last executing test programs: 18m19.251524385s ago: executing program 32 (id=55): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) timer_settime(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000140)={@default, @default, 0x2, 0x20}) socket$kcm(0x10, 0x2, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0xe05, 0x6, 0x0, 0x7, 0x9, 0x0}) getpgrp(r3) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) io_uring_enter(r5, 0x6dd, 0x26f7, 0x0, &(0x7f0000000000)={[0x800001]}, 0x8) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x3, 0x4}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x7, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 16m24.867429988s ago: executing program 33 (id=141): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40488c1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x31a8}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r4 = socket(0x2, 0x80805, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(r4, 0x84, 0x6d, 0x0, 0x0) io_setup(0x202, &(0x7f0000000480)=0x0) io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x14, 0x1, 0x0, r3, &(0x7f0000000000), 0x100000, 0x3f}]) r6 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x0) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000000)=0xa2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffff6ea, 0x0, 0x0, 0x3}) ioctl$BLKRRPART(r6, 0x125f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) close(r0) 16m7.967506451s ago: executing program 34 (id=153): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x2, 0x5, 0x1000, 0x476, 0x4000000000000000, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) fallocate(r3, 0x1, 0xa, 0x20000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00#\x00\x00@']) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x84, 0xfc, 0x3, 0x2, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r8, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000240)={[{0x8a0, 0x1ff, 0x0, 0x44, 0x0, 0x2, 0x2, 0x1, 0x6, 0x5, 0x0, 0x6, 0x6}, {0x3, 0x1, 0x1, 0x2a, 0xe1, 0xf6, 0x5, 0x2, 0xb4, 0x2, 0x1, 0x2, 0x2}, {0x0, 0x4, 0x9, 0x6, 0x80, 0x9, 0x1, 0x8, 0x9, 0xff, 0x4, 0x28, 0x3ff}], 0x400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 10m36.843624371s ago: executing program 35 (id=376): setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @local}, @in6={0xa, 0x0, 0x0, @empty}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x48) syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x4000000, 0x10100}, &(0x7f0000000240), &(0x7f0000000100)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) fchdir(0xffffffffffffffff) setns(0xffffffffffffffff, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) time(0xfffffffffffffffc) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = shmget(0x1, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r8 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x9f6f, 0x10, 0x1, 0x4e, 0x0, r6}, &(0x7f00000001c0), 0x0) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000300), 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, 0x0, 0x0) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x6000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) 9m37.354841221s ago: executing program 5 (id=438): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000003000000000400000005000000f8ffffff0000000000000010020000000000004557e8879ba62c8d28385d7eaa25cb74db8b30773360bfc3d25323bb8d20459a4ea475150661977798c16d4f8e1e6dd64ba400f77782385fd6d09d16fc3ade6b381183d5fa0813ab95cdbc747cc70c65de39ace559e24b389427479f12ca98a5f0fb8cbe8d79e5c1362ad100badb51cae6c786456f8e7e55a04a87b4eed923d3f6ab65e197b28adf19"], 0x0, 0x3f}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000240)) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 9m30.865668035s ago: executing program 4 (id=444): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000800d4bddb631fb2b322febc339ac47b9bf8d9a623adbf038b52902063f3dfe8bb9e6ee3978772b400b78fdf6f4a2b6c5a4a3fdb6d0900000079a976c843f51304e1e4228d01686f42d21831354edddeb2dbb5a26524ed96af6c8832d3c84e922147f8dd077eb13d316f4856ccafc94366202332e86dc7f24d903d4567d8", @ANYRES16=r5, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000006001a000000000006001b0000"], 0x44}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x19, 0x1, 0x1, "000000000000000405f13ab2871f6f9ecbc053ffff39361e97000000001b0200", 0x59565955}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa081}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) shutdown(r0, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index, 0x8, 0x0, 0x8, 0x0, 0x0, {0x0, r10}}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000100)={&(0x7f00000001c0)="0f8b856617a4037b9c57af507ff7b391c833816cd4b2a9d966fe58eae9ecc4053e44f7a41be412fddefcf9d636367aeaa62f2c2502730209cdcfa4e7dc856afe1c61548064283f51ccf47015f41627f60c31d49b105ea0cc79cc2d4253c0c486229c127ba58fa7dacc2a1f23eb423fc35614f88b30ce46605d49a3f8a94695f7f08b4a2d02dbb6393cc98d4ca4bcbc252f43ae04264f43c72f006b8f22bd7d", 0x9f}, 0x1, 0x0, 0x0, 0x1}, 0x4000) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0xa00, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e0000000000000000000000050018"], 0x70}}, 0x0) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000300), &(0x7f0000000440)=@v2={0x3, 0x0, 0x12, 0x4, 0x80, "1ad7032a2eb03d7906e3ae05808ff06b6046d61110b2429ba7f6e971af37818673af1fa1513ca09fcf46db36d124e0af221bf9f8c6dfa171598298ef09a00ebdd7437304195d3243c73c20a93301520f329c3d52caf3baaab16e76b959e8be278064ef3afcfbbdc31af3284fbb0d83bad5d699820a17b85800375f3e21d894c6"}, 0x89, 0x2) wait4(r12, 0x0, 0x4000000a, 0x0) r13 = syz_pidfd_open(r12, 0x0) ppoll(&(0x7f0000000500)=[{r13, 0x104}], 0x1, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x541b, 0x0, 0x7e, 0x0, 0x18) 9m27.078598965s ago: executing program 5 (id=447): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r4 = io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r6, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, 0x0, 0x0) 9m26.064735192s ago: executing program 4 (id=449): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000004780)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x33, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f4e230000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) socket$netlink(0x10, 0x3, 0x15) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) writev(r1, &(0x7f0000001700)=[{&(0x7f0000000380)="5cadb52ee802b25ae0447e9d951f76d1bc5ff283539cc69b3c842ea5bc3642ddc43e040f48d4a86e90953dc1465e02dad655a1fa9c9bced2715aaf1f9829d1ab1c02904eb05b178a491ea75cecfb5a04a9c3fc55e3a140c079cd5ff8cae4c9ee3ff48fcfaf94e5068b7d6173f22be2a0f3d93b374f8554965647e73717821557db446c96f8360785ba757b05af80e1be36f5fe789547baa12a3f78cda5da302b9b2a819b561f1bef2ea37bd9e04e5909e026", 0xb2}, {&(0x7f0000000480)="abae77051fecc78d535fb29292620b5e8a9fc84a88dcdc91508501e47f709d6d1d38a0c28f5ed9848ad202e8d2f9c9d9155e24c715450791817c1d83763b7805b8f5a5f819519bf664a0d29887e919d9648b1c538d9483561e6ccaeb9e472cf918eae4a1d7c93a16f7b5337050bc004f2d7187ecf1d163e2f7924e2f3ef1519ddc464574810327a446ffc54984cec0242be8f8ca82a5145f50092ad08afe96e8dad3f50dc1b5e34d2c5866c644fde9c23df6729c08a63bcc3faa848dfb72", 0xbe}, {&(0x7f0000000580)="4290e346c93a4c0491aaaa503aaebb2324b189e9db23cbff41cfb8569a2d6b0f0eadddf6fd2abfc4e569df6ad3d833ac64fa3c28be365f67c05256434b8505fdd69ae4cd73548d9d32b4d95fe40ba4d03830650319ad794021760b8ce679606c79b02f3250", 0x65}, {&(0x7f0000001780)="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", 0x10db}, {&(0x7f0000001600)="5a73586c7106c4c268130352b072aa28596c520cf142a8592bfddc753b739c5c6925d4a69ff430a9a6e5aecc802852d103cad2a879e4b54c287aa8fb4e9314efc1f41308972f9a99c1e0a4ae35368b5c6089c1e5fb180172e752247ed78b96a41d85fb0a110062d9d7fe2632e04327d14f4d889bd812c07d5cd3699e9ef77d8a147b222c64594375493c0207959268edd3c1b352e5f84b7dbd3aae94f7a91115c7ee680cc56e8a544846b5f96971b2b7388357361eb5095c4a0cfc7345886db110a8dbaf42b354d204dbf667c7d958f0278acdd04c0f439994e967e32f002562c47a64773fe649bd978fd9f5bbfebf527d6ffefe", 0xf4}], 0x5) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f0000000000)={0xc, r9}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r9, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r8, 0x3b66, 0x1) 9m23.57015717s ago: executing program 5 (id=453): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r7, 0x0) accept4$rose(r7, 0x0, 0x0, 0x0) syz_emit_ethernet(0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a800008100000088a800000e7be770c1686ff333523efa78516ff715bb3dd31227151323b7a30e378ae800000000000000005cad5dfac0b884a3f0072074c90bc820f4166179377f69ab6fd3428001376dc133"], 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=@newlink={0x3c, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x20008040) 9m19.237374712s ago: executing program 4 (id=454): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x8}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0xa0100, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) ioctl$KDGKBTYPE(r6, 0x4b33, &(0x7f0000000140)) mknodat$loop(r6, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) lstat(&(0x7f00000004c0)='./bus\x00', &(0x7f0000002400)) prlimit64(r1, 0xc, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9m16.845272256s ago: executing program 4 (id=455): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x2ea4, &(0x7f0000000200)={0x0, 0xafa, 0x12, 0x2, 0xc6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20940, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x401, 0x0, 0xfd, "0062ba7d06000000000004000000f713000001"}) r2 = dup2(r1, r1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x60}}, 0x0) syz_emit_ethernet(0x104, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvfrom$inet(r2, &(0x7f00000000c0)=""/193, 0xc1, 0x40, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) r6 = syz_open_pts(r1, 0x0) r7 = dup3(r1, r6, 0x80000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xd) syz_fuse_handle_req(r7, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 9m15.649553542s ago: executing program 4 (id=458): write$proc_mixer(0xffffffffffffffff, 0x0, 0xe4) io_setup(0x30, &(0x7f0000000600)) socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0x222ac00}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x800) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r2, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0) close(r2) 9m15.369710743s ago: executing program 5 (id=459): socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_io_uring_setup(0xd2, &(0x7f0000000440)={0x0, 0x4, 0x80, 0x0, 0x8003b5}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6d, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@unspec=@rateest={{0x68}, {'netpci0\x00', 'batadv_slave_0\x00', 0xa, 0x2, 0x0, 0x8, 0xf, 0x81, {0x9}, {0x6}}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') setuid(0xee00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x400000f2, 0x0, 0x3}]}) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x1}, [], {0x4, 0x4}, [], {0x10, 0x6}}, 0x24, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) read$msr(r1, &(0x7f0000000300)=""/11, 0xb) socket(0x10, 0x3, 0x0) 9m13.827937802s ago: executing program 5 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000005000000150000b900000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00') openat$urandom(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmmsg$sock(r3, &(0x7f0000002780)=[{{&(0x7f0000000340)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000005c0)="0ef1c816b86b5b0b6e7bdb81ea8d7c01c7658b879ed0f4cdc151cc4f523e9c36496e412c089b9eecfc8aeab4d9aae6f24200bf97192bb1039e25bb6571fcc77442c3dc2c7703a480ec80d707a4f57584678dc805b132175f502d1cd18578f4af4ce9d4", 0x63}], 0x1}}, {{&(0x7f0000000640)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(ecb(arc4),sha224-neon)\x00'}, 0x80, &(0x7f0000002580)=[{&(0x7f00000006c0)="c0f5bed003169850a3bf45bc55555575dbdaa6034d2ae29619234d01ebf922a816f873e92f864c20e12340e92b53e4f7910262f6fddb0d189e11821fe1048aa7b148af56e3d88f9d6f5e144daf7020aec54875a1ab5366dec67c27d9a7c74b247979fa1289ccbbd72edb965549b011611d2f9d36a9df59b08ffe1b5e767a0c7951933a23c30ce6e85beb52c4e76c932868fe4ff03b6b73f161142ab07017bb5184bb2c8bb3a2d072764b17f9c2c7ec157c0ebfdc01b74ad16195062b5a81509c3d3a7f5902925e3e1c1d0209f11d3074fe54ca6aeac556d5467719eb2e6899702acb0b8cde4c687f516e70afb25c46cc9bc61069cbfb5cb068", 0xf9}, {&(0x7f00000001c0)="d379b5983ad859c30067e0818d5f10681d", 0x11}, {&(0x7f0000000cc0)="c99a6bd47e57e0e35dbc5126a0245567187229c22a6bd39a3cecc5682bc814e07ac1ca58c6482084f719d9d96d2f120e72cd0933ae6c4ba0aeb514bdb0cdfac42fdc6240a0d72901e5a1ba3076ea5db37a097668a8e4dd7e89c8f138ad292684441422b8c365939804cc6e10a7e4228fba0d23060d2859790bb312dbe6692f98fabcb1aad9dbc286d3c6fa0582c7f91fd17f10118c2c89f2ba241683e84e8e98d383537a780401cfa2cdb0fa2f520c64102eb6183492d334a6c6614faf9f384804eba2f246b89c1443f25dbbfe5a0fb33629f62ea2af59680759598bc389dc44e620ca214cd2d50bc259636f3cf0df086027", 0xf2}, {&(0x7f00000008c0)="4f663a021b3c16733f5ed5029d92778a39408377e7e9bbe35bd359fe2bb324ab582265e15d99bcae7cb88affad0ac224d966e0f461ed646b6b4239ba4f0f56ca8d61b3968582f5059ec22e4dee156719434eea2d66ab575371", 0x59}, {&(0x7f0000000840)="4c48a3221c125a2a198246de59b73803f86036c80311cde8f232f71215f686fa06281ad0ae8573fbf447c68e5988190fa84ffb0e59cbc058f588cfc76422c4d4d3eb549273e477898ae7e6d899c02f5a77360589a015b4d66aee4b475cdf1af64c072cc5982560862bc69dd82ba390304f184b8da61ec24d48706369cf", 0x7d}, {&(0x7f0000000fc0)="8487db6c1bf6188d6ab922d354cbf1eb67738766979449368af105111ebada88286ffc6b3772a5a547b17f2d11f2b504929386a64e0ec216a501ba345eca1c19978a018f27a15c13d8d3f8441b9746cbebe517930ee4c91c3e456037e37a1467ffe7b0d0467f729783ff607f205b9b4b4e50650bef083646db1616b02427b924bd230e33ba873c488614bc2a4ba44305978e0bf9327dfe492a6e06faa9a858d4c3c255a277dbd5027b0e9d8003aa3c54dec0ca654c3a104dba9aa6e3869e4ea7deaef6310c8f8aaab8124d027d2687cebc13740bc8d7ab5e1111b4f42fba5b33998624cc0555dc56cc81489576dc42200edcf9e64fa4bcd8d3", 0xf9}], 0x6}}, {{&(0x7f0000000940)=@nl=@kern={0x10, 0x0, 0x0, 0x8000000}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000a00)="4da0c99e52cd1c7cfbe232c4e7a24445859138ac094e43c6bbb9edac65563928cdc02a5e1086cc60398d210cc4938b7af7a2d7c9dd32d0d23c7cb8fd513f0f8675bb44b59a648bdcb4911c0421e21b40f88a8ed3f3df7111e1e0a9129583697831e5e813aa76a375be674621bb65f30b4f6fe1febe4b34720811ce96dc4634dc30aa3923faaa41b32a94ad6460f78e426333c224d7cabb19", 0x98}], 0x1}}, {{&(0x7f0000000ac0)=@qipcrtr={0x2a, 0x0, 0x4001}, 0x80, &(0x7f0000000400)=[{&(0x7f00000010c0)="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", 0xffd}, {&(0x7f0000000b40)="e4f8de774712103f712df991a3ad379ba8244cd805d0d42a9e65172f0a51ddf5393dc6e4df22c3fc78d555ca82d75248ed3483b04cf6bdd867fb12d22669d0f50ca44f87319f975d88f20d281cf65d6f57ded690082b8349106b74e9858aeef69f5e928d31f7189d9a3ca071ff03fa6129ba7d443d26acd665d101f96a79e620cbec289c10f337f2cd137a6213814dba07469ec3399226356081627b2a489325f1dd714f0426ef94b0", 0xa9}, {&(0x7f0000000c00)="262376c27286e294729dcfa73ead67e3357b5879fc5b5f650d75604e3a0ca4e6c42f01653d7b8c407ddb670d5afd69d937dbb1aa7d9cce11a280b3cfaaf51773b000ec18fbd82185b6a1b4ad57efcc7bf031255be30352542c3b527cc02c523574b8a37c98d312af0c92bfc6", 0x6c}, {&(0x7f00000020c0)="26468f7554727a7342fe3428b9eaddb9bce96186cf12b1961e6746a7b4766bece7de5437910dfee3f576e8c7b97419c0c8d80af264052275ec2df9babea466bb2ca84a366704dbd3552e28276c7b2d5e3524de5444977ef721f3d38193c307ce9ff43c4f6755b6bfd1ba3cf7ffffff90fc9bdc3830b7faa634846dc4883e040004c735ff35ea6a0d", 0x88}], 0x4, &(0x7f0000002180)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x90}}, {{&(0x7f0000002280)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002300)="0b8592b9faa8e802257212afe6613a2ae9e8673637060e75356f445a4c50f2ba550e749ae7e46e5d6920fd2ff35e8a9bef3c7046198e9af638bc4a71ceb1e3c31739e4408ecae443a02b53df9889d2c2e3ebd221b9b738e195783f420c546305f4c686af5e88557a2c824dac226e0eff4c761d91fe3779532ae233eec5e744f1c9d3", 0x82}, {&(0x7f00000023c0)="a58f00963d62eb343fe35b30432a594026db7dad56cb2212071d62cef37583abaefafde5217cb2ca07accf28109d905e7df39f5755a606dd01b8b5308d3c95b6423a9dfc52a77c5fffe48177413bb1ea3e46dd2ed771c0fc345e3ab42160fc4ab82da2e3498361488d2f42e8ef42ecf6e5dd36a2b4af8e0494185ba40bda91e15ea022fe513a09fe1a839a7e3593a512a3c124aa28b36393b829f765d8985c92ea11c8899c7facc8101f0d8a832d3d637c4270192d8feeb95bf0f785aa669d1527b83bfb7bedd1e591ccedc9f838575d4ab800bf497144dbcc9a", 0xda}, {&(0x7f00000024c0)="e8556ede7f700bccb1bc7f97613a1d80718c18453fdcb351605db98d7645f42b93fdeb1e58a861741deca9dcbad9908c4e6336a27e9af2fa428561216cdd15eee890146cce26b4155ba6f56735468a3b6fa2e1e1d3d8512ab8fbaaecfa8051bbd42d5ffd7230eebeaa5dc6afbbf56469c67025b3de16d62c09a12294835146ff7f6922ef067cdd63c2dccd6bcc5fe22452ace3c75193175075c7d486900a7f", 0x9f}, {&(0x7f00000007c0)="b64eaa0debcb20614193d511e758971898f984a13d99a3a47e8b009eb2b95e60650d3c26f89a7da915678915dc09aa542ed5684dd68b96d2cf66124a207614d59f0dde79", 0x44}, {&(0x7f0000002600)="ca08ab26c4f764e147a26a1467f551aa5d60689c518082f3e140606f2a136f2fd27e06b6", 0x24}], 0x5, &(0x7f00000026c0)=[@timestamping={{0x14, 0x1, 0x25, 0xe87}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xffffff7f}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xc0}}], 0x5, 0x40001) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000140)={"09025a26", 0x4, 0x3, 0xfc, 0x6, 0xfff, "e840fe213981327944dea0ab8de591", "ddf9e8f5", "84708d56", "b0ae9f2e", ["93a03a7ae19776071eebf3e2", "155199e846586bd6df78ec79", "69fe3745d21db04d44490f86", "4c95443ed5fb833211e14aa2"]}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r7, r6, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000020601"], 0x14}}, 0x0) 9m12.117597014s ago: executing program 5 (id=463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f00000003c0)="d4d710980606433d42941c7b962d638a84d9b147d6552e817dc3baa559cf0a0201bf8925e0eb15cc0d6c96101c337e6c759f1624bad71b704c28ee00ac16c47ddcc5cb5d97c5dd5db7eb0d75042c750aa2c0d3979dca85e9864177b533b761e70b002d272c8332c1e1de0dc99f35f4d0e397d24c3d9b6523091d5c8efd12bc0a23f4174d1ba268fa0f8b7ddb05ce23f020fce07b612560ef4a8a06952e8ba83bef51095af1b6c94fd25cbff6b2313eff99a8175f44e15785218a", &(0x7f0000000180)=""/120}, 0x20) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x6}}, @RTA_VIA={0x14, 0x12, {0x1e, "5d87700c6849edc9248e44676f28"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce) ioctl$PIO_SCRNMAP(r6, 0x4b52, &(0x7f0000000900)="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") ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000280)={r8, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x7f, 0x0, 0x0, 0x36, 0x7}, 0x9c) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 9m12.10405169s ago: executing program 4 (id=464): syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffffce"]) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_gettime(0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045503, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0xffffffffffffffdd, &(0x7f0000000180)={&(0x7f0000002300)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x200488c0}, 0x2004c010) r9 = socket(0x400000000010, 0x3, 0x0) write(r9, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc0280200003001e030500e1000c04", 0x1d) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffc86) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="20030000340001002dbd7000fddbdf2504000000df223d492414c9bdd9a8f2bc74336ae7c8fd3793b28bd81990694dbfb55444866104fc6d4c376896cee1521d787fae7bf802c10ae250aadd8045d50ae74710f9363182fe281ade7575d268d95f63951dea44c43baa34f475a8803c4220b50e0030d3504ca894d94b5550f7efe510aca73ff0740672ad8c13b24a4882f1ec0a9982d263ef16e9b4c55c8577e7de54b6c17140b523b762de1aa63a9edd7beac37110081e9bafad76fb7eaae246bfaf3199696a12f231de3608555a2678d6698e4a4df9b5dea385aa9a6779308699868f6ce33714ac4f2baae703cdf9b509c82b916d51ab7abbcec67268f8e4bb879165e2e32b15454196428bea12566a0ec52e8cfc46dda7f56b4bee328e78a113b315f713bcd0db66a63b56a343ee78b30af7883d4e24487a135259fab193d7809bf4f65aa3026146e798aba0d41934f555540b811a18c64783789387554b957dc51986f79dbb7cbf4d1ebae1e59dc97f498afa560894e4a97f32fbdb613e2e2f1c9c01a78095014c80040047800400858008003f00", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x320}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) setxattr$smack_xattr_label(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="6f76617208000000ff"], 0x9, 0x3) r12 = geteuid() mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x210cae, &(0x7f00000005c0)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x62, 0x31, 0x61, 0x36, 0x64, 0x37, 0x31], 0x2d, [0x34, 0x61, 0x30, 0x39], 0x2d, [0x64, 0x39, 0x38, 0x38], 0x2d, [0x35, 0x62, 0x38, 0x66], 0x2d, [0x32, 0x36, 0x33, 0x35, 0x7b, 0x64, 0x35, 0x32]}}}, {@euid_eq={'euid', 0x3d, r12}}]}) 8m57.253547326s ago: executing program 36 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000004780)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x500}, 0x0) r5 = add_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000240)="2c7ea135e4f7cd7dcaff3e2c4a9d24c0bda3e2659183bbc88c233b106464606aca6a5f49713acf85d394bd031da05988d1fd50e4cd7c0e94f9231eec3b64bdc627947b830bc532658ef3765a5af0a1b71de562ccaee2a801bd9ec00d9228892f412d3bc68b5c6d839886b345720afc20d5f0b92dcbe4e2c82f0972b6da330acc03150f8f035bd57da76b881af5138050191bbfbe6037694b8a3c3bb2a9f1c82c831d65d9dffa5e8af436e3d8", 0xac, 0xfffffffffffffffc) keyctl$setperm(0x5, r5, 0x10000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r8, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004090) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x4) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r10, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x34d3542e, 0xfffffffe, 0x80000}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 8m55.241648734s ago: executing program 37 (id=463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f00000003c0)="d4d710980606433d42941c7b962d638a84d9b147d6552e817dc3baa559cf0a0201bf8925e0eb15cc0d6c96101c337e6c759f1624bad71b704c28ee00ac16c47ddcc5cb5d97c5dd5db7eb0d75042c750aa2c0d3979dca85e9864177b533b761e70b002d272c8332c1e1de0dc99f35f4d0e397d24c3d9b6523091d5c8efd12bc0a23f4174d1ba268fa0f8b7ddb05ce23f020fce07b612560ef4a8a06952e8ba83bef51095af1b6c94fd25cbff6b2313eff99a8175f44e15785218a", &(0x7f0000000180)=""/120}, 0x20) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x6}}, @RTA_VIA={0x14, 0x12, {0x1e, "5d87700c6849edc9248e44676f28"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce) ioctl$PIO_SCRNMAP(r6, 0x4b52, &(0x7f0000000900)="35acb868beb986be3a92af96a0c4bebd911c8b65d915cf816431cb0581e54dc444e7ad5651a21081076b34675ef724e5627b80624302cac7487149d1180000000000000000e0fd57650cfb5b22f44552c31d664d9599d7cf1631176ae9812c0000000000c5ec5b3c7a0000007c5b6692c0a3a9e9e8400b966364d307dc3aa9e03c74a35c77961cda838a963bd21c648eb7617db3ac421662247a005a720659fbf4d9ef2aebeb36cb67d92589d6d2340d0d21f046ebfcd162c846c98f63273724a476d2d1102f4382b8165acfb0bc454648db3c2951e537aa8d36df1e4a7573183c5c5649b86d51d4cf6939648b8ebced491efb72cdc0ab972951b47ad1f5ced944196a961595f9873391128ae36597e24c319c381a4bfddee87aaeed5cc594f9b024bd583d69185e32d972a0a8eb247718fd4ac50d83519597ce798ce8ae134b6668937f2dcfc9d4550800cffbe3240fb91656dc8bc8164eb18c27ab7997e8e909e16b7c2dda4a7220731a1087755f9f7b649eb5ad86c8b571203ea951da971e5fa11f") ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000280)={r8, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x7f, 0x0, 0x0, 0x36, 0x7}, 0x9c) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 8m55.127207309s ago: executing program 38 (id=464): syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffffce"]) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_gettime(0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045503, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0xffffffffffffffdd, &(0x7f0000000180)={&(0x7f0000002300)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x200488c0}, 0x2004c010) r9 = socket(0x400000000010, 0x3, 0x0) write(r9, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc0280200003001e030500e1000c04", 0x1d) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffc86) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08003400ac1414aacf004a0076cf203318d8e240c1d4549814599ac927dfa9f2a10c1b80241816a951a5479f4274d4bc9ae416b8d59c7df3e33113a44ddf2f0f2fe93ff00557ce61339c0eff7483f4f6af7536ddd1a5c8cda258c94973eb42731babc07f8f24992bc4be23ac39fd14c80bfbf6e94c209ac91e3b926f28e7b7d5bfa00289896f30af4c906d3af6efece3770aab6fda06fb667788dea1dae244d045ae38338188a2a9e2d45d31d46313e671e1a35fd377813c663a9b7c54079814f506bf13fb439988cf54b5000c0078000000000000000000040073801400810000000000000000000000ffffac1e0101dc4192360129a684e10324ba5789826a7b9acace4a5b5726fc0470837dec3c2f6988ea1b37e58a565e745da97d5c1b0e5b7860017b46ac86117ee1c01b495e19f275a9ee219ec1397326ceed357cd94f1c274ca06b1bf3c18281fb4ff30d53bca3a245470ffc07d140700e4f562001e1c2c004d275ad85bc1a7866452d0800000004fa725dd8d2eadcbf8c3e5367f9d7abcd6a9b6c0e25e1c5d11356cba9d559ff19c27983cd3c4bc47f757397cd84c6f309c57e741aab2e4a1f176e8f40a52ed42983a2e751b2a110bf257f4ba9ab90482db0c618cb2c56b50cbeea80f144bd56aff228fe680e75bfb4081a1c4b232f9cfff4c86b23696026a65876871050c42bdd9cc6d978d96ef3a068ee2d1db4249de617d80cf8ad83fc5619ae600b87500ff7e6ba4b51532ce127f8f3903ca8b5cde091a11e8d2597a2b600b3bc99d813c075606f946fe8a88e04dd00307a16b625d4411653974750a656ff7829846a3b78c578c7ef4b14432a", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x320}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) setxattr$smack_xattr_label(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="6f76617208000000ff"], 