last executing test programs: 22.28526019s ago: executing program 3 (id=552): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chown(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000380)='/proc.sys/net/p\x9aJ\xdc\xd6\'\xd9ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_io_uring_setup(0xecb, &(0x7f0000000200)={0x0, 0xb6ea, 0x20, 0x0, 0x233}, 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000240)=ANY=[], 0x10000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 18.298747869s ago: executing program 0 (id=557): r0 = socket$inet(0x2, 0xa, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48081) shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28020480) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONERANGE(r3, 0x4020940d, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x100, 0x9004, 0x0, 0x8, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x2000000000000096, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x2, 0x888f, 0x1, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x10007, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x1, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xf6, 0x4, 0x406, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 17.298960499s ago: executing program 0 (id=561): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chown(0x0, 0x0, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_io_uring_setup(0xecb, &(0x7f0000000200)={0x0, 0xb6ea, 0x20, 0x0, 0x233, 0x0, r6}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 16.584486552s ago: executing program 2 (id=562): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 15.503560676s ago: executing program 1 (id=563): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) 14.761205773s ago: executing program 2 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) 13.944425514s ago: executing program 1 (id=565): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4f", 0x47}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000f00)="68a55df1c6bed91373cc79fcf0ea4c17187a680c0c711ae1d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1", 0x31}], 0x5}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f0000001140)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0) 12.494687126s ago: executing program 2 (id=567): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 12.366265859s ago: executing program 1 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB="010000000000000000fcffffff00001000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000400"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x0, 0x3, 0xa, 0xfffffffffffffffe, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) fsmount(r6, 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='nilfs2\x00', 0x21900b4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) 11.817627659s ago: executing program 2 (id=569): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000380)='/proc.sys/net/p\x9aJ\xdc\xd6\'\xd9ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_io_uring_setup(0xecb, &(0x7f0000000200)={0x0, 0xb6ea, 0x20, 0x0, 0x233, 0x0, r6}, 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000240)=ANY=[], 0x10000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 10.93229072s ago: executing program 1 (id=570): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) 10.85228029s ago: executing program 3 (id=571): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3a, 0x0, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) fcntl$dupfd(r3, 0x0, r3) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x200000) r4 = socket$inet(0xa, 0x800, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) 9.812721211s ago: executing program 1 (id=573): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$usbfs(0x0, 0x205, 0x2481) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) socket(0x1e, 0x4, 0x0) socket$inet6(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) r6 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x10, 0x700, 0x0, 0x1, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x6, 0x2}]}}}}}) 8.780129132s ago: executing program 4 (id=574): socket$alg(0x26, 0x5, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 7.371016812s ago: executing program 1 (id=575): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chown(0x0, 0x0, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000380)='/proc.sys/net/p\x9aJ\xdc\xd6\'\xd9ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) open_by_handle_at(r3, &(0x7f0000000240)=ANY=[], 0x10000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 6.445120266s ago: executing program 3 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r5, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x111}, {&(0x7f00000004c0)="d3e955810cc890ed04c8917c975b7617062049e4d95030c4e4293924fedf7de74876c6d350c0a534858dce18fc2264ada02a300f146da94b489da57913fed449b5e3b1d723edd45d94ccd7c2192590ae9c2731af6f782779a54184faf25dbff145eb6d7924b19fa4450be6ad522a44c920ef6908484c31fa1fee8f43bb05e17e1312ebb68fb6bb832d0ec84e85d55c0c1b6272d65de01ef8a110e7eed3f107af0922218f523b9c0f5c45acc1d6fddf2305f95669e9c73e773403963abb9335d524deaaf6f9db04b58432891b9ad20675571b", 0xd2}], 0x2}}], 0x1, 0x0) sendto$inet(r5, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 5.479324445s ago: executing program 4 (id=577): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x1d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000cc0)={0x0, &(0x7f0000000080)}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='cq_reschedule\x00', 0xffffffffffffffff, 0x0, 0xa}, 0x18) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) 5.202617929s ago: executing program 3 (id=578): unshare(0x22020600) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00') setns(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x12, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x9}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) read(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)=0x10000000) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r3, 0x80000001) 4.995030822s ago: executing program 0 (id=579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000020839f1000034fffe00e1fc06900101010101ac1414aa00004e22774a2562daf2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000290780932080a000000020000000b0502"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r3 = socket(0x1, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x1000, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0x1c0, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x190, 0x8, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0xe8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x81}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xfffffffffffffdf2, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0c9939d757d796a1e7bc26b9664185fddbe74f5b51f2899e475ad95bcf6368"}]}, {0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) 4.444251084s ago: executing program 4 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB="010000000000000000fcffffff00001000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000400"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x0, 0x3, 0xa, 0xfffffffffffffffe, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) fsmount(r6, 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='nilfs2\x00', 0x21900b4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) 3.509803155s ago: executing program 0 (id=581): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x2}, {@in=@empty, 0x0, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x200000000, 0x0, 0x7, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x8d, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 3.410392634s ago: executing program 4 (id=582): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2, 0x0, &(0x7f00000002c0)='\x00\x00', 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x50) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 3.242826327s ago: executing program 3 (id=583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000020839f1000034fffe00e1fc06900101010101ac1414aa00004e22774a2562daf2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000290780932080a000000020000000b0502"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) socket(0x1, 0x1, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x1000, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0x1c0, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x190, 