last executing test programs: 18.595547839s ago: executing program 1 (id=162): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80, 0x0, "2af01c3d0040fbffffffffffffff00"}) syz_open_pts(r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@deltaction={0x34, 0x31, 0x20, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x34}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$SIOCGETVIFCNT(r2, 0x89e0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card3/oss_mixer\x00', 0x40, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000087f00000000000014000000020a0108000000000000000000000000140000001100010000000000000000000000000a"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 17.149092971s ago: executing program 1 (id=167): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 16.31598311s ago: executing program 1 (id=168): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x10, 0x0, &(0x7f00000004c0)=[@clear_death={0x40086315, 0x1}], 0x0, 0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000ac0), 0xc2480, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = socket$inet6(0xa, 0x3, 0x103c) connect$inet6(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20004090) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8040890) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file3\x00', 0x0, 0x42) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 13.514389273s ago: executing program 0 (id=173): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000cab000)) lchown(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x840440, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r8, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/250, 0xfa}], 0x1}}], 0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000ff0000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x67, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000009, 0x2010, r0, 0x3000) 12.614520188s ago: executing program 4 (id=175): getpgid(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$ppp(0xffffffffffffffff, &(0x7f0000000500), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_open_dev$sg(&(0x7f0000000580), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010027bd0000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x40811}, 0x4042090) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x29, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) shutdown(r2, 0x2) 12.090554486s ago: executing program 2 (id=178): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc0, 0x1e, 0x25, 0x40, 0x45e, 0xf4, 0xd551, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xe9, 0xbe}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000340)={0x0, 0x22, 0xf3, {0xf3, 0x10, "066545461974fdabcfe3597dc0b797ab25666a7ec21c1f4bedd013dc259a5240da82fe0ac46223346e05b9746742aed40557380387860bd245c28f51f007b32bed0111067f9fc0f54c9899cf7f1a35b08bac6d703bb783672e09e25bc4fb6113c73582dfee58c30adb5fd896017f56b1b4e1c2015988cca712122d6add282d86ee8a04742499ca744c83315177fbcf5761603e386d2188e3c47f1f48982f16e4b0914e9b64906b7c9b6146ee016b86c6d36499e20cd88208e313f36d236dde77568f686b98f6ba9516a0e8d0bd19c5497061928563bd59cf118dcc7172536c7627a30f283cd372d3a39f45ff44a5bfe7cb"}}, &(0x7f00000004c0)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "42e06c9979867a502fccdfe2044f05065849e111c046163ca9641327b995175947e757ac5fc43146083a34ed9901faf20317954774628862cc9b81641169ecae6ffa0b4c9709f72471427f86cb15bdce2204832c3d625a0fa1de9913f0a4cef26ac2d1bcb0a1a8fab71438fed5d6f421aac9f6b444f19628cb"}}, &(0x7f0000000080)={0x0, 0xf, 0x2c, {0x5, 0xf, 0x2c, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x3, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x21, "1278ce5493b594a6809ac6bec9e8f253"}, @ssp_cap={0xc, 0x10, 0xa, 0x81, 0x0, 0x1, 0xf780, 0xfff}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x8, 0x7, 0x8, "dc70aa94", "4c00ea13"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x2, 0x16, 0x7, 0x7, 0x2, 0x1a83}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000580)={0x20, 0x1, 0xd8, "e72ae9e70ca7a04f23d91f4b0a586627dcd631b5fa77c5ad9966e0c3682ad7098baefc29c912b16506d258cf49e8a73b75dd309ede68128e8d1997008f0b1cc9f77ba743df590919cc9d39a52a3a71593fa5dc7ba27d98f3136c979909906a8be868a6e0f732e064f1697abbfc9611b79edda4129fda925358e0ec26bd32f12a5b7d44ca80b93d5dd36d1aec2d8514c1b64a526a37592e0a20eaf01c71f34657b1ed2287b11738880ade20e644ed8117ba466c04f709666cabf84c31c77a1b896f020fceb55aacdf4a331000d69ea444abc80bf45319786e"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x20, 0x1}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x5746}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "fdd4"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x740c}, &(0x7f0000000840)={0x40, 0x13, 0x6, @random="7ad515e30355"}, &(0x7f0000000880)={0x40, 0x17, 0x6, @random="cf63f86b42bd"}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "19e7"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x3}}) write$UHID_CREATE2(r1, &(0x7f0000000480)=ANY=[@ANYRES32=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_usb_ep_read(r0, 0xdd, 0xf1, &(0x7f0000000ac0)=""/241) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f5af29bd7000000000000e00000008000300237b"], 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x4000004) 11.621008913s ago: executing program 4 (id=179): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a4, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x26, 0x2, 0x0, "dd3e9db9a79317cb7346eaff4dfa5b899cec82438ff87936dfd70000ecff00"}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1d, 0x2, 0x6) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) 8.693754604s ago: executing program 3 (id=180): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 8.344500615s ago: executing program 0 (id=181): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x4807b000) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)='./cgroup/cgroup.procs\x00') 8.343392904s ago: executing program 1 (id=182): mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="dc2000003d0007010000000000000000017c0000040000000c00018006000600800a0000b8200280b1200680ad2001"], 0x20dc}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={&(0x7f0000000300)="d97d558b8ba9e84ffba0e98de77a68864c0787ed520a217ccfb85fe46df9d1f9acc6aa3979705bcd885cbb2309209a9c2cc828c01c0139274a660b3fe7ba1c6c1fffcda18cdd", &(0x7f0000000a40)="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"}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r4, 0x80045438, 0x300000000000000) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f00000004c0)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000040000000a0000000000080046644913345c1a08ebf81d1832746e68469a019ea7c0763789a336d09ce164b92d535def78fe52958a3d380a2655ab9e4c49957ff2ae1f5b760ee79508f1b8eb6fb3ad69a8a6fb261573d6cd09e3a7047abdb3990f84c4df8c793b0635433396c46b6eb3a03e06a010b7bd19d524b90af6f83e94f9aa4c0dc3498a2614aca85e773c170c00000000000000d09044ae34a3130b0dc43234", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1806000600800000000000edc1333d186a7b7368ded25aac56be640854991d4babb2e54baf130000000000000000000000000000000173edcb10059d537f464d51daf9c236df4130963bfd38bdd87d05ff87f1ebde4b11db4731fb3cce4fcbc088f5048249303034b45fc390145da7ad7222e107650510559d713adb8239785078be844a6ec9fd31ef031c5e631f7a067c77d6e591810cab4aca01aa78a02aa7673b73d57a909c5c590c509791290bbd1f649e9be5ebc5b60db7cb9d4135368d805d69b5dbcb3d320498e758e52005d985d542694dda6c7f0facf33d137d43e3e69e67c286f4f87b2d9c344ed8", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000"], &(0x7f0000000380)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x2}, 0xe) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 8.342831645s ago: executing program 4 (id=183): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000003000000000000000000811077000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4040000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r6, 0x4807b000) ioctl$KVM_NMI(r5, 0xae9a) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$rxrpc(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$vsock_stream(0x28, 0x1, 0x0) userfaultfd(0x81001) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)='./cgroup/cgroup.procs\x00') close(r1) 8.273490677s ago: executing program 3 (id=184): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x10, 0x0, &(0x7f00000004c0)=[@clear_death={0x40086315, 0x1}], 0x0, 0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000ac0), 0xc2480, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = socket$inet6(0xa, 0x3, 0x103c) connect$inet6(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20004090) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8040890) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file3\x00', 0x0, 0x42) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 8.21524029s ago: executing program 0 (id=185): r0 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x105580, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000000)={0x1, 0x7}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.675098412s ago: executing program 2 (id=186): syz_io_uring_setup(0x397e, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x0, 0x200001ac}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2(&(0x7f0000000100), 0x80800) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = creat(0x0, 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) socket$inet_udp(0x2, 0x2, 0x0) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x220000, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x6) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 7.674781988s ago: executing program 1 (id=187): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000001100)={0xc, 0x1}) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffefffffc]}}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = dup(r2) write$UHID_INPUT(r4, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) preadv(r4, &(0x7f00000011c0)=[{&(0x7f0000001c00)=""/4096, 0x1000}], 0x1, 0x8, 0x400) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000001c0)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000000c0)={0x20, 0x16, 0x25, "bde321feea16e71543d32d20b316852b0b04b081227ad15ce2d9251e54f17a3e34a98ccafe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010001", 0x7) 7.011333686s ago: executing program 3 (id=188): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x10, 0x0, &(0x7f00000004c0)=[@clear_death={0x40086315, 0x1}], 0x0, 0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000ac0), 0xc2480, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = socket$inet6(0xa, 0x3, 0x103c) connect$inet6(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20004090) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8040890) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file3\x00', 