0x9, 0x3) r12 = geteuid() mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x210cae, &(0x7f00000005c0)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x62, 0x31, 0x61, 0x36, 0x64, 0x37, 0x31], 0x2d, [0x34, 0x61, 0x30, 0x39], 0x2d, [0x64, 0x39, 0x38, 0x38], 0x2d, [0x35, 0x62, 0x38, 0x66], 0x2d, [0x32, 0x36, 0x33, 0x35, 0x7b, 0x64, 0x35, 0x32]}}}, {@euid_eq={'euid', 0x3d, r12}}]}) 5m37.771427041s ago: executing program 3 (id=568): syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000b80)='./file0/file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xb) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="94000000120011"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x12, r3, 0x1000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@union={0x4, 0x0, 0x0, 0x5, 0x0, 0x1}, @struct={0x8, 0x2, 0x0, 0x4, 0x0, 0xfffffff7, [{0x4, 0x1}, {0x3, 0x4, 0xffff}]}]}, {0x0, [0x30, 0x5f, 0x5f, 0x0, 0x2e, 0x30, 0x5f]}}, 0x0, 0x51, 0x0, 0x1}, 0x28) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@dellinkprop={0x4c, 0x6d, 0x1, 0x70bd24, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x5a7e, 0x2800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bond_slave_1\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0a0}, 0x40000) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000094000040"]) 5m34.811898843s ago: executing program 3 (id=573): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$video(0x0, 0xa7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, 0x0, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x4}, 0x1c) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x70bd2a, 0x25dfdbfb, {}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) close(0x3) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x114}, {&(0x7f000001b000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="a1f89eb5ef3fc39b81752f3ab063cee05d6736b83a2f941662a2757573f94fbe5e90a6ceace3dfee992ec009949d0a1cb2d495dae92e8c10db4509adfda79011ceac3a18004c800400318008003500", @ANYRES32=r1, @ANYBLOB="92006401010100008e51732492755066220000"], 0x1130}], 0x2, 0x0, 0x0, 0x1}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) getpid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r8, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) 5m32.644894716s ago: executing program 3 (id=577): pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r0, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000300)={0x20, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/76, 0x4c}, {&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000001040)=""/190, 0xbe}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/170, 0xaa}, {&(0x7f00000021c0)=""/236, 0xec}], 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000b40)={{0x5, 0x5, 0x1, 0x10, 'syz0\x00'}, 0x0, [0x11, 0xfffffffffffffc9f, 0xa, 0xd, 0x3, 0x8, 0x7f, 0x5, 0x81, 0x8, 0x4, 0x5, 0xa3be, 0x8, 0xe9a6, 0x7, 0x200, 0x0, 0x5, 0x6, 0xfff, 0x0, 0x1, 0x1bf, 0xbb, 0xcab, 0x8000000000000000, 0x4, 0x9, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x7ff, 0xffffffffffffff86, 0x100, 0x7fff, 0x6, 0x96, 0x5, 0x8, 0x5, 0x8, 0x6aa80000000, 0x401, 0x1, 0xffffffffffffffff, 0x5, 0x5, 0xe06, 0x8, 0x0, 0x800, 0xa05, 0x200, 0x1, 0x3, 0x1, 0x6, 0x5, 0x95, 0x7, 0x8000000000000001, 0x6, 0xfff, 0x1, 0xff, 0x7, 0x9, 0x9, 0x7, 0x5, 0x7, 0x3, 0x7ff, 0x43fc, 0x9, 0x7, 0x5, 0x8, 0x0, 0xffffffffffffff81, 0xffffffffffff2a1c, 0xc, 0x10001, 0x2, 0x7, 0x6, 0x8001, 0x6, 0x7fffffffffffffff, 0xfe00000000000000, 0x9, 0xbd, 0x3, 0xd5, 0x3ff, 0x0, 0x9, 0x403, 0xffffffffffffff01, 0xffffffff, 0xd1, 0x9, 0x4, 0x5, 0x7fffffffffffffff, 0x3, 0x85c, 0x80000001, 0x4, 0x800, 0x7, 0x80, 0x7, 0xffffffffffffffff, 0x6, 0x6, 0x1ff, 0x8000000, 0x2, 0xfffffffffffffcfc, 0x0, 0x3, 0xfffffffffffffff4, 0x37b, 0x9, 0x8]}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x6}, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x6100, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) fcntl$setpipe(r0, 0x407, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@fallback=r5, r5, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300), 0x8) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80000}) 5m21.579624003s ago: executing program 3 (id=582): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x22040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGETD(r5, 0x5424, 0x0) poll(0x0, 0x0, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r7, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x10001, 0x18}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000d4) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000020311020000000000000000000000100800010001"], 0x1c}}, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, 0xffffffffffffffff, 0x0}]) io_uring_enter(0xffffffffffffffff, 0x1fb7, 0x62fc, 0x14, &(0x7f00000002c0)={[0x2f]}, 0x8) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x5, 0x3, 0x4, 0xfffffffe, 'syz0\x00', 0x7fffffff}, 0x2, 0x10, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) 5m16.790257116s ago: executing program 3 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000040)={0xe, @raw_data="02ca3c81462e38d9533ffce6e3f48d3a42583b334f479695af1f0baaa9121d5adf5f551b5b32416a781f2a7bee04ac730c2d4bd49aceb27e169ab830ae49d132dea21361dfb6de0098e37bd2d5bf4857cc86cb6366b5c467920fdafdffab927a7480a3e820d7faef90eb4176f40854002a98800be5253b0f7645aa8084878bf040820480e6feb2e8a801eddf3baf089a0a3f96d0786b2ca4d0229b3a44b09af97b75a7446bd32892c615c5b0534331140402a1c492ef46d90deb6b742dd28b7e7cd729955e77c905"}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}, @func={0x1}, @func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x71, 0x5f, 0x61]}}, 0x0, 0x49}, 0x20) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x2, 0x5001) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e507646dcef67df33c9e9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r6, 0x1, 0x2b, 0x0, &(0x7f00000012c0)) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000000480)={{@my=0x0}, 0x1, 0x2}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/core\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r8, 0xc08c5334, &(0x7f0000000380)={0x1000, 0x0, 0x1, 'queue0\x00', 0x4}) ioctl$VIDIOC_EXPBUF(r8, 0xc0405610, &(0x7f00000000c0)={0x2, 0x6ce5, 0x8, 0x800, 0xffffffffffffffff}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r9, 0x4002f516, &(0x7f0000000180)={0x3, 0x2}) 5m12.05846113s ago: executing program 3 (id=593): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000003000000000400000005000000f8ffffff0000000000000010020000000000004557e8879ba62c8d28385d7eaa25cb74db8b30773360bfc3d25323bb8d20459a4ea475150661977798c16d4f8e1e6dd64ba400f77782385fd6d09d16fc3ade6b381183d5fa0813ab95cdbc747cc70c65de39ace559e24b389427479f12ca98a5f0fb8cbe8d79e5c1362ad100badb51cae6c786456f8e7e55a04a87b4eed923d3f6ab65e197b28adf19"], 0x0, 0x3f}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000240)) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4m54.807322873s ago: executing program 39 (id=593): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000003000000000400000005000000f8ffffff0000000000000010020000000000004557e8879ba62c8d28385d7eaa25cb74db8b30773360bfc3d25323bb8d20459a4ea475150661977798c16d4f8e1e6dd64ba400f77782385fd6d09d16fc3ade6b381183d5fa0813ab95cdbc747cc70c65de39ace559e24b389427479f12ca98a5f0fb8cbe8d79e5c1362ad100badb51cae6c786456f8e7e55a04a87b4eed923d3f6ab65e197b28adf19"], 0x0, 0x3f}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000240)) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4m24.540007434s ago: executing program 1 (id=632): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x20000000000001eb, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa, '\x00', r1, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) userfaultfd(0x80000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r7, 0x903, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x10}}, {0x6}}]}, 0x44}}, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b63707573657420c30bb300000000000000a3688c6b13eca2f6aa6f1036123779aa82855963f036ee23ebfcc33bdf0e1f12bf6d084d1b0130f9532cc0cb554a74c566cb3e76eb25471a024c1932a115959c9b2d801a26dc9b3add805c0c8ec834b14519b74f1d6c027a746ec39635315507"], 0x8) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/167, &(0x7f0000000100)=""/47}) 4m18.913364107s ago: executing program 1 (id=639): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_OFF(r6, 0x7004) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000280)=@ethtool_cmd={0x25, 0x9, 0xe4b, 0x6, 0x6, 0x0, 0x1, 0x5, 0x2, 0x7, 0x3d95, 0x2, 0x40, 0x6, 0x3, 0x8006, [0x104, 0x7]}}) r7 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCSTI(r1, 0x5412, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000040)={r0, 0x8000000000000001, 0x9, 0x1ff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000200)=0x3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) socket$phonet(0x23, 0x2, 0x1) 4m15.583869398s ago: executing program 1 (id=642): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005242000000d240f0100000000000000000009058103200000000009058202080080000009050302"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) dup(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x401, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000000011000300686173683a69702c6d61726b"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='p\x00', @ANYRES16=r7, @ANYBLOB="05002a000300", @ANYRES32=r8, @ANYBLOB="3b000e0080000000ffffffffffff080211000000ffffffffffff00000000000000000000070001000100060206002503018c0872060303030303030008000c006400000008000d00000000000800490000ac0f00"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r9) sendmsg$NET_DM_CMD_START(r9, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r10, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xdf}, 0x0) 4m7.490240176s ago: executing program 1 (id=649): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000006740)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x5c2e, @mcast1, 0x8001}, 0x80, 0x0}}], 0x1, 0x24064044) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3537, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="ccde1b1a4ca56624e9f99b266b90f34996b5e4b40aaac1b1ddf415caac0b1ee33131327d3473a2fc7ae73d68ebfb412583feed906281a0b736206e9c25b3d437212f7a21a90b8e441fb49a7f7912d5ee000515d6460081e527862d3438b5b8ad211e024938fa4cc6f7936a253069707f8066bf967d63384f775e4980cab242bb0eb03f60b95b2ce1b58c5c98bc6230b574a0e6ab905f327e5ab5444e1ad6c1fc4628b1120b13fea9ff6d64075430c3dc77cae3d043", 0xb5}], 0x1}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x5a89}}}, 0x3a) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="041706aaaaaaaaaa12e54b3fcd443f560eb95ff5f70b2b2bf6ecdf05cceb7d5e7e0046025f2758300b9fdf09adaeef5901457f17aca2fccbf1fa7aaaec57f979171331d77806578f7db21dc0b308a31b95340ec3afde72d05bd07a588540372b7037132e5333e4ff000000"], 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x32600) 4m2.48349129s ago: executing program 2 (id=651): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0xfffffffc, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r4 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0x57e, 0x10100, 0x4, 0x37d}, &(0x7f000001b100)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0xa) fchdir(r9) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r10, 0x101, 0x1) getdents64(r10, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019040)=ANY=[@ANYBLOB="101000000000000017010000af0d00006bba95e7fa26073b2de8c4b11064adfc3b829a4b4eee4532a09756067db9dc162bb82a76e9463e4f83fb5031aa670ef16ff8fb3232598a5f243cd9131d66d81665bd9875b1a6ec57f62566892460c58bcdcc3b2cb52c2d8fedfb849e8d4af7908e22a39e656cf424203133d9c7cb754183f81f70ddd7cc807b37579c402b8854b0a3ae4a8cd441e35bc86b2972c7ead589134b65584ebe1b27b113dfa94af4b3f2cedd3e778569423549cd606112ffd8bf9ef76166cdbc8d6efccdeb1f3d28ca9662d506196dbc120fd864f6f01857e7e6f5f6ae8bec5d2aa0776b5439afc101b81b023b2ec8854513aeda53c0b853fe1d49623d9c9b120e4bd2975ec2454d9b58bb6b1ce34ad150756c8880eb584f2d619e8d1191986f294265dfc32a29ce0c2d59c323dc5187c700b855a1c8805be5910d09073539ffdf86837a670a474e53b3e16711116f87539a6cd7e24739c46eda69b1a7fa263909b67f0fb2191e87a9a223866b0a745090951881d080310f10d0f8464ba3c248d306125ab0ca7df1bada8a1d081ca68debea6f5ecccfef34d2f2870b2ee03ecb6791d519d1ec6139354b4d28ab2e3b5e248944df77047f746d2f34e9ff3b718f41e4013f3d9e274d11d05148e474573fd23a34080ec10a6723ac3f03c7b9788252e72e530df61d5db2240a9939f0656d9a52eeef09e1bf445dd1dd279749d0ec02b9eb3b368f6f9c6376d857589435fea43911e988954d859b401d43e548389a84027b5248b3cdbc38cdf54adee1fb08ccea9323a8d99cda3db3ddad2f1162ffe754d6c088053cd6ae142e0d02156e47c231f5faf0f94633f702490f30bca0c2707a66498f5b7a662f287050abcd026167f17a312016c61bc32b3c6fd55a50a7f028eb1efe8a5c473ac9fa6e3092e112cbce56440517d86f60b2d5bd5062a705b228c3827b33a706998f8bfdbdd5cc95c28cf75e3d31b2ec0701867aded85ccb4b200de26dc2fc0f0290d2d34e6c2f96b07218db06081469d009efc226bb41d7ba0a91d049394a5e18c75b8a8f9bfa5bde1a5258c5d4e1f3e6c56f6ff187af80944b65cd9954d573372bae1b9e1cb212224c864b9c498f475c016e39be2650c26da007fc09c5bd171bfe15245c53044aa95d677242600ab4a32dc4a4d6ca3e26a84456e85c579b9d9259b618dcf797a712962f2a8040583af4f8776ca99e287c9294c853bd3546e18cb36d65f37b8ef137dc02e734e8aaa7c7ceb681e2443d2ba3cdd03d5c49e4d3481dee604b26e118a7a87d8de67ee541d848d202a36991c1994f48bd4e4c662b22421ae7cebfe9faa01effa5cab4f815e1024032f8e30fd54c429ca9785cb95b8f2a88f1855228ed6164a1dd639ed10cdffad71e7611b4029cc3cdc8a583facf435a27f8decd492cc129685e9f396d1c51a0d38a6acd6761edb4342344260e163e34ee1b9e2de6d309d82bddd119c843a26c14ae5610acf3f7238bc3eac396a017ad4a52ae156622fda1a915be132de1c35b01ddddd4d65731d8b0746860bdbcd8aec7fd953b37d978973460ca1b9cf86f6f804d62ace49a61fdd166b9efddbbb1cd50cf00de9dccb6a47e50e80abbe222a9f653ae2b1512f4b32e4b9a02a4e375bc199562dd4c0a1637f07817f824218626cb1e71ae25c86c7e680692225593560755d51711b053f28f4a38b7947f5e2e6c524ba36f815a7506678f01441a283e5153ec00fa4476c7c673bdc03e787c87cb9a5e4bd5f919154d82a067bfe50cd6da6907b0582480d1f307d2e07ef35b821917775b85d3fb5485ace392473f06acdc9d9060366329eee5137255f7131618c5aeccf4fbf832f317ba98a0ce28cad4743f631a86a65c660fff91ccff2c66aa0770710eefed212d8f71f24e097146a81fe59178d730b472833075494953a482481eb88544bccb25de64cdb4a08ed4231d8b1f6a15bf06e6e7496daf493739bd20070ef650a10a6cbea18716a622d7e038cd52a7b275bf705b2571aba5b648103961ef60a104f54e6d1f4cd0b296b67a3d3fa7160956385e9ca8e947ea5d498bcd73fe733f8e43e8bbe2076efe760c119cd245c63160b93677ee9c77acece1f6f5d335303e26e8449704cf06a412c199762be6842ceda1c293da691f4c01be54a9dc0c714119bed01ab1551f46aa169d9c00e6364580731a542b76988a5c2009ec0f95736f0cb06c8b8f8bcf0e52a240a0b6341e1de95a9695f41d3671db08c5ac92b675cf88432033d8a415c6ce70c1d1ff4f3e571caf4b95ee112cbb25c2e67ca9505fdf391e69a6a7759c585f92d87064bde66c18c6a450bb36e67ce3314038cbe22f1609b62971aa333046ea4ee70872b5235c739fab15d35f9b4488e632e215aa277d09a69721cf8dd169628ff7d737f62b987b7c8c83cde9686daa0526fb8aa254fba4b7352f0262d924a60f17db9d73dd110c45e8670ccb1229e098b508ef8070dc44546c65c3889e1c8f619e108b36137c483c1f34101bc82ac698e864949d94aaf55a1f2b996c8c74e058c5aa7ef41e22950c4d1b5368ea9ea5d882f0e7a455b89ff57a82e42cbbb2b39b725dd90f90b7e6d376df484fca478bd96edbfe02091836fea719355cdd1c7db1e22eb4430e9a5059362706b8230821508ad9495bd511537135f77980586cc2d19f830c0987c20927037c18fc6caf6e7857873d58b9df9e0cdd5ee85b040f47b8a5809ce668d6736fc6280277325dac9456587980a5117ea02f1d0822680c8a310518738d8258327b2ac89719d6250de5d81590bc3be864a05bf0518289f741ce23b11af5b713018a9e7f9db2ab105e642f1ee993c47f1b780389ef23723400c1d0835a9732e59bb5af91d66f2e55659f9bff00ebd7177197aa3f81e1ce5fe141d5270caba7eae254f6c714e057e9be6c2538a8f233ad667ec82f22c16660aab6745435aed6b671d56d681e5cd8a794a9904593094eb6a02a6b7baf4ff4dc09244f9ac1832ff7baf991818255a9dfdad25abe3b258528582073e77d25ffcd1ebfec8bbf7fa055856dc6606e110bb48cccbeae197f79937375b29307e70bbf52af180ebb5c75a23935a2d27c1fcddf170d64383612b6f01a94a39ecd183d01cd6e6656a7b8d8c1c0c9351d2e34de8ecf70adaf68d36dbb769c22d23e337136b7e6563cd3772854ae08f0162637fe6d288207ef934a0cc1ca2bfc49b2cef8955f456ca2d40df0371fc78ed7e98a67fa1b33a3e52d82153c8c32d77f1fa8d890e55c77d2f62b835394fe1a7729ea4e7864073c60ca60a64ba11884f929ee04fef9d548c2ac860340f24ee6d4fb35eb47f960be64d4a58a1b0bdd3a30f1bd79670932ba1b7ba68697f3c05f7b967879ba75f189e437552e2552d9242bee0ec989379f7cd9f259471b35a53bc65067c4a4a6a1afd42f15383f4bffefaa8d29c3be50ff2997bea9375f67e955fae2d22f9698c08a1710c574aca0e14fd82e593b4b90f93b187b45ac064a51bbaa57f0205e515747afb17cca2b32f5c0ae9e86a0a1606ef4b9b9f09677e37a183aceabe3dfae0f6e93948c56c7618c67d9722b474626ce03a4d5fc2180309154ffc0e52ba52ab59de623791e6ed84ee496f95296f12b204c1773b0da48b8b6fb6e98f6cee675bd72088f3114e8f3efee6cf9b2e2904788b956568274a8d6409721abd5fe626228f4315570061fb8f6d8d5f76d6aeb08cae319fc078b26d1bb6f11a01f13de07a432ba0753bef82e9dffe05d64d75bfc4a199690df3f117948a1390b45f888f55cd825cce607ae99fdd55e88b6c86f5b1bf5e58306cca915b8680e0766d15868e044bca10c5fd78ad2640549d7ae38bbe85b4b9b40bd2ea53262d22dd839161eebb8763e006e0527be3938cf56be3e1e3ee2062f51d24f99f9562ec0a93b2d6d1e1d0d38328309ed950d1f22da6a368fc71d2aef0a2e8ffd035ee3f9400a5e538b063ab68bed3b14d42f2117fee6f913900c459efb3bde370d6b13cbd8e16662d8d0b4eae16c50e4da8839a20a2c85cdcbfa457fb886c2f0e40615a3f8200b134f774da162433fd3d3894aefa36b5da8cfcac83f46a825e647cdc15f5f67851facb0119c11441859a83a8eba78b0f93b7f7628e68ba653f6491428caacdd3c6338abe4f6372be12afd41cb271044f25e3e1e84acd026f9fc7fd2d19473fec1cf1a80ca8a0d22d78750e959cc80ceda8a22fcc06328a35398e94efb7dc391232a45cd93a1c9650f08ca5d51e0f76170b59ac46bd0861ba4ab6385899f94fb64e0ce12121c67911d4f89a3e45883678c2d97b6dbb77092eaf24290eff2517003f719df2ef063b6cf704ddb8d3d358c9b588fa382806392378ccf7f8612385c38505a3fbdc168276ed4f7bc099a6c7941d5569189a580584fcafc1557e486eadb953b5e8ed1d580e74e57bd7941eb3e46d917f34d49c2e274d027d24a301b48951346b5ed415eb48073cbddc714f65193a66bc424c17659fdce5417d385885f25b7ad87065afa739a42e5b50edbad3d25c41d8f01666bdf0221c21feda12672a61a526f74f5b2efdfefd555ca3eff5f068cb3347cd21634f392f7628979e05ed67ebddd04142220d2f097caab60551f8d6e44db5d72e1dade58a9046997d97f57cd8ec09052d734b5a180c20d406803567fd5b39519e811a6d6b798ab4a29dbd06d715458e817481dbc5748dac6a08a2beb52657a6ead925c02d31f0965764baa871106e282ee68b9f6c5084eddd1767b7633616e0f93b8c0672a267db3d69ae660f264cabc288945e4d71c37324ebc79a3b2664e9800657deaad3bb7b94c4a92d1e051aad836fdf7480049ea4817145b251f8b54e97c3cec8edfdea99ff55cb36c7620af052dc73ed8578eb9deb10e2df1b1f306bee0bd647e49fb5907fcb850743b6a3064a9abb2d5ab0c0f900c841b75e51aafbb9dd8d626bd97b429a6847eb33cc4d08d172e8d9ccd861c0229d99955f5e5c390ba75171c05c095573d9182c61a28d2949ec204dc9a752c79dbcbdd95ec126c6179d13135745256803e29d370ffa03ea33bc099f6bf11642b190366f26a32b7808b6ae0070a53c59d58c4b571b8e50643d4bd9a266024ff00c7e701454c7dd6689e92141d7b4fa8e3d835564989467dd6a0b1074a0b0e7e011b62c77d16ce1c3a4f137c8875c70e89a251b39382e056b24fcfd6cac63a78ec45e7a3217563d20e6b6e8ac7c7865c22a54f65b665dd4dbd10ea11e44be978151836320afd00c5305d7c913aedaf723fc88da3695040c5db3ec70bbc3cc23c45454292686888b4f2461d7bd9a8f53d2ad9a197612bd35b0d6f1e4ba10485abaa7b392be977608546e715fde1b3a10ba5624f9047dcfc40be0354b8fcd2139c429462569f551c8f3e73a0e4c6fc871652ec81e62f0560071f5059c1068a3f9056e044b686a47c7354d82f529058498a4489ef8223cf6e46daa05e5a78d1b6b31bbce633fa4c1657e71eb315442bc9bbd97f1fb48f05ddcfae9d543494df898f10e72eb52cfd1f6066e74687bfe2b659a8dcebcf39d16fb633836dd0d4d04f8eaf13ce3d05f8fd4f0344abd2aaeacfa0ef38f06fb42758e6c077256550cf16632d9920c69817d4ece175d1523b0ac89c4fb0ff97256fc8bceebaa361695725e2c1fc423156cf9ed9c541bcb2b9f7f37c888fd81472b91261ebf03d667b23933e543e35c7b7ed7fbcd84a5cad2b80ae24a1072fa6a1092766b30d25ed556f6d7fbdb48f41423ae2ba207b68d301f82c1a98fae5d7920a858038e926768fd30b1822d607f7cc4ab570000000000000001301000007000000f8f24a740a8b8365cc2016754cb41e2344780993fe014fb77a6039660df0ad3fad4d231faaf5aa238fafb9574296a55db5a0a2713e4980ce89a9e7360acd3aba9fb5cd3bc29b26803d47d047e172ac43de396b89ef429d6374db2796ede700001010"], 0x2090}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r4, 0x92, 0x0, 0x1, 0x0, 0x0) 3m56.001302264s ago: executing program 2 (id=654): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x3ff, 0x764, 0x4000d, 0x1, 0x6, 0x7}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$media(0x0, 0x80000000, 0x40) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="60366600f848fe8dd69ec79f1ce5e8c9ce7cf9c42852c556265e48d179cde0902de44468e764", 0x26}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[], 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r6, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20004000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0xe241, 0x100000000, 0xf, 0x80000006}, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) listen(r0, 0x3) socket$inet_smc(0x2b, 0x1, 0x0) 3m55.915887043s ago: executing program 1 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) sched_setscheduler(0x0, 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r6, 0x9, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r7 = getpgrp(0x0) mq_open(&(0x7f0000000400)='sched_switch\x00', 0x80, 0x101, &(0x7f0000000480)={0x6, 0xffffffffffffa8f8, 0x8, 0xfffffffffffffffb}) syz_pidfd_open(r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x14, 0x10, 0x4, 0x70bd28, 0x25dfdbfb, {0xa}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000084) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80, 0x3a}, {0x0, 0x0, 0x101, 0x0, 0x0, 0x4, 0xb}, {0x2, 0x800000000008}, 0x4, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x44}, 0x40) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000b"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3m51.877549855s ago: executing program 1 (id=658): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 3m51.103758524s ago: executing program 2 (id=660): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x4, 0xdddd0000, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000000)={0x46e, 0x1}) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0x701, 0x70bd2b, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) syslog(0x4, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000700) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x20001100}}) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f00)='/sys/power/pm_async', 0x2, 0x8) write$cgroup_netprio_ifpriomap(r10, 0x0, 0x0) 3m49.286383273s ago: executing program 2 (id=661): socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setxattr$security_ima(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000907000/0x1000)=nil, 0x1000, 0xb) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r2}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000300), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r6, &(0x7f0000000080)}, 0x20) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0a0a0e050800"}) setfsuid(0xee01) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) 3m47.668072177s ago: executing program 2 (id=662): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0xc1c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file7\x00', 0x11c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000940)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000009c0)='./file7\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000a80)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file7\x00', 0x0) symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000c00)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000c40)='./file7\x00', 0x0) 3m47.018185808s ago: executing program 2 (id=663): r0 = syz_open_dev$audion(&(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4, 0xffff, 0x81, 0x693fffd, 0xf0, 0x9, 0x4e}, &(0x7f0000000380)=0x9c) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x2, 0x6, {0x0}, {0xee00}, 0x4, 0x80000000}) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r4 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904ff8000000020000000000000000800040001000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x4) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x0) r8 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000180)=0x3) 3m35.694944595s ago: executing program 40 (id=658): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 3m30.221346253s ago: executing program 41 (id=663): r0 = syz_open_dev$audion(&(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4, 0xffff, 0x81, 0x693fffd, 0xf0, 0x9, 0x4e}, &(0x7f0000000380)=0x9c) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x2, 0x6, {0x0}, {0xee00}, 0x4, 0x80000000}) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r4 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904ff8000000020000000000000000800040001000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x4) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x0) r8 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000180)=0x3) 53.433595287s ago: executing program 7 (id=896): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) sched_setscheduler(0x0, 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r6, 0x9, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r7 = getpgrp(0x0) mq_open(&(0x7f0000000400)='sched_switch\x00', 0x80, 0x101, &(0x7f0000000480)={0x6, 