0x8, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0xe8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x81}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xfffffffffffffdf2, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0c9939d757d796a1e7bc26b9664185fddbe74f5b51f2899e475ad95bcf6368"}]}, {0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) 2.575759557s ago: executing program 2 (id=584): socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x80800, 0x0) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x481, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYRESOCT=r1, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xb7, &(0x7f0000000140)=""/183, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r7, &(0x7f0000000340), 0x0, 0x8000, 0x0, 0x0) write$binfmt_aout(r7, 0x0, 0xfdef) sendto$inet6(r7, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r7, 0x0, 0x78) memfd_create(&(0x7f0000000200)='\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xfe\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xa8ddj\x03\xbd\x16\x93\xb9r\x04h\xaa\x1aT\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xa3[\x00\xa9C%}C\xf4c\xba\xf9H\x98}<\x98m#\xf5\x9e\xd3\xea\x00\x00\x00\x00', 0x3) 2.368212816s ago: executing program 4 (id=585): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48081) shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28020480) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONERANGE(r2, 0x4020940d, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x100, 0x9004, 0x0, 0x8, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x2000000000000096, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x2, 0x888f, 0x1, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x10007, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x1, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xf6, 0x4, 0x406, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 1.601031078s ago: executing program 0 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3a, 0x0, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) fcntl$dupfd(r3, 0x0, r3) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x200000) r4 = socket$inet(0xa, 0x800, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) 1.543412619s ago: executing program 2 (id=587): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_pidfd_open(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$unix(r3, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r5, &(0x7f0000003440)={0x2020}, 0x2020) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@default, @default, 0x3, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 267.08485ms ago: executing program 3 (id=588): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2d", 0xba}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6", 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068cfeec34abc2cbd94b9b12d057fa9d4", 0x1eb}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 225.216704ms ago: executing program 4 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r6, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x111}, {&(0x7f00000004c0)="d3e955810cc890ed04c8917c975b7617062049e4d95030c4e4293924fedf7de74876c6d350c0a534858dce18fc2264ada02a300f146da94b489da57913fed449b5e3b1d723edd45d94ccd7c2192590ae9c2731af6f782779a54184faf25dbff145eb6d7924b19fa4450be6ad522a44c920ef6908484c31fa1fee8f43bb05e17e1312ebb68fb6bb832d0ec84e85d55c0c1b6272d65de01ef8a110e7eed3f107af0922218f523b9c0f5c45acc1d6fddf2305f95669e9c73e773403963abb9335d524deaaf6f9db04b58432891b9ad20675571b", 0xd2}], 0x2}}], 0x1, 0x0) sendto$inet(r6, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 0s ago: executing program 0 (id=590): socket$inet_udp(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x80001, 0x84) close(0x4) socket$inet6(0xa, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x20441, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000200)=r1}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 79.560953][ T5825] cgroup: Unknown subsys name 'net' [ 79.714117][ T5825] cgroup: Unknown subsys name 'cpuset' [ 79.723231][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.369987][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.049025][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.061524][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.070758][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.080424][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.091414][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.099197][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.103214][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.107380][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.120575][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.120993][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.135887][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.140831][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.144808][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.158324][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.158424][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.173815][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.174819][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.188855][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.231936][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.239691][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.281940][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.289468][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.300501][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.308244][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.321730][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.867587][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 84.978254][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 85.035223][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 85.142944][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 85.225337][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.233117][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.240800][ T5836] bridge_slave_0: entered allmulticast mode [ 85.248103][ T5836] bridge_slave_0: entered promiscuous mode [ 85.283427][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.290643][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.297780][ T5836] bridge_slave_1: entered allmulticast mode [ 85.306365][ T5836] bridge_slave_1: entered promiscuous mode [ 85.313876][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 85.396854][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.404785][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.415484][ T5837] bridge_slave_0: entered allmulticast mode [ 85.422785][ T5837] bridge_slave_0: entered promiscuous mode [ 85.485477][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.493641][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.500990][ T5837] bridge_slave_1: entered allmulticast mode [ 85.508180][ T5837] bridge_slave_1: entered promiscuous mode [ 85.514983][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.524691][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.532150][ T5838] bridge_slave_0: entered allmulticast mode [ 85.539282][ T5838] bridge_slave_0: entered promiscuous mode [ 85.548159][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.555966][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.563236][ T5838] bridge_slave_1: entered allmulticast mode [ 85.570823][ T5838] bridge_slave_1: entered promiscuous mode [ 85.585997][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.599542][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.734728][ T5836] team0: Port device team_slave_0 added [ 85.744286][ T5836] team0: Port device team_slave_1 added [ 85.758784][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.772580][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.784009][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.793688][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.801097][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.808877][ T5845] bridge_slave_0: entered allmulticast mode [ 85.816568][ T5845] bridge_slave_0: entered promiscuous mode [ 