0x0, 0x42) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 6.902247702s ago: executing program 4 (id=189): mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={&(0x7f0000000300)="d97d558b8ba9e84ffba0e98de77a68864c0787ed520a217ccfb85fe46df9d1f9acc6aa3979705bcd885cbb2309209a9c2cc828c01c0139274a660b3fe7ba1c6c1fffcda18cdd", &(0x7f0000000a40)="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"}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r1, 0x80045438, 0x300000000000000) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f00000004c0)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) (fail_nth: 8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000040000000a0000000000080046644913345c1a08ebf81d1832746e68469a019ea7c0763789a336d09ce164b92d535def78fe52958a3d380a2655ab9e4c49957ff2ae1f5b760ee79508f1b8eb6fb3ad69a8a6fb261573d6cd09e3a7047abdb3990f84c4df8c793b0635433396c46b6eb3a03e06a010b7bd19d524b90af6f83e94f9aa4c0dc3498a2614aca85e773c170c00000000000000d09044ae34a3130b0dc43234", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1806000600800000000000edc1333d186a7b7368ded25aac56be640854991d4babb2e54baf130000000000000000000000000000000173edcb10059d537f464d51daf9c236df4130963bfd38bdd87d05ff87f1ebde4b11db4731fb3cce4fcbc088f5048249303034b45fc390145da7ad7222e107650510559d713adb8239785078be844a6ec9fd31ef031c5e631f7a067c77d6e591810cab4aca01aa78a02aa7673b73d57a909c5c590c509791290bbd1f649e9be5ebc5b60db7cb9d4135368d805d69b5dbcb3d320498e758e52005d985d542694dda6c7f0facf33d137d43e3e69e67c286f4f87b2d9c344ed8", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000"], &(0x7f0000000380)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x2}, 0xe) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 6.831247386s ago: executing program 2 (id=190): syz_io_uring_setup(0x397e, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x0, 0x200001ac}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2(&(0x7f0000000100), 0x80800) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = creat(0x0, 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) socket$inet_udp(0x2, 0x2, 0x0) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x220000, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x6) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 5.743865642s ago: executing program 4 (id=191): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000cab000)) lchown(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x840440, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r8, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/250, 0xfa}], 0x1}}], 0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000ff0000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x67, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000009, 0x2010, r0, 0x3000) 5.217228674s ago: executing program 0 (id=192): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$inet6(0xa, 0x2, 0x7) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000300)) iopl(0x3) r4 = gettid() ioperm(0x0, 0xfffc, 0x8005) keyctl$get_keyring_id(0xf8, 0x0, 0xfffffffffffffffb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) 5.126300969s ago: executing program 3 (id=193): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0x34}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r2 = syz_io_uring_setup(0x4a62, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffe, 0x1b3}, &(0x7f00000004c0)=0x0, &(0x7f0000000140)=0x0) keyctl$clear(0x11, 0xfffffffffffffffd) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x2, 0x2eb2, 0x2e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x7, 0x8000, 0x1000, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', r7, 0x2f, 0x9, 0x7f, 0xb, 0x40, @mcast2, @empty, 0x20, 0x8, 0x99, 0x1000}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x3, 0x8000, 0x2}}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) socket$isdn(0x22, 0x3, 0x11) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000fdffffff18010000696c6c2500000000002020207b1af8ff00160000bfa100000000000007010000f8ffffffb702000008000000b7030000b15a0000850000000600000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000002000)=[{{&(0x7f0000001140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000011c0)="5653c7fc11daa3b198d966d20b846b401a2c9d880de1a3f77e12919af5f4574a5d5ab8952c8e87dcb5737c98840e1ecbcaa1140c3f57de3680f65da28b43f957dee0bbbd9363e3b2549db4f2ed5a0a19925417171e1967838ef36380aca3f06d1f4ca28aa8c6276b20e22b54698328c6ade499b72df4bcab359a6620ef8211ef4e3fc8f8ed8eb7ce3094a6819ffd402248cbcc67c840df970bd70180c6fcee3303b055cd03ab089704bdf1ad20e8c2e5d79c44571c7037da496be1c9092750af88be33c727", 0xc5}, {&(0x7f00000012c0)="0ce0b4ad6bcdc2b73bf645c35a7fe4124454bc2c6c12d9d56d9a91f4bfab5bfd1c846ef4fc958eba7460eaac3cb44020ab1bb6a08adac980b2da8b7eb4ace35b3a75b8", 0x43}, {&(0x7f0000001340)="2e319ba22cdde2ba876db53a706b7f751b5b73b8ccab6e9d9a5e8202833c2930a359299384f5a04aec2cd9cd0e6df3a2333acb5384074949e54fce3086f74068c05169ef744409862a6fbd018b60410fb649c0b94e67a5537ec596074cdc17646e8aaa0e0257671024208d006671d55c0aea26339abb651c4495a65030046bff6b7ffa2dc16798e7027388fbd6ba46d31271536f2358cfbe0f7f88779008305ae6a83008344d859aac6310572a80a5b5a1829f673147a2cc54e475c4ee13930fa2aae808108d76a5d7c2000000", 0xcd}, {&(0x7f0000001440)="1fd772b780d5b12f2019abc8c2b046b329fe6051b997fd8b6fb936eb09ad848dfa50fb79d227f5c803567f9cb94de4ff068e3dbd4091152281725c737b83b803f415d3f4b772518b3f97e63d80b5e780730e783068ed45112e3f0af83a93b137a3cb83c60001d74daf414d063aacafca8dd5ea285bbd9c5ce8ebf1d2b7cbadd9d40d9c87b660414804179efcda586183a588b748960f380b07a3331f9a5b652ca76745dec8c74aedf8f90822e8b51289cb35200e3901be771e826ae59e61fe402af1520f2cb7bcb271641d3d6a7e623b7379", 0xd2}, {&(0x7f0000000ac0)="5367ed1e3b5673d7d7239523c1cf42f2da0dc93875c7b4195796bbd54f8f81c0", 0x20}], 0x5, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x24, 0x1, 0x1, [r2, r1, r10, r8, r1]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}], 0xa0}}, {{&(0x7f00000017c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001840)="60c4de4422babeecd892e5eb6545428173a49af4dd0c1e9f635bf255a7ac18c320e76a8d95a78185a3abe3af89ead31327ee805528789f4401d3fb34b4029f2740382af5633f4e8d276d6beb3889fdd421bf012eea079a32c559a372803e8858daceaded8e5ae734146d81bcbea6d4d6c941410f3ee3e00c36b947cc2398ca358968712903c98772f05679", 0x8b}, {&(0x7f0000001900)="74502b5e13a17d9ab7991300f9a2391e6e70641c515d99f54b82626aea79e8746a8f99abe09b89b4df6eedcd75655a323cb9c9b9ad56ee7a5685a12278385d51264db078a0135768662428da49c4b89a9b2c84785851dabb6cf0a930177dbe287f7441df2e1931e70bd4593f7168390da2e9eb", 0x73}, {&(0x7f0000001980)="0ede91e53967ce979b8dc02f101d3d501cf6e35a9497ee11781832efde79ce5ebd926d55ab2f86afdff5aad1d32e1198143fc6f88a7f853c957ad3681ca8b44a8360ecc696e78752a29d1a3d0b9c0de72f1b346efb6fd8cc50b2735c9aaddd459f716718c0c1ff96f5c4ae70977e7d16f58e869cff9a32d288981dc85ecfed139e9f5883b195bd7107bda422f7a8106f3e4ae663adb8a93d5d1781f117a6d6d177ff639561dc7c669069", 0xaa}], 0x3, &(0x7f0000001e80), 0x0, 0x10}}], 0x2, 0x0) recvmmsg(r10, &(0x7f0000001040)=[{{&(0x7f0000000400)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000500)=""/228, 0xe4}, {&(0x7f0000000380)=""/8, 0x8}], 0x2, &(0x7f0000000680)=""/56, 0x38}, 0x5}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000006c0)=""/113, 0x71}, {&(0x7f0000000740)=""/139, 0x8b}, {&(0x7f0000000800)=""/94, 0x5e}, {&(0x7f0000000880)=""/150, 0x96}, {&(0x7f0000000940)=""/44, 0x2c}, {&(0x7f0000000980)=""/10, 0xa}], 0x6, &(0x7f0000000ac0)}, 0xfff}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000c00)=""/116, 0x74}, {&(0x7f0000000b80)=""/15, 0xf}, {&(0x7f0000000c80)=""/69, 0x45}, {&(0x7f0000000d00)}], 0x5, &(0x7f0000000dc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000000e80)=@nfc, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000f00)=""/13, 0xd}], 0x1, &(0x7f0000000f80)=""/156, 0x9c}, 0x6}], 0x4, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 5.025422256s ago: executing program 2 (id=194): openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x103002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff0000"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6(0xa, 0xa, 0x80000001) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x1, 0x100) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00090000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000440005007f000001000000000000000000000000000000003c00000000000000fc0200"/204], 0x174}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4, 0x0, 0x1}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x104}, 0x8) 3.033313149s ago: executing program 0 (id=195): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a4, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x26, 0x2, 0x0, "dd3e9db9a79317cb7346eaff4dfa5b899cec82438ff87936dfd70000ecff00"}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1d, 0x2, 0x6) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) 2.937730104s ago: executing program 2 (id=196): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x100, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x80003, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 2.301357299s ago: executing program 2 (id=197): syz_io_uring_setup(0x397e, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x0, 0x200001ac}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2(&(0x7f0000000100), 0x80800) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = creat(0x0, 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x220000, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x6) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 1.603593309s ago: executing program 1 (id=198): syz_io_uring_setup(0x397e, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x0, 0x200001ac}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2(&(0x7f0000000100), 0x80800) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = creat(0x0, 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x220000, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x6) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 810.866937ms ago: executing program 0 (id=199): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x10, 0x0, &(0x7f00000004c0)=[@clear_death={0x40086315, 0x1}], 0x0, 0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000ac0), 0xc2480, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = socket$inet6(0xa, 0x3, 0x103c) connect$inet6(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20004090) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8040890) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file3\x00', 0x0, 0x42) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 