0xffffffffffffa8f8, 0x8, 0xfffffffffffffffb}) syz_pidfd_open(r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x14, 0x10, 0x4, 0x70bd28, 0x25dfdbfb, {0xa}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000084) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80, 0x3a}, {0x0, 0x0, 0x101, 0x0, 0x0, 0x4, 0xb}, {0x2, 0x800000000008}, 0x4, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x44}, 0x40) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000b"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 53.134265376s ago: executing program 8 (id=898): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000006740)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x5c2e, @mcast1, 0x8001}, 0x80, 0x0}}], 0x1, 0x24064044) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3537, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="ccde1b1a4ca56624e9f99b266b90f34996b5e4b40aaac1b1ddf415caac0b1ee33131327d3473a2fc7ae73d68ebfb412583feed906281a0b736206e9c25b3d437212f7a21a90b8e441fb49a7f7912d5ee000515d6460081e527862d3438b5b8ad211e024938fa4cc6f7936a253069707f8066bf967d63384f775e4980cab242bb0eb03f60b95b2ce1b58c5c98bc6230b574a0e6ab905f327e5ab5444e1ad6c1fc4628b1120b13fea9ff6d64075430c3dc77cae3d043", 0xb5}], 0x1}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x5a89}}}, 0x3a) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="041706aaaaaaaaaa12e54b3fcd443f560eb95ff5f70b2b2bf6ecdf05cceb7d5e7e0046025f2758300b9fdf09adaeef5901457f17aca2fccbf1fa7aaaec57f979171331d77806578f7db21dc0b308a31b95340ec3afde72d05bd07a588540372b7037132e5333e4ff000000"], 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x32600) 51.856505091s ago: executing program 8 (id=905): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 51.677006454s ago: executing program 9 (id=907): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000006740)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x5c2e, @mcast1, 0x8001}, 0x80, 0x0}}], 0x1, 0x24064044) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3537, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="ccde1b1a4ca56624e9f99b266b90f34996b5e4b40aaac1b1ddf415caac0b1ee33131327d3473a2fc7ae73d68ebfb412583feed906281a0b736206e9c25b3d437212f7a21a90b8e441fb49a7f7912d5ee000515d6460081e527862d3438b5b8ad211e024938fa4cc6f7936a253069707f8066bf967d63384f775e4980cab242bb0eb03f60b95b2ce1b58c5c98bc6230b574a0e6ab905f327e5ab5444e1ad6c1fc4628b1120b13fea9ff6d64075430c3dc77cae3d043", 0xb5}], 0x1}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x5a89}}}, 0x3a) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="041706aaaaaaaaaa12e54b3fcd443f560eb95ff5f70b2b2bf6ecdf05cceb7d5e7e0046025f2758300b9fdf09adaeef5901457f17aca2fccbf1fa7aaaec57f979171331d77806578f7db21dc0b308a31b95340ec3afde72d05bd07a588540372b7037132e5333e4ff000000"], 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x32600) 50.240037261s ago: executing program 9 (id=911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x3ff, 0x764, 0x4000d, 0x1, 0x6, 0x7}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$media(0x0, 0x80000000, 0x40) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="60366600f848fe8dd69ec79f1ce5e8c9ce7cf9c42852c556265e48d179cde0902de44468e764", 0x26}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[], 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r6, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20004000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0xe241, 0x100000000, 0xf, 0x80000006}, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) listen(r0, 0x3) socket$inet_smc(0x2b, 0x1, 0x0) 48.614504219s ago: executing program 8 (id=914): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 46.625071224s ago: executing program 0 (id=915): r0 = memfd_create(&(0x7f0000000400)='9\x84\xdf\xa3{.XS|F\a\xa9N\xb8%\x00\n\xf0\x99\xb8\xbdp\xbb\x8bQ/\xaf\x89\x13\xe3V\x1a\xc7\xab\x97|\x9f}=\xa7\x03\x8d\x90\xe9\x10K\xd9L+\xf9\xbcO\b\xf3\xac\xdb\xbb\xbc\xfb3\xe1*\x14\xd3\xe8\xe3\x99\x8c>\xa8M\x96\xf6\xb0\xf8l\x1bn\xaf\xa8\xd0k\xbem\b~\x1bh\xf4-\xe4\x05V\x90\x85e\xf6\x10`\xf3(\xe8\xf4', 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r0, 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/157, 0x200000}, {0x0}], 0x2, 0x20, 0x0, 0x0) 46.579303738s ago: executing program 8 (id=916): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000001, 0x1}}]}]}]}, 0x50}}, 0x0) 46.105793155s ago: executing program 0 (id=918): bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r2 = io_uring_setup(0x31f8, &(0x7f0000000040)={0x0, 0x5d8f, 0x200, 0x2, 0x1}) syz_io_uring_setup(0x41f9, &(0x7f00000000c0)={0x0, 0xe22, 0x1000, 0x2, 0x123, 0x0, r2}, &(0x7f0000000140), &(0x7f0000000180)) listen(r1, 0x3) r3 = accept(r1, &(0x7f0000000240)=@qipcrtr, 0x0) socket(0x9, 0x3, 0x7ff) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000001000000010000009fea906e55947ba8e18b2a9ff5a7e0b057fe5888d46d6d239ddc5e927912"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r0, r5, 0xc, 0x0, 0x0, 0x9, 0x1, 0x457, 0x9, 0x9, 0x1, 0x69, 'syz1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) ptrace(0x10, 0x1) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=""/54, 0x12d000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 45.521269416s ago: executing program 7 (id=920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f00000000c0)) 45.503013382s ago: executing program 8 (id=921): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000006740)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x5c2e, @mcast1, 0x8001}, 0x80, 0x0}}], 0x1, 0x24064044) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3537, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="ccde1b1a4ca56624e9f99b266b90f34996b5e4b40aaac1b1ddf415caac0b1ee33131327d3473a2fc7ae73d68ebfb412583feed906281a0b736206e9c25b3d437212f7a21a90b8e441fb49a7f7912d5ee000515d6460081e527862d3438b5b8ad211e024938fa4cc6f7936a253069707f8066bf967d63384f775e4980cab242bb0eb03f60b95b2ce1b58c5c98bc6230b574a0e6ab905f327e5ab5444e1ad6c1fc4628b1120b13fea9ff6d64075430c3dc77cae3d043", 0xb5}], 0x1}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x5a89}}}, 0x3a) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="041706aaaaaaaaaa12e54b3fcd443f560eb95ff5f70b2b2bf6ecdf05cceb7d5e7e0046025f2758300b9fdf09adaeef5901457f17aca2fccbf1fa7aaaec57f979171331d77806578f7db21dc0b308a31b95340ec3afde72d05bd07a588540372b7037132e5333e4ff000000"], 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x32600) 45.408668743s ago: executing program 6 (id=922): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xe) 45.267015833s ago: executing program 6 (id=923): r0 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='syz', r0) 45.101630144s ago: executing program 9 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32=r0], 0x24}}, 0x0) 44.892081177s ago: executing program 0 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) sched_setscheduler(0x0, 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r6, 0x9, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r7 = getpgrp(0x0) mq_open(&(0x7f0000000400)='sched_switch\x00', 0x80, 0x101, &(0x7f0000000480)={0x6, 0xffffffffffffa8f8, 0x8, 0xfffffffffffffffb}) syz_pidfd_open(r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x14, 0x10, 0x4, 0x70bd28, 0x25dfdbfb, {0xa}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000084) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80, 0x3a}, {0x0, 0x0, 0x101, 0x0, 0x0, 0x4, 0xb}, {0x2, 0x800000000008}, 0x4, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x44}, 0x40) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000b"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 44.640031709s ago: executing program 6 (id=926): ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1ff, 0x1ff}}}, 0x7) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, 0x0) 44.638982442s ago: executing program 9 (id=927): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x123, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 43.246434084s ago: executing program 0 (id=928): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f0000000040), 0x4) 43.245787482s ago: executing program 7 (id=929): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000000200ffff0300000082b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700000000000000000000003e078b4ea9373c73f5f0d747c3d5b253355dc62ee6de97639a2541327d2576f482f67452af6c45419d074aedf0d2074848a66ba8f197463c961664"], 0x40) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000680)={&(0x7f0000001000)={[{&(0x7f0000000040)="9c3ef136e544ea067191ffed0636d1cd50a1f4a700f9dd2b328538a33109b06412e29748b28b77737c3e1b76d808b81fb0b75b65075e2a9469f32673751f88f057d58b44bc14a21d5b7c919562709ae824fc72c7f79e4c474b9ed68281a9a21a8e01747418b8fe13c65ca531b69073e109e23933f894b4eff7d7da4e017911d55a90c7e4a45ce6580e0a384657020db4cacb40baeb330a616e8e5aabc838437f99025cec133f09ec4a56ca449946f585387ea7e52b9574068bc392bf71d95c1fd03e92d31c63510dd8f307a1c929c80c37293e7aa26b936a1a94296ef2b8235ef60a0c1cfd7c", 0xe6}, {&(0x7f0000000140)="36a67c95aa342372951a8025b153b0c126f2356db8039128b411980ae31f8e2bbd8791342fbf9cfd1c35ca163d6e36b49bc210e5704c8b155594a815ad28f01c69", 0x41, 0x3}, {&(0x7f00000001c0)="994489fa22da9ae4dedd5705109886fa7dcaa32036694798bcba80c451f8195ce6e7febff10bfc91e476f0a0bee919b096bf9d989a831c234fb3ce7f90a57f56a98baba66b0cf682a83b77ca71974211dc3bd5e34a3d87adbcb684554334ecd3d272db9c6ca103bc7d40f9eea81d7793e8410d9a3235ed9af41011aa", 0x7c, 0x3}, {&(0x7f0000000240)="8895dc07745a712c15faf511f68ce041c67574fb54d2e4b87fb3cdb4b5a091067317239ea3e906296ffba7354a921e144f93237520b4d0681e9fdce09cbc0a6e8d46101dcfcb865b12246b8a41cf6b545b1e3b8692f4b8fa5b44dc26460f4f03f60303c5f831d1e0832dfd082da450123663446ef1c72662a72fa98966b5a287702f36fe2b46f88116e271fc08451923481c06858af2a0c5af5869aa5cd4ee3591bf5b9e858c77e97dea1c9ee83a020049ff95feba98655af70421be722064b35e8bbdaddd0e91748a20c354328ab1f56c3b955d38017398f76190686467d44c3655c5002e4537963bf0000000000000000000090000000000", 0xf9, 0x2}, {&(0x7f0000000340)="ee0e6828c9a9dc657d64193171dcda9277153b6cee261b0cd1cf60f805f21721053bf9f92ecb108dbe05fb0da39ebb3ee363588f1c108bdd8902e112ca62946995806234f4da5568f5a7243503fff4c6c4b703fb61fac7ac24dcf0ccd97b4d59db2ee5b11aad1ffc5e92e399951c685565c50c97238ec65e714fb402072755fa0dd2152f4ef6c5767904bdc6df546d09c1049bfb49d43c4a29ae1708534897216b6ce44a8aaacaf30907eb64a74f06a498b9b9b23cc3cc8d33c1994225e92d816b84f6", 0xc3, 0x2}, {&(0x7f00000004c0)="b2d4362b81765ac72d81bb03fb1b868ef96f9c8b3513546d7c007f00db70e75eb4d45118b9c6c49111be76506327c65733e6aa771ee5f68154a0ffd506035d39597013a1dde8b96f28320e080fc09d7dd25d3ab38c06de86682de90da543434379c4ddbcbf4f3d63b7e36031e0977a44a277bc245d473739881fc6ca0f7b45004f2f5da5910dfd93fb135071878c2e8b94d0cd3911752776f5bcbd1b68d10e9ff0c16f3000ca699961edb1143274a009348cf308ae13c192896d93bce2d317d7ba786f", 0xc3, 0x2}, {&(0x7f00000005c0)="6c9a7d2791d022bc6b35867b84ae3736dce532330022405cae155535d9733fc0c68a8d368d72b40d80a0f2d443119c3928ecf27a", 0x34, 0x3}, {&(0x7f0000000600)="04a899440820c6fd52e31d8a70b6e870a5838bb5c4f79be284b62936de7808c41afeb90365395f44b87e761cfabc1a4a3f98b985b2d26c36ee0863e19ef38939c6ad4d5ccf582bab0738dfbd90e7a42f6cc31f283a803a48f762fbe4889e6439be9ab07ed8d7fddf2f58", 0x6a}]}, 0x8, 0x3}, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') mkdir(&(0x7f00000002c0)='./bus\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x150) mknodat$loop(r2, &(0x7f0000000040)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$dsp(0xffffffffffffffff, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x8008af26, &(0x7f0000000680)) linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) pread64(r1, &(0x7f00000008c0)=""/249, 0xf9, 0x2) ioctl$COMEDI_SETWSUBD(r0, 0x6411) unshare(0x2c020400) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) 43.070104015s ago: executing program 8 (id=930): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) sched_setscheduler(0x0, 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r6, 0x9, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r7 = getpgrp(0x0) mq_open(&(0x7f0000000400)='sched_switch\x00', 0x80, 0x101, &(0x7f0000000480)={0x6, 0xffffffffffffa8f8, 0x8, 0xfffffffffffffffb}) syz_pidfd_open(r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x14, 0x10, 0x4, 0x70bd28, 0x25dfdbfb, {0xa}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000084) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80, 0x3a}, {0x0, 0x0, 0x101, 0x0, 0x0, 0x4, 0xb}, {0x2, 0x800000000008}, 0x4, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x44}, 0x40) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000b"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 42.265628834s ago: executing program 6 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb90}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x21, 0x4, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000000a0a01ff"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb5}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x33, 0x48000000}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r8, &(0x7f00000012c0)="a5", 0x1) 41.967681823s ago: executing program 9 (id=932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0xe, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0xb, "0000002d240c0378cf"}, @window={0x3, 0x3, 0x9}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}, @sack={0x5, 0x2}, @timestamp={0x8, 0xa, 0x8, 0xffffffff}]}}}}}}}, 0x0) 41.947094627s ago: executing program 0 (id=933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x22283, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f00000006c0)={0xdb, 0x0, 0x3}) 40.906950496s ago: executing program 6 (id=934): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4048aec9, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x20000000}) 40.662278551s ago: executing program 7 (id=935): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x10, 0x3a, 0x0, @remote, @local, {[], @ni={0x8b, 0x0, 0x0, 0x7, 0x7e20, 0x200000080}}}}}}, 0x0) 40.652666432s ago: executing program 9 (id=936): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000380)={0x281, 0x1}) 40.437019733s ago: executing program 0 (id=937): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20bc, 0x5500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x9, "b3bba036"}]}}, 0x0}, 0x0) 40.366215495s ago: executing program 6 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) sched_setscheduler(0x0, 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r6, 0x9, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r7 = getpgrp(0x0) mq_open(&(0x7f0000000400)='sched_switch\x00', 0x80, 0x101, &(0x7f0000000480)={0x6, 0xffffffffffffa8f8, 0x8, 0xfffffffffffffffb}) syz_pidfd_open(r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x14, 0x10, 0x4, 0x70bd28, 0x25dfdbfb, {0xa}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000084) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80, 0x3a}, {0x0, 0x0, 0x101, 0x0, 0x0, 0x4, 0xb}, {0x2, 0x800000000008}, 0x4, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x44}, 0x40) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000b"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 40.281895325s ago: executing program 7 (id=939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 32.497095986s ago: executing program 7 (id=940): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000006740)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x5c2e, @mcast1, 0x8001}, 0x80, 0x0}}], 0x1, 0x24064044) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3537, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="ccde1b1a4ca56624e9f99b266b90f34996b5e4b40aaac1b1ddf415caac0b1ee33131327d3473a2fc7ae73d68ebfb412583feed906281a0b736206e9c25b3d437212f7a21a90b8e441fb49a7f7912d5ee000515d6460081e527862d3438b5b8ad211e024938fa4cc6f7936a253069707f8066bf967d63384f775e4980cab242bb0eb03f60b95b2ce1b58c5c98bc6230b574a0e6ab905f327e5ab5444e1ad6c1fc4628b1120b13fea9ff6d64075430c3dc77cae3d043", 0xb5}], 0x1}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x5a89}}}, 0x3a) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="041706aaaaaaaaaa12e54b3fcd443f560eb95ff5f70b2b2bf6ecdf05cceb7d5e7e0046025f2758300b9fdf09adaeef5901457f17aca2fccbf1fa7aaaec57f979171331d77806578f7db21dc0b308a31b95340ec3afde72d05bd07a588540372b7037132e5333e4ff000000"], 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x32600) 2.935228112s ago: executing program 42 (id=936): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000380)={0x281, 0x1}) 1.225633187s ago: executing program 43 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) sched_setscheduler(0x0, 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r6, 0x9, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r7 = getpgrp(0x0) mq_open(&(0x7f0000000400)='sched_switch\x00', 0x80, 0x101, &(0x7f0000000480)={0x6, 0xffffffffffffa8f8, 0x8, 0xfffffffffffffffb}) syz_pidfd_open(r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x14, 0x10, 0x4, 0x70bd28, 0x25dfdbfb, {0xa}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000084) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80, 0x3a}, {0x0, 0x0, 0x101, 0x0, 0x0, 0x4, 0xb}, {0x2, 0x800000000008}, 0x4, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x44}, 0x40) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000b"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 805.65479ms ago: executing program 44 (id=930): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) sched_setscheduler(0x0, 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r6, 0x9, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r7 = getpgrp(0x0) mq_open(&(0x7f0000000400)='sched_switch\x00', 0x80, 0x101, &(0x7f0000000480)={0x6, 0xffffffffffffa8f8, 0x8, 0xfffffffffffffffb}) syz_pidfd_open(r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x14, 0x10, 0x4, 0x70bd28, 0x25dfdbfb, {0xa}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000084) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80, 0x3a}, {0x0, 0x0, 0x101, 0x0, 0x0, 0x4, 0xb}, {0x2, 0x800000000008}, 0x4, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x44}, 0x40) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000b"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 338.564775ms ago: executing program 45 (id=937): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20bc, 0x5500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x9, "b3bba036"}]}}, 0x0}, 0x0) 0s ago: executing program 46 (id=940): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000006740)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x5c2e, @mcast1, 0x8001}, 0x80, 0x0}}], 0x1, 0x24064044) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3537, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="ccde1b1a4ca56624e9f99b266b90f34996b5e4b40aaac1b1ddf415caac0b1ee33131327d3473a2fc7ae73d68ebfb412583feed906281a0b736206e9c25b3d437212f7a21a90b8e441fb49a7f7912d5ee000515d6460081e527862d3438b5b8ad211e024938fa4cc6f7936a253069707f8066bf967d63384f775e4980cab242bb0eb03f60b95b2ce1b58c5c98bc6230b574a0e6ab905f327e5ab5444e1ad6c1fc4628b1120b13fea9ff6d64075430c3dc77cae3d043", 0xb5}], 0x1}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x5a89}}}, 0x3a) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="041706aaaaaaaaaa12e54b3fcd443f560eb95ff5f70b2b2bf6ecdf05cceb7d5e7e0046025f2758300b9fdf09adaeef5901457f17aca2fccbf1fa7aaaec57f979171331d77806578f7db21dc0b308a31b95340ec3afde72d05bd07a588540372b7037132e5333e4ff000000"], 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x32600) kernel console output (not intermixed with test programs): handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.338421][ T9149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.464828][ T9142] hsr_slave_0: entered promiscuous mode [ 854.466188][ T9142] hsr_slave_1: entered promiscuous mode [ 854.473143][ T9142] debugfs: 'hsr0' already exists in 'hsr' [ 854.473171][ T9142] Cannot create hsr debugfs directory [ 854.559112][ T9149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.559130][ T9149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.559170][ T9149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.526047][ T9147] hsr_slave_0: entered promiscuous mode [ 855.540607][ T9147] hsr_slave_1: entered promiscuous mode [ 855.550956][ T9147] debugfs: 'hsr0' already exists in 'hsr' [ 855.551039][ T9147] Cannot create hsr debugfs directory [ 855.596835][ T9225] chnl_net:caif_netlink_parms(): no params data found [ 858.460219][ T9149] hsr_slave_0: entered promiscuous mode [ 858.461702][ T9149] hsr_slave_1: entered promiscuous mode [ 858.462676][ T9149] debugfs: 'hsr0' already exists in 'hsr' [ 858.462700][ T9149] Cannot create hsr debugfs directory [ 862.687217][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 863.058312][ T9225] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.058456][ T9225] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.058727][ T9225] bridge_slave_0: entered allmulticast mode [ 863.062067][ T9225] bridge_slave_0: entered promiscuous mode [ 863.125250][ T9225] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.125466][ T9225] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.125684][ T9225] bridge_slave_1: entered allmulticast mode [ 863.128719][ T9225] bridge_slave_1: entered promiscuous mode [ 863.572136][ T9225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.686097][ T9225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.339452][ T9225] team0: Port device team_slave_0 added [ 864.372931][ T9225] team0: Port device team_slave_1 added [ 864.759388][ T9225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.759407][ T9225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.759438][ T9225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.766249][ T9225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.766266][ T9225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.766295][ T9225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.061976][ T6023] bridge_slave_1: left allmulticast mode [ 865.062010][ T6023] bridge_slave_1: left promiscuous mode [ 865.062274][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.313552][ T6023] bridge_slave_0: left allmulticast mode [ 865.313586][ T6023] bridge_slave_0: left promiscuous mode [ 865.313829][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.402270][ T6023] bridge_slave_1: left allmulticast mode [ 865.402307][ T6023] bridge_slave_1: left promiscuous mode [ 865.402580][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.463801][ T6023] bridge_slave_0: left allmulticast mode [ 865.463837][ T6023] bridge_slave_0: left promiscuous mode [ 865.464107][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.530601][ T6023] bridge_slave_1: left allmulticast mode [ 865.530628][ T6023] bridge_slave_1: left promiscuous mode [ 865.530824][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.601677][ T6023] bridge_slave_0: left allmulticast mode [ 865.601701][ T6023] bridge_slave_0: left promiscuous mode [ 865.601876][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.690999][ T6023] bridge_slave_1: left allmulticast mode [ 865.691030][ T6023] bridge_slave_1: left promiscuous mode [ 865.691270][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.762148][ T6023] bridge_slave_0: left allmulticast mode [ 865.762173][ T6023] bridge_slave_0: left promiscuous mode [ 865.762391][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.838733][ T6023] bridge_slave_1: left allmulticast mode [ 865.838758][ T6023] bridge_slave_1: left promiscuous mode [ 865.838976][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.912188][ T6023] bridge_slave_0: left allmulticast mode [ 865.912219][ T6023] bridge_slave_0: left promiscuous mode [ 865.912493][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.286095][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.371246][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.439165][ T6023] bond0 (unregistering): Released all slaves [ 866.745542][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.831143][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.903037][ T6023] bond0 (unregistering): Released all slaves [ 867.226765][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.313598][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.381621][ T6023] bond0 (unregistering): Released all slaves [ 867.718420][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.805351][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.881834][ T6023] bond0 (unregistering): Released all slaves [ 868.148426][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.295691][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.374120][ T6023] bond0 (unregistering): Released all slaves [ 868.456833][ T9225] hsr_slave_0: entered promiscuous mode [ 868.466312][ T9225] hsr_slave_1: entered promiscuous mode [ 868.467300][ T9225] debugfs: 'hsr0' already exists in 'hsr' [ 868.467321][ T9225] Cannot create hsr debugfs directory [ 868.874786][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 868.885443][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 868.893711][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 868.907451][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 868.908904][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 869.779116][ T9351] lo speed