85.866842][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.882164][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.889460][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.897138][ T5845] bridge_slave_1: entered allmulticast mode [ 85.904573][ T5845] bridge_slave_1: entered promiscuous mode [ 86.007530][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.014823][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.041444][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.053089][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.060561][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.067741][ T5852] bridge_slave_0: entered allmulticast mode [ 86.075094][ T5852] bridge_slave_0: entered promiscuous mode [ 86.084120][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.091509][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.098668][ T5852] bridge_slave_1: entered allmulticast mode [ 86.107044][ T5852] bridge_slave_1: entered promiscuous mode [ 86.116487][ T5837] team0: Port device team_slave_0 added [ 86.129729][ T5838] team0: Port device team_slave_0 added [ 86.139186][ T5838] team0: Port device team_slave_1 added [ 86.147931][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.161875][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.171663][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.178633][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.207860][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.241184][ T5837] team0: Port device team_slave_1 added [ 86.280812][ T5840] Bluetooth: hci0: command tx timeout [ 86.290527][ T5840] Bluetooth: hci1: command tx timeout [ 86.290914][ T5850] Bluetooth: hci3: command tx timeout [ 86.314799][ T5845] team0: Port device team_slave_0 added [ 86.324233][ T5845] team0: Port device team_slave_1 added [ 86.357559][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.370200][ T5850] Bluetooth: hci2: command tx timeout [ 86.370219][ T5840] Bluetooth: hci4: command tx timeout [ 86.415746][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.422812][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.448821][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.461579][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.468682][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.497367][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.510949][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.536102][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.543123][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.570441][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.594691][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.601773][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.628091][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.640618][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.647586][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.673571][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.710103][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.717099][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.743361][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.774135][ T5836] hsr_slave_0: entered promiscuous mode [ 86.781117][ T5836] hsr_slave_1: entered promiscuous mode [ 86.807605][ T5852] team0: Port device team_slave_0 added [ 86.821690][ T5852] team0: Port device team_slave_1 added [ 87.038974][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.048306][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.078528][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.102378][ T5845] hsr_slave_0: entered promiscuous mode [ 87.109158][ T5845] hsr_slave_1: entered promiscuous mode [ 87.119289][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.127140][ T5845] Cannot create hsr debugfs directory [ 87.145695][ T5837] hsr_slave_0: entered promiscuous mode [ 87.156178][ T5837] hsr_slave_1: entered promiscuous mode [ 87.162821][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.174215][ T5837] Cannot create hsr debugfs directory [ 87.193248][ T5838] hsr_slave_0: entered promiscuous mode [ 87.199615][ T5838] hsr_slave_1: entered promiscuous mode [ 87.205973][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.213751][ T5838] Cannot create hsr debugfs directory [ 87.220265][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.227228][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.253719][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.490126][ T5852] hsr_slave_0: entered promiscuous mode [ 87.496485][ T5852] hsr_slave_1: entered promiscuous mode [ 87.503160][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.510932][ T5852] Cannot create hsr debugfs directory [ 87.861799][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.888689][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.899737][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.938052][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.003330][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.023295][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.042103][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.055828][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.157638][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.172965][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.209922][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.236355][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.305216][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.342147][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.354925][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.360056][ T5850] Bluetooth: hci3: command tx timeout [ 88.362603][ T5840] Bluetooth: hci1: command tx timeout [ 88.367117][ T5850] Bluetooth: hci0: command tx timeout [ 88.411536][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.435578][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.440329][ T5850] Bluetooth: hci2: command tx timeout [ 88.447613][ T5851] Bluetooth: hci4: command tx timeout [ 88.457141][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.497011][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.504434][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.545318][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.552493][ T4564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.569768][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.592146][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.603157][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.621260][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.636159][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.717898][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.753235][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.760458][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.807736][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.814986][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.861993][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.923211][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.969169][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.976387][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.022221][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.029417][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.065548][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.153772][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.252542][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.259717][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.272188][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.279362][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.368719][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.441677][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.583145][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.595164][ T5836] veth0_vlan: entered promiscuous mode [ 89.613736][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.627194][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.634429][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.655471][ T5836] veth1_vlan: entered promiscuous mode [ 89.686748][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.694016][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.817654][ T5836] veth0_macvtap: entered promiscuous mode [ 89.866462][ T5836] veth1_macvtap: entered promiscuous mode [ 89.883327][ T5837] veth0_vlan: entered promiscuous mode [ 89.928088][ T5837] veth1_vlan: entered promiscuous mode [ 89.969216][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.999788][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.031921][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.064656][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.082213][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.110203][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.118981][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.134060][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.159431][ T5837] veth0_macvtap: entered promiscuous mode [ 90.223760][ T5837] veth1_macvtap: entered promiscuous mode [ 90.328305][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.401640][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.437569][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.442402][ T5851] Bluetooth: hci0: command tx timeout [ 90.452898][ T5850] Bluetooth: hci1: command tx timeout [ 90.458357][ T5850] Bluetooth: hci3: command tx timeout [ 90.467389][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.476582][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.486221][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.522438][ T5850] Bluetooth: hci4: command tx timeout [ 90.527913][ T5850] Bluetooth: hci2: command tx timeout [ 90.578234][ T5845] veth0_vlan: entered promiscuous mode [ 90.599657][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.617237][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.628499][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.683588][ T5845] veth1_vlan: entered promiscuous mode [ 90.716021][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.730272][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.769331][ T5845] veth0_macvtap: entered promiscuous mode [ 90.785123][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.799329][ T5845] veth1_macvtap: entered promiscuous mode [ 90.820830][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.875176][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.896833][ T5852] veth0_vlan: entered promiscuous mode [ 90.926373][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.935255][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.948801][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.963268][ T5852] veth1_vlan: entered promiscuous mode [ 91.013221][ T5838] veth0_vlan: entered promiscuous mode [ 91.023586][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.048549][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.058191][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.067444][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.083562][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.132526][ T5838] veth1_vlan: entered promiscuous mode [ 91.139471][ T5852] veth0_macvtap: entered promiscuous mode [ 91.146436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.290937][ T5965] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.319003][ T5852] veth1_macvtap: entered promiscuous mode [ 92.014745][ T979] cfg80211: failed to load regulatory.db [ 92.230164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.450737][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.579049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.660192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.668663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.677306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.686696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 92.695495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.704022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.712594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.894839][ T5850] Bluetooth: hci3: command tx timeout [ 92.900937][ T5850] Bluetooth: hci0: command tx timeout [ 92.916584][ T5850] Bluetooth: hci1: command tx timeout [ 92.932119][ T5850] Bluetooth: hci2: command tx timeout [ 92.937863][ T5850] Bluetooth: hci4: command tx timeout [ 93.262332][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.273494][ T5852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.283054][ T5852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.295770][ T5852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.304869][ T5852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.672791][ T5838] veth0_macvtap: entered promiscuous mode [ 93.712191][ T5838] veth1_macvtap: entered promiscuous mode [ 94.467683][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.478878][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.506961][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.597375][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.645376][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.656744][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.668079][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.676974][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.718116][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.741010][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.771933][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.784347][ T30] audit: type=1326 audit(1752578225.502:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 94.816161][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.880361][ T30] audit: type=1326 audit(1752578225.532:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 94.972972][ T30] audit: type=1326 audit(1752578225.532:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 95.011419][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.019382][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.061297][ T30] audit: type=1326 audit(1752578225.532:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 95.148550][ T30] audit: type=1326 audit(1752578225.532:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 95.201759][ T30] audit: type=1326 audit(1752578225.532:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 95.223229][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.237911][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.257047][ T30] audit: type=1326 audit(1752578225.532:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 95.492926][ T30] audit: type=1326 audit(1752578225.532:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 95.514477][ T30] audit: type=1326 audit(1752578225.532:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 95.539128][ T30] audit: type=1326 audit(1752578225.532:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 96.400131][ T4572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.409411][ T4572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.106218][ T6009] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 98.206452][ T6011] overlayfs: failed to resolve './file0': -2 [ 98.930240][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.020751][ T5904] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.240961][ T6019] mmap: syz.0.1 (6019) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.968356][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.010855][ T10] usb 3-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.166795][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.039487][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.066952][ T5904] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.120506][ T5911] IPVS: starting estimator thread 0... [ 101.148094][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 101.182754][ T5904] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.196270][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.225037][ T5904] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 101.256823][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.290513][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.330278][ T6027] IPVS: using max 27 ests per chain, 64800 per kthread [ 101.387268][ T10] usb 3-1: config 0 descriptor?? [ 101.397935][ T10] usb 3-1: can't set config #0, error -71 [ 101.405179][ T5904] usb 5-1: config 0 descriptor?? [ 101.415833][ T5904] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 101.430875][ T10] usb 3-1: USB disconnect, device number 2 [ 101.767386][ T6029] dummy0: entered promiscuous