810.084424ms ago: executing program 3 (id=200): syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x1b}, {0xffff, 0x4, [{0xc9, 0x9, 0xf}, {0xc8, 0x6, 0x7f2}, {0xc9, 0x5, 0xb}, {0xc8, 0x1, 0x40}]}}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket(0x20000000000000a, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ptrace$ARCH_GET_GS(0x1e, 0xffffffffffffffff, &(0x7f0000000340), 0x1004) getpid() r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000003580)='contention_end\x00', r1}, 0x18) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000140)={{@host}, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f40)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x6}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xffff}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x1f}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}]}]}, 0x44}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) r8 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000300)='efs\x00', 0x8000, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r8, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000003580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fddbdf2502"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x240480d2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r10 = open(&(0x7f0000000180)='./bus\x00', 0x14b27e, 0x0) ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f0000000800)={0x4, 0x2, 0x2, 0x3, 0x1, 0x0, [{0x7fff, 0x3, 0xfffffffffffffffa, '\x00', 0x1200}]}) 809.507715ms ago: executing program 4 (id=201): openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xa000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x7, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x4}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 3 (id=202): r0 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x105580, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000000)={0x1, 0x7}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 73.373541][ T5809] cgroup: Unknown subsys name 'net' [ 73.524070][ T5809] cgroup: Unknown subsys name 'cpuset' [ 73.532465][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.025763][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.472810][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.490984][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.498255][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.507771][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.507997][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.515849][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.530864][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.538148][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.538773][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.546384][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.561529][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.564794][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.568899][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.581904][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.584890][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.597618][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.600127][ T5136] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.607073][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.613313][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.626739][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.632826][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.634699][ T5136] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.642516][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.649336][ T5136] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.655664][ T5829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.664710][ T5136] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.670598][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.684838][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.699532][ T5136] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.709470][ T5136] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.201040][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 78.215083][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 78.229484][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 78.244768][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 78.291919][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 78.482161][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.489871][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.497620][ T5820] bridge_slave_0: entered allmulticast mode [ 78.504941][ T5820] bridge_slave_0: entered promiscuous mode [ 78.528212][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.535772][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.543451][ T5819] bridge_slave_0: entered allmulticast mode [ 78.550857][ T5819] bridge_slave_0: entered promiscuous mode [ 78.566439][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.574274][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.581583][ T5820] bridge_slave_1: entered allmulticast mode [ 78.588264][ T5820] bridge_slave_1: entered promiscuous mode [ 78.604606][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.611773][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.618934][ T5832] bridge_slave_0: entered allmulticast mode [ 78.625997][ T5832] bridge_slave_0: entered promiscuous mode [ 78.653985][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.661164][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.668322][ T5819] bridge_slave_1: entered allmulticast mode [ 78.675871][ T5819] bridge_slave_1: entered promiscuous mode [ 78.682621][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.689783][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.697585][ T5833] bridge_slave_0: entered allmulticast mode [ 78.704819][ T5833] bridge_slave_0: entered promiscuous mode [ 78.712410][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.719539][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.726829][ T5833] bridge_slave_1: entered allmulticast mode [ 78.733822][ T5833] bridge_slave_1: entered promiscuous mode [ 78.748586][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.755868][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.763353][ T5832] bridge_slave_1: entered allmulticast mode [ 78.770155][ T5832] bridge_slave_1: entered promiscuous mode [ 78.777320][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.784702][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.792217][ T5824] bridge_slave_0: entered allmulticast mode [ 78.798908][ T5824] bridge_slave_0: entered promiscuous mode [ 78.845345][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.865927][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.873163][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.880783][ T5824] bridge_slave_1: entered allmulticast mode [ 78.887512][ T5824] bridge_slave_1: entered promiscuous mode [ 78.895970][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.915611][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.950814][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.962669][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.974991][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.997590][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.036241][ T5820] team0: Port device team_slave_0 added [ 79.044442][ T5820] team0: Port device team_slave_1 added [ 79.053195][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.074720][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.120086][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.140459][ T5819] team0: Port device team_slave_0 added [ 79.148679][ T5833] team0: Port device team_slave_0 added [ 79.160495][ T5833] team0: Port device team_slave_1 added [ 79.190954][ T5819] team0: Port device team_slave_1 added [ 79.198947][ T5824] team0: Port device team_slave_0 added [ 79.215156][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.222454][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.248407][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.262045][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.269024][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.295355][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.309146][ T5832] team0: Port device team_slave_0 added [ 79.327070][ T5824] team0: Port device team_slave_1 added [ 79.354470][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.363118][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.390823][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.403896][ T5832] team0: Port device team_slave_1 added [ 79.427935][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.435099][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.461557][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.474721][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.481775][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.507777][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.519805][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.527102][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.553425][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.586560][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.593764][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.620616][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.633822][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.641148][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.667463][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.691034][ T5837] Bluetooth: hci0: command tx timeout [ 79.705480][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.712540][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.738539][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.751872][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.758844][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.785340][ T5837] Bluetooth: hci4: command tx timeout [ 79.791383][ T5837] Bluetooth: hci3: command tx timeout [ 79.791405][ T5136] Bluetooth: hci2: command tx timeout [ 79.791628][ T5136] Bluetooth: hci1: command tx timeout [ 79.797245][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.853381][ T5820] hsr_slave_0: entered promiscuous mode [ 79.860481][ T5820] hsr_slave_1: entered promiscuous mode [ 79.897080][ T5824] hsr_slave_0: entered promiscuous mode [ 79.903704][ T5824] hsr_slave_1: entered promiscuous mode [ 79.909863][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.919100][ T5824] Cannot create hsr debugfs directory [ 79.995908][ T5833] hsr_slave_0: entered promiscuous mode [ 80.002227][ T5833] hsr_slave_1: entered promiscuous mode [ 80.008237][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.015996][ T5833] Cannot create hsr debugfs directory [ 80.025380][ T5819] hsr_slave_0: entered promiscuous mode [ 80.032348][ T5819] hsr_slave_1: entered promiscuous mode [ 80.038519][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.046265][ T5819] Cannot create hsr debugfs directory [ 80.066069][ T5832] hsr_slave_0: entered promiscuous mode [ 80.072547][ T5832] hsr_slave_1: entered promiscuous mode [ 80.078685][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.086551][ T5832] Cannot create hsr debugfs directory [ 80.431815][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.453389][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.467071][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.485259][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.539067][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.554784][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.568700][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.601406][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.667070][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.677148][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.703949][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.718825][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.731611][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.799478][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.815482][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.845469][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.852924][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.866323][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.875934][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.888416][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.924337][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.931514][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.943609][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.957021][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.981176][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.992482][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.067588][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.133290][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.171888][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.179104][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.219318][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.226775][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.273957][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.336835][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.375465][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.392041][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.407281][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.418536][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.425733][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.451576][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.458711][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.469625][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.476765][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.505796][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.512958][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.526662][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.569176][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.583935][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.591109][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.623246][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.645544][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.652732][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.748104][ T5819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.770190][ T54] Bluetooth: hci0: command tx timeout [ 81.787896][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.852985][ T5136] Bluetooth: hci3: command tx timeout [ 81.858549][ T5136] Bluetooth: hci2: command tx timeout [ 81.859586][ T5837] Bluetooth: hci4: command tx timeout [ 81.876941][ T54] Bluetooth: hci1: command tx timeout [ 81.993888][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.087092][ T5824] veth0_vlan: entered promiscuous mode [ 82.118761][ T5824] veth1_vlan: entered promiscuous mode [ 82.174411][ T5820] veth0_vlan: entered promiscuous mode [ 82.202220][ T5824] veth0_macvtap: entered promiscuous mode [ 82.214680][ T5820] veth1_vlan: entered promiscuous mode [ 82.225953][ T5824] veth1_macvtap: entered promiscuous mode [ 82.268920][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.295848][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.316469][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.338518][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.349031][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.358540][ T5824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.367366][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.428844][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.438052][ T5820] veth0_macvtap: entered promiscuous mode [ 82.483224][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.491714][ T5820] veth1_macvtap: entered promiscuous mode [ 82.547082][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.555829][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.595279][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.606372][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.617457][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.645576][ T5832] veth0_vlan: entered promiscuous mode [ 82.654458][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.665948][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.677426][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.695864][ T5833] veth0_vlan: entered promiscuous mode [ 82.709030][ T5832] veth1_vlan: entered promiscuous mode [ 82.721330][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.730890][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.739616][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.748982][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.777165][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.786695][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.792483][ T5833] veth1_vlan: entered promiscuous mode [ 82.858289][ T5833] veth0_macvtap: entered promiscuous mode [ 82.892997][ T5819] veth0_vlan: entered promiscuous mode [ 82.905379][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.922719][ T5832] veth0_macvtap: entered promiscuous mode [ 82.931163][ T5833] veth1_macvtap: entered promiscuous mode [ 82.951431][ T5819] veth1_vlan: entered promiscuous mode [ 82.968711][ T5832] veth1_macvtap: entered promiscuous mode [ 82.983924][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.997779][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.032960][ T5819] veth0_macvtap: entered promiscuous mode [ 83.042243][ T5819] veth1_macvtap: entered promiscuous mode [ 83.060564][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.071148][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.081235][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.091999][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.103775][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.119818][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.130666][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.140525][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.151016][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.161977][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.195850][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.204118][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.287105][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.296488][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.377493][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.396896][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.846999][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.859786][ T54] Bluetooth: hci0: command tx timeout [ 83.865916][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.915214][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.937993][ T54] Bluetooth: hci1: command tx timeout [ 83.938478][ T5837] Bluetooth: hci2: command tx timeout [ 83.943510][ T54] Bluetooth: hci4: command tx timeout [ 83.943546][ T54] Bluetooth: hci3: command tx timeout [ 83.949121][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.970083][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.983734][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.995823][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.017659][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.040139][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.056397][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.070899][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.085325][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.104235][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.117164][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.132145][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.147548][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.188972][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.218009][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.231603][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.256952][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.267956][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.279841][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.291363][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.306772][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.367579][ T5908] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.686850][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.741922][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.805110][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.965443][ T5874] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.991271][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.017929][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.028156][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.038853][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.061659][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.078630][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.091453][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.109368][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.121775][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.179261][ T5874] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 85.200926][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.210472][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.228242][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.265348][ T5874] usb 5-1: config 0 descriptor?? [ 85.270455][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.270511][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.342157][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.350611][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.486434][ T5915] 9pnet_fd: Insufficient options for proto=fd [ 85.500534][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.506022][ T5914] dccp_close: ABORT with 20 bytes unread [ 85.528303][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.614197][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.628232][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.686581][ T5917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8'. [ 85.701771][ T5918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8'. [ 85.751716][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.765934][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.830866][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.849560][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.950204][ T54] Bluetooth: hci0: command tx timeout [ 85.954198][ T5921] FAULT_INJECTION: forcing a failure. [ 85.954198][ T5921] name failslab, interval 1, probability 0, space 0, times 1 [ 85.968675][ T5921] CPU: 0 UID: 0 PID: 5921 Comm: syz.3.9 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 85.979137][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.989243][ T5921] Call Trace: [ 85.992557][ T5921] [ 85.995524][ T5921] dump_stack_lvl+0x241/0x360 [ 86.000273][ T5921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.005552][ T5921] should_fail_ex+0x3b0/0x4e0 [ 86.010290][ T5921] should_failslab+0xac/0x100 [ 86.015023][ T5921] ? skb_clone+0x20c/0x390 [ 86.019483][ T5921] kmem_cache_alloc_noprof+0x70/0x380 [ 86.020292][ T54] Bluetooth: hci2: command tx timeout [ 86.024901][ T5921] skb_clone+0x20c/0x390 [ 86.030645][ T54] Bluetooth: hci4: command tx timeout [ 86.034507][ T5921] __netlink_deliver_tap+0x3cc/0x7f0 [ 86.039895][ T54] Bluetooth: hci1: command tx timeout [ 86.045157][ T5921] ? netlink_deliver_tap+0x2e/0x1b0 [ 86.045185][ T5921] netlink_deliver_tap+0x19d/0x1b0 [ 86.060930][ T5921] netlink_unicast+0x7c4/0x990 [ 86.065726][ T5921] ? __pfx_netlink_unicast+0x10/0x10 [ 86.071040][ T5921] ? __virt_addr_valid+0x45f/0x530 [ 86.076171][ T5921] ? __phys_addr_symbol+0x2f/0x70 [ 86.081212][ T5921] ? __check_object_size+0x47a/0x730 [ 86.086515][ T5921] netlink_sendmsg+0x8e4/0xcb0 [ 86.091303][ T5921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.096610][ T5921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.101902][ T5921] __sock_sendmsg+0x221/0x270 [ 86.106594][ T5921] ____sys_sendmsg+0x52a/0x7e0 [ 86.111379][ T5921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.116676][ T5921] ? __fget_files+0x2a/0x410 [ 86.121294][ T5921] ? __fget_files+0x2a/0x410 [ 86.125902][ T5921] __sys_sendmsg+0x269/0x350 [ 86.130509][ T5921] ? __pfx_lock_release+0x10/0x10 [ 86.135556][ T5921] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.140694][ T5921] ? __pfx_vfs_write+0x10/0x10 [ 86.145492][ T5921] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.151829][ T5921] ? do_syscall_64+0x100/0x230 [ 86.156610][ T5921] ? do_syscall_64+0xb6/0x230 [ 86.161304][ T5921] do_syscall_64+0xf3/0x230 [ 86.165828][ T5921] ? clear_bhb_loop+0x35/0x90 [ 86.170534][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.176492][ T5921] RIP: 0033:0x7fc552b85d29 [ 86.180924][ T5921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.200541][ T5921] RSP: 002b:00007fc5509d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.208967][ T5921] RAX: ffffffffffffffda RBX: 00007fc552d76080 RCX: 00007fc552b85d29 [ 86.216946][ T5921] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 86.224932][ T5921] RBP: 00007fc5509d5090 R08: 0000000000000000 R09: 0000000000000000 [ 86.232919][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.240943][ T5921] R13: 0000000000000000 R14: 00007fc552d76080 R15: 00007fff7af8bf68 [ 86.248938][ T5921] [ 86.378459][ T5136] Bluetooth: hci3: command tx timeout [ 86.387694][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.420816][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.483258][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.699968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 86.734690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 86.970179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.129974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 87.335222][ T5874] kaweth 5-1:0.0: Firmware present in device. [ 87.367115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.380254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.388486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.389663][ T5874] kaweth 5-1:0.0: Error reading configuration (-71), no net device created [ 87.414791][ T5874] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 87.426939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 87.516900][ T5934] FAULT_INJECTION: forcing a failure. [ 87.516900][ T5934] name failslab, interval 1, probability 0, space 0, times 0 [ 87.529984][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: syz.2.3 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 87.540442][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.550528][ T5934] Call Trace: [ 87.553828][ T5934] [ 87.556791][ T5934] dump_stack_lvl+0x241/0x360 [ 87.561518][ T5934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.566755][ T5934] ? __pfx__printk+0x10/0x10 [ 87.571379][ T5934] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 87.576783][ T5934] ? __pfx___might_resched+0x10/0x10 [ 87.582121][ T5934] should_fail_ex+0x3b0/0x4e0 [ 87.586945][ T5934] should_failslab+0xac/0x100 [ 87.591660][ T5934] __kmalloc_node_noprof+0xe1/0x4d0 [ 87.596881][ T5934] ? alloc_slab_obj_exts+0x3a/0xa0 [ 87.602032][ T5934] ? __kmalloc_cache_noprof+0x48/0x390 [ 87.607523][ T5934] alloc_slab_obj_exts+0x3a/0xa0 [ 87.612505][ T5934] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 87.618439][ T5934] ? kasan_unpoison+0x46/0x70 [ 87.623160][ T5934] __kmalloc_cache_noprof+0x29a/0x390 [ 87.628559][ T5934] ? nf_tables_newtable+0x52c/0x1e10 [ 87.633892][ T5934] nf_tables_newtable+0x52c/0x1e10 [ 87.639040][ T5934] ? nfnl_pernet+0x23/0x240 [ 87.643594][ T5934] ? __pfx_nf_tables_newtable+0x10/0x10 [ 87.649189][ T5934] ? __nla_parse+0x40/0x60 [ 87.653646][ T5934] nfnetlink_rcv+0x14e3/0x2ab0 [ 87.658480][ T5934] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 87.663688][ T5934] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.668918][ T5934] ? skb_clone+0x240/0x390 [ 87.673378][ T5934] ? __pfx_lock_release+0x10/0x10 [ 87.678444][ T5934] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.683681][ T5934] netlink_unicast+0x7f6/0x990 [ 87.688498][ T5934] ? __pfx_netlink_unicast+0x10/0x10 [ 87.693820][ T5934] ? __virt_addr_valid+0x45f/0x530 [ 87.698965][ T5934] ? __phys_addr_symbol+0x2f/0x70 [ 87.704025][ T5934] ? __check_object_size+0x47a/0x730 [ 87.709357][ T5934] netlink_sendmsg+0x8e4/0xcb0 [ 87.714163][ T5934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.719489][ T5934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.724811][ T5934] __sock_sendmsg+0x221/0x270 [ 87.729529][ T5934] ____sys_sendmsg+0x52a/0x7e0 [ 87.734335][ T5934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.739649][ T5934] ? __fget_files+0x2a/0x410 [ 87.744274][ T5934] ? __fget_files+0x2a/0x410 [ 87.748900][ T5934] __sys_sendmsg+0x269/0x350 [ 87.753519][ T5934] ? __pfx_lock_release+0x10/0x10 [ 87.758576][ T5934] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.763746][ T5934] ? __pfx_vfs_write+0x10/0x10 [ 87.768576][ T5934] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.774954][ T5934] ? do_syscall_64+0x100/0x230 [ 87.779757][ T5934] ? do_syscall_64+0xb6/0x230 [ 87.784479][ T5934] do_syscall_64+0xf3/0x230 [ 87.789022][ T5934] ? clear_bhb_loop+0x35/0x90 [ 87.793727][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.799654][ T5934] RIP: 0033:0x7f83d0385d29 [ 87.804098][ T5934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.823742][ T5934] RSP: 002b:00007f83ce1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.832201][ T5934] RAX: ffffffffffffffda RBX: 00007f83d0575fa0 RCX: 00007f83d0385d29 [ 87.840205][ T5934] RDX: 0000000020050800 RSI: 00000000200000c0 RDI: 0000000000000003 [ 87.848203][ T5934] RBP: 00007f83ce1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 87.856203][ T5934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.864210][ T5934] R13: 0000000000000000 R14: 00007f83d0575fa0 R15: 00007ffe8290fd68 [ 87.872244][ T5934] [ 87.881930][ T5874] usb 5-1: USB disconnect, device number 2 [ 88.160132][ T5913] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.250358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.423033][ T5945] sg_write: data in/out 1048540/17 bytes for SCSI command 0x0-- guessing data in; [ 88.423033][ T5945] program syz.1.11 not setting count and/or reply_len properly [ 89.290333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.007069][ T5913] usb 1-1: device descriptor read/all, error -71 [ 92.245972][ T59] cfg80211: failed to load regulatory.db [ 93.075283][ T5973] binder: 5972:5973 ioctl c0306201 20000380 returned -22 [ 93.086638][ T5973] Zero length message leads to an empty skb [ 95.640135][ T5925] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.466440][ T6007] 9pnet_fd: Insufficient options for proto=fd [ 100.080234][ T5913] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.225259][ T6012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29'. [ 100.234454][ T6012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.29'. [ 100.248074][ T5913] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 100.484606][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.501851][ T5913] usb 2-1: Product: syz [ 100.506083][ T5913] usb 2-1: Manufacturer: syz [ 100.511202][ T5913] usb 2-1: SerialNumber: syz [ 100.840757][ T6015] 9pnet_fd: Insufficient options for proto=fd [ 102.173031][ T5913] usb 2-1: config 0 descriptor?? [ 102.222421][ T6020] binder: 6019:6020 ioctl c0306201 20000380 returned -22 [ 102.231197][ T5913] usb 2-1: interface 1 not found [ 102.289542][ T5913] usb 2-1: USB disconnect, device