is unknown, defaulting to 1000 [ 869.973450][ T6023] hsr_slave_0: left promiscuous mode [ 870.005504][ T6023] hsr_slave_1: left promiscuous mode [ 870.006589][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.049117][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.163476][ T6023] hsr_slave_0: left promiscuous mode [ 870.178308][ T6023] hsr_slave_1: left promiscuous mode [ 870.180515][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.230778][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.379603][ T6023] hsr_slave_0: left promiscuous mode [ 870.424325][ T6023] hsr_slave_1: left promiscuous mode [ 870.426266][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.466011][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.649327][ T6023] hsr_slave_0: left promiscuous mode [ 870.689794][ T6023] hsr_slave_1: left promiscuous mode [ 870.690776][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.744325][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.786896][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.829543][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.041785][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 871.064701][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 871.066266][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 871.074636][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 871.085808][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 871.107402][ T59] Bluetooth: hci1: command tx timeout [ 871.709178][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 871.725431][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 871.736319][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 871.744393][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 871.745224][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 872.131350][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 872.306165][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 873.338641][ T5153] Bluetooth: hci6: command tx timeout [ 873.340774][ T5153] Bluetooth: hci1: command tx timeout [ 873.673866][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 873.833603][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 873.937952][ T5153] Bluetooth: hci7: command tx timeout [ 875.265932][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 875.447997][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 875.553679][ T5153] Bluetooth: hci1: command tx timeout [ 875.553716][ T5153] Bluetooth: hci6: command tx timeout [ 876.153834][ T59] Bluetooth: hci7: command tx timeout [ 876.930824][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 877.072691][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 877.777466][ T59] Bluetooth: hci6: command tx timeout [ 877.777502][ T59] Bluetooth: hci1: command tx timeout [ 878.002531][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 878.120227][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 878.376120][ T5153] Bluetooth: hci7: command tx timeout [ 879.359722][ T9357] lo speed is unknown, defaulting to 1000 [ 879.463329][ T9360] lo speed is unknown, defaulting to 1000 [ 880.009932][ T5153] Bluetooth: hci6: command tx timeout [ 880.599725][ T5153] Bluetooth: hci7: command tx timeout [ 881.402930][ T9351] chnl_net:caif_netlink_parms(): no params data found [ 881.971856][ T9357] chnl_net:caif_netlink_parms(): no params data found [ 881.981982][ T9360] chnl_net:caif_netlink_parms(): no params data found [ 882.935691][ T9225] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 882.989022][ T9351] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.989255][ T9351] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.989485][ T9351] bridge_slave_0: entered allmulticast mode [ 882.992445][ T9351] bridge_slave_0: entered promiscuous mode [ 883.056959][ T9225] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 883.109988][ T9351] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.110158][ T9351] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.110396][ T9351] bridge_slave_1: entered allmulticast mode [ 883.138987][ T9351] bridge_slave_1: entered promiscuous mode [ 883.286078][ T9225] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 883.641747][ T9225] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 883.904865][ T9357] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.905093][ T9357] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.905333][ T9357] bridge_slave_0: entered allmulticast mode [ 883.907394][ T9357] bridge_slave_0: entered promiscuous mode [ 883.911064][ T9360] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.911159][ T9360] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.911318][ T9360] bridge_slave_0: entered allmulticast mode [ 883.913276][ T9360] bridge_slave_0: entered promiscuous mode [ 883.969633][ T9351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.970879][ T9357] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.970993][ T9357] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.971192][ T9357] bridge_slave_1: entered allmulticast mode [ 883.973489][ T9357] bridge_slave_1: entered promiscuous mode [ 884.054068][ T9360] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.054220][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.054481][ T9360] bridge_slave_1: entered allmulticast mode [ 884.057651][ T9360] bridge_slave_1: entered promiscuous mode [ 884.062281][ T9351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.911659][ T9357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.932598][ T9360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.935629][ T9351] team0: Port device team_slave_0 added [ 884.957436][ T9357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.976226][ T9351] team0: Port device team_slave_1 added [ 884.980556][ T9360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.735904][ T9357] team0: Port device team_slave_0 added [ 885.748678][ T9351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.748696][ T9351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.748726][ T9351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.764067][ T9360] team0: Port device team_slave_0 added [ 885.770277][ T9357] team0: Port device team_slave_1 added [ 885.776207][ T9351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.776229][ T9351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.776261][ T9351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.779754][ T9360] team0: Port device team_slave_1 added [ 886.237818][ T9357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.237837][ T9357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.237868][ T9357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.248912][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.248934][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.248971][ T9360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.434169][ T9357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.434182][ T9357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.434201][ T9357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.448755][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.448777][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.448812][ T9360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.673681][ T9351] hsr_slave_0: entered promiscuous mode [ 886.675148][ T9351] hsr_slave_1: entered promiscuous mode [ 887.233696][ T9357] hsr_slave_0: entered promiscuous mode [ 887.235186][ T9357] hsr_slave_1: entered promiscuous mode [ 887.236175][ T9357] debugfs: 'hsr0' already exists in 'hsr' [ 887.236200][ T9357] Cannot create hsr debugfs directory [ 887.285508][ T9360] hsr_slave_0: entered promiscuous mode [ 887.287026][ T9360] hsr_slave_1: entered promiscuous mode [ 887.288084][ T9360] debugfs: 'hsr0' already exists in 'hsr' [ 887.288108][ T9360] Cannot create hsr debugfs directory [ 889.455525][ T9225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.670987][ T9225] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.680185][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.681998][ T6433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.734772][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.734926][ T6433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.093893][ T6023] bridge_slave_1: left allmulticast mode [ 890.093923][ T6023] bridge_slave_1: left promiscuous mode [ 890.095134][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.171505][ T6023] bridge_slave_0: left allmulticast mode [ 890.171541][ T6023] bridge_slave_0: left promiscuous mode [ 890.171837][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.237843][ T6023] bridge_slave_1: left allmulticast mode [ 890.237879][ T6023] bridge_slave_1: left promiscuous mode [ 890.238169][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.319341][ T6023] bridge_slave_0: left allmulticast mode [ 890.319377][ T6023] bridge_slave_0: left promiscuous mode [ 890.319696][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.397157][ T6023] bridge_slave_1: left allmulticast mode [ 890.397200][ T6023] bridge_slave_1: left promiscuous mode [ 890.397468][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.469154][ T6023] bridge_slave_0: left allmulticast mode [ 890.469191][ T6023] bridge_slave_0: left promiscuous mode [ 890.469476][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.922020][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.035731][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.113092][ T6023] bond0 (unregistering): Released all slaves [ 891.383175][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.462367][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.528490][ T6023] bond0 (unregistering): Released all slaves [ 891.836539][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.923521][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.990719][ T6023] bond0 (unregistering): Released all slaves [ 892.979534][ T6023] hsr_slave_0: left promiscuous mode [ 893.022151][ T6023] hsr_slave_1: left promiscuous mode [ 893.023170][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.058337][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.236186][ T6023] hsr_slave_0: left promiscuous mode [ 893.262816][ T6023] hsr_slave_1: left promiscuous mode [ 893.263877][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.301174][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.449874][ T6023] hsr_slave_0: left promiscuous mode [ 893.492740][ T6023] hsr_slave_1: left promiscuous mode [ 893.493803][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.527176][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.412511][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 894.577397][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 895.943998][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 896.101971][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 897.494656][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 897.653809][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 898.935349][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 898.938904][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 898.967757][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 898.970671][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 898.973321][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 899.211815][ T9398] lo speed is unknown, defaulting to 1000 [ 899.966484][ T9351] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 900.067418][ T9351] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 900.234856][ T9351] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 900.327104][ T9351] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 900.749632][ T9360] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 900.838505][ T9360] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 900.928150][ T9360] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 901.044239][ T9360] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 901.091282][ T9398] chnl_net:caif_netlink_parms(): no params data found [ 901.126561][ T5153] Bluetooth: hci0: command tx timeout [ 901.701256][ T9357] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 901.950152][ T9357] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 902.132586][ T9357] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 902.184189][ T9398] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.184411][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.184630][ T9398] bridge_slave_0: entered allmulticast mode [ 902.187601][ T9398] bridge_slave_0: entered promiscuous mode [ 902.230861][ T9357] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 902.287294][ T9398] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.287455][ T9398] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.287677][ T9398] bridge_slave_1: entered allmulticast mode [ 902.290634][ T9398] bridge_slave_1: entered promiscuous mode [ 902.608644][ T9398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.646700][ T9398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.026344][ T9398] team0: Port device team_slave_0 added [ 903.038722][ T9398] team0: Port device team_slave_1 added [ 903.349773][ T5153] Bluetooth: hci0: command tx timeout [ 903.494885][ T9398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.494903][ T9398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.494933][ T9398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.682046][ T9398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.682064][ T9398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.682094][ T9398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.760911][ T9398] hsr_slave_0: entered promiscuous mode [ 904.762305][ T9398] hsr_slave_1: entered promiscuous mode [ 904.763278][ T9398] debugfs: 'hsr0' already exists in 'hsr' [ 904.763302][ T9398] Cannot create hsr debugfs directory [ 904.773244][ T9351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.573118][ T5153] Bluetooth: hci0: command tx timeout [ 905.838813][ T9351] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.946611][ T9360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.125560][ T8264] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.125863][ T8264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.376264][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.376484][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.611262][ T9360] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.657930][ T9357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.716541][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.719117][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.951549][ T6023] bridge_slave_1: left allmulticast mode [ 906.951595][ T6023] bridge_slave_1: left promiscuous mode [ 906.953373][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.042726][ T6023] bridge_slave_0: left allmulticast mode [ 907.042763][ T6023] bridge_slave_0: left promiscuous mode [ 907.043071][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.818037][ T5153] Bluetooth: hci0: command tx timeout [ 909.087847][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.144508][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.190256][ T6023] bond0 (unregistering): Released all slaves [ 909.415581][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.415791][ T6433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.645678][ T6023] hsr_slave_0: left promiscuous mode [ 909.656767][ T6023] hsr_slave_1: left promiscuous mode [ 909.657713][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.689858][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.549868][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 911.818443][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 914.481316][ T9357] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.522814][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.523064][ T6086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.720879][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.721035][ T6433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.596979][ T9351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.841074][ T9398] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 915.997241][ T9398] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 916.108210][ T9398] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 916.200552][ T9398] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 916.499609][ T9360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.547437][ T9357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.963314][ T9360] veth0_vlan: entered promiscuous mode [ 917.017307][ T9351] veth0_vlan: entered promiscuous mode [ 917.044232][ T9357] veth0_vlan: entered promiscuous mode [ 917.080266][ T9360] veth1_vlan: entered promiscuous mode [ 917.111058][ T9351] veth1_vlan: entered promiscuous mode [ 917.125785][ T9357] veth1_vlan: entered promiscuous mode [ 917.227934][ T9398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.388727][ T9398] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.429559][ T9351] veth0_macvtap: entered promiscuous mode [ 917.434414][ T9360] veth0_macvtap: entered promiscuous mode [ 917.483740][ T9357] veth0_macvtap: entered promiscuous mode [ 917.498513][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.498689][ T6086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.509850][ T9351] veth1_macvtap: entered promiscuous mode [ 917.526192][ T9360] veth1_macvtap: entered promiscuous mode [ 917.546000][ T9357] veth1_macvtap: entered promiscuous mode [ 917.565082][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.565227][ T6086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.703285][ T9351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.712756][ T9360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.761778][ T9357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.763668][ T9351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.775162][ T9360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.823854][ T9357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.860050][ T6023] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.865002][ T6023] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.893124][ T6023] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.933164][ T6023] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.938479][ T6023] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.949733][ T6023] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.019517][ T6023] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.058019][ T6023] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.072250][ T6023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.132115][ T6023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.303949][ T6250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.337157][ T6250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.874936][ T8391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.874956][ T8391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.980219][ T8264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.980239][ T8264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.095999][ T6086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.096018][ T6086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.227714][ T8391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.227738][ T8391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.455077][ T6250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.455101][ T6250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.683510][ T9678] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 921.093484][ T9398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.158501][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.158526][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.616793][ T9703] netlink: 'syz.9.471': attribute type 14 has an invalid length. [ 923.648239][ T9710] overlayfs: missing 'lowerdir' [ 924.035651][ T5902] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 924.196985][ T5902] usb 10-1: Using ep0 maxpacket: 16 [ 924.212728][ T5902] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.212747][ T5902] usb 10-1: config 0 has no interfaces? [ 924.212770][ T5902] usb 10-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 924.212787][ T5902] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.272879][ T5902] usb 10-1: config 0 descriptor?? [ 924.549499][ T9722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 927.060588][ T5902] usb 10-1: USB disconnect, device number 2 [ 927.922536][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 929.093484][ T5153] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 929.093512][ T5153] CPU: 0 UID: 0 PID: 5153 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 929.093535][ T5153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 929.093550][ T5153] Workqueue: hci1 hci_rx_work [ 929.093576][ T5153] Call Trace: [ 929.093584][ T5153] [ 929.093593][ T5153] dump_stack_lvl+0x189/0x250 [ 929.093630][ T5153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 929.093662][ T5153] ? __pfx__printk+0x10/0x10 [ 929.093690][ T5153] ? kernfs_path_from_node+0x2c/0x280 [ 929.093710][ T5153] ? kernfs_path_from_node+0x243/0x280 [ 929.093729][ T5153] ? kernfs_path_from_node+0x2c/0x280 [ 929.093764][ T5153] sysfs_create_dir_ns+0x259/0x280 [ 929.093809][ T5153] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 929.093833][ T5153] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 929.093867][ T5153] ? rt_spin_unlock+0x65/0x80 [ 929.093894][ T5153] kobject_add_internal+0x5a5/0xb50 [ 929.093933][ T5153] kobject_add+0x155/0x220 [ 929.093967][ T5153] ? __pfx_kobject_add+0x10/0x10 [ 929.094004][ T5153] ? get_device_parent+0x370/0x3a0 [ 929.094039][ T5153] device_add+0x408/0xb50 [ 929.094073][ T5153] hci_conn_add_sysfs+0xd5/0x1e0 [ 929.094124][ T5153] le_conn_complete_evt+0xc3a/0x1220 [ 929.094167][ T5153] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 929.094214][ T5153] hci_le_conn_complete_evt+0x187/0x450 [ 929.094249][ T5153] hci_event_packet+0x78f/0x1200 [ 929.094287][ T5153] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 929.094317][ T5153] ? __pfx_hci_event_packet+0x10/0x10 [ 929.094351][ T5153] ? __pfx_migrate_enable+0x10/0x10 [ 929.094387][ T5153] ? hci_send_to_monitor+0xe2/0x570 [ 929.094418][ T5153] hci_rx_work+0x46a/0xe80 [ 929.094448][ T5153] ? process_scheduled_works+0x9ef/0x17b0 [ 929.094478][ T5153] process_scheduled_works+0xade/0x17b0 [ 929.094537][ T5153] ? __pfx_process_scheduled_works+0x10/0x10 [ 929.094584][ T5153] worker_thread+0x8a0/0xda0 [ 929.094640][ T5153] kthread+0x711/0x8a0 [ 929.094675][ T5153] ? __pfx_worker_thread+0x10/0x10 [ 929.094702][ T5153] ? __pfx_kthread+0x10/0x10 [ 929.094741][ T5153] ? __pfx_kthread+0x10/0x10 [ 929.094784][ T5153] ret_from_fork+0x3fc/0x770 [ 929.094818][ T5153] ? __pfx_ret_from_fork+0x10/0x10 [ 929.094852][ T5153] ? __switch_to_asm+0x39/0x70 [ 929.094873][ T5153] ? __switch_to_asm+0x33/0x70 [ 929.094891][ T5153] ? __pfx_kthread+0x10/0x10 [ 929.094925][ T5153] ret_from_fork_asm+0x1a/0x30 [ 929.094965][ T5153] [ 929.097922][ T5153] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 929.097971][ T5153] Bluetooth: hci1: failed to register connection device [ 929.596413][ T9398] veth0_vlan: entered promiscuous mode [ 929.651803][ T9398] veth1_vlan: entered promiscuous mode [ 930.836648][ T38] audit: type=1326 audit(1756178389.224:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9742 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a7abebe9 code=0x7ffc0000 [ 930.836718][ T38] audit: type=1326 audit(1756178389.233:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9742 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a7abebe9 code=0x7ffc0000 [ 930.836818][ T38] audit: type=1326 audit(1756178389.233:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9742 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fb4a7abebe9 code=0x7ffc0000 [ 930.836936][ T38] audit: type=1326 audit(1756178389.242:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9742 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a7abebe9 code=0x7ffc0000 [ 930.837042][ T38] audit: type=1326 audit(1756178389.242:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9742 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a7abebe9 code=0x7ffc0000 [ 930.837182][ T38] audit: type=1326 audit(1756178389.242:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9742 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb4a7abebe9 code=0x7ffc0000 [ 930.837427][ T38] audit: type=1326 audit(1756178389.252:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9742 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a7abebe9 code=0x7ffc0000 [ 930.837524][ T38] audit: type=1326 audit(1756178389.252:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9742 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a7abebe9 code=0x7ffc0000 [ 930.837739][ T38] audit: type=1326 audit(1756178389.252:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9742 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fb4a7abebe9 