mode [ 102.109523][ T6029] dummy0: entered allmulticast mode [ 102.465253][ T5904] usb 5-1: USB disconnect, device number 2 [ 102.546165][ T6041] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.162320][ T6046] netlink: 44 bytes leftover after parsing attributes in process `syz.3.20'. [ 108.017210][ T5904] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.866890][ T6082] netlink: 44 bytes leftover after parsing attributes in process `syz.1.26'. [ 109.462604][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.520145][ T5904] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 109.833554][ T5904] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 110.164122][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.215937][ T5904] usb 1-1: config 0 descriptor?? [ 110.909572][ T6102] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 110.917653][ T6102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.33'. [ 111.503118][ T5911] usb 1-1: USB disconnect, device number 2 [ 122.142929][ T6174] netlink: 44 bytes leftover after parsing attributes in process `syz.4.53'. [ 123.704338][ T5911] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.449637][ T5911] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.229493][ T5911] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.239628][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.251542][ T5911] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 125.260681][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.353314][ T5911] usb 3-1: config 0 descriptor?? [ 125.633665][ T24] IPVS: starting estimator thread 0... [ 126.640205][ T6193] IPVS: using max 31 ests per chain, 74400 per kthread [ 127.028053][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 127.070111][ T5911] usb 3-1: string descriptor 0 read error: -71 [ 127.096252][ T5911] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 127.125695][ T5911] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 127.141950][ T5911] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 127.152184][ T5911] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 127.164056][ T5911] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 127.504419][ T5911] usb 3-1: USB disconnect, device number 3 [ 133.042807][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.049405][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.744701][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 134.826235][ T6257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 135.922804][ T6268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.77'. [ 139.708672][ T6291] syz.1.86 (6291) used greatest stack depth: 16880 bytes left [ 140.787249][ T6300] netlink: 44 bytes leftover after parsing attributes in process `syz.0.89'. [ 141.710019][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 141.710037][ T30] audit: type=1326 audit(1752578272.422:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a18e929 code=0x7ffc0000 [ 141.846342][ T30] audit: type=1326 audit(1752578272.422:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a18e929 code=0x7ffc0000 [ 141.909940][ T30] audit: type=1326 audit(1752578272.422:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab6a18e929 code=0x7ffc0000 [ 141.980812][ T30] audit: type=1326 audit(1752578272.422:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a18e929 code=0x7ffc0000 [ 142.246214][ T30] audit: type=1326 audit(1752578272.422:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a18e929 code=0x7ffc0000 [ 142.267713][ T30] audit: type=1326 audit(1752578272.422:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab6a18e929 code=0x7ffc0000 [ 142.274289][ T5902] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 143.059954][ T30] audit: type=1326 audit(1752578272.422:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a18e929 code=0x7ffc0000 [ 143.570506][ T30] audit: type=1326 audit(1752578272.492:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab6a18e929 code=0x7ffc0000 [ 143.714450][ T30] audit: type=1326 audit(1752578272.492:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a18e929 code=0x7ffc0000 [ 143.714611][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.501546][ T5902] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.514854][ T5902] usb 4-1: config 0 interface 0 has no altsetting 0 [ 145.522984][ T5902] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 145.532221][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.550587][ T5902] usb 4-1: config 0 descriptor?? [ 145.564118][ T5902] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 145.584676][ T30] audit: type=1326 audit(1752578272.492:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6a18e929 code=0x7ffc0000 [ 146.450447][ T5902] usb 4-1: USB disconnect, device number 2 [ 148.449766][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 151.714677][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 155.350123][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 155.670783][ T24] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.686271][ T24] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.696745][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.705218][ T24] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 155.716242][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.225275][ T6390] xt_NFQUEUE: number of total queues is 0 [ 156.707096][ T24] usb 1-1: config 0 descriptor?? [ 157.091657][ T6397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.118'. [ 157.933381][ T24] usb 1-1: string descriptor 0 read error: -22 [ 158.103835][ T6402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.111413][ T6402] IPv6: NLM_F_CREATE should be set when creating new route [ 158.118674][ T6402] IPv6: NLM_F_CREATE should be set when creating new route [ 158.309921][ T24] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 158.320306][ T24] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 158.328418][ T24] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 158.336665][ T24] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 158.344315][ T24] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 158.358238][ T24] usb 1-1: USB disconnect, device number 3 [ 158.725731][ T6400] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.742151][ T6400] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 160.159941][ T5902] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 160.394633][ T5902] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.427838][ T5902] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.480133][ T5902] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.507444][ T5902] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 160.594501][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.359927][ T5902] usb 4-1: config 0 descriptor?? [ 161.448324][ T5902] usb 4-1: can't set config #0, error -71 [ 161.470604][ T6423] netlink: 60 bytes leftover after parsing attributes in process `syz.4.128'. [ 161.518144][ T5902] usb 4-1: USB disconnect, device number 3 [ 165.613752][ T6440] netlink: 'syz.3.135': attribute type 10 has an invalid length. [ 166.604500][ T6440] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 168.142457][ T6462] netlink: 76 bytes leftover after parsing attributes in process `syz.1.142'. [ 168.276622][ T5902] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 168.695358][ T6456] netlink: 44 bytes leftover after parsing attributes in process `syz.2.138'. [ 169.974963][ T5902] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.025028][ T5902] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.118738][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 170.128545][ T5902] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.227318][ T5902] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 170.283848][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.317708][ T5902] usb 4-1: config 0 descriptor?? [ 170.363763][ T5902] usb 4-1: can't set config #0, error -71 [ 170.410784][ T5902] usb 4-1: USB disconnect, device number 4 [ 174.258104][ T5911] IPVS: starting estimator thread 0... [ 175.274466][ T6512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.157'. [ 175.915668][ T6507] IPVS: using max 25 ests per chain, 60000 per kthread [ 178.440879][ T6530] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.467973][ T6532] netlink: 