number 2 [ 103.072920][ T6024] FAULT_INJECTION: forcing a failure. [ 103.072920][ T6024] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.086297][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz.4.35 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 103.096913][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.107025][ T6024] Call Trace: [ 103.110334][ T6024] [ 103.113301][ T6024] dump_stack_lvl+0x241/0x360 [ 103.118039][ T6024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.123253][ T6024] ? __pfx__printk+0x10/0x10 [ 103.127853][ T6024] ? __pfx_lock_release+0x10/0x10 [ 103.132889][ T6024] should_fail_ex+0x3b0/0x4e0 [ 103.137581][ T6024] _copy_from_iter+0x1e9/0x1c20 [ 103.142461][ T6024] ? __virt_addr_valid+0x183/0x530 [ 103.147621][ T6024] ? __alloc_skb+0x28f/0x440 [ 103.152259][ T6024] ? __pfx__copy_from_iter+0x10/0x10 [ 103.157585][ T6024] ? __virt_addr_valid+0x183/0x530 [ 103.162725][ T6024] ? __virt_addr_valid+0x183/0x530 [ 103.167840][ T6024] ? __virt_addr_valid+0x45f/0x530 [ 103.172965][ T6024] ? __phys_addr_symbol+0x2f/0x70 [ 103.178011][ T6024] ? __check_object_size+0x47a/0x730 [ 103.183311][ T6024] netlink_sendmsg+0x73d/0xcb0 [ 103.188173][ T6024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.193469][ T6024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.198757][ T6024] __sock_sendmsg+0x221/0x270 [ 103.203450][ T6024] ____sys_sendmsg+0x52a/0x7e0 [ 103.208241][ T6024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.213546][ T6024] ? __fget_files+0x2a/0x410 [ 103.218142][ T6024] ? __fget_files+0x2a/0x410 [ 103.222743][ T6024] __sys_sendmsg+0x269/0x350 [ 103.227338][ T6024] ? __pfx_lock_release+0x10/0x10 [ 103.232365][ T6024] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.237518][ T6024] ? __pfx_vfs_write+0x10/0x10 [ 103.242311][ T6024] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.248673][ T6024] ? do_syscall_64+0x100/0x230 [ 103.253446][ T6024] ? do_syscall_64+0xb6/0x230 [ 103.258135][ T6024] do_syscall_64+0xf3/0x230 [ 103.262647][ T6024] ? clear_bhb_loop+0x35/0x90 [ 103.267322][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.273219][ T6024] RIP: 0033:0x7f7275585d29 [ 103.277635][ T6024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.297260][ T6024] RSP: 002b:00007f7276343038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.305724][ T6024] RAX: ffffffffffffffda RBX: 00007f7275775fa0 RCX: 00007f7275585d29 [ 103.313703][ T6024] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 103.321679][ T6024] RBP: 00007f7276343090 R08: 0000000000000000 R09: 0000000000000000 [ 103.329656][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.337644][ T6024] R13: 0000000000000000 R14: 00007f7275775fa0 R15: 00007ffc83b2ee18 [ 103.345651][ T6024] [ 104.900427][ T974] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.640813][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 105.650364][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.660941][ T6033] syz.4.37 uses obsolete (PF_INET,SOCK_PACKET) [ 105.661397][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.677369][ T974] usb 1-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 105.686702][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.701240][ T974] usb 1-1: config 0 descriptor?? [ 105.873265][ T6036] netlink: 'syz.3.38': attribute type 10 has an invalid length. [ 105.973017][ T974] usbhid 1-1:0.0: can't add hid device: -71 [ 105.982035][ T974] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 106.082464][ T974] usb 1-1: USB disconnect, device number 4 [ 106.799894][ T6036] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.864834][ T6036] bond0: (slave team0): Enslaving as an active interface with an up link [ 107.070211][ T5912] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 107.210536][ T5912] usb 2-1: device descriptor read/64, error -71 [ 107.632737][ T5912] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 107.801303][ T5912] usb 2-1: device descriptor read/64, error -71 [ 107.899538][ T6055] overlayfs: failed to resolve './file1': -2 [ 108.111985][ T5912] usb usb2-port1: attempt power cycle [ 108.254980][ T3473] tipc: Subscription rejected, illegal request [ 108.580545][ T5912] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 109.869707][ T5912] usb 2-1: device descriptor read/8, error -71 [ 110.330278][ T5912] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 110.350784][ T5912] usb 2-1: device descriptor read/8, error -71 [ 110.461068][ T5912] usb usb2-port1: unable to enumerate USB device [ 111.724724][ T6068] syz.4.47 (6068) used greatest stack depth: 17976 bytes left [ 114.705328][ T6096] sd 0:0:1:0: device reset [ 115.402179][ T64] tipc: Subscription rejected, illegal request [ 116.740974][ T974] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.912097][ T974] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 116.974307][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.789297][ T974] usb 5-1: config 0 descriptor?? [ 118.039852][ T974] cp210x 5-1:0.0: cp210x converter detected [ 118.469661][ T974] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 118.861000][ T974] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 118.868848][ T974] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 118.972046][ T974] usb 5-1: cp210x converter now attached to ttyUSB0 [ 118.981905][ T6138] capability: warning: `syz.0.65' uses deprecated v2 capabilities in a way that may be insecure [ 119.083160][ T29] audit: type=1400 audit(1735631209.235:2): lsm=SMACK fn=smk_curacc_shm action=denied subject="w" object="_" requested=rw pid=6137 comm="syz.0.65" ipc_key=0 [ 119.260066][ T29] audit: type=1400 audit(1735631209.275:3): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=6137 comm="syz.0.65" path="/dev/net/tun" dev="devtmpfs" ino=708 [ 119.276523][ T59] usb 5-1: USB disconnect, device number 3 [ 119.292539][ T59] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 119.330319][ T29] audit: type=1400 audit(1735631209.275:4): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=6137 comm="syz.0.65" name="13" dev="tmpfs" ino=80 [ 119.349656][ T59] cp210x 5-1:0.0: device disconnected [ 119.355839][ T29] audit: type=1400 audit(1735631209.275:5): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=6137 comm="syz.0.65" name="fuse" dev="devtmpfs" ino=99 [ 120.550915][ T5913] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 120.881825][ T5913] usb 1-1: config 0 has no interfaces? [ 120.887671][ T5913] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 120.900552][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.71'. [ 120.928373][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.946804][ T6160] xfrm1: entered promiscuous mode [ 120.991338][ T5913] usb 1-1: config 0 descriptor?? [ 121.000131][ T6160] xfrm1: entered allmulticast mode [ 121.739957][ T5873] usb 1-1: USB disconnect, device number 5 [ 121.771560][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 122.968390][ T6173] syz.4.76 (6173) used greatest stack depth: 16944 bytes left [ 124.472709][ T6184] Unsupported ieee802154 address type: 0 [ 124.663462][ T6190] netlink: 'syz.4.80': attribute type 3 has an invalid length. [ 126.345751][ T29] audit: type=1400 audit(1735631216.445:6): lsm=SMACK fn=smk_curacc_shm action=denied subject="w" object="_" requested=rw pid=6201 comm="syz.4.83" ipc_key=0 [ 126.361955][ T29] audit: type=1400 audit(1735631216.455:7): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=6201 comm="syz.4.83" path="/dev/net/tun" dev="devtmpfs" ino=708 [ 126.381559][ T29] audit: type=1400 audit(1735631216.455:8): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=6201 comm="syz.4.83" name="20" dev="tmpfs" ino=117 [ 126.400686][ T29] audit: type=1400 audit(1735631216.455:9): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=6201 comm="syz.4.83" name="fuse" dev="devtmpfs" ino=99 [ 129.402302][ T974] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 129.440213][ T5873] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.660355][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 129.684689][ T6223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.91'. [ 129.697515][ T6223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.91'. [ 130.103133][ T5873] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.170687][ T974] usb 1-1: config 0 has no interfaces? [ 130.176244][ T974] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.203469][ T5873] usb 4-1: config 127 has an invalid interface number: 25 but max is 0 [ 130.228503][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.248771][ T5873] usb 4-1: config 127 has no interface number 0 [ 130.277772][ T974] usb 1-1: config 0 descriptor?? [ 130.302154][ T5873] usb 4-1: config 127 interface 25 has no altsetting 0 [ 130.328306][ T5873] usb 4-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 130.346095][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.393003][ T5873] usb 4-1: Product: syz [ 130.501029][ T5873] usb 4-1: Manufacturer: syz [ 130.552111][ T5873] usb 4-1: SerialNumber: syz [ 130.961900][ T5925] usb 1-1: USB disconnect, device number 6 [ 130.977681][ T5873] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 132.412165][ T5873] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 132.584839][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 132.594028][ T6242] nbd: socks must be embedded in a SOCK_ITEM attr [ 133.279012][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.287584][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.387867][ T29] audit: type=1400 audit(1735631223.465:10): lsm=SMACK fn=smk_curacc_shm action=denied subject="w" object="_" requested=rw pid=6243 comm="syz.3.97" ipc_key=0 [ 133.413989][ T29] audit: type=1400 audit(1735631223.475:11): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=6243 comm="syz.3.97" path="/dev/net/tun" dev="devtmpfs" ino=708 [ 133.449030][ T29] audit: type=1400 audit(1735631223.475:12): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=6243 comm="syz.3.97" name="16" dev="tmpfs" ino=98 [ 133.476624][ T5873] ueagle-atm 4-1:127.25: usbatm_usb_probe: bind failed: -19! [ 133.614460][ T5873] usb 4-1: USB disconnect, device number 2 [ 133.707614][ T29] audit: type=1400 audit(1735631223.475:13): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=6243 comm="syz.3.97" name="fuse" dev="devtmpfs" ino=99 [ 136.999201][ T6284] xt_TCPMSS: Only works on TCP SYN packets [ 140.047761][ T29] audit: type=1400 audit(1735631230.205:14): lsm=SMACK fn=smk_curacc_shm action=denied subject="w" object="_" requested=rw pid=6298 comm="syz.3.111" ipc_key=1 [ 140.104739][ T29] audit: type=1400 audit(1735631230.235:15): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=6298 