code=0x7ffc0000 [ 930.837868][ T38] audit: type=1326 audit(1756178389.261:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9742 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a7abebe9 code=0x7ffc0000 [ 931.343598][ C1] vkms_vblank_simulate: vblank timer overrun [ 932.525676][ T9398] veth0_macvtap: entered promiscuous mode [ 933.033562][ T9398] veth1_macvtap: entered promiscuous mode [ 934.073289][ C1] vkms_vblank_simulate: vblank timer overrun [ 934.247938][ T9398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.334803][ T9398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.679199][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 935.724268][ T6334] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.792756][ T6334] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.792893][ T6334] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.792951][ T6334] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.298626][ T5902] kernel write not supported for file /1169/attr/sockcreate (pid: 5902 comm: kworker/1:3) [ 939.506982][ T9779] netlink: 116 bytes leftover after parsing attributes in process `syz.3.568'. [ 941.728566][ T5928] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 942.404705][ T5928] usb 10-1: config 1 interface 0 has no altsetting 0 [ 942.862863][ T8391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.862885][ T8391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.089726][ T5928] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 943.089748][ T5928] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.102240][ T5928] usb 10-1: can't set config #1, error -71 [ 943.104807][ T5928] usb 10-1: USB disconnect, device number 3 [ 943.201379][ T9807] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 943.201400][ T9807] netlink: 224 bytes leftover after parsing attributes in process `syz.3.573'. [ 943.398353][ T8391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.398374][ T8391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.226271][ T9826] netlink: 28 bytes leftover after parsing attributes in process `syz.9.576'. [ 946.226305][ T9826] netlink: 28 bytes leftover after parsing attributes in process `syz.9.576'. [ 946.963909][ T9830] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 948.988369][ T6100] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 949.790854][ C1] vkms_vblank_simulate: vblank timer overrun [ 950.345651][ C1] vkms_vblank_simulate: vblank timer overrun [ 950.946393][ T9849] syz.1.580 (9849) used greatest stack depth: 15160 bytes left [ 950.949578][ C1] vkms_vblank_simulate: vblank timer overrun [ 951.196426][ C1] vkms_vblank_simulate: vblank timer overrun [ 952.243514][ C1] vkms_vblank_simulate: vblank timer overrun [ 955.441024][ C0] vkms_vblank_simulate: vblank timer overrun [ 955.984058][ T9866] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present [ 955.990044][ T9866] autofs: Bad value for 'fd' [ 956.014689][ C0] vkms_vblank_simulate: vblank timer overrun [ 956.234798][ C0] vkms_vblank_simulate: vblank timer overrun [ 956.678934][ C0] vkms_vblank_simulate: vblank timer overrun [ 957.277471][ C0] vkms_vblank_simulate: vblank timer overrun [ 957.332376][ C0] vkms_vblank_simulate: vblank timer overrun [ 958.801185][ C0] vkms_vblank_simulate: vblank timer overrun [ 959.119260][ C0] vkms_vblank_simulate: vblank timer overrun [ 960.685344][ C0] vkms_vblank_simulate: vblank timer overrun [ 961.716760][ C0] vkms_vblank_simulate: vblank timer overrun [ 961.871536][ C0] vkms_vblank_simulate: vblank timer overrun [ 962.392557][ C0] vkms_vblank_simulate: vblank timer overrun [ 962.589876][ C0] vkms_vblank_simulate: vblank timer overrun [ 962.772011][ C0] vkms_vblank_simulate: vblank timer overrun [ 965.719508][ C0] vkms_vblank_simulate: vblank timer overrun [ 965.890045][ C0] vkms_vblank_simulate: vblank timer overrun [ 965.946686][ T9931] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 965.946728][ T9931] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 966.087161][ C0] vkms_vblank_simulate: vblank timer overrun [ 966.584831][ C0] vkms_vblank_simulate: vblank timer overrun [ 966.678814][ C0] vkms_vblank_simulate: vblank timer overrun [ 966.793358][ C0] vkms_vblank_simulate: vblank timer overrun [ 966.891646][ C0] vkms_vblank_simulate: vblank timer overrun [ 968.108202][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 968.383314][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.9.594'. [ 969.004697][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.8.592'. [ 970.221870][ T9931] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 970.221888][ T9931] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 970.225770][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.9.594'. [ 970.476815][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.9.594'. [ 971.349996][ T9931] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 971.350020][ T9931] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 973.565207][ T59] Bluetooth: hci7: command tx timeout [ 981.129569][ T9931] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 981.129596][ T9931] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 985.492107][ T9993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.499167][ T9993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 987.761672][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 987.784120][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 987.786570][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 987.787842][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 987.794847][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 987.801855][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 987.804531][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 987.816181][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 987.822275][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 987.823083][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 990.305070][ T59] Bluetooth: hci2: command tx timeout [ 990.733067][T10023] netlink: 32 bytes leftover after parsing attributes in process `syz.1.608'. [ 992.500363][ T59] Bluetooth: hci2: command tx timeout [ 993.013750][T10043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 993.132166][T10038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 993.600041][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.650231][T10047] tmpfs: Bad value for 'mpol' [ 994.406653][ T6023] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.612188][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 994.612272][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 994.690885][ T59] Bluetooth: hci2: command tx timeout [ 995.548705][ T6023] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.589557][T10011] lo speed is unknown, defaulting to 1000 [ 996.917413][ T59] Bluetooth: hci2: command tx timeout [ 997.271270][ T6023] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.890161][T10094] sctp: failed to load transform for md5: -2 [ 1005.235960][T10114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1005.846554][ T6023] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.941824][T10011] chnl_net:caif_netlink_parms(): no params data found [ 1011.765456][T10148] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1013.141491][T10156] netlink: 'syz.1.632': attribute type 3 has an invalid length. [ 1013.977709][T10169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1016.674628][T10175] netlink: 2384 bytes leftover after parsing attributes in process `syz.8.636'. [ 1017.196248][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'. [ 1017.196277][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'. [ 1020.337378][T10011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.337489][T10011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.337689][T10011] bridge_slave_0: entered allmulticast mode [ 1020.339870][T10011] bridge_slave_0: entered promiscuous mode [ 1020.796765][T10011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.797400][T10011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.797613][T10011] bridge_slave_1: entered allmulticast mode [ 1020.799555][T10011] bridge_slave_1: entered promiscuous mode [ 1020.818079][ T6023] bridge_slave_1: left allmulticast mode [ 1020.818116][ T6023] bridge_slave_1: left promiscuous mode [ 1020.818539][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.877479][T10216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1020.979746][ T9853] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1021.047168][ T6023] bridge_slave_0: left allmulticast mode [ 1021.047194][ T6023] bridge_slave_0: left promiscuous mode [ 1021.047396][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.151643][ T9853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1021.151683][ T9853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1021.154859][ T9853] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1021.154889][ T9853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1021.154909][ T9853] usb 2-1: SerialNumber: syz [ 1021.378039][ T9853] usb 2-1: bad CDC descriptors [ 1021.379234][ T9853] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1021.421510][ T9853] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1021.442162][ T9853] scsi host1: usb-storage 2-1:1.0 [ 1023.144630][T10229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1026.503252][T10247] netlink: 76 bytes leftover after parsing attributes in process `syz.8.645'. [ 1027.433995][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.792459][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.264537][ T6023] bond0 (unregistering): Released all slaves [ 1031.156205][T10257] siw: device registration error -23 [ 1036.423277][ T9853] usb 2-1: USB disconnect, device number 9 [ 1037.468347][T10272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1039.461255][T10282] 9pnet_virtio: no channels available for device syz [ 1042.119160][T10299] program syz.9.656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1044.269175][T10302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1044.495190][T10011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.997522][T10011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.677507][T10308] netlink: 'syz.2.660': attribute type 4 has an invalid length. [ 1045.677576][T10308] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.660'. [ 1048.271712][T10316] block device autoloading is deprecated and will be removed. [ 1048.796838][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 1048.796856][ T38] audit: type=1326 audit(1756178499.713:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.9.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925da3ebe9 code=0x7ffc0000 [ 1048.796922][ T38] audit: type=1326 audit(1756178499.722:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.9.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925da3ebe9 code=0x7ffc0000 [ 1048.796971][ T38] audit: type=1326 audit(1756178499.722:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.9.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f925da3ebe9 code=0x7ffc0000 [ 1048.797019][ T38] audit: type=1326 audit(1756178499.722:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.9.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925da3ebe9 code=0x7ffc0000 [ 1048.797067][ T38] audit: type=1326 audit(1756178499.722:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.9.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925da3ebe9 code=0x7ffc0000 [ 1048.797114][ T38] audit: type=1326 audit(1756178499.722:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.9.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f925da3ebe9 code=0x7ffc0000 [ 1048.797180][ T38] audit: type=1326 audit(1756178499.722:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.9.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925da3ebe9 code=0x7ffc0000 [ 1048.798504][ T38] audit: type=1326 audit(1756178499.722:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.9.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f925da3ebe9 code=0x7ffc0000 [ 1048.798565][ T38] audit: type=1326 audit(1756178499.722:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.9.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925da3ebe9 code=0x7ffc0000 [ 1048.798616][ T38] audit: type=1326 audit(1756178499.722:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.9.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f925da3ebe9 code=0x7ffc0000 [ 1050.369537][ T6023] hsr_slave_0: left promiscuous mode [ 1050.609262][ T6023] hsr_slave_1: left promiscuous mode [ 1050.610269][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.610300][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.992855][T10324] Bluetooth: MGMT ver 1.23 [ 1051.091805][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.091840][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.217081][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1051.247220][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1051.264140][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1051.289069][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1051.295548][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1051.980767][ T9853] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1052.119932][ T9853] usb 3-1: device descriptor read/64, error -71 [ 1052.638129][ T6023] veth1_macvtap: left promiscuous mode [ 1052.638230][ T6023] veth0_macvtap: left promiscuous mode [ 1052.638733][ T6023] veth1_vlan: left promiscuous mode [ 1052.638887][ T6023] veth0_vlan: left promiscuous mode [ 1052.718528][ T9853] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1052.889491][ T9853] usb 3-1: device descriptor read/64, error -71 [ 1053.011214][ T9853] usb usb3-port1: attempt power cycle [ 1053.531344][ T59] Bluetooth: hci4: command tx timeout [ 1053.930120][ T9853] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1055.759770][ T59] Bluetooth: hci4: command tx timeout [ 1056.701480][T10352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1057.788166][T10356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1057.990451][ T59] Bluetooth: hci4: command tx timeout [ 1059.268502][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.653461][ T9853] usb 3-1: device descriptor read/8, error -110 [ 1060.137778][ T9853] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1060.159757][ T9853] usb 3-1: device descriptor read/8, error -32 [ 1060.228993][ T6100] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1060.238794][ T59] Bluetooth: hci4: command tx timeout [ 1060.280515][ T9853] usb usb3-port1: unable to enumerate USB device [ 1060.386395][ T6100] usb 10-1: config 3 has an invalid interface number: 249 but max is 0 [ 1060.386425][ T6100] usb 10-1: config 3 has no interface number 0 [ 1060.386469][ T6100] usb 10-1: config 3 interface 249 has no altsetting 0 [ 1060.390035][ T6100] usb 10-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=8f.c9 [ 1060.390063][ T6100] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.390084][ T6100] usb 10-1: Product: syz [ 1060.390099][ T6100] usb 10-1: Manufacturer: syz [ 1060.390114][ T6100] usb 10-1: SerialNumber: syz [ 1060.746768][ T6100] comedi comedi5: Wrong number of endpoints [ 1060.746795][ T6100] dt9812 10-1:3.249: driver 'dt9812' failed to auto-configure device. [ 1060.792078][ T6100] usb 10-1: USB disconnect, device number 4 [ 1062.778495][ T31] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1063.389162][ T31] usb 9-1: Using ep0 maxpacket: 16 [ 1063.483815][ T31] usb 9-1: config 0 has an invalid interface number: 210 but max is 0 [ 1063.483846][ T31] usb 9-1: config 0 has no interface number 0 [ 1063.524277][ T31] usb 9-1: New USB device found, idVendor=0572, idProduct=1328, bcdDevice=a5.4f [ 1063.524309][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.524330][ T31] usb 9-1: Product: syz [ 1063.524345][ T31] usb 9-1: Manufacturer: syz [ 1063.524359][ T31] usb 9-1: SerialNumber: syz [ 1063.571966][ T31] usb 9-1: config 0 descriptor?? [ 1063.799552][ T6100] usb 9-1: USB disconnect, device number 2 [ 1065.736311][ C0] vkms_vblank_simulate: vblank timer overrun [ 1065.820187][ C0] vkms_vblank_simulate: vblank timer overrun [ 1065.891751][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1065.952753][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1065.967021][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1065.997952][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1066.005362][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1066.287043][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.478541][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.607503][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.625266][ T31] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1066.851511][ T31] usb 10-1: Using ep0 maxpacket: 32 [ 1066.854089][ T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.856429][ T31] usb 10-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1066.856454][ T31] usb 10-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1066.856473][ T31] usb 10-1: Product: syz [ 1066.856487][ T31] usb 10-1: Manufacturer: syz [ 1066.872450][ T31] usb 10-1: config 0 descriptor?? [ 1067.148957][ T5928] usb 10-1: USB disconnect, device number 5 [ 1067.285215][ C0] vkms_vblank_simulate: vblank timer overrun [ 1067.371144][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1067.417558][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1067.426614][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1067.461881][ C0] vkms_vblank_simulate: vblank timer overrun [ 1067.485771][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1067.503947][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1067.605455][ C0] vkms_vblank_simulate: vblank timer overrun [ 1067.724619][ C0] vkms_vblank_simulate: vblank timer overrun [ 1067.838995][T10391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1067.853640][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.018623][T10393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1068.323411][ T59] Bluetooth: hci2: command tx timeout [ 1068.637160][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.784663][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.851147][ T9700] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1068.989693][ C0] vkms_vblank_simulate: vblank timer overrun [ 1069.043207][ T9700] usb 10-1: Using ep0 maxpacket: 32 [ 1069.046134][ T9700] usb 10-1: config 0 has an invalid interface number: 6 but max is 0 [ 1069.046160][ T9700] usb 10-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1069.046191][ T9700] usb 10-1: config 0 has no interface number 1 [ 1069.049469][ T9700] usb 10-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1069.049499][ T9700] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.049517][ T9700] usb 10-1: Product: syz [ 1069.049530][ T9700] usb 10-1: Manufacturer: syz [ 1069.049544][ T9700] usb 10-1: SerialNumber: syz [ 1069.158998][ T9700] usb 10-1: config 0 descriptor?? [ 1069.188203][ C0] vkms_vblank_simulate: vblank timer overrun [ 1069.257475][ T9700] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1069.332149][ C0] vkms_vblank_simulate: vblank timer overrun [ 1069.348655][ T9700] vmk80xx 10-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 1069.404748][ T6100] usb 10-1: USB disconnect, device number 6 [ 1069.407018][ T9853] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1069.574675][ T9853] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1069.574705][ T9853] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1069.613681][ T9853] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1069.613715][ T9853] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.613736][ T9853] usb 9-1: Product: syz [ 1069.613752][ T9853] usb 9-1: Manufacturer: syz [ 1069.613767][ T9853] usb 9-1: SerialNumber: syz [ 1069.644799][ T9853] usb 9-1: config 0 descriptor?? [ 1069.675242][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 1069.716551][ T59] Bluetooth: hci5: command tx timeout [ 1069.776204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1069.934570][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.164943][ T9853] usb 9-1: USB disconnect, device number 3 [ 1070.476048][ T59] Bluetooth: hci2: command tx timeout [ 1071.647590][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 1071.897000][ T9585] udevd[9585]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1071.929473][ T59] Bluetooth: hci5: command tx timeout [ 1072.245388][ T9853] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1072.414075][ T9853] usb 9-1: Using ep0 maxpacket: 16 [ 1072.418060][ T9853] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1072.455499][ T9853] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1072.455531][ T9853] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.455552][ T9853] usb 9-1: Product: syz [ 1072.455567][ T9853] usb 9-1: Manufacturer: syz [ 1072.455582][ T9853] usb 9-1: SerialNumber: syz [ 1072.476499][ T9853] usb 9-1: config 0 descriptor?? [ 1072.582283][ T8161] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1072.656986][ T9853] hub 9-1:0.0: bad descriptor, ignoring hub [ 1072.657025][ T9853] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1072.671846][ T9853] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1072.688541][ T59] Bluetooth: hci2: command tx timeout [ 1072.799590][ T8161] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1072.836723][ T8161] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1072.836759][ T8161] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.836787][ T8161] usb 10-1: Product: syz [ 1072.836804][ T8161] usb 10-1: Manufacturer: syz [ 1072.836820][ T8161] usb 10-1: SerialNumber: syz [ 1072.843510][ T8161] usb 10-1: config 0 descriptor?? [ 1072.865452][ T8161] em28xx 10-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 1072.865491][ T8161] em28xx 10-1:0.0: Device initialization failed. [ 1072.865506][ T8161] em28xx 10-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 1073.072358][ T5831] usb 10-1: USB disconnect, device number 7 [ 1073.411570][ T9853] usb 9-1: USB disconnect, device number 4 [ 1073.806831][ T9739] udevd[9739]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1074.142555][ T59] Bluetooth: hci5: command tx timeout [ 1074.921490][ T59] Bluetooth: hci2: command tx timeout [ 1076.378945][ T59] Bluetooth: hci5: command tx timeout [ 1086.167029][T10429] syz.9.695 (10429): drop_caches: 2 [ 1091.760699][ T5902] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1091.922353][ T5902] usb 10-1: Using ep0 maxpacket: 16 [ 1091.928090][ T5902] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1091.928119][ T5902] usb 10-1: config 0 has no interface number 0 [ 1091.928174][ T5902] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1091.928199][ T5902] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1091.928224][ T5902] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1092.096538][ T5902] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1092.096569][ T5902] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.096588][ T5902] usb 10-1: Product: syz [ 1092.096602][ T5902] usb 10-1: Manufacturer: syz [ 1092.096615][ T5902] usb 10-1: SerialNumber: syz [ 1092.235265][ T5902] usb 10-1: config 0 descriptor?? [ 1092.236703][T10456] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1092.236940][T10456] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1092.466781][ T5902] dm9601 10-1:0.41: probe with driver dm9601 failed with error -71 [ 1092.468172][ T5902] sr9700 10-1:0.41: probe with driver sr9700 failed with error -71 [ 1092.558045][ T5902] usb 10-1: USB disconnect, device number 8 [ 1093.031321][T10463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1094.306369][ T6017] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1094.468037][ T6017] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 1094.468067][ T6017] usb 9-1: config 0 has no interface number 0 [ 1094.468101][ T6017] usb 9-1: config 0 interface 188 has no altsetting 0 [ 1094.468137][ T6017] usb 9-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=dc.ab [ 1094.468161][ T6017] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.509470][ T8199] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1094.667194][ T6017] usb 9-1: config 0 descriptor?? [ 1094.750554][ T6017] ftdi_sio 9-1:0.188: FTDI USB Serial Device converter detected [ 1094.759074][ T8199] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.759142][ T8199] usb 10-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 1094.759171][ T8199] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.823752][ T6017] ftdi_sio ttyUSB0: unknown device type: 0xdcab [ 1094.955773][ T6017] usb 9-1: USB disconnect, device number 5 [ 1095.001259][ T6017] ftdi_sio 9-1:0.188: device disconnected [ 1095.019881][ T8199] usb 10-1: config 0 descriptor?? [ 1095.162527][ T8199] pegasus_notetaker 10-1:0.0: Invalid number of endpoints [ 1095.162573][ T8199] pegasus_notetaker 10-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1095.164713][T10332] lo speed is unknown, defaulting to 1000 [ 1095.305350][ T5928] usb 10-1: USB disconnect, device number 9 [ 1095.849351][T10388] lo speed is unknown, defaulting to 1000 [ 1095.922951][T10379] lo speed is unknown, defaulting to 1000 [ 1096.314843][ T5928] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1096.508030][ T5928] usb 10-1: Using ep0 maxpacket: 16 [ 1096.525437][ T5928] usb 10-1: config 0 has an invalid interface number: 148 but max is 0 [ 1096.525466][ T5928] usb 10-1: config 0 has no interface number 0 [ 1096.525516][ T5928] usb 10-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1096.525557][ T5928] usb 10-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 1096.525582][ T5928] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.591222][ T5928] usb 10-1: config 0 descriptor?? [ 1096.766717][T10457] udevd[10457]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1096.859502][ T6023] bridge_slave_1: left allmulticast mode [ 1096.859537][ T6023] bridge_slave_1: left promiscuous mode [ 1096.859958][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.889102][ T8199] usb 10-1: USB disconnect, device number 10 [ 1096.961958][ T6023] bridge_slave_0: left allmulticast mode [ 1096.961991][ T6023] bridge_slave_0: left promiscuous mode [ 1096.962304][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.895998][T10517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1098.827190][ T8199] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1098.879539][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.987418][ T8199] usb 10-1: Using ep0 maxpacket: 16 [ 1098.991840][ T8199] usb 10-1: config 0 has an invalid interface number: 107 but max is 0 [ 1098.991866][ T8199] usb 10-1: config 0 has no interface number 0 [ 1098.991915][ T8199] usb 10-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 41, changing to 9 [ 1098.991942][ T8199] usb 10-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 16848, setting to 1024 [ 1098.997238][ T8199] usb 10-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1098.997343][ T8199] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1098.997366][ T8199] usb 10-1: Product: syz [ 1098.997381][ T8199] usb 10-1: Manufacturer: syz [ 1098.997394][ T8199] usb 10-1: SerialNumber: syz [ 1099.088091][ T8199] usb 10-1: config 0 descriptor?? [ 1099.092333][ T8199] keyspan 10-1:0.107: Keyspan 4 port adapter converter detected [ 1099.092845][ T8199] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 81 [ 1099.096064][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.158586][ T5928] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1099.160244][ T8199] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 1 [ 1099.206797][ T8199] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1099.221852][ T6023] bond0 (unregistering): Released all slaves [ 1099.233508][ T8199] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 2 [ 1099.270367][ T8199] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1099.291602][ T8199] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 4 [ 1099.332502][ T8199] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1099.339326][ T8199] keyspan 10-1:0.107: found no endpoint descriptor for endpoint 6 [ 1099.342779][ T5928] usb 9-1: Using ep0 maxpacket: 32 [ 1099.345824][ T5928] usb 9-1: config 0 has an invalid interface number: 115 but max is 0 [ 1099.345852][ T5928] usb 9-1: config 0 has no interface number 0 [ 1099.345910][ T5928] usb 9-1: config 0 interface 115 has no altsetting 0 [ 1099.349615][ T5928] usb 9-1: New USB device found, idVendor=03f0, idProduct=3239, bcdDevice=c1.64 [ 1099.349647][ T5928] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.349670][ T5928] usb 9-1: Product: syz [ 1099.349686][ T5928] usb 9-1: Manufacturer: syz [ 1099.349702][ T5928] usb 9-1: SerialNumber: syz [ 1099.507115][ T5928] usb 9-1: config 0 descriptor?? [ 1099.562725][ T5928] pl2303 9-1:0.115: required interrupt-in endpoint missing [ 1099.572769][ T8199] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1099.608230][ T8199] usb 10-1: USB disconnect, device number 11 [ 1099.690182][ T8199] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1099.830952][ T8199] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1099.831776][ T31] usb 9-1: USB disconnect, device number 6 [ 1099.918641][ T8199] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1099.996731][ T8199] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1099.997809][ T8199] keyspan 10-1:0.107: device disconnected [ 1100.471149][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.9.716'. [ 1103.071801][T10332] chnl_net:caif_netlink_parms(): no params data found [ 1103.353810][ C1] vkms_vblank_simulate: vblank timer overrun [ 1103.404809][ C1] vkms_vblank_simulate: vblank timer overrun [ 1103.580791][ C1] vkms_vblank_simulate: vblank timer overrun [ 1104.128143][ C1] vkms_vblank_simulate: vblank timer overrun [ 1104.389945][T10580] program syz.8.722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1104.639141][T10388] chnl_net:caif_netlink_parms(): no params data found [ 1105.428728][ C1] vkms_vblank_simulate: vblank timer overrun [ 1105.913672][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.9.725'. [ 1106.799584][ T5831] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1106.971276][ T5831] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1106.972097][ T5831] usb 9-1: not running at top speed; connect to a high speed hub [ 1106.991634][ T5831] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1107.066410][ T5831] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1107.066444][ T5831] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.066467][ T5831] usb 9-1: Product: syz [ 1107.066483][ T5831] usb 9-1: Manufacturer: syz [ 1107.066498][ T5831] usb 9-1: SerialNumber: syz [ 1107.840595][ T5831] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1107.845179][ T5831] usb 9-1: unit 0 not found! [ 1107.854250][ T5831] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1107.897999][ T5831] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1108.123498][ T5831] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1108.137418][ T5831] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1108.175503][ T5831] usb 9-1: USB disconnect, device number 7 [ 1108.317253][T10457] udevd[10457]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1111.132002][T10622] netlink: 'syz.8.731': attribute type 4 has an invalid length. [ 1111.132027][T10622] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.731'. [ 1111.562995][T10379] chnl_net:caif_netlink_parms(): no params data found [ 1111.634003][T10332] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 1112.395068][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1112.427336][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1112.430536][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1112.464930][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1112.475587][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1112.662412][T10388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.663344][T10388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.663674][T10388] bridge_slave_0: entered allmulticast mode [ 1112.666593][T10388] bridge_slave_0: entered promiscuous mode [ 1112.709934][T10388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.710089][T10388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.710288][T10388] bridge_slave_1: entered allmulticast mode [ 1112.719341][T10388] bridge_slave_1: entered promiscuous mode [ 1113.566565][T10379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.566717][T10379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.566983][T10379] bridge_slave_0: entered allmulticast mode [ 1113.581043][T10379] bridge_slave_0: entered promiscuous mode [ 1113.607805][T10388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.616343][T10379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.616587][T10379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.616853][T10379] bridge_slave_1: entered allmulticast mode [ 1113.629948][T10379] bridge_slave_1: entered promiscuous mode [ 1113.639413][T10388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.681462][ T59] Bluetooth: hci3: command tx timeout [ 1114.784289][ T6023] bond0 (unregistering): Released all slaves [ 1114.851032][T10379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.855613][T10388] team0: Port device team_slave_0 added [ 1114.879693][T10638] lo speed is unknown, defaulting to 1000 [ 1114.891202][T10388] team0: Port device team_slave_1 added [ 1114.916981][T10379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.586219][T10388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.586238][T10388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.586269][T10388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.602092][T10379] team0: Port device team_slave_0 added [ 1115.873927][T10388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.873941][T10388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.873961][T10388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.875995][T10379] team0: Port device team_slave_1 added [ 1116.243722][T10379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.243740][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.243768][T10379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.477036][T10379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.477054][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.510391][T10379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.794637][T10388] hsr_slave_0: entered promiscuous mode [ 1116.796052][T10388] hsr_slave_1: entered promiscuous mode [ 1116.797011][T10388] debugfs: 'hsr0' already exists in 'hsr' [ 1116.797035][T10388] Cannot create hsr debugfs directory [ 1116.909265][ T59] Bluetooth: hci3: command tx timeout [ 1117.219812][T10379] hsr_slave_0: entered promiscuous mode [ 1117.221299][T10379] hsr_slave_1: entered promiscuous mode [ 1117.222282][T10379] debugfs: 'hsr0' already exists in 'hsr' [ 1117.222308][T10379] Cannot create hsr debugfs directory [ 1118.468229][T10638] chnl_net:caif_netlink_parms(): no params data found [ 1119.128681][ T59] Bluetooth: hci3: command tx timeout [ 1119.508793][T10638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.508949][T10638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.509299][T10638] bridge_slave_0: entered allmulticast mode [ 1119.511341][T10638] bridge_slave_0: entered promiscuous mode [ 1119.525710][T10638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.525882][T10638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.526212][T10638] bridge_slave_1: entered allmulticast mode [ 1119.529560][T10638] bridge_slave_1: entered promiscuous mode [ 1120.199894][T10638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.222978][T10638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.506097][T10638] team0: Port device team_slave_0 added [ 1120.530450][T10638] team0: Port device team_slave_1 added [ 1121.028480][T10638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.028494][T10638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.028514][T10638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.030847][T10638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.030859][T10638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.030879][T10638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.365172][ T59] Bluetooth: hci3: command tx timeout [ 1121.567184][T10638] hsr_slave_0: entered promiscuous mode [ 1121.568633][T10638] hsr_slave_1: entered promiscuous mode [ 1121.569637][T10638] debugfs: 'hsr0' already exists in 'hsr' [ 1121.569662][T10638] Cannot create hsr debugfs directory [ 1122.698339][T10388] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1122.738624][T10388] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1122.776191][T10388] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1122.824074][T10388] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1123.080152][T10379] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1123.121858][T10379] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1123.513727][T10379] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1123.560956][T10379] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1124.589266][T10388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.629409][T10388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.673176][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.673411][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.717220][ T6250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.717456][ T6250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.967628][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.448022][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1125.456245][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1125.460801][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1125.475146][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1125.476081][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1125.842556][T10464] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.557378][T10464] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.638467][T10752] lo speed is unknown, defaulting to 1000 [ 1126.671995][T10638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1126.733220][T10638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1126.958071][T10464] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.990484][T10638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1127.044537][T10638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1127.325969][T10464] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.768964][ T59] Bluetooth: hci4: command tx timeout [ 1127.788818][T10388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.178488][T10752] chnl_net:caif_netlink_parms(): no params data found [ 1128.210618][T10464] bridge_slave_1: left allmulticast mode [ 1128.210654][T10464] bridge_slave_1: left promiscuous mode [ 1128.210928][T10464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.283268][T10464] bridge_slave_0: left allmulticast mode [ 1128.283310][T10464] bridge_slave_0: left promiscuous mode [ 1128.283634][T10464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.002991][ T59] Bluetooth: hci4: command tx timeout [ 1130.817917][T10464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.882714][T10464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.943654][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1130.969540][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1130.971191][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1130.972476][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1130.975651][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1130.981543][T10464] bond0 (unregistering): Released all slaves [ 1131.853766][T10772] lo speed is unknown, defaulting to 1000 [ 1132.215044][ T59] Bluetooth: hci4: command tx timeout [ 1132.563774][T10752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.563940][T10752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.564216][T10752] bridge_slave_0: entered allmulticast mode [ 1132.567394][T10752] bridge_slave_0: entered promiscuous mode [ 1132.584058][T10752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.584374][T10752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.584621][T10752] bridge_slave_1: entered allmulticast mode [ 1132.594921][T10752] bridge_slave_1: entered promiscuous mode [ 1133.214104][T10752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.244181][ T59] Bluetooth: hci2: command tx timeout [ 1133.339049][T10752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.635924][T10464] hsr_slave_0: left promiscuous mode [ 1133.657241][T10464] hsr_slave_1: left promiscuous mode [ 1133.658426][T10464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.658456][T10464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.713334][T10464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1133.713370][T10464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.803812][T10464] veth1_macvtap: left promiscuous mode [ 1133.803976][T10464] veth0_macvtap: left promiscuous mode [ 1133.804281][T10464] veth1_vlan: left promiscuous mode [ 1133.804503][T10464] veth0_vlan: left promiscuous mode [ 1134.438330][ T59] Bluetooth: hci4: command tx timeout [ 1135.474715][ T59] Bluetooth: hci2: command tx timeout [ 1136.827570][T10464] team0 (unregistering): Port device team_slave_1 removed [ 1137.100562][T10464] team0 (unregistering): Port device team_slave_0 removed [ 1137.687485][ T59] Bluetooth: hci2: command tx timeout [ 1139.911197][ T59] Bluetooth: hci2: command tx timeout [ 1140.388515][T10638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.494195][T10752] team0: Port device team_slave_0 added [ 1140.523703][T10752] team0: Port device team_slave_1 added [ 1140.753341][T10752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.753359][T10752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.753387][T10752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.818109][T10752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.818126][T10752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.818149][T10752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.927956][T10638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.263872][T10752] hsr_slave_0: entered promiscuous mode [ 1141.265302][T10752] hsr_slave_1: entered promiscuous mode [ 1141.266204][T10752] debugfs: 'hsr0' already exists in 'hsr' [ 1141.266226][T10752] Cannot create hsr debugfs directory [ 1141.436877][ T980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.437173][ T980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.629265][ T980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.629468][ T980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.660895][T10772] chnl_net:caif_netlink_parms(): no params data found [ 1142.556011][T10772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.556249][T10772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.556516][T10772] bridge_slave_0: entered allmulticast mode [ 1142.559353][T10772] bridge_slave_0: entered promiscuous mode [ 1142.643539][T10772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.643699][T10772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.643956][T10772] bridge_slave_1: entered allmulticast mode [ 1142.646389][T10772] bridge_slave_1: entered promiscuous mode [ 1143.365238][T10772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.377822][T10772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.235031][T10772] team0: Port device team_slave_0 added [ 1144.259166][T10772] team0: Port device team_slave_1 added [ 1144.912357][T10772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1144.912376][T10772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.912396][T10772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1144.946646][T10772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1144.946668][T10772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.946701][T10772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.483732][T10772] hsr_slave_0: entered promiscuous mode [ 1145.485099][T10772] hsr_slave_1: entered promiscuous mode [ 1145.486873][T10772] debugfs: 'hsr0' already exists in 'hsr' [ 1145.486904][T10772] Cannot create hsr debugfs directory [ 1145.997308][T10464] bridge_slave_1: left allmulticast mode [ 1145.997339][T10464] bridge_slave_1: left promiscuous mode [ 1145.997596][T10464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.081219][T10464] bridge_slave_0: left allmulticast mode [ 1146.081251][T10464] bridge_slave_0: left promiscuous mode [ 1146.081518][T10464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.159269][T10464] bridge_slave_1: left allmulticast mode [ 1146.159305][T10464] bridge_slave_1: left promiscuous mode [ 1146.159565][T10464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.230260][T10464] bridge_slave_0: left allmulticast mode [ 1146.230285][T10464] bridge_slave_0: left promiscuous mode [ 1146.230492][T10464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.592265][T10464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1148.646039][T10464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1148.697297][T10464] bond0 (unregistering): Released all slaves [ 1149.693974][T10464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.791346][T10464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.877651][T10464] bond0 (unregistering): Released all slaves [ 1150.034853][T10638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.340832][T10752] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1150.408130][T10752] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1150.495070][T10752] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1150.565380][T10752] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1150.890323][T10464] hsr_slave_0: left promiscuous mode [ 1150.911904][T10464] hsr_slave_1: left promiscuous mode [ 1150.912941][T10464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1150.968458][T10464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1151.114847][T10464] hsr_slave_0: left promiscuous mode [ 1151.159350][T10464] hsr_slave_1: left promiscuous mode [ 1151.160444][T10464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.182639][T10464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1152.495916][T10464] team0 (unregistering): Port device team_slave_1 removed [ 1152.804789][T10464] team0 (unregistering): Port device team_slave_0 removed [ 1156.541211][T10464] team0 (unregistering): Port device team_slave_1 removed [ 1156.717694][T10464] team0 (unregistering): Port device team_slave_0 removed [ 1157.975587][T10638] veth0_vlan: entered promiscuous mode [ 1158.006918][T10638] veth1_vlan: entered promiscuous mode [ 1158.357183][T10638] veth0_macvtap: entered promiscuous mode [ 1158.383469][T10638] veth1_macvtap: entered promiscuous mode [ 1158.554019][T10638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.572474][T10752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.634256][T10638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.795715][ T8391] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.816630][ T8391] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.828120][ T8391] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.835720][ T8391] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.850631][T10752] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.019922][ T8391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.020170][ T8391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.226930][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.229128][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.261077][T10772] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1159.416586][T10772] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1159.487298][T10772] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1159.542883][T10772] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1159.629463][ T6250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.629486][ T6250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.819869][ T6334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.819892][ T6334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.552471][T10818] netlink: 'syz.0.600': attribute type 4 has an invalid length. [ 1160.552497][T10818] netlink: 152 bytes leftover after parsing attributes in process `syz.0.600'. [ 1160.568866][T10818] : renamed from bond0 (while UP) [ 1160.998612][T10772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.015073][T10752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1161.120240][T10772] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.234342][T10464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.238995][T10464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.316227][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.318306][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.047499][T10829] program syz.0.732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1162.433973][T10772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1162.433997][T10772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1164.738844][T10772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.300681][T10752] veth0_vlan: entered promiscuous mode [ 1165.387574][T10752] veth1_vlan: entered promiscuous mode [ 1165.729516][T10752] veth0_macvtap: entered promiscuous mode [ 1165.754980][T10752] veth1_macvtap: entered promiscuous mode [ 1165.945423][T10752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.020481][T10752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.086140][ T6250] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.092389][ T5847] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1166.106298][ T6250] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.127121][ T6250] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.159860][ T6250] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.256678][ T5847] usb 10-1: Using ep0 maxpacket: 32 [ 1166.273020][ T5847] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 1166.273054][ T5847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.273075][ T5847] usb 10-1: Product: syz [ 1166.273091][ T5847] usb 10-1: Manufacturer: syz [ 1166.273106][ T5847] usb 10-1: SerialNumber: syz [ 1166.301015][ T5847] usb 10-1: config 0 descriptor?? [ 1166.355913][ T5847] xr_serial 10-1:0.0: skipping garbage [ 1166.620234][ T31] usb 10-1: USB disconnect, device number 12 [ 1166.854938][T10772] veth0_vlan: entered promiscuous mode [ 1166.981863][T10907] netlink: 'syz.8.750': attribute type 10 has an invalid length. [ 1167.079260][T10907] team0: Port device dummy0 added [ 1167.102222][ T8391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.102257][ T8391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.133152][T10772] veth1_vlan: entered promiscuous mode [ 1167.512579][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.512601][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.748254][T10772] veth0_macvtap: entered promiscuous mode [ 1167.820671][T10772] veth1_macvtap: entered promiscuous mode [ 1167.935253][T10772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.968047][T10772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.999125][ T980] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.011259][ T1164] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.011306][ T1164] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.011344][ T1164] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.954018][T10941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1170.035615][T10948] netlink: 'syz.8.761': attribute type 1 has an invalid length. [ 1170.077692][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.077716][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.310243][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.310265][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.416957][T10953] : entered promiscuous mode [ 1172.646092][ T6610] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1172.870180][ T6610] usb 8-1: Using ep0 maxpacket: 8 [ 1172.873827][ T6610] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 1172.873856][ T6610] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 1172.873885][ T6610] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1172.873923][ T6610] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1172.873981][ T6610] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1172.874009][ T6610] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1172.874032][ T6610] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1172.877190][ T6610] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1172.877216][ T6610] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.877234][ T6610] usb 8-1: Product: syz [ 1172.877248][ T6610] usb 8-1: Manufacturer: syz [ 1172.877261][ T6610] usb 8-1: SerialNumber: syz [ 1172.993110][ T6610] usb 8-1: config 0 descriptor?? [ 1173.041421][ T6610] hub 8-1:0.0: bad descriptor, ignoring hub [ 1173.041464][ T6610] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1173.047956][ T6610] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input16 [ 1173.220109][ T6610] usb 8-1: USB disconnect, device number 3 [ 1173.460270][T10982] netlink: zone id is out of range [ 1173.460286][T10982] netlink: zone id is out of range [ 1173.460295][T10982] netlink: zone id is out of range [ 1173.460303][T10982] netlink: zone id is out of range [ 1173.460310][T10982] netlink: zone id is out of range [ 1173.460318][T10982] netlink: zone id is out of range [ 1173.460326][T10982] netlink: zone id is out of range [ 1173.552531][T10986] geneve2: entered promiscuous mode [ 1177.120210][ C1] vkms_vblank_simulate: vblank timer overrun [ 1177.519530][T11025] ubi31: attaching mtd0 [ 1178.012794][T11025] ubi31: scanning is finished [ 1178.012856][T11025] ubi31: empty MTD device detected [ 1178.090465][ C1] vkms_vblank_simulate: vblank timer overrun [ 1178.200550][ C1] vkms_vblank_simulate: vblank timer overrun [ 1178.266878][ C1] vkms_vblank_simulate: vblank timer overrun [ 1178.510525][T11025] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1178.510554][T11025] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1178.510572][T11025] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1178.510589][T11025] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1178.510607][T11025] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1178.510624][T11025] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1178.510642][T11025] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 594385231 [ 1178.510663][T11025] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1178.512502][T11028] ubi31: background thread "ubi_bgt31d" started, PID 11028 [ 1178.537333][ C1] vkms_vblank_simulate: vblank timer overrun [ 1179.736609][ C1] vkms_vblank_simulate: vblank timer overrun [ 1179.907221][ C1] vkms_vblank_simulate: vblank timer overrun [ 1180.028597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1180.415807][ C1] vkms_vblank_simulate: vblank timer overrun [ 1180.445992][ C1] vkms_vblank_simulate: vblank timer overrun [ 1180.804202][ C1] vkms_vblank_simulate: vblank timer overrun [ 1181.173746][ C1] vkms_vblank_simulate: vblank timer overrun [ 1181.583640][ C1] vkms_vblank_simulate: vblank timer overrun [ 1181.976051][ C1] vkms_vblank_simulate: vblank timer overrun [ 1182.179330][T11060] netlink: 'syz.0.794': attribute type 10 has an invalid length. [ 1182.566674][ C1] vkms_vblank_simulate: vblank timer overrun [ 1182.687823][ C1] vkms_vblank_simulate: vblank timer overrun [ 1183.426577][ C1] vkms_vblank_simulate: vblank timer overrun [ 1183.816607][ C1] vkms_vblank_simulate: vblank timer overrun [ 1183.939948][ C1] vkms_vblank_simulate: vblank timer overrun [ 1184.283540][T11075] netlink: 'syz.6.799': attribute type 10 has an invalid length. [ 1184.283563][T11075] netlink: 40 bytes leftover after parsing attributes in process `syz.6.799'. [ 1184.837299][ C1] vkms_vblank_simulate: vblank timer overrun [ 1184.906869][T11089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1188.289393][ C1] vkms_vblank_simulate: vblank timer overrun [ 1188.325750][ C1] vkms_vblank_simulate: vblank timer overrun [ 1188.739721][ C1] vkms_vblank_simulate: vblank timer overrun [ 1188.918276][ C1] vkms_vblank_simulate: vblank timer overrun [ 1189.246200][T11116] netlink: 'syz.6.809': attribute type 1 has an invalid length. [ 1189.416935][ C1] vkms_vblank_simulate: vblank timer overrun [ 1190.277705][T11123] gre1: entered allmulticast mode [ 1190.579222][ C1] vkms_vblank_simulate: vblank timer overrun [ 1190.710545][ C1] vkms_vblank_simulate: vblank timer overrun [ 1190.945967][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1192.586218][ C1] vkms_vblank_simulate: vblank timer overrun [ 1192.882298][ C1] vkms_vblank_simulate: vblank timer overrun [ 1192.955436][T11146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.619254][T11152] netlink: 36 bytes leftover after parsing attributes in process `syz.0.818'. [ 1197.071082][T11150] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1198.270421][ T9700] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1198.636497][ C1] vkms_vblank_simulate: vblank timer overrun [ 1198.738719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1198.770937][ T9700] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1198.771201][ T9700] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.406427][ C1] vkms_vblank_simulate: vblank timer overrun [ 1199.534610][ T9700] usb 7-1: config 0 descriptor?? [ 1199.768151][T11190] netlink: 'syz.0.829': attribute type 4 has an invalid length. [ 1200.114019][ T9700] ath6kl: Failed to submit usb control message: -71 [ 1200.114105][ T9700] ath6kl: unable to send the bmi data to the device: -71 [ 1200.114166][ T9700] ath6kl: Unable to send get target info: -71 [ 1200.149886][ T9700] ath6kl: Failed to init ath6kl core: -71 [ 1200.220441][ T9700] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1200.300035][ C1] vkms_vblank_simulate: vblank timer overrun [ 1200.673195][ T9700] usb 7-1: USB disconnect, device number 2 [ 1200.903427][ C1] vkms_vblank_simulate: vblank timer overrun [ 1201.221999][ C1] vkms_vblank_simulate: vblank timer overrun [ 1201.291501][T11199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1201.345027][T11201] netlink: 'syz.8.831': attribute type 1 has an invalid length. [ 1201.345051][T11201] netlink: 228 bytes leftover after parsing attributes in process `syz.8.831'. [ 1201.345151][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.8.831'. [ 1201.974368][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.151069][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.994491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.542851][T11238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1203.624957][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.365118][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.966559][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.605348][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.728921][ C1] vkms_vblank_simulate: vblank timer overrun [ 1206.477782][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1209.609964][ T38] kauditd_printk_skb: 20 callbacks suppressed [ 1209.609988][ T38] audit: type=1326 audit(1756178650.135:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11281 comm="syz.8.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171c76ebe9 code=0x7ffc0000 [ 1209.610244][ T38] audit: type=1326 audit(1756178650.135:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11281 comm="syz.8.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171c76ebe9 code=0x7ffc0000 [ 1209.629755][ T38] audit: type=1326 audit(1756178650.144:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11281 comm="syz.8.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f171c76ebe9 code=0x7ffc0000 [ 1209.629817][ T38] audit: type=1326 audit(1756178650.144:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11281 comm="syz.8.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171c76ebe9 code=0x7ffc0000 [ 1209.629866][ T38] audit: type=1326 audit(1756178650.144:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11281 comm="syz.8.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171c76ebe9 code=0x7ffc0000 [ 1213.981127][T11318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1219.231442][T11363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1219.951139][T11367] netlink: 44 bytes leftover after parsing attributes in process `syz.7.880'. [ 1219.951168][T11367] netlink: 43 bytes leftover after parsing attributes in process `syz.7.880'. [ 1219.951187][T11367] netlink: 'syz.7.880': attribute type 5 has an invalid length. [ 1219.951201][T11367] netlink: 43 bytes leftover after parsing attributes in process `syz.7.880'. [ 1221.576186][T11398] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1221.578072][T11398] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1222.635035][T11402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1224.538479][T11447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1224.780922][T11452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1224.794594][ T6610] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1224.954929][ T6610] usb 9-1: Using ep0 maxpacket: 8 [ 1224.957986][ T6610] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1224.958013][ T6610] usb 9-1: config 0 has no interface number 0 [ 1224.958063][ T6610] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1224.958088][ T6610] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1224.958115][ T6610] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1224.958143][ T6610] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1224.958188][ T6610] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1224.958212][ T6610] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.480083][ T6610] usb 9-1: config 0 descriptor?? [ 1225.729419][ T6610] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1225.812669][ T5902] usb 9-1: USB disconnect, device number 8 [ 1225.819920][ T5902] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1226.227170][ T5847] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1226.971359][ T5847] usb 7-1: Using ep0 maxpacket: 32 [ 1227.060919][ T5847] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1227.060947][ T5847] usb 7-1: config 0 has no interface number 0 [ 1227.060996][ T5847] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1227.071118][ T5847] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1227.071155][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.071175][ T5847] usb 7-1: Product: syz [ 1227.071189][ T5847] usb 7-1: Manufacturer: syz [ 1227.071204][ T5847] usb 7-1: SerialNumber: syz [ 1227.110606][ T5847] usb 7-1: config 0 descriptor?? [ 1228.347116][ T5847] f81534 7-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 1228.347353][ T5847] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1228.347372][ T5847] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1228.347460][ T5847] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 1228.497567][T11481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1229.099675][ C0] vkms_vblank_simulate: vblank timer overrun [ 1229.498801][ C0] vkms_vblank_simulate: vblank timer overrun [ 1229.535058][ T5847] usb 7-1: USB disconnect, device number 3 [ 1230.244213][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1230.244245][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1230.244272][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1230.244288][ T59] Workqueue: hci3 hci_rx_work [ 1230.244316][ T59] Call Trace: [ 1230.244325][ T59] [ 1230.244336][ T59] dump_stack_lvl+0x189/0x250 [ 1230.244377][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1230.244411][ T59] ? __pfx__printk+0x10/0x10 [ 1230.244442][ T59] ? kernfs_path_from_node+0x2c/0x280 [ 1230.244466][ T59] ? kernfs_path_from_node+0x243/0x280 [ 1230.244486][ T59] ? kernfs_path_from_node+0x2c/0x280 [ 1230.244512][ T59] sysfs_create_dir_ns+0x259/0x280 [ 1230.244547][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1230.244572][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1230.244609][ T59] ? rt_spin_unlock+0x65/0x80 [ 1230.244639][ T59] kobject_add_internal+0x5a5/0xb50 [ 1230.244682][ T59] kobject_add+0x155/0x220 [ 1230.244720][ T59] ? __pfx_kobject_add+0x10/0x10 [ 1230.244760][ T59] ? get_device_parent+0x370/0x3a0 [ 1230.244800][ T59] device_add+0x408/0xb50 [ 1230.244836][ T59] hci_conn_add_sysfs+0xd5/0x1e0 [ 1230.244872][ T59] le_conn_complete_evt+0xc3a/0x1220 [ 1230.244913][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1230.244951][ T59] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1230.244981][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 1230.245014][ T59] ? skb_pull_data+0xfb/0x200 [ 1230.245042][ T59] hci_le_conn_complete_evt+0x187/0x450 [ 1230.245078][ T59] hci_event_packet+0x78f/0x1200 [ 1230.245117][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1230.245146][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 1230.245181][ T59] ? __pfx_migrate_enable+0x10/0x10 [ 1230.245217][ T59] ? hci_send_to_monitor+0xe2/0x570 [ 1230.245250][ T59] hci_rx_work+0x46a/0xe80 [ 1230.245281][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 1230.245311][ T59] process_scheduled_works+0xade/0x17b0 [ 1230.245374][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 1230.245422][ T59] worker_thread+0x8a0/0xda0 [ 1230.245483][ T59] kthread+0x711/0x8a0 [ 1230.245521][ T59] ? __pfx_worker_thread+0x10/0x10 [ 1230.245549][ T59] ? __pfx_kthread+0x10/0x10 [ 1230.245589][ T59] ? __pfx_kthread+0x10/0x10 [ 1230.245624][ T59] ret_from_fork+0x3fc/0x770 [ 1230.245656][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 1230.245693][ T59] ? __switch_to_asm+0x39/0x70 [ 1230.245714][ T59] ? __switch_to_asm+0x33/0x70 [ 1230.245733][ T59] ? __pfx_kthread+0x10/0x10 [ 1230.245769][ T59] ret_from_fork_asm+0x1a/0x30 [ 1230.245810][ T59] [ 1230.245867][ T59] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1230.245912][ T59] Bluetooth: hci3: failed to register connection device [ 1230.249708][T11485] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 1230.294268][T11485] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1230.672662][T11487] ptrace attach of "./syz-executor exec"[10638] was attempted by "./syz-executor exec"[11487] [ 1232.165220][T11513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1232.667881][ C0] vkms_vblank_simulate: vblank timer overrun [ 1233.067391][T11491] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 1236.437051][T11561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1242.235907][ T29] sched: DL replenish lagged too much [ 1243.932904][T11491] Bluetooth: hci3: command 0x0406 tx timeout [ 1251.707792][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 1256.327446][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1275.243450][T11573] Bluetooth: hci4: command tx timeout [ 1275.301360][T11573] Bluetooth: hci2: command 0x0406 tx timeout [ 1278.623541][T11573] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1278.654011][T11573] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1278.655806][T11573] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1278.683267][T11573] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1278.696999][T11573] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1278.866015][T11597] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1278.887451][T11597] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1278.917664][T11597] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1278.919774][T11597] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1278.942694][T11597] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1279.079564][T11570] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1279.110515][T11570] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1279.112319][T11570] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1279.131672][T11570] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1279.132574][T11570] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1279.506279][T11592] lo speed is unknown, defaulting to 1000 [ 1279.652447][T11604] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1279.698192][T11604] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1279.714315][T11604] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1279.715734][T11604] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1279.734429][T11604] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1279.805362][T11593] lo speed is unknown, defaulting to 1000 [ 1279.960801][T11604] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1279.998337][T11604] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1280.015272][T11604] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1280.016598][T11604] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1280.017373][T11604] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1280.269227][T11595] lo speed is unknown, defaulting to 1000 [ 1282.834166][T11597] Bluetooth: hci6: command tx timeout [ 1283.347364][T11605] lo speed is unknown, defaulting to 1000 [ 1283.870772][T11570] Bluetooth: hci8: command tx timeout [ 1285.062282][T11570] Bluetooth: hci5: command tx timeout [ 1285.063077][T11570] Bluetooth: hci9: command tx timeout [ 1285.063411][T11570] Bluetooth: hci7: command tx timeout [ 1285.063740][T11570] Bluetooth: hci6: command tx timeout [ 1285.364261][T11602] lo speed is unknown, defaulting to 1000 [ 1286.073470][T11491] Bluetooth: hci8: command tx timeout [ 1286.511764][T11592] chnl_net:caif_netlink_parms(): no params data found [ 1287.270520][T11491] Bluetooth: hci6: command tx timeout [ 1287.270555][T11491] Bluetooth: hci7: command tx timeout [ 1287.270579][T11491] Bluetooth: hci9: command tx timeout [ 1287.270601][T11491] Bluetooth: hci5: command tx timeout [ 1288.296939][ T59] Bluetooth: hci8: command tx timeout [ 1289.539034][ T59] Bluetooth: hci7: command tx timeout [ 1289.539071][ T59] Bluetooth: hci9: command tx timeout [ 1289.539095][ T59] Bluetooth: hci5: command tx timeout [ 1289.539118][ T59] Bluetooth: hci6: command tx timeout [ 1290.520788][T11491] Bluetooth: hci8: command tx timeout [ 1291.717888][ T59] Bluetooth: hci9: command tx timeout [ 1291.717923][ T59] Bluetooth: hci7: command tx timeout [ 1291.717979][T11491] Bluetooth: hci5: command tx timeout [ 1310.054401][T11593] chnl_net:caif_netlink_parms(): no params data found [ 1322.011714][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1339.509003][T11570] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1339.540496][T11570] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1339.544080][T11570] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1339.545348][T11570] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1339.570058][T11570] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1341.043781][T11570] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1341.057850][T11570] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1341.084549][T11570] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1341.086627][T11570] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1341.102170][T11570] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1341.403143][T11570] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1341.407093][T11570] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1341.435402][T11570] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1341.449195][T11570] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1341.450085][T11570] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1341.749954][T11491] Bluetooth: hci0: command tx timeout [ 1342.664049][T11570] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1342.693397][T11570] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1342.695087][T11570] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1342.698162][T11570] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1342.699110][T11570] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1342.811484][T11570] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1342.841995][T11570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1342.858439][T11570] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1342.874347][T11570] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1342.876383][T11570] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1343.290972][T11491] Bluetooth: hci1: command tx timeout [ 1343.716930][T11491] Bluetooth: hci2: command tx timeout [ 1343.973463][T11491] Bluetooth: hci0: command tx timeout [ 1344.914306][T11491] Bluetooth: hci3: command tx timeout [ 1345.088871][T11491] Bluetooth: hci4: command tx timeout [ 1345.514327][T11491] Bluetooth: hci1: command tx timeout [ 1345.940883][T11570] Bluetooth: hci2: command tx timeout [ 1346.206122][T11491] Bluetooth: hci0: command tx timeout [ 1347.138030][T11491] Bluetooth: hci3: command tx timeout [ 1347.311283][T11491] Bluetooth: hci4: command tx timeout [ 1347.738294][T11570] Bluetooth: hci1: command tx timeout [ 1348.174886][T11570] Bluetooth: hci2: command tx timeout [ 1348.420915][T11570] Bluetooth: hci0: command tx timeout [ 1349.372247][T11570] Bluetooth: hci3: command tx timeout [ 1349.553999][T11570] Bluetooth: hci4: command tx timeout [ 1349.604582][T11592] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 1349.631199][T11605] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1349.966526][T11570] Bluetooth: hci1: command tx timeout [ 1350.387984][T11570] Bluetooth: hci2: command tx timeout [ 1351.585155][T11570] Bluetooth: hci3: command tx timeout [ 1351.766626][T11570] Bluetooth: hci4: command tx timeout [ 1387.690544][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1404.120696][T11491] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1404.142811][T11491] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1404.147666][T11491] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1404.172849][T11491] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1404.178033][T11491] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1406.220053][ T59] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1406.262375][ T59] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1406.265883][ T59] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1406.267201][ T59] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1406.269163][ T59] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1406.508045][ T5153] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1406.540958][ T5153] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1406.543181][ T5153] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1406.544783][ T5153] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1406.573247][ T5153] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1407.443018][T11597] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1407.480069][T11597] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1407.481759][T11597] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1407.483859][T11597] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1407.526301][T11597] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1408.091437][T11573] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1408.126785][T11573] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1408.136553][T11573] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1408.137890][T11573] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1408.139232][T11573] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1424.155287][T11597] Bluetooth: hci13: command tx timeout [ 1426.334571][T11604] Bluetooth: hci11: command tx timeout [ 1426.335342][T11604] Bluetooth: hci13: command tx timeout [ 1426.335531][T11604] Bluetooth: hci10: command tx timeout [ 1426.335864][T11604] Bluetooth: hci12: command tx timeout [ 1426.387567][ T59] Bluetooth: hci14: command tx timeout [ 1428.557894][ T59] Bluetooth: hci14: command tx timeout [ 1428.557943][ T59] Bluetooth: hci10: command tx timeout [ 1428.557966][ T59] Bluetooth: hci12: command tx timeout [ 1428.557987][ T59] Bluetooth: hci13: command tx timeout [ 1428.558009][ T59] Bluetooth: hci11: command tx timeout [ 1430.781669][ T59] Bluetooth: hci11: command tx timeout [ 1430.781705][ T59] Bluetooth: hci13: command tx timeout [ 1430.781729][ T59] Bluetooth: hci12: command tx timeout [ 1430.781752][ T59] Bluetooth: hci10: command tx timeout [ 1430.781773][ T59] Bluetooth: hci14: command tx timeout [ 1433.004859][T11604] Bluetooth: hci14: command tx timeout [ 1433.004894][T11604] Bluetooth: hci10: command tx timeout [ 1433.004917][T11604] Bluetooth: hci12: command tx timeout [ 1433.004940][T11604] Bluetooth: hci11: command tx timeout [ 1457.254225][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1469.760851][T11604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1469.799039][T11604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1469.815301][T11604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1469.816788][T11604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1469.821604][T11604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1472.008467][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 1472.008826][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 1472.096390][T11604] Bluetooth: hci5: command tx timeout [ 1472.480994][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1472.512948][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1472.528553][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1472.529976][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1472.531636][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1473.270081][ T5153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1473.302277][ T5153] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1473.304017][ T5153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1473.305311][ T5153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1473.306139][ T5153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1473.577492][T11491] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1473.605480][T11491] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1473.609460][T11491] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1473.638520][T11491] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1473.648443][T11491] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1473.759602][T11573] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1473.780989][T11573] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1473.803452][T11573] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1473.806841][T11573] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1473.807717][T11573] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1474.313393][T11573] Bluetooth: hci5: command tx timeout [ 1476.538830][T11759] Bluetooth: hci5: command tx timeout [ 1477.478167][T11759] Bluetooth: hci3: command 0x0406 tx timeout [ 1477.574061][T11759] Bluetooth: hci4: command 0x0406 tx timeout [ 1477.574103][T11759] Bluetooth: hci2: command 0x0406 tx timeout [ 1478.760775][T11758] Bluetooth: hci5: command tx timeout [ 1493.728187][ T39] INFO: task syz-executor:11677 blocked for more than 143 seconds. [ 1493.728213][ T39] Not tainted syzkaller #0 [ 1493.728224][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1493.728233][ T39] task:syz-executor state:D stack:26952 pid:11677 tgid:11677 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1493.728299][ T39] Call Trace: [ 1493.728306][ T39] [ 1493.728321][ T39] __schedule+0x16f3/0x4c20 [ 1493.728391][ T39] ? __pfx___schedule+0x10/0x10 [ 1493.728438][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1493.728469][ T39] rt_mutex_schedule+0x77/0xf0 [ 1493.728490][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1493.728511][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1493.728563][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1493.728590][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1493.728613][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1493.728633][ T39] ? __lock_acquire+0xab9/0xd20 [ 1493.728675][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.728716][ T39] ? is_bpf_text_address+0x26/0x2b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1493.728751][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.728781][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1493.728809][ T39] inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.728853][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1493.728907][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1493.728940][ T39] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1493.728967][ T39] ? __lock_acquire+0xab9/0xd20 [ 1493.728998][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1493.729022][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1493.729068][ [ 1493.729068][ T39] netlink_rcv_skb+0x205/0x470 [ 1493.729094][ T39] ? __lock_acquire+0xab9/0xd20 [ 1493.729123][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1493.729152][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1493.729192][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1493.729228][ T39] netlink_unicast+0x843/0xa10 [ 1493.729263][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 1493.729289][ T39] ? netlink_sendmsg+0x642/0xb30 [ 1493.729314][ T39] ? skb_put+0x11b/0x210 [ 1493.729355][ T39] netlink_sendmsg+0x805/0xb30 [ 1493.729393][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1493.729430][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1493.729453][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1493.729481][ T39] __sock_sendmsg+0x219/0x270 [ 1493.729509][ T39] __sys_sendto+0x3c7/0x520 [ 1493.729541][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 1493.729601][ T39] ? exc_page_fault+0x76/0xf0 [ 1493.729633][ T39] ? do_user_addr_fault+0xc8a/0x1390 [ 1493.729665][ T39] __x64_sys_sendto+0xde/0x100 [ 1493.729699][ T39] do_syscall_64+0xfa/0x3b0 [ 1493.729728][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1493.729755][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.729778][ T39] ? clear_bhb_loop+0x60/0xb0 [ 1493.729805][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.729827][ T39] RIP: 0033:0x7f7880a60a7c [ 1493.729846][ T39] RSP: 002b:00007ffca0e9dae0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1493.729869][ T39] RAX: ffffffffffffffda RBX: 00007f78817b4620 RCX: 00007f7880a60a7c [ 1493.729886][ T39] RDX: 0000000000000028 RSI: 00007f78817b4670 RDI: 0000000000000003 [ 1493.729900][ T39] RBP: 0000000000000000 R08: 00007ffca0e9db34 R09: 000000000000000c [ 1493.729915][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1493.729927][ T39] R13: 0000000000000000 R14: 00007f78817b4670 R15: 0000000000000000 [ 1493.729961][ T39] [ 1493.729995][ T39] [ 1493.729995][ T39] Showing all locks held in the system: [ 1493.730006][ T39] 6 locks held by ktimers/0/16: [ 1493.730021][ T39] 1 lock held by khungtaskd/39: [ 1493.730033][ T39] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1493.730090][ T39] 4 locks held by kworker/u9:0/59: [ 1493.730103][ T39] #0: ffff888028382938 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1493.730167][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1493.730224][ T39] #2: ffff88806a3480a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 1493.730280][ T39] #3: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1493.730348][ T39] 2 locks held by kworker/0:2/981: [ 1493.730364][ T39] 2 locks held by irq/32-virtio1-/1185: [ 1493.730377][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1493.730434][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1493.730505][ T39] 4 locks held by kworker/u9:1/5153: [ 1493.730517][ T39] #0: ffff8880510e1938 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1493.730580][ T39] #1: ffffc9000fe47bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1493.730636][ T39] #2: ffff8880608b80a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 1493.730691][ T39] #3: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1493.730746][ T39] 1 lock held by dhcpcd/5499: [ 1493.730757][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 1493.730815][ T39] 2 locks held by getty/5600: [ 1493.730827][ T39] #0: ffff88823bf660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1493.730888][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 1493.730949][ T39] 1 lock held by syz-executor/9398: [ 1493.730961][ T39] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1493.731016][ T39] 2 locks held by kworker/u8:4/10464: [ 1493.731029][ T39] 1 lock held by syz-executor/10638: [ 1493.731042][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1493.731100][ T39] 1 lock held by syz-executor/10772: [ 1493.731113][ T39] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1493.731167][ T39] 1 lock held by syz.6.897/11420: [ 1493.731179][ T39] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1493.731230][ T39] 4 locks held by kworker/u9:2/11491: [ 1493.731242][ T39] #0: ffff888049b46938 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1493.731304][ T39] #1: ffffc90003f7fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1493.731368][ T39] #2: ffff8880654d80a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 1493.731423][ T39] #3: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1493.731477][ T39] 1 lock held by syz.9.936/11547: [ 1493.731489][ T39] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1493.731541][ T39] 3 locks held by kworker/u8:17/11569: [ 1493.731553][ T39] #0: ffff8880303d4938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1493.731611][ T39] #1: ffffc90004927bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1493.731679][ T39] #2: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1493.731729][ T39] 3 locks held by kworker/u8:23/11571: [ 1493.731742][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1493.731797][ T39] #1: ffffc90004937bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1493.731851][ T39] #2: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1493.731910][ T39] 3 locks held by kworker/1:1/11572: [ 1493.731922][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1493.731976][ T39] #1: ffffc90004987bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1493.732031][ T39] #2: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1493.732090][ T39] 6 locks held by kworker/u9:4/11573: [ 1493.732103][ T39] #0: ffff888075723138 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1493.732157][ T39] #1: ffffc90004a57bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1493.732212][ T39] #2: ffff888078a14e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1493.732273][ T39] #3: ffff888078a140a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1493.732326][ T39] #4: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1493.732386][ T39] #5: ffff888075726b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1493.732448][ T39] 1 lock held by syz-executor/11592: [ 1493.732460][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1493.732515][ T39] 1 lock held by syz-executor/11593: [ 1493.732527][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1493.732601][ T39] 1 lock held by syz-executor/11595: [ 1493.732614][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1493.732669][ T39] 4 locks held by kworker/u9:6/11600: [ 1493.732682][ T39] #0: ffff888029456138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1493.732739][ T39] #1: ffffc90004c17bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1493.732796][ T39] #2: ffff88804eb9ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1493.732858][ T39] #3: ffff88804eb9c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1493.732914][ T39] 1 lock held by syz-executor/11602: [ 1493.732927][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1493.732984][ T39] 4 locks held by kworker/u9:7/11604: [ 1493.732996][ T39] #0: ffff888062bbc938 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1493.733059][ T39] #1: ffffc90004c47bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1493.733115][ T39] #2: ffff8880664f40a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 1493.733171][ T39] #3: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1493.733225][ T39] 1 lock held by syz-executor/11605: [ 1493.733238][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1493.733298][ T39] 1 lock held by syz-executor/11677: [ 1493.733310][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.733378][ T39] 1 lock held by syz-executor/11683: [ 1493.733391][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.733452][ T39] 1 lock held by syz-executor/11686: [ 1493.733464][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.733526][ T39] 1 lock held by syz-executor/11689: [ 1493.733538][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.733600][ T39] 1 lock held by syz-executor/11690: [ 1493.733612][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.733674][ T39] 1 lock held by syz-executor/11717: [ 1493.733686][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.733748][ T39] 1 lock held by syz-executor/11724: [ 1493.733760][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.733833][ T39] 1 lock held by syz-executor/11726: [ 1493.733845][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.733904][ T39] 1 lock held by syz-executor/11729: [ 1493.733916][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.733994][ T39] 1 lock held by syz-executor/11731: [ 1493.734006][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.734068][ T39] 1 lock held by syz-executor/11741: [ 1493.734098][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.734160][ T39] 1 lock held by syz-executor/11750: [ 1493.734173][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.734234][ T39] 1 lock held by syz-executor/11751: [ 1493.734247][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.734308][ T39] 1 lock held by syz-executor/11754: [ 1493.734321][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.734389][ T39] 1 lock held by syz-executor/11756: [ 1493.734401][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1493.734463][ T39] [ 1493.734469][ T39] ============================================= [ 1493.734469][ T39] [ 1493.734486][ T39] NMI backtrace for cpu 1 [ 1493.734505][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1493.734552][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1493.734577][ T39] Call Trace: [ 1493.734592][ T39] [ 1493.734608][ T39] dump_stack_lvl+0x189/0x250 [ 1493.734674][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1493.734734][ T39] ? __pfx__printk+0x10/0x10 [ 1493.734808][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 1493.734859][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1493.734908][ T39] ? __pfx__printk+0x10/0x10 [ 1493.734961][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1493.735017][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1493.735069][ T39] watchdog+0xf93/0xfe0 [ 1493.735111][ T39] ? watchdog+0x1de/0xfe0 [ 1493.735146][ T39] kthread+0x711/0x8a0 [ 1493.735182][ T39] ? __pfx_watchdog+0x10/0x10 [ 1493.735209][ T39] ? __pfx_kthread+0x10/0x10 [ 1493.735247][ T39] ? __pfx_kthread+0x10/0x10 [ 1493.735281][ T39] ret_from_fork+0x3fc/0x770 [ 1493.735313][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1493.735354][ T39] ? __switch_to_asm+0x39/0x70 [ 1493.735374][ T39] ? __switch_to_asm+0x33/0x70 [ 1493.735393][ T39] ? __pfx_kthread+0x10/0x10 [ 1493.735427][ T39] ret_from_fork_asm+0x1a/0x30 [ 1493.735465][ T39] [ 1493.735474][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1493.735502][ C0] NMI backtrace for cpu 0 [ 1493.735517][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1493.735537][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1493.735548][ C0] RIP: 0010:__kernel_text_address+0x2e/0x40 [ 1493.735570][ C0] Code: 53 48 89 fb e8 43 00 00 00 85 c0 0f 95 c0 48 81 fb 00 c0 72 90 0f 93 c1 48 81 fb 90 b9 88 90 0f 92 c2 20 ca 08 c2 0f b6 c2 5b fd 92 6d 09 cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 1493.735586][ C0] RSP: 0018:ffffc900001565e0 EFLAGS: 00000202 [ 1493.735602][ C0] RAX: 0000000000000001 RBX: ffffc90000156650 RCX: 049d39abea02a500 [ 1493.735615][ C0] RDX: 0000000000000001 RSI: ffffffff8d218607 RDI: ffffffff81331f6a [ 1493.735628][ C0] RBP: ffffc90000156690 R08: ffffc90000157f48 R09: 0000000000000000 [ 1493.735641][ C0] R10: ffffc90000156658 R11: fffff5200002accd R12: ffff88801c2a5940 [ 1493.735655][ C0] R13: ffff88809cea5f00 R14: dffffc0000000000 R15: 1ffff9200002acca [ 1493.735669][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 1493.735685][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1493.735697][ C0] CR2: 00007efe1e3f2700 CR3: 000000009bdb0000 CR4: 00000000003526f0 [ 1493.735714][ C0] Call Trace: [ 1493.735720][ C0] [ 1493.735727][ C0] unwind_get_return_address+0x4d/0x90 [ 1493.735754][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1493.735774][ C0] arch_stack_walk+0xfc/0x150 [ 1493.735804][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1493.735825][ C0] stack_trace_save+0x9c/0xe0 [ 1493.735843][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1493.735861][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1493.735888][ C0] kasan_save_track+0x3e/0x80 [ 1493.735909][ C0] ? kasan_save_track+0x3e/0x80 [ 1493.735928][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1493.735949][ C0] ? kmem_cache_alloc_noprof+0x143/0x310 [ 1493.735972][ C0] ? dst_alloc+0x105/0x170 [ 1493.735998][ C0] ? ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 1493.736026][ C0] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 1493.736052][ C0] ? ip_route_output_flow+0x2a/0x150 [ 1493.736076][ C0] ? ip_route_me_harder+0x6d2/0x1030 [ 1493.736099][ C0] ? synproxy_send_tcp+0x359/0x6c0 [ 1493.736121][ C0] ? synproxy_send_client_synack+0x8bb/0xe20 [ 1493.736143][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 1493.736170][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 1493.736197][ C0] ? nft_do_chain+0x40c/0x1920 [ 1493.736222][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 1493.736247][ C0] ? nf_hook_slow+0xc5/0x220 [ 1493.736268][ C0] ? NF_HOOK+0x206/0x3a0 [ 1493.736287][ C0] ? NF_HOOK+0x309/0x3a0 [ 1493.736306][ C0] ? __netif_receive_skb+0x143/0x380 [ 1493.736324][ C0] ? process_backlog+0x31e/0x900 [ 1493.736343][ C0] ? __napi_poll+0xb6/0x540 [ 1493.736360][ C0] ? net_rx_action+0x707/0xe00 [ 1493.736379][ C0] ? handle_softirqs+0x22c/0x710 [ 1493.736400][ C0] ? run_ktimerd+0xcf/0x190 [ 1493.736424][ C0] ? smpboot_thread_fn+0x542/0xa60 [ 1493.736445][ C0] ? kthread+0x711/0x8a0 [ 1493.736470][ C0] ? ret_from_fork+0x3fc/0x770 [ 1493.736508][ C0] ? dst_alloc+0x105/0x170 [ 1493.736534][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1493.736557][ C0] ? dst_alloc+0x105/0x170 [ 1493.736582][ C0] kmem_cache_alloc_noprof+0x143/0x310 [ 1493.736609][ C0] dst_alloc+0x105/0x170 [ 1493.736637][ C0] ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 1493.736670][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 1493.736699][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 1493.736726][ C0] ? __lock_acquire+0xab9/0xd20 [ 1493.736750][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1493.736781][ C0] ? ip_route_me_harder+0x4ad/0x1030 [ 1493.736802][ C0] ip_route_output_flow+0x2a/0x150 [ 1493.736827][ C0] ? ip_route_me_harder+0x6c0/0x1030 [ 1493.736845][ C0] ip_route_me_harder+0x6d2/0x1030 [ 1493.736868][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1493.736901][ C0] synproxy_send_tcp+0x359/0x6c0 [ 1493.736928][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 1493.736960][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1493.736984][ C0] ? nft_tproxy_eval+0x6e8/0x1c00 [ 1493.737008][ C0] ? synproxy_pernet+0x45/0x270 [ 1493.737039][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 1493.737070][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1493.737105][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1493.737134][ C0] nft_synproxy_do_eval+0x345/0x570 [ 1493.737161][ C0] ? skb_orphan+0xaf/0xd0 [ 1493.737184][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1493.737220][ C0] nft_do_chain+0x40c/0x1920 [ 1493.737247][ C0] ? __pfx_ip_list_rcv+0x10/0x10 [ 1493.737274][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1493.737304][ C0] ? __netif_receive_skb_list_core+0x7d2/0x800 [ 1493.737346][ C0] nft_do_chain_inet+0x25d/0x340 [ 1493.737372][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1493.737399][ C0] ? __lock_acquire+0xab9/0xd20 [ 1493.737427][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1493.737448][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1493.737475][ C0] nf_hook_slow+0xc5/0x220 [ 1493.737500][ C0] NF_HOOK+0x206/0x3a0 [ 1493.737521][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1493.737542][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1493.737562][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1493.737581][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1493.737604][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1493.737627][ C0] ? skb_dst+0x4f/0xd0 [ 1493.737647][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1493.737670][ C0] NF_HOOK+0x309/0x3a0 [ 1493.737691][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1493.737711][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1493.737731][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1493.737752][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1493.737779][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1493.737798][ C0] __netif_receive_skb+0x143/0x380 [ 1493.737816][ C0] ? rt_spin_unlock+0x65/0x80 [ 1493.737836][ C0] ? process_backlog+0x27b/0x900 [ 1493.737856][ C0] process_backlog+0x31e/0x900 [ 1493.737882][ C0] __napi_poll+0xb6/0x540 [ 1493.737903][ C0] net_rx_action+0x707/0xe00 [ 1493.737923][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1493.737956][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1493.737997][ C0] handle_softirqs+0x22c/0x710 [ 1493.738027][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1493.738055][ C0] run_ktimerd+0xcf/0x190 [ 1493.738080][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1493.738112][ C0] ? schedule+0x91/0x360 [ 1493.738136][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1493.738158][ C0] smpboot_thread_fn+0x542/0xa60 [ 1493.738181][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1493.738208][ C0] kthread+0x711/0x8a0 [ 1493.738236][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1493.738258][ C0] ? __pfx_kthread+0x10/0x10 [ 1493.738288][ C0] ? __pfx_kthread+0x10/0x10 [ 1493.738315][ C0] ret_from_fork+0x3fc/0x770 [ 1493.738339][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1493.738366][ C0] ? __switch_to_asm+0x39/0x70 [ 1493.738383][ C0] ? __switch_to_asm+0x33/0x70 [ 1493.738399][ C0] ? __pfx_kthread+0x10/0x10 [ 1493.738425][ C0] ret_from_fork_asm+0x1a/0x30 [ 1493.738451][ C0] [ 1493.941279][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1493.941313][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1493.941337][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1493.941351][ T39] Call Trace: [ 1493.941359][ T39] [ 1493.941369][ T39] dump_stack_lvl+0x99/0x250 [ 1493.941405][ T39] ? __asan_memcpy+0x40/0x70 [ 1493.941429][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1493.941460][ T39] ? __pfx__printk+0x10/0x10 [ 1493.941516][ T39] vpanic+0x281/0x750 [ 1493.941551][ T39] ? __pfx_vpanic+0x10/0x10 [ 1493.941583][ T39] ? preempt_schedule+0xae/0xc0 [ 1493.941611][ T39] ? preempt_schedule_common+0x83/0xd0 [ 1493.941645][ T39] panic+0xb9/0xc0 [ 1493.941676][ T39] ? __pfx_panic+0x10/0x10 [ 1493.941710][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 1493.941742][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1493.941769][ T39] watchdog+0xfd2/0xfe0 [ 1493.941804][ T39] ? watchdog+0x1de/0xfe0 [ 1493.941839][ T39] kthread+0x711/0x8a0 [ 1493.941875][ T39] ? __pfx_watchdog+0x10/0x10 [ 1493.941903][ T39] ? __pfx_kthread+0x10/0x10 [ 1493.941941][ T39] ? __pfx_kthread+0x10/0x10 [ 1493.941974][ T39] ret_from_fork+0x3fc/0x770 [ 1493.942007][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1493.942042][ T39] ? __switch_to_asm+0x39/0x70 [ 1493.942062][ T39] ? __switch_to_asm+0x33/0x70 [ 1493.942089][ T39] ? __pfx_kthread+0x10/0x10 [ 1493.942123][ T39] ret_from_fork_asm+0x1a/0x30 [ 1493.942162][ T39] [ 1493.942507][ T39] Kernel Offset: disabled