36 bytes leftover after parsing attributes in process `syz.0.163'. [ 178.544706][ T6530] netlink: 'syz.0.163': attribute type 9 has an invalid length. [ 178.586775][ T6530] netlink: 200108 bytes leftover after parsing attributes in process `syz.0.163'. [ 178.606891][ T6534] capability: warning: `syz.3.164' uses deprecated v2 capabilities in a way that may be insecure [ 178.635873][ T6530] openvswitch: netlink: Message has 5 unknown bytes. [ 179.274950][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 179.893838][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 179.919390][ T6540] sctp: failed to load transform for md5: -4 [ 183.069990][ T5958] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 183.233316][ T6570] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 183.243007][ T6570] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 183.252881][ T6570] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 183.432924][ T6574] xt_NFQUEUE: number of total queues is 0 [ 184.701593][ T5958] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.751966][ T5958] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.770674][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 184.816822][ T5958] usb 2-1: config 0 interface 0 has no altsetting 0 [ 184.886170][ T5958] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 184.921984][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.461137][ T5958] usb 2-1: config 0 descriptor?? [ 186.277382][ T5958] usb 2-1: can't set config #0, error -71 [ 186.290197][ T5958] usb 2-1: USB disconnect, device number 2 [ 191.855653][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'. [ 193.773900][ T6648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.391475][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.397872][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.710998][ T6667] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 195.719941][ T6667] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 197.990520][ T6676] netlink: 116 bytes leftover after parsing attributes in process `syz.2.200'. [ 199.760044][ T5935] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 199.931986][ T5935] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.964542][ T5935] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.988825][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 200.009898][ T5911] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 200.037947][ T5935] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 200.076246][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.127070][ T5935] usb 1-1: config 0 descriptor?? [ 200.920906][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.960033][ T5911] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.993902][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 201.055729][ T5911] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 201.109917][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.142145][ T5911] usb 5-1: config 0 descriptor?? [ 201.166058][ T5911] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 202.499204][ T5935] usbhid 1-1:0.0: can't add hid device: -71 [ 202.519064][ T5935] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 202.697632][ T5935] usb 1-1: USB disconnect, device number 4 [ 202.704360][ T6719] netlink: 116 bytes leftover after parsing attributes in process `syz.0.213'. [ 203.700535][ T6722] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 203.709401][ T6722] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 204.352225][ T5911] usb 5-1: USB disconnect, device number 3 [ 204.555781][ T6728] dummy0: entered promiscuous mode [ 204.590901][ T6728] dummy0: entered allmulticast mode [ 204.710074][ T5935] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 204.967031][ T5956] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 205.073655][ T6736] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 206.032698][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.059243][ T5935] usb 3-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.072902][ T5935] usb 3-1: config 0 interface 0 has no altsetting 0 [ 206.079595][ T5935] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 206.089315][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.108431][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.149437][ T5956] usb 2-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.177517][ T5935] usb 3-1: config 0 descriptor?? [ 206.188186][ T5956] usb 2-1: config 0 interface 0 has no altsetting 0 [ 206.209332][ T5956] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 206.214104][ T5935] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 206.410451][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.455155][ T5956] usb 2-1: config 0 descriptor?? [ 206.463157][ T5956] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 206.765549][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 206.771705][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.777749][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 206.784637][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 207.696263][ T5935] usb 3-1: USB disconnect, device number 4 [ 207.908499][ T5956] usb 2-1: USB disconnect, device number 3 [ 209.331262][ T6766] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 210.118045][ T6774] netlink: 116 bytes leftover after parsing attributes in process `syz.1.226'. [ 211.533432][ T6784] netlink: 80 bytes leftover after parsing attributes in process `syz.1.228'. [ 211.551243][ T6784] netlink: 80 bytes leftover after parsing attributes in process `syz.1.228'. [ 212.491687][ T6788] overlayfs: failed to resolve './file1/file0': -2 [ 217.006493][ T6821] netlink: 116 bytes leftover after parsing attributes in process `syz.1.239'. [ 219.629617][ T6843] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 221.451708][ T6849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.593787][ T5935] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 229.005371][ T5935] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.951729][ T5935] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.965639][ T5935] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.206171][ T5935] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 230.220862][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.274030][ T5935] usb 2-1: config 0 descriptor?? [ 230.808741][ T6915] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 233.354669][ T5935] usbhid 2-1:0.0: can't add hid device: -71 [ 234.190655][ T5935] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 234.213617][ T5935] usb 2-1: USB disconnect, device number 4 [ 234.668134][ T6936] dummy0: entered promiscuous mode [ 234.916028][ T6936] dummy0: entered allmulticast mode [ 235.227229][ T6945] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 236.752348][ T6956] netlink: 56 bytes leftover after parsing attributes in process `syz.1.273'. [ 238.332914][ T6977] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 249.775903][ T7067] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 254.683859][ T7114] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 255.868924][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.875452][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.983799][ T7139] xt_NFQUEUE: number of total queues is 0 [ 259.575960][ T7143] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 265.591628][ T5902] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 265.771870][ T5902] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.797924][ T5902] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.839624][ T5902] usb 1-1: config 0 interface 0 has no altsetting 0 [ 265.870085][ T5902] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 265.898574][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.938496][ T5902] usb 1-1: config 0 descriptor?? [ 267.331726][ T7192] xt_NFQUEUE: number of total queues is 0 [ 267.684714][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 267.692902][ T5902] usb 1-1: string descriptor 0 read error: -71 [ 267.699599][ T5902] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 267.708865][ T5902] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 267.717078][ T5902] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 267.725644][ T5902] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 