comm="syz.3.111" path="/dev/net/tun" dev="devtmpfs" ino=708 [ 140.250950][ T29] audit: type=1400 audit(1735631230.235:16): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=6298 comm="syz.3.111" name="20" dev="tmpfs" ino=119 [ 140.269502][ T29] audit: type=1400 audit(1735631230.235:17): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=6298 comm="syz.3.111" name="fuse" dev="devtmpfs" ino=99 [ 140.473218][ T6310] binder: 6307:6310 ioctl c0306201 0 returned -14 [ 141.137578][ T5913] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 141.185574][ T6319] binder: 6318:6319 ioctl c0306201 20000380 returned -22 [ 141.320075][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.327728][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 141.336037][ T5913] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.357374][ T5913] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.578651][ T5913] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.694494][ T5913] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 141.703958][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 141.713008][ T5913] usb 3-1: Product: syz [ 141.717688][ T5913] usb 3-1: Manufacturer: syz [ 141.722791][ T5913] usb 3-1: SerialNumber: syz [ 141.751897][ T5913] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5 [ 141.805421][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 141.814790][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.823557][ T25] usb 5-1: Product: syz [ 141.829280][ T25] usb 5-1: Manufacturer: syz [ 141.834533][ T25] usb 5-1: SerialNumber: syz [ 141.852461][ T25] usb 5-1: config 0 descriptor?? [ 141.875816][ T25] usb 5-1: interface 1 not found [ 144.011723][ T6337] overlayfs: failed to resolve './file0': -2 [ 144.152173][ T5913] usb 5-1: USB disconnect, device number 4 [ 144.354100][ T5873] usb 3-1: USB disconnect, device number 3 [ 144.500733][ T5873] appletouch 3-1:1.0: input: appletouch disconnected [ 144.757989][ T29] audit: type=1400 audit(1735631234.915:18): lsm=SMACK fn=smk_curacc_shm action=denied subject="w" object="_" requested=rw pid=6345 comm="syz.3.125" ipc_key=2 [ 144.792044][ T29] audit: type=1400 audit(1735631234.945:19): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=6345 comm="syz.3.125" path="/dev/net/tun" dev="devtmpfs" ino=708 [ 144.906593][ T29] audit: type=1400 audit(1735631234.945:20): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=6345 comm="syz.3.125" name="24" dev="tmpfs" ino=147 [ 145.202128][ T29] audit: type=1400 audit(1735631234.945:21): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=6345 comm="syz.3.125" name="fuse" dev="devtmpfs" ino=99 [ 146.485249][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 146.505666][ T6359] xfrm1: entered promiscuous mode [ 146.511410][ T6359] xfrm1: entered allmulticast mode [ 146.540146][ T5925] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.618999][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 146.700028][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 146.717876][ T5925] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 146.752502][ T5925] usb 4-1: config 179 has no interface number 0 [ 146.759752][ T5925] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 146.779041][ T5925] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 146.795039][ T5925] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.807335][ T5925] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 146.824131][ T5925] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 146.838789][ T5925] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 146.862599][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.932546][ T6356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.264793][ T6362] sd 0:0:1:0: device reset [ 147.310771][ T5925] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input6 [ 150.482980][ T29] audit: type=1400 audit(1735631240.645:22): lsm=SMACK fn=smk_curacc_shm action=denied subject="w" object="_" requested=rw pid=6381 comm="syz.4.137" ipc_key=1 [ 150.657748][ T29] audit: type=1400 audit(1735631240.645:23): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=6381 comm="syz.4.137" path="/dev/net/tun" dev="devtmpfs" ino=708 [ 150.778608][ T29] audit: type=1400 audit(1735631240.645:24): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=6381 comm="syz.4.137" name="29" dev="tmpfs" ino=163 [ 150.808470][ T29] audit: type=1400 audit(1735631240.645:25): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=6381 comm="syz.4.137" name="fuse" dev="devtmpfs" ino=99 [ 151.289052][ T6388] binder: 6387:6388 ioctl c0306201 20000380 returned -22 [ 153.285901][ T25] usb 4-1: USB disconnect, device number 3 [ 153.285972][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 153.301095][ T25] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 153.301570][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 153.960292][ T6405] binder: 6403:6405 ioctl c0306201 20000380 returned -22 [ 154.830019][ T5838] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 154.973383][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 155.020071][ T5838] usb 1-1: Using ep0 maxpacket: 8 [ 155.027157][ T5838] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 155.050345][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.145712][ T5838] usb 1-1: config 0 descriptor?? [ 155.183123][ T5838] gspca_main: spca501-2.14.0 probing 0000:0000 [ 155.215625][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 155.658613][ T6430] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.899014][ T5838] gspca_spca501: reg write: error -110 [ 155.922810][ T5838] spca501 1-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 156.078911][ T5838] spca501 1-1:0.0: probe with driver spca501 failed with error -22 [ 156.242232][ T974] usb 1-1: USB disconnect, device number 7 [ 158.845834][ T6439] kvm: emulating exchange as write [ 159.956274][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'. [ 159.995432][ T6465] xfrm1: entered promiscuous mode [ 160.021598][ T6465] xfrm1: entered allmulticast mode [ 160.280977][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 161.271388][ T5925] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 161.528809][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.624247][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.716655][ T5925] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 161.789168][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.016256][ T5925] usb 3-1: config 0 descriptor?? [ 162.154410][ T6485] binder: 6484:6485 ioctl c0306201 20000380 returned -22 [ 162.236883][ T6476] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 162.250243][ T6476] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 162.511781][ T6489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.169'. [ 162.521148][ T6489] netlink: 40 bytes leftover after parsing attributes in process `syz.0.169'. [ 162.924143][ T5925] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 162.957703][ T5925] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input7 [ 162.992440][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 163.116116][ T5925] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 163.632102][ T5925] usb 3-1: USB disconnect, device number 4 [ 165.729310][ T6503] sg_write: data in/out 1048540/17 bytes for SCSI command 0x0-- guessing data in; [ 165.729310][ T6503] program syz.3.174 not setting count and/or reply_len properly [ 166.214852][ T6509] netlink: 36 bytes leftover after parsing attributes in process `syz.2.177'. [ 166.670887][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 166.969287][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51 [ 166.979467][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.174629][ T8] usb 3-1: config 0 descriptor?? [ 168.168799][ T8] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4 [ 169.294090][ T8] gspca_sn9c20x: Write register 1001 failed -110 [ 169.300564][ T8] gspca_sn9c20x: Device initialization failed [ 169.306717][ T8] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 169.638848][ T25] usb 3-1: USB disconnect, device number 5 [ 170.150823][ T6529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.290919][ T6532] binder: 6531:6532 ioctl c0306201 20000380 returned -22 [ 171.478836][ T6546] binder: 6545:6546 ioctl c0306201 20000380 returned -22 [ 171.710356][ T974] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 172.134985][ T974] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 172.155472][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.692844][ T974] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 172.825211][ T974] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 172.964702][ T974] usb 2-1: Manufacturer: syz [ 173.140704][ T974] usb 2-1: config 0 descriptor?? [ 173.252096][ T974] rc_core: IR keymap rc-hauppauge not found [ 173.290294][ T974] Registered IR keymap rc-empty [ 173.309440][ T974] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 173.378945][ T974] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 173.408114][ T6543] loop6: detected capacity change from 0 to 524287999 [ 173.436036][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.445437][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.624282][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.633598][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.671846][ T6561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.691729][ T6561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.202220][ T5136] Bluetooth: hci4: command 0x0405 tx timeout [ 174.260253][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.269471][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.302059][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.311351][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.327997][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.337271][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.443581][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.452949][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.207984][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.217323][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.300618][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.309991][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.339427][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.348829][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.430008][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.569043][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 175.577032][ T3473] loop: Write error at byte offset 1, length 4096. [ 