39] RAX: ffffffffffffffda RBX: 00007fcb93184620 RCX: 00007fcb92430a7c [ 1330.877410][ T39] RDX: 000000000000006c RSI: 00007fcb93184670 RDI: 0000000000000003 [ 1330.877423][ T39] RBP: 0000000000000000 R08: 00007ffc335583e4 R09: 000000000000000c [ 1330.877436][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1330.877449][ T39] R13: 0000000000000000 R14: 00007fcb93184670 R15: 0000000000000000 [ 1330.877481][ T39] [ 1330.877489][ T39] INFO: task syz-executor:11313 blocked for more than 146 seconds. [ 1330.877503][ T39] Not tainted syzkaller #0 [ 1330.877519][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1330.877529][ T39] task:syz-executor state:D stack:21976 pid:11313 tgid:11313 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1330.877584][ T39] Call Trace: [ 1330.877590][ T39] [ 1330.877603][ T39] __schedule+0x16f3/0x4c20 [ 1330.877648][ T39] ? __kernel_text_address+0xd/0x40 [ 1330.877674][ T39] ? __pfx___schedule+0x10/0x10 [ 1330.877719][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1330.877749][ T39] rt_mutex_schedule+0x77/0xf0 [ 1330.877768][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1330.877789][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1330.877829][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1330.877852][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1330.877875][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1330.877894][ T39] ? __lock_acquire+0xab9/0xd20 [ 1330.877933][ T39] ? rtnl_newlink+0x8db/0x1c70 [ 1330.877958][ T39] ? safesetid_security_capable+0xa9/0x1a0 [ 1330.877985][ T39] ? bpf_lsm_capable+0x9/0x20 [ 1330.878012][ T39] ? security_capable+0x7e/0x2e0 [ 1330.878045][ T39] ? rtnl_newlink+0x8db/0x1c70 [ 1330.878067][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1330.878094][ T39] rtnl_newlink+0x8db/0x1c70 [ 1330.878129][ T39] ? __lock_acquire+0xab9/0xd20 [ 1330.878158][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1330.878193][ T39] ? __lock_acquire+0xab9/0xd20 [ 1330.878229][ T39] ? __lock_acquire+0xab9/0xd20 [ 1330.878271][ T39] ? __lock_acquire+0xab9/0xd20 [ 1330.878322][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 1330.878358][ T39] ? is_bpf_text_address+0x292/0x2b0 [ 1330.878387][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 1330.878426][ T39] ? __lock_acquire+0xab9/0xd20 [ 1330.878482][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1330.878507][ T39] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1330.878539][ T39] ? __lock_acquire+0xab9/0xd20 [ 1330.878569][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1330.878598][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1330.878662][ T39] netlink_rcv_skb+0x205/0x470 [ 1330.878686][ T39] ? __lock_acquire+0xab9/0xd20 [ 1330.878716][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1330.878745][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1330.878786][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1330.878823][ T39] netlink_unicast+0x843/0xa10 [ 1330.878857][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 1330.878884][ T39] ? netlink_sendmsg+0x642/0xb30 [ 1330.878909][ T39] ? skb_put+0x11b/0x210 [ 1330.878943][ T39] netlink_sendmsg+0x805/0xb30 [ 1330.878982][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1330.879020][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1330.879042][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1330.879072][ T39] __sock_sendmsg+0x219/0x270 [ 1330.879100][ T39] __sys_sendto+0x3c7/0x520 [ 1330.879132][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 1330.879177][ T39] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 1330.879233][ T39] ? rcu_is_watching+0x15/0xb0 [ 1330.879274][ T39] __x64_sys_sendto+0xde/0x100 [ 1330.879308][ T39] do_syscall_64+0xfa/0x3b0 [ 1330.879336][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1330.879364][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.879386][ T39] ? clear_bhb_loop+0x60/0xb0 [ 1330.879414][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.879436][ T39] RIP: 0033:0x7f498d140a7c [ 1330.879454][ T39] RSP: 002b:00007ffe258436c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1330.879477][ T39] RAX: ffffffffffffffda RBX: 00007f498de94620 RCX: 00007f498d140a7c [ 1330.879494][ T39] RDX: 000000000000003c RSI: 00007f498de94670 RDI: 0000000000000003 [ 1330.879509][ T39] RBP: 0000000000000000 R08: 00007ffe25843714 R09: 000000000000000c [ 1330.879528][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1330.879542][ T39] R13: 0000000000000000 R14: 00007f498de94670 R15: 0000000000000000 [ 1330.879576][ T39] [ 1330.879589][ T39] INFO: task syz.9.993:11503 blocked for more than 146 seconds. [ 1330.879605][ T39] Not tainted syzkaller #0 [ 1330.879616][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1330.879626][ T39] task:syz.9.993 state:D stack:27432 pid:11503 tgid:11493 ppid:10260 task_flags:0x400140 flags:0x00004006 [ 1330.879690][ T39] Call Trace: [ 1330.879697][ T39] [ 1330.879710][ T39] __schedule+0x16f3/0x4c20 [ 1330.879764][ T39] ? __lock_acquire+0xab9/0xd20 [ 1330.879794][ T39] ? __pfx___schedule+0x10/0x10 [ 1330.879840][ T39] ? schedule+0x91/0x360 [ 1330.879882][ T39] schedule+0x165/0x360 [ 1330.879910][ T39] schedule_timeout+0x9a/0x270 [ 1330.879935][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 1330.879974][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1330.880001][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1330.880026][ T39] ? wait_for_completion+0x267/0x5d0 [ 1330.880055][ T39] wait_for_completion+0x2bf/0x5d0 [ 1330.880096][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 1330.880125][ T39] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1330.880154][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1330.880185][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 1330.880216][ T39] rcu_barrier+0x463/0x570 [ 1330.880250][ T39] flush_rcu_work+0x84/0xb0 [ 1330.880282][ T39] kvfree_rcu_barrier+0x12b/0x160 [ 1330.880318][ T39] ? destroy_ai+0xbc7/0xbe0 [ 1330.880340][ T39] kmem_cache_destroy+0x2e/0x160 [ 1330.880374][ T39] destroy_ai+0xbc7/0xbe0 [ 1330.880405][ T39] ubi_attach+0x4b66/0x5be0 [ 1330.880468][ T39] ? __pfx_ubi_attach+0x10/0x10 [ 1330.880500][ T39] ? vmalloc_noprof+0xb2/0xf0 [ 1330.880542][ T39] ubi_attach_mtd_dev+0x1b9e/0x3800 [ 1330.880600][ T39] ctrl_cdev_ioctl+0x28b/0x3e0 [ 1330.880629][ T39] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1330.880653][ T39] ? __fget_files+0x2a/0x420 [ 1330.880685][ T39] ? __fget_files+0x2a/0x420 [ 1330.880719][ T39] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1330.880745][ T39] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1330.880771][ T39] __se_sys_ioctl+0xfc/0x170 [ 1330.880799][ T39] do_syscall_64+0xfa/0x3b0 [ 1330.880827][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1330.880854][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.880875][ T39] ? clear_bhb_loop+0x60/0xb0 [ 1330.880902][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.880922][ T39] RIP: 0033:0x7fde66afebe9 [ 1330.880940][ T39] RSP: 002b:00007fde64d1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1330.880960][ T39] RAX: ffffffffffffffda RBX: 00007fde66d26180 RCX: 00007fde66afebe9 [ 1330.880977][ T39] RDX: 0000200000000440 RSI: 0000000040186f40 RDI: 0000000000000009 [ 1330.880991][ T39] RBP: 00007fde66b81e19 R08: 0000000000000000 R09: 0000000000000000 [ 1330.881005][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1330.881019][ T39] R13: 00007fde66d26218 R14: 00007fde66d26180 R15: 00007fff9d793668 [ 1330.881053][ T39] [ 1330.881088][ T39] [ 1330.881088][ T39] Showing all locks held in the system: [ 1330.881098][ T39] 4 locks held by kworker/0:0/9: [ 1330.881110][ T39] #0: ffff88805dca9138 ((wq_completion)wg-kex-wg2#24){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1330.881173][ T39] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1330.881248][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1330.881303][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1330.881359][ T39] 5 locks held by kworker/u8:0/12: [ 1330.881370][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1330.881426][ T39] #1: ffffc90000117bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1330.881480][ T39] #2: ffff888051570898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1330.881540][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1330.881594][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1330.881649][ T39] 2 locks held by ksoftirqd/0/15: [ 1330.881660][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1330.881713][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1330.881769][ T39] 4 locks held by pr/legacy/17: [ 1330.881781][ T39] 2 locks held by rcuc/0/20: [ 1330.881792][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1330.881846][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1330.881903][ T39] 5 locks held by ktimers/1/29: [ 1330.881915][ T39] 2 locks held by ksoftirqd/1/30: [ 1330.881926][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1330.881980][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1330.882034][ T39] 6 locks held by kworker/1:0/31: [ 1330.882046][ T39] #0: ffff88801eb42d38 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1330.882106][ T39] #1: ffffc90000a5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1330.882181][ T39] #2: ffff88805b9a55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 1330.882233][ T39] #3: ffff88805d7538f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 1330.882283][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1330.882336][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1330.882391][ T39] 6 locks held by kworker/u8:2/37: [ 1330.882403][ T39] #0: ffff88805c031938 ((wq_completion)wg-kex-wg0#17){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1330.882462][ T39] #1: ffffc90000ac7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1330.882524][ T39] #2: ffff8880372c55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1330.882587][ T39] #3: ffff88805e0858b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1330.882650][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1330.882702][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1330.882756][ T39] 1 lock held by khungtaskd/39: [ 1330.882768][ T39] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1330.882819][ T39] 4 locks held by kworker/1:1/45: [ 1330.882831][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1330.882886][ T39] #1: ffffc90000b67bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1330.882941][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1330.882994][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1330.883060][ T39] 3 locks held by kworker/u8:6/1040: [ 1330.883072][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1330.883126][ T39] #1: ffffc90004a9fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1330.883180][ T39] #2: ffffffff8ecd20b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1330.883239][ T39] 7 locks held by kworker/u8:7/1060: [ 1330.883250][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1330.883304][ T39] #1: ffffc90004c2fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1330.883360][ T39] #2: ffff88803679c300 (&devlink->lock_key#18){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1330.883423][ T39] #3: ffff888143bbd120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1330.883480][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1330.883535][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1330.883589][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1330.883645][ T39] 4 locks held by kworker/1:2/1246: [ 1330.883657][ T39] #0: ffff888033dce538 ((wq_completion)wg-kex-wg2#22){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1330.883717][ T39] #1: ffffc9000513fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1330.883791][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1330.883845][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1330.883900][ T39] 5 locks held by kworker/u8:8/1306: [ 1330.883912][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.751967][ T39] #1: ffffc9000522fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.752046][ T39] #2: ffff888061400898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1331.752103][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.752158][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.752216][ T39] 2 locks held by aoe_tx0/1324: [ 1331.752229][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.752283][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.752352][ T39] 4 locks held by kworker/u8:9/3925: [ 1331.752364][ T39] #0: ffff888030c67138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.752421][ T39] #1: ffffc9000e2f7bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.752477][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.752532][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.752586][ T39] 6 locks held by kworker/u8:10/4395: [ 1331.752598][ T39] #0: ffff88805d06b938 ((wq_completion)wg-kex-wg2#17){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.752667][ T39] #1: ffffc9000ebb7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.752724][ T39] #2: ffff88806206d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1331.752790][ T39] #3: ffff88805d7b03f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1331.752853][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.752908][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.752965][ T39] 1 lock held by syslogd/5185: [ 1331.752977][ T39] #0: ffff888030848098 (&ei->socket.wq.wait){+.+.}-{3:3}, at: finish_wait+0xbf/0x1f0 [ 1331.753030][ T39] 3 locks held by klogd/5192: [ 1331.753044][ T39] 2 locks held by getty/5591: [ 1331.753056][ T39] #0: ffff88823bf740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1331.753115][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 1331.753170][ T39] 3 locks held by syz-executor/5819: [ 1331.753182][ T39] #0: ffff88802f8c1290 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 1331.753232][ T39] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.753287][ T39] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.753343][ T39] 4 locks held by kworker/0:4/5844: [ 1331.753356][ T39] #0: ffff88805e67c938 ((wq_completion)wg-crypt-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.753417][ T39] #1: ffffc90004c0fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.753510][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.753567][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.753647][ T39] 2 locks held by napi/wg0-0/5893: [ 1331.753659][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.753714][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.753771][ T39] 5 locks held by kworker/u8:12/5971: [ 1331.753784][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.753840][ T39] #1: ffffc9000532fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.753915][ T39] #2: ffff88805f760898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1331.753969][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.754025][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.754181][ T39] 7 locks held by kworker/u8:13/6022: [ 1331.754196][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.754252][ T39] #1: ffffc90005cafbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.754310][ T39] #2: ffff88805d672300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1331.754410][ T39] #3: ffff88805d5add20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1331.754470][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1331.754520][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.754577][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.754641][ T39] 5 locks held by kworker/u8:14/6029: [ 1331.754654][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.754711][ T39] #1: ffffc90005c9fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.754770][ T39] #2: ffff88804a230898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1331.754825][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.754881][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.754939][ T39] 4 locks held by kworker/0:7/6034: [ 1331.754951][ T39] #0: ffff888033dce538 ((wq_completion)wg-kex-wg2#22){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.755013][ T39] #1: ffffc90005d2fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.755093][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.755148][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.755205][ T39] 6 locks held by kworker/u8:15/6055: [ 1331.755218][ T39] #0: ffff88805d06b938 ((wq_completion)wg-kex-wg2#17){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.755280][ T39] #1: ffffc9000610fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.755339][ T39] #2: ffff88806206d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1331.755407][ T39] #3: ffff88805d7b0e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1331.755485][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.755539][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.755594][ T39] 4 locks held by kworker/0:8/6056: [ 1331.755607][ T39] #0: ffff88805b78f138 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.755674][ T39] #1: ffffc9000611fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.755749][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.755803][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.755859][ T39] 5 locks held by kworker/u8:16/6124: [ 1331.755872][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.755924][ T39] #1: ffffc900053bfbc0 ((work_completion)(&port->bc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.755976][ T39] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: macvlan_process_broadcast+0xea/0x650 [ 1331.756024][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.756075][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.756130][ T39] 3 locks held by kworker/u8:17/6127: [ 1331.756143][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.756197][ T39] #1: ffffc90005d1fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.756252][ T39] #2: ffff88805ac80898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1331.756305][ T39] 9 locks held by kworker/u8:18/6131: [ 1331.756317][ T39] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.756371][ T39] #1: ffffc9000629fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.756425][ T39] #2: ffffffff8ecc51c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1331.756479][ T39] #3: ffff88805b5100d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 1331.756538][ T39] #4: ffff88803364d300 (&devlink->lock_key#15){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 1331.756602][ T39] #5: ffffffff8ecd20b8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xe5/0x670 [ 1331.756675][ T39] #6: ffff888024d88e90 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x52f/0x1fe0 [ 1331.756730][ T39] #7: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.756783][ T39] #8: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.756837][ T39] 5 locks held by kworker/u8:19/6237: [ 1331.756848][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.756902][ T39] #1: ffffc9000635fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.756956][ T39] #2: ffff888048ef0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1331.757008][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.757060][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.757114][ T39] 6 locks held by kworker/u9:4/6375: [ 1331.757126][ T39] #0: ffff8880279db938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.757181][ T39] #1: ffffc9000536fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.757236][ T39] #2: ffff8880538a8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1331.757297][ T39] #3: ffff8880538a80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1331.757351][ T39] #4: ffffffff8ee399b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1331.757406][ T39] #5: ffff88805e832358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1331.757467][ T39] 4 locks held by kworker/1:5/8034: [ 1331.757479][ T39] #0: ffff888048fc0138 ((wq_completion)wg-kex-wg1#24){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.757539][ T39] #1: ffffc900041cfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.757621][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.757676][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.757732][ T39] 4 locks held by kworker/0:2/8136: [ 1331.757744][ T39] #0: ffff88801eb41138 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.757803][ T39] #1: ffffc90003edfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.757877][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.757930][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.758001][ T39] 1 lock held by dhcpcd/9417: [ 1331.758012][ T39] #0: ffff88803d434cb8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1331.758065][ T39] 4 locks held by kworker/1:4/9643: [ 1331.758077][ T39] #0: ffff88805edeb138 ((wq_completion)wg-kex-wg1#22){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.758132][ T39] #1: ffffc9000525fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.758222][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.758277][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.758332][ T39] 4 locks held by kworker/0:3/9734: [ 1331.758344][ T39] #0: ffff8880362fe138 ((wq_completion)wg-crypt-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.758405][ T39] #1: ffffc90005c3fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.758460][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.758514][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.758570][ T39] 4 locks held by kworker/u8:1/9773: [ 1331.758582][ T39] #0: ffff88805b69f938 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.758675][ T39] #1: ffffc9000418fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.758733][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.758788][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.758845][ T39] 6 locks held by kworker/u8:20/9774: [ 1331.758858][ T39] #0: ffff88805b98d938 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.758919][ T39] #1: ffffc90004d0fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.758976][ T39] #2: ffff88805b9a55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1331.759044][ T39] #3: ffff88805d754388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1331.759108][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.759165][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.759222][ T39] 5 locks held by kworker/u8:21/9777: [ 1331.759235][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.759291][ T39] #1: ffffc90005c4fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.759348][ T39] #2: ffff888051d90898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1331.759402][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.759457][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.759514][ T39] 4 locks held by kworker/u9:0/9930: [ 1331.759527][ T39] #0: ffff888030487138 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.759583][ T39] #1: ffffc90004d8fbc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.759647][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.759703][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.759760][ T39] 4 locks held by kworker/1:7/9984: [ 1331.759773][ T39] #0: ffff88805e7ce938 ((wq_completion)wg-kex-wg0#24){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.759846][ T39] #1: ffffc90004c5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.759921][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.759975][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.760031][ T39] 4 locks held by kworker/1:9/9986: [ 1331.760043][ T39] #0: ffff88805dca9138 ((wq_completion)wg-kex-wg2#24){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.760103][ T39] #1: ffffc90004bcfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.760179][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.760233][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.760292][ T39] 2 locks held by napi/wg2-0/10422: [ 1331.760304][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.760357][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.760413][ T39] 3 locks held by kworker/u8:22/10855: [ 1331.760425][ T39] #0: ffff88814d4fc138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.760479][ T39] #1: ffffc90005fffbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.760535][ T39] #2: ffffffff8ecd20b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1331.760584][ T39] 6 locks held by kworker/u8:23/10859: [ 1331.760596][ T39] #0: ffff88803b404138 ((wq_completion)wg-kex-wg1#21){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.760664][ T39] #1: ffffc900060bfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.760719][ T39] #2: ffff88802cf8d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1331.760782][ T39] #3: ffff88805e0838f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1331.760844][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.760899][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.760954][ T39] 7 locks held by kworker/u8:24/10860: [ 1331.760965][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.761021][ T39] #1: ffffc900060cfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.761080][ T39] #2: ffff88802350a300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1331.761142][ T39] #3: ffff88805dd59920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1331.761199][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1331.761248][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.761301][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.761359][ T39] 2 locks held by syz-executor/11180: [ 1331.761370][ T39] #0: ffffffff8e43ab00 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1331.761431][ T39] #1: ffffffff8ecd20b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1331.761483][ T39] 2 locks held by syz-executor/11313: [ 1331.761495][ T39] #0: ffffffff8f1d5fe8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1331.761554][ T39] #1: ffffffff8ecd20b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1331.761608][ T39] 1 lock held by syz.2.992/11500: [ 1331.761627][ T39] #0: ffff888024b7e8c8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 1331.761686][ T39] 2 locks held by syz.9.993/11503: [ 1331.761698][ T39] #0: ffffffff8e3e9658 (ubi_devices_mutex){+.+.}-{4:4}, at: ctrl_cdev_ioctl+0x22a/0x3e0 [ 1331.761753][ T39] #1: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1331.761805][ T39] 1 lock held by syz.4.995/11498: [ 1331.761817][ T39] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1331.761866][ T39] 4 locks held by kworker/0:9/11518: [ 1331.761879][ T39] #0: ffff88801eb42d38 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.761939][ T39] #1: ffffc9000406fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.762014][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.762067][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.762121][ T39] 4 locks held by kworker/0:10/11522: [ 1331.762134][ T39] 4 locks held by kworker/0:11/11523: [ 1331.762147][ T39] 4 locks held by kworker/1:10/11526: [ 1331.762159][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.762214][ T39] #1: ffffc90003fdfbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.762270][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.762323][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.762380][ T39] 4 locks held by kworker/u8:26/11534: [ 1331.762392][ T39] #0: ffff888037ed9938 ((wq_completion)wg-kex-wg2#23){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.762453][ T39] #1: ffffc90003c4fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.762508][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.762562][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.762625][ T39] 4 locks held by kworker/0:12/11539: [ 1331.762637][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.762693][ T39] #1: ffffc9000155fbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.762749][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.762802][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.762857][ T39] 4 locks held by kworker/0:13/11541: [ 1331.762870][ T39] #0: ffff88805edeb138 ((wq_completion)wg-kex-wg1#22){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.762931][ T39] #1: ffffc90003d9fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.763007][ T39] #2: ffff88802cf8d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 1331.763059][ T39] #3: ffff88805e0838f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 1331.763110][ T39] 4 locks held by kworker/0:14/11542: [ 1331.763122][ T39] #0: ffff8880362fed38 ((wq_completion)wg-kex-wg0#22){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.763182][ T39] #1: ffffc90003c2fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.763258][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.763311][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.763367][ T39] 4 locks held by kworker/0:15/11544: [ 1331.763379][ T39] #0: ffff888048fc0138 ((wq_completion)wg-kex-wg1#24){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.763439][ T39] #1: ffffc90003c1fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.763512][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.763565][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.763629][ T39] 4 locks held by kworker/0:16/11545: [ 1331.763641][ T39] #0: ffff88805dcb6d38 ((wq_completion)wg-crypt-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.763700][ T39] #1: ffffc90003bafbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.763755][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1331.763809][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1331.763865][ T39] 4 locks held by kworker/0:17/11550: [ 1331.763877][ T39] #0: ffff88801eb42538 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1331.763936][ T39] #1: ffffc90003fefbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1331.764008][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1333.520980][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1333.521064][ T39] 6 locks held by kworker/u8:30/11551: [ 1333.521079][ T39] #0: ffff888052462138 ((wq_completion)wg-kex-wg1#23){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1333.521155][ T39] #1: ffffc90003b9fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1333.521217][ T39] #2: ffff88804972d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1333.521289][ T39] #3: ffff88805d7503f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1333.521358][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1333.521414][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1333.521474][ T39] 3 locks held by kworker/1:12/11553: [ 1333.521489][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1333.521550][ T39] #1: ffffc90003acfbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1333.521608][ T39] #2: ffffffff8ecd20b8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1333.521680][ T39] 5 locks held by kworker/u9:2/11560: [ 1333.521695][ T39] #0: ffff88805bf52138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1333.521755][ T39] #1: ffffc90000107bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1333.521816][ T39] #2: ffff88805dc98e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1333.521882][ T39] #3: ffff88805dc980a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1333.521942][ T39] #4: ffffffff8ee399b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1333.522003][ T39] 6 locks held by kworker/u8:31/11561: [ 1333.522016][ T39] #0: ffff88803ceaf938 ((wq_completion)wg-kex-wg0#21){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1333.522083][ T39] #1: ffffc900041afbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1333.522153][ T39] #2: ffff88805e0295f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1333.522223][ T39] #3: ffff88805d756de8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1333.522291][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1333.522350][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1333.522410][ T39] 6 locks held by kworker/u8:32/11562: [ 1333.522424][ T39] #0: ffff888030c47938 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1333.522485][ T39] #1: ffffc90000a6fbc0 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1333.522545][ T39] #2: ffff888034bfe078 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x15e/0x680 [ 1333.522601][ T39] #3: ffff888031f0c050 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: rds_tcp_tune+0xd2/0x4f0 [ 1333.522667][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1333.522725][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1333.522786][ T39] 6 locks held by kworker/u8:33/11563: [ 1333.522800][ T39] #0: ffff88802f35c138 ((wq_completion)wg-kex-wg0#23){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1333.522866][ T39] #1: ffffc90004b4fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1333.522927][ T39] #2: ffff88803343d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1333.522999][ T39] #3: ffff88805d756350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1333.523072][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1333.523129][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1333.523208][ T39] 4 locks held by kworker/u8:34/11564: [ 1333.523223][ T39] #0: ffff88803533d138 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1333.523288][ T39] #1: ffffc90004b5fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1333.523350][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1333.523408][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1333.523468][ T39] 4 locks held by kworker/1:15/11567: [ 1333.523481][ T39] #0: ffff88805b78f538 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1333.523564][ T39] #1: ffffc90004b9fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1333.523647][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1333.523705][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1333.523765][ T39] 5 locks held by syz-executor/11570: [ 1333.523781][ T39] 1 lock held by syz-executor/11578: [ 1333.523795][ T39] 3 locks held by udevd/11579: [ 1333.523809][ T39] #0: ffff88804a6a9d78 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1333.523871][ T39] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1333.523932][ T39] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1333.523995][ T39] 4 locks held by kworker/0:18/11581: [ 1333.524009][ T39] #0: ffff88805b78f538 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1333.524075][ T39] #1: ffffc9000632fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1333.524168][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1333.524228][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1333.544339][ T39] 5 locks held by rm/11583: [ 1333.544363][ T39] [ 1333.544370][ T39] ============================================= [ 1333.544370][ T39] [ 1333.544397][ T39] NMI backtrace for cpu 0 [ 1333.544426][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1333.544451][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1333.544466][ T39] Call Trace: [ 1333.544475][ T39] [ 1333.544484][ T39] dump_stack_lvl+0x189/0x250 [ 1333.544530][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1333.544565][ T39] ? __pfx__printk+0x10/0x10 [ 