267.734045][ T5902] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 267.804476][ T5902] usb 1-1: USB disconnect, device number 5 [ 270.223132][ T7219] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 273.383416][ T7236] xt_NFQUEUE: number of total queues is 0 [ 274.737012][ T7248] overlayfs: failed to resolve './file1/file0': -2 [ 275.799856][ T5958] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 276.013331][ T5958] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.248817][ T7264] loop8: detected capacity change from 0 to 79 [ 276.388400][ T5958] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.506776][ T5958] usb 1-1: config 0 interface 0 has no altsetting 0 [ 276.524224][ T5958] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 276.536943][ T7265] loop8: detected capacity change from 79 to 78 [ 276.548201][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.689552][ T5958] usb 1-1: config 0 descriptor?? [ 277.432916][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 277.441645][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 277.449282][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 277.456969][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 277.467015][ T5958] usb 1-1: string descriptor 0 read error: -32 [ 277.474546][ T5958] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 277.489902][ T5958] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 277.498023][ T5958] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 277.506962][ T5958] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 277.523779][ T5958] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 277.634582][ T5958] usb 1-1: USB disconnect, device number 6 [ 279.899938][ T5935] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 280.128282][ T5935] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.260952][ T7296] xt_NFQUEUE: number of total queues is 0 [ 280.776459][ T5935] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.786508][ T5935] usb 3-1: config 0 interface 0 has no altsetting 0 [ 280.795293][ T5935] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 280.804421][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.846741][ T5935] usb 3-1: config 0 descriptor?? [ 281.480070][ T5935] usb 3-1: string descriptor 0 read error: -71 [ 281.502779][ T5935] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71 [ 281.525528][ T5935] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 281.546290][ T7301] overlayfs: failed to resolve './file1/file0': -2 [ 281.549647][ T5935] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71 [ 282.244984][ T5935] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 282.269871][ T5935] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 282.310547][ T5935] usb 3-1: USB disconnect, device number 5 [ 283.789994][ T5902] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 283.944512][ T5902] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.019806][ T5902] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.069835][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 284.087060][ T5902] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 284.219851][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.261132][ T5902] usb 5-1: config 0 descriptor?? [ 285.759290][ T5902] usb 5-1: string descriptor 0 read error: -71 [ 285.768420][ T5902] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 286.401707][ T5902] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 286.531123][ T5902] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 286.560743][ T5902] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 286.739958][ T5902] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 287.572501][ T5902] usb 5-1: USB disconnect, device number 4 [ 288.002496][ T7351] xt_NFQUEUE: number of total queues is 0 [ 290.481079][ T7377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.390'. [ 290.536136][ T7377] netlink: 'syz.0.390': attribute type 9 has an invalid length. [ 290.580918][ T7377] netlink: 200108 bytes leftover after parsing attributes in process `syz.0.390'. [ 290.613146][ T7377] openvswitch: netlink: Message has 5 unknown bytes. [ 292.812837][ T7394] Zero length message leads to an empty skb [ 294.341972][ T7410] xt_NFQUEUE: number of total queues is 0 [ 295.803613][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 295.803650][ T30] audit: type=1326 audit(1752578426.512:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd93b8e929 code=0x7ffc0000 [ 296.162083][ T30] audit: type=1326 audit(1752578426.562:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd93b8e929 code=0x7ffc0000 [ 296.183767][ T30] audit: type=1326 audit(1752578426.592:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd93b8e929 code=0x7ffc0000 [ 296.210700][ T30] audit: type=1326 audit(1752578426.622:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd93b8e929 code=0x7ffc0000 [ 296.232232][ T30] audit: type=1326 audit(1752578426.622:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd93b8e929 code=0x7ffc0000 [ 296.280921][ T30] audit: type=1326 audit(1752578426.662:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd93b8e929 code=0x7ffc0000 [ 296.314609][ T30] audit: type=1326 audit(1752578426.682:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd93b8e929 code=0x7ffc0000 [ 296.359809][ T30] audit: type=1326 audit(1752578426.682:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd93b8e929 code=0x7ffc0000 [ 296.467729][ T30] audit: type=1326 audit(1752578426.762:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd93b8e929 code=0x7ffc0000 [ 296.491082][ T30] audit: type=1326 audit(1752578426.762:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7422 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd93b8e929 code=0x7ffc0000 [ 297.390652][ T5911] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 297.537976][ T7442] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 298.072231][ T5911] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.092315][ T5911] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.109161][ T5911] usb 4-1: config 0 interface 0 has no altsetting 0 [ 298.444413][ T5911] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 298.454128][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.860497][ T5911] usb 4-1: config 0 descriptor?? [ 299.553560][ T5911] usb 4-1: string descriptor 0 read error: -71 [ 299.589565][ T5911] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 299.647532][ T5911] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 299.674055][ T5911] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 299.748242][ T7466] xt_NFQUEUE: number of total queues is 0 [ 300.338641][ T5911] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 300.403471][ T5911] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 300.481202][ T5911] usb 4-1: USB disconnect, device number 5 [ 308.662774][ T7538] xt_NFQUEUE: number of total queues is 0 [ 311.345209][ T7558] netlink: 52 bytes leftover after parsing attributes in process `syz.1.441'. [ 313.671516][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 313.671533][ T30] audit: type=1326 audit(1752578444.392:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 313.713572][ T30] audit: type=1326 audit(1752578444.392:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 313.935158][ T30] audit: type=1326 audit(1752578444.392:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 313.958506][ T30] audit: type=1326 audit(1752578444.392:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 313.981087][ T30] audit: type=1326 audit(1752578444.392:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 314.679212][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 314.715627][ T30] audit: type=1326 audit(1752578444.422:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 314.740249][ T30] audit: type=1326 audit(1752578444.422:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 314.769246][ T30] audit: type=1326 audit(1752578444.422:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 314.792222][ T30] audit: type=1326 audit(1752578444.422:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 314.815396][ T30] audit: type=1326 audit(1752578444.422:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7570 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640398e929 code=0x7ffc0000 [ 317.260478][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.267205][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.308306][ T2153] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 319.120770][ T2153] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.139846][ T2153] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.154705][ T2153] usb 1-1: config 0 interface 0 has no altsetting 0 [ 319.163855][ T2153] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 319.190553][ T2153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.860208][ T2153] usb 1-1: config 0 descriptor?? [ 320.960104][ T2153] usb 1-1: string descriptor 0 read error: -71 [ 320.967599][ T2153] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 320.976513][ T2153] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 320.984785][ T2153] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 320.992974][ T2153] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 321.000991][ T2153] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 321.045968][ T2153] usb 1-1: USB disconnect, device number 7 [ 322.382787][ T7645] netlink: 44 bytes leftover after parsing attributes in process `syz.1.466'. [ 325.492457][ T7670] overlayfs: failed to resolve './file1/file0': -2 [ 326.208883][ T7664] xt_NFQUEUE: number of total queues is 0 [ 327.734178][ T7688] netlink: 52 bytes leftover after parsing attributes in process `syz.1.479'. [ 330.479313][ T7714] overlayfs: failed to resolve './file1/file0': -2 [ 335.036784][ T7743] xt_NFQUEUE: number of total queues is 0 [ 337.984123][ T7760] netlink: 'syz.1.499': attribute type 21 has an invalid length. [ 337.994552][ T7760] netlink: 156 bytes leftover after parsing attributes in process `syz.1.499'. [ 342.701353][ T7779] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 342.710900][ T7779] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 342.720564][ T7779] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 344.659908][ T7797] loop8: detected capacity change from 78 to 79 [ 344.996889][ T7804] xt_NFQUEUE: number of total queues is 0 [ 347.069977][ T5911] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 347.564376][ T5911] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.603772][ T5911] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.269821][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 348.278448][ T5911] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 348.302270][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.443036][ T5911] usb 3-1: config 0 descriptor?? [ 348.827074][ T7824] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 349.671214][ T5911] usb 3-1: language id specifier not provided by device, defaulting to English [ 349.877438][ T5911] uclogic 0003:256C:006D.0009: failed retrieving Huion firmware version: -71 [ 349.919034][ T5911] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 349.957461][ T5911] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 349.976963][ T5911] usb 3-1: USB disconnect, device number 6 [ 350.064962][ T7834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.521'. [ 350.088237][ T7834] netlink: 'syz.0.521': attribute type 9 has an invalid length. [ 350.096817][ T7834] netlink: 200108 bytes leftover after parsing attributes in process `syz.0.521'. [ 350.106733][ T7834] openvswitch: netlink: Message has 5 unknown bytes. [ 354.753283][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 357.870134][ T7901] loop8: detected capacity change from 79 to 78 [ 360.582533][ T5935] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 360.961663][ T5935] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.982458][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'. [ 360.999909][ T5935] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.090767][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 361.109835][ T5935] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 361.130335][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.175385][ T5935] usb 1-1: config 0 descriptor?? [ 362.419619][ T5935] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 362.488743][ T5935] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 362.525484][ T5935] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 362.560320][ T5935] usb 1-1: USB disconnect, device number 8 [ 368.037711][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 368.608190][ T10] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.429751][ T10] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.447281][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.454026][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 369.463254][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.601014][ T10] usb 5-1: config 0 descriptor?? [ 369.702309][ T10] usb 5-1: can't set config #0, error -71 [ 369.763813][ T10] usb 5-1: USB disconnect, device number 5 [ 378.949401][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.959996][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.994875][ C0] sched: DL replenish lagged too much [ 510.739678][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 510.746725][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8041/1:b..l P5208/1:b..l P8103/1:b..l [ 510.757331][ C1] rcu: (detected by 1, t=10502 jiffies, g=22429, q=785749 ncpus=2) [ 510.765352][ C1] task:syz.3.588 state:R running task stack:26792 pid:8103 tgid:8094 ppid:5836 task_flags:0x40044c flags:0x00004004 [ 510.779696][ C1] Call Trace: [ 510.783030][ C1] [ 510.786002][ C1] __schedule+0x16a2/0x4cb0 [ 510.790589][ C1] ? preempt_schedule_common+0x83/0xd0 [ 510.796091][ C1] ? __pfx___schedule+0x10/0x10 [ 510.800993][ C1] ? do_raw_spin_lock+0x121/0x290 [ 510.806071][ C1] ? preempt_schedule+0xae/0xc0 [ 510.810966][ C1] preempt_schedule_common+0x83/0xd0 [ 510.816282][ C1] preempt_schedule+0xae/0xc0 [ 510.820983][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 510.826406][ C1] preempt_schedule_thunk+0x16/0x30 [ 510.831658][ C1] _raw_spin_unlock+0x3f/0x50 [ 510.836384][ C1] unmap_page_range+0x3842/0x41c0 [ 510.841489][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 510.846891][ C1] ? unmap_vmas+0x144/0x580 [ 510.851425][ C1] unmap_vmas+0x399/0x580 [ 510.855798][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 510.860719][ C1] exit_mmap+0x248/0xb50 [ 510.865004][ C1] ? uprobe_clear_state+0x20f/0x290 [ 510.870264][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 510.875086][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 510.880810][ C1] ? __pfx_exit_aio+0x10/0x10 [ 510.885559][ C1] ? uprobe_clear_state+0x274/0x290 [ 510.890818][ C1] ? mm_update_next_owner+0xa7/0x870 [ 510.896152][ C1] __mmput+0x118/0x410 [ 510.900249][ C1] exit_mm+0x1da/0x2c0 [ 510.904327][ C1] ? __pfx_exit_mm+0x10/0x10 [ 510.908923][ C1] ? rcu_is_watching+0x15/0xb0 [ 510.913714][ C1] do_exit+0x648/0x22e0 [ 510.917913][ C1] ? do_raw_spin_lock+0x121/0x290 [ 510.922975][ C1] ? __pfx_do_exit+0x10/0x10 [ 510.927624][ C1] do_group_exit+0x21c/0x2d0 [ 510.932260][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.937512][ C1] get_signal+0x125e/0x1310 [ 510.942083][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 510.947699][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 510.953122][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 510.959325][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 510.964808][ C1] exit_to_user_mode_loop+0x75/0x110 [ 510.970107][ C1] ? ret_from_fork+0x472/0x770 [ 510.974902][ C1] ret_from_fork+0x47f/0x770 [ 510.979535][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 510.984694][ C1] ? __switch_to_asm+0x39/0x70 [ 510.989495][ C1] ? __switch_to_asm+0x33/0x70 [ 510.994302][ C1] ret_from_fork_asm+0x1a/0x30 [ 510.999078][ C1] [ 511.002115][ C1] task:udevd state:R running task stack:22952 pid:5208 tgid:5208 ppid:1 task_flags:0x400140 flags:0x00004002 [ 511.015638][ C1] Call Trace: [ 511.018951][ C1] [ 511.021910][ C1] __schedule+0x16a2/0x4cb0 [ 511.026475][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 511.031812][ C1] ? __pfx___schedule+0x10/0x10 [ 511.036704][ C1] ? rcu_is_watching+0x15/0xb0 [ 511.041505][ C1] ? __schedule+0x16c0/0x4cb0 [ 511.046240][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 511.051562][ C1] preempt_schedule_irq+0xb5/0x150 [ 511.056686][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