175.584091][ T6543] Dev loop6: unable to read RDB block 8 [ 175.601369][ T6543] loop6: unable to read partition table [ 175.607192][ T6543] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 175.899034][ C0] igorplugusb 2-1:0.0: receive overflow, at least 33 lost [ 175.970988][ T6578] sd 0:0:1:0: device reset [ 176.307084][ T6561] Bluetooth: MGMT ver 1.23 [ 176.777365][ T5913] usb 2-1: USB disconnect, device number 7 [ 177.719109][ T6593] binder: 6591:6593 ioctl c0306201 20000380 returned -22 [ 177.797095][ T6592] Failed to get privilege flags for destination (handle=0x2:0x0) [ 178.073299][ T6592] netlink: 48 bytes leftover after parsing attributes in process `syz.3.200'. [ 178.560466][ T5837] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 178.729311][ T5837] ================================================================== [ 178.737423][ T5837] BUG: KASAN: slab-use-after-free in hci_sock_get_cookie+0x49/0x50 [ 178.745338][ T5837] Read of size 4 at addr ffff888026e435b8 by task kworker/u9:8/5837 [ 178.753330][ T5837] [ 178.755671][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: kworker/u9:8 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 178.766507][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 178.776557][ T5837] Workqueue: hci0 hci_cmd_sync_work [ 178.781772][ T5837] Call Trace: [ 178.785049][ T5837] [ 178.787996][ T5837] dump_stack_lvl+0x241/0x360 [ 178.792694][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.797945][ T5837] ? __pfx__printk+0x10/0x10 [ 178.802537][ T5837] ? _printk+0xd5/0x120 [ 178.806700][ T5837] ? __virt_addr_valid+0x183/0x530 [ 178.811820][ T5837] ? __virt_addr_valid+0x183/0x530 [ 178.816950][ T5837] print_report+0x169/0x550 [ 178.821459][ T5837] ? __virt_addr_valid+0x183/0x530 [ 178.826578][ T5837] ? __virt_addr_valid+0x183/0x530 [ 178.831691][ T5837] ? __virt_addr_valid+0x45f/0x530 [ 178.836802][ T5837] ? __phys_addr+0xba/0x170 [ 178.841305][ T5837] ? hci_sock_get_cookie+0x49/0x50 [ 178.846419][ T5837] kasan_report+0x143/0x180 [ 178.850931][ T5837] ? hci_sock_get_cookie+0x49/0x50 [ 178.856085][ T5837] hci_sock_get_cookie+0x49/0x50 [ 178.861023][ T5837] mgmt_cmd_status+0x1be/0x4d0 [ 178.865786][ T5837] mgmt_set_powered_complete+0x34c/0x720 [ 178.871440][ T5837] ? __pfx_hci_set_powered_sync+0x10/0x10 [ 178.877157][ T5837] ? __pfx_mgmt_set_powered_complete+0x10/0x10 [ 178.883319][ T5837] ? __pfx_set_powered_sync+0x10/0x10 [ 178.888694][ T5837] ? __pfx_set_powered_sync+0x10/0x10 [ 178.894067][ T5837] ? hci_sock_get_channel+0xd/0x50 [ 178.899200][ T5837] ? mgmt_pending_find+0x112/0x130 [ 178.904314][ T5837] ? __pfx_mgmt_set_powered_complete+0x10/0x10 [ 178.910469][ T5837] hci_cmd_sync_work+0x280/0x400 [ 178.915410][ T5837] ? process_scheduled_works+0x976/0x1840 [ 178.921143][ T5837] process_scheduled_works+0xa66/0x1840 [ 178.926716][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 178.932706][ T5837] ? assign_work+0x364/0x3d0 [ 178.937301][ T5837] worker_thread+0x870/0xd30 [ 178.941908][ T5837] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 178.947801][ T5837] ? __kthread_parkme+0x169/0x1d0 [ 178.952830][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 178.957937][ T5837] kthread+0x2f0/0x390 [ 178.962003][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 178.967127][ T5837] ? __pfx_kthread+0x10/0x10 [ 178.971717][ T5837] ret_from_fork+0x4b/0x80 [ 178.976125][ T5837] ? __pfx_kthread+0x10/0x10 [ 178.980714][ T5837] ret_from_fork_asm+0x1a/0x30 [ 178.985504][ T5837] [ 178.988526][ T5837] [ 178.990841][ T5837] Allocated by task 6561: [ 178.995156][ T5837] kasan_save_track+0x3f/0x80 [ 178.999852][ T5837] __kasan_kmalloc+0x98/0xb0 [ 179.004455][ T5837] __kmalloc_noprof+0x285/0x4c0 [ 179.009326][ T5837] sk_prot_alloc+0xe0/0x210 [ 179.013823][ T5837] sk_alloc+0x38/0x370 [ 179.017896][ T5837] bt_sock_alloc+0x3c/0x340 [ 179.022390][ T5837] hci_sock_create+0xa1/0x190 [ 179.027058][ T5837] bt_sock_create+0x161/0x230 [ 179.031729][ T5837] __sock_create+0x4c0/0xa30 [ 179.036331][ T5837] __sys_socket+0x150/0x3c0 [ 179.040835][ T5837] __x64_sys_socket+0x7a/0x90 [ 179.045513][ T5837] do_syscall_64+0xf3/0x230 [ 179.050014][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.055905][ T5837] [ 179.058255][ T5837] Freed by task 6601: [ 179.062234][ T5837] kasan_save_track+0x3f/0x80 [ 179.066927][ T5837] kasan_save_free_info+0x40/0x50 [ 179.071974][ T5837] __kasan_slab_free+0x59/0x70 [ 179.076735][ T5837] kfree+0x196/0x430 [ 179.080630][ T5837] __sk_destruct+0x479/0x5f0 [ 179.085217][ T5837] mgmt_pending_remove+0x13e/0x1a0 [ 179.090323][ T5837] mgmt_pending_foreach+0xd1/0x130 [ 179.095426][ T5837] mgmt_index_removed+0x133/0x390 [ 179.100462][ T5837] hci_sock_bind+0xcce/0x1150 [ 179.105152][ T5837] __sys_bind+0x1e4/0x290 [ 179.109475][ T5837] __x64_sys_bind+0x7a/0x90 [ 179.113971][ T5837] do_syscall_64+0xf3/0x230 [ 179.118476][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.124371][ T5837] [ 179.126685][ T5837] The buggy address belongs to the object at ffff888026e43000 [ 179.126685][ T5837] which belongs to the cache kmalloc-2k of size 2048 [ 179.140732][ T5837] The buggy address is located 1464 bytes inside of [ 179.140732][ T5837] freed 2048-byte region [ffff888026e43000, ffff888026e43800) [ 179.154710][ T5837] [ 179.157042][ T5837] The buggy address belongs to the physical page: [ 179.163468][ T5837] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26e40 [ 179.172221][ T5837] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 179.180740][ T5837] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 179.188301][ T5837] page_type: f5(slab) [ 179.192291][ T5837] raw: 00fff00000000040 ffff88801ac42000 dead000000000100 dead000000000122 [ 179.200878][ T5837] raw: 0000000000000000 0000000000080008 00000001f5000000 0000000000000000 [ 179.209479][ T5837] head: 00fff00000000040 ffff88801ac42000 dead000000000100 dead000000000122 [ 179.218155][ T5837] head: 0000000000000000 0000000000080008 00000001f5000000 0000000000000000 [ 179.226821][ T5837] head: 00fff00000000003 ffffea00009b9001 ffffffffffffffff 0000000000000000 [ 179.235493][ T5837] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 179.244156][ T5837] page dumped because: kasan: bad access detected [ 179.250567][ T5837] page_owner tracks the page as allocated [ 179.256288][ T5837] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 64, tgid 64 (kworker/u8:5), ts 9545893470, free_ts 0 [ 179.276348][ T5837] post_alloc_hook+0x1f3/0x230 [ 179.281113][ T5837] get_page_from_freelist+0x3651/0x37a0 [ 179.286657][ T5837] __alloc_pages_noprof+0x292/0x710 [ 179.291850][ T5837] alloc_pages_mpol_noprof+0x3e8/0x680 [ 179.297332][ T5837] alloc_slab_page+0x6a/0x110 [ 179.302001][ T5837] allocate_slab+0x5a/0x2b0 [ 179.306499][ T5837] ___slab_alloc+0xc27/0x14a0 [ 179.311169][ T5837] __slab_alloc+0x58/0xa0 [ 179.315494][ T5837] __kmalloc_noprof+0x2e6/0x4c0 [ 179.320355][ T5837] scsi_alloc_target+0x132/0xca0 [ 179.325285][ T5837] __scsi_scan_target+0x17d/0x1080 [ 179.330405][ T5837] scsi_scan_host_selected+0x37e/0x690 [ 179.335858][ T5837] do_scan_async+0x138/0x7a0 [ 179.340437][ T5837] async_run_entry_fn+0xa8/0x420 [ 179.345372][ T5837] process_scheduled_works+0xa66/0x1840 [ 179.350913][ T5837] worker_thread+0x870/0xd30 [ 179.355499][ T5837] page_owner free stack trace missing [ 179.360854][ T5837] [ 179.363167][ T5837] Memory state around the buggy address: [ 179.368789][ T5837] ffff888026e43480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.376842][ T5837] ffff888026e43500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.384894][ T5837] >ffff888026e43580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.392946][ T5837] ^ [ 179.398824][ T5837] ffff888026e43600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.406890][ T5837] ffff888026e43680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.414957][ T5837] ================================================================== [ 179.423109][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.445774][ T5837] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 179.453004][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:8 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 179.463878][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.473956][ T5837] Workqueue: hci0 hci_cmd_sync_work [ 179.479182][ T5837] Call Trace: [ 179.482473][ T5837] [ 179.485410][ T5837] dump_stack_lvl+0x241/0x360 [ 179.490103][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.495311][ T5837] ? __pfx__printk+0x10/0x10 [ 179.499911][ T5837] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 179.505910][ T5837] ? vscnprintf+0x5d/0x90 [ 179.510247][ T5837] panic+0x349/0x880 [ 179.514152][ T5837] ? check_panic_on_warn+0x21/0xb0 [ 179.519273][ T5837] ? __pfx_panic+0x10/0x10 [ 179.523746][ T5837] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 179.529753][ T5837] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 179.536093][ T5837] check_panic_on_warn+0x86/0xb0 [ 179.541040][ T5837] ? hci_sock_get_cookie+0x49/0x50 [ 179.546156][ T5837] end_report+0x77/0x160 [ 179.550411][ T5837] kasan_report+0x154/0x180 [ 179.554931][ T5837] ? hci_sock_get_cookie+0x49/0x50 [ 179.560048][ T5837] hci_sock_get_cookie+0x49/0x50 [ 179.564989][ T5837] mgmt_cmd_status+0x1be/0x4d0 [ 179.569776][ T5837] mgmt_set_powered_complete+0x34c/0x720 [ 179.575415][ T5837] ? __pfx_hci_set_powered_sync+0x10/0x10 [ 179.581154][ T5837] ? __pfx_mgmt_set_powered_complete+0x10/0x10 [ 179.587319][ T5837] ? __pfx_set_powered_sync+0x10/0x10 [ 179.592873][ T5837] ? __pfx_set_powered_sync+0x10/0x10 [ 179.598256][ T5837] ? hci_sock_get_channel+0xd/0x50 [ 179.603387][ T5837] ? mgmt_pending_find+0x112/0x130 [ 179.608511][ T5837] ? __pfx_mgmt_set_powered_complete+0x10/0x10 [ 179.614672][ T5837] hci_cmd_sync_work+0x280/0x400 [ 179.619625][ T5837] ? process_scheduled_works+0x976/0x1840 [ 179.625360][ T5837] process_scheduled_works+0xa66/0x1840 [ 179.630930][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 179.636927][ T5837] ? assign_work+0x364/0x3d0 [ 179.641533][ T5837] worker_thread+0x870/0xd30 [ 179.646128][ T5837] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 179.652029][ T5837] ? __kthread_parkme+0x169/0x1d0 [ 179.657057][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 179.662171][ T5837] kthread+0x2f0/0x390 [ 179.666246][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 179.671357][ T5837] ? __pfx_kthread+0x10/0x10 [ 179.675954][ T5837] ret_from_fork+0x4b/0x80 [ 179.680374][ T5837] ? __pfx_kthread+0x10/0x10 [ 179.684971][ T5837] ret_from_fork_asm+0x1a/0x30 [ 179.689747][ T5837] [ 179.693110][ T5837] Kernel Offset: disabled [ 179.697442][ T5837] Rebooting in 86400 seconds..