1333.544606][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 1333.544636][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1333.544664][ T39] ? __pfx__printk+0x10/0x10 [ 1333.544696][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1333.544729][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1333.544759][ T39] watchdog+0xf93/0xfe0 [ 1333.544797][ T39] ? watchdog+0x1de/0xfe0 [ 1333.544835][ T39] kthread+0x711/0x8a0 [ 1333.544876][ T39] ? __pfx_watchdog+0x10/0x10 [ 1333.544903][ T39] ? __pfx_kthread+0x10/0x10 [ 1333.544943][ T39] ? __pfx_kthread+0x10/0x10 [ 1333.544978][ T39] ret_from_fork+0x3fc/0x770 [ 1333.545013][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1333.545050][ T39] ? __switch_to_asm+0x39/0x70 [ 1333.545072][ T39] ? __switch_to_asm+0x33/0x70 [ 1333.545092][ T39] ? __pfx_kthread+0x10/0x10 [ 1333.545128][ T39] ret_from_fork_asm+0x1a/0x30 [ 1333.545178][ T39] [ 1333.545187][ T39] Sending NMI from CPU 0 to CPUs 1: [ 1333.545214][ C1] NMI backtrace for cpu 1 [ 1333.545228][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1333.545248][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1333.545259][ C1] RIP: 0010:preempt_count_sub+0x0/0x170 [ 1333.545281][ C1] Code: c7 c7 44 57 1d 8f e8 4f d4 8d 00 e9 5c ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 53 48 bb 00 00 00 00 00 fc ff df 48 c7 c0 40 13 01 [ 1333.545296][ C1] RSP: 0018:ffffc90000167888 EFLAGS: 00000212 [ 1333.545313][ C1] RAX: 0000000054022d42 RBX: 0000000000000899 RCX: 0000000000000001 [ 1333.545325][ C1] RDX: 00000000000002ad RSI: ffffffff8b620de0 RDI: 0000000000000001 [ 1333.545337][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1333.545347][ C1] R10: dffffc0000000000 R11: ffffffff8af52e30 R12: 1ffffffff3274f0a [ 1333.545361][ C1] R13: 00000000ffffffff R14: 000002ad540223e2 R15: 0000000000000960 [ 1333.545374][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 1333.545393][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1333.545405][ C1] CR2: 00007fa16b611e9c CR3: 0000000052172000 CR4: 00000000003526f0 [ 1333.545421][ C1] Call Trace: [ 1333.545428][ C1] [ 1333.545434][ C1] delay_tsc+0xa1/0xc0 [ 1333.545453][ C1] wait_for_lsr+0x166/0x2f0 [ 1333.545478][ C1] serial8250_console_write+0x11bd/0x1b40 [ 1333.545516][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1333.545544][ C1] ? console_flush_all+0x13a/0xcd0 [ 1333.545567][ C1] ? console_flush_all+0x476/0xcd0 [ 1333.545588][ C1] console_flush_all+0x695/0xcd0 [ 1333.545627][ C1] ? console_flush_all+0x13a/0xcd0 [ 1333.545649][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1333.545669][ C1] ? __lock_acquire+0xab9/0xd20 [ 1333.545700][ C1] __console_flush_and_unlock+0xa4/0x240 [ 1333.545721][ C1] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 1333.545748][ C1] legacy_kthread_func+0x13b/0x1a0 [ 1333.545771][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1333.545793][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1333.545816][ C1] ? __kthread_parkme+0x7b/0x200 [ 1333.545841][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1333.545868][ C1] kthread+0x711/0x8a0 [ 1333.545896][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1333.545918][ C1] ? __pfx_kthread+0x10/0x10 [ 1333.545947][ C1] ? __pfx_kthread+0x10/0x10 [ 1333.545984][ C1] ret_from_fork+0x3fc/0x770 [ 1333.546007][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1333.546033][ C1] ? __switch_to_asm+0x39/0x70 [ 1333.546049][ C1] ? __switch_to_asm+0x33/0x70 [ 1333.546064][ C1] ? __pfx_kthread+0x10/0x10 [ 1333.546090][ C1] ret_from_fork_asm+0x1a/0x30 [ 1333.546115][ C1] [ 1333.546216][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1333.546234][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1333.546262][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1333.546274][ T39] Call Trace: [ 1333.546285][ T39] [ 1333.546294][ T39] dump_stack_lvl+0x99/0x250 [ 1333.546330][ T39] ? __asan_memcpy+0x40/0x70 [ 1333.546356][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1333.546388][ T39] ? __pfx__printk+0x10/0x10 [ 1333.546429][ T39] vpanic+0x281/0x750 [ 1333.546467][ T39] ? __pfx_vpanic+0x10/0x10 [ 1333.546497][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 1333.546522][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1333.546564][ T39] panic+0xb9/0xc0 [ 1333.546597][ T39] ? __pfx_panic+0x10/0x10 [ 1333.546634][ T39] ? irq_work_queue+0xc3/0x140 [ 1333.546669][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1333.546698][ T39] watchdog+0xfd2/0xfe0 [ 1333.546733][ T39] ? watchdog+0x1de/0xfe0 [ 1333.546769][ T39] kthread+0x711/0x8a0 [ 1333.546807][ T39] ? __pfx_watchdog+0x10/0x10 [ 1333.546835][ T39] ? __pfx_kthread+0x10/0x10 [ 1333.546876][ T39] ? __pfx_kthread+0x10/0x10 [ 1333.546912][ T39] ret_from_fork+0x3fc/0x770 [ 1333.546946][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1333.546983][ T39] ? __switch_to_asm+0x39/0x70 [ 1333.547005][ T39] ? __switch_to_asm+0x33/0x70 [ 1333.547025][ T39] ? __pfx_kthread+0x10/0x10 [ 1333.547061][ T39] ret_from_fork_asm+0x1a/0x30 [ 1333.547103][ T39] [ 1333.547485][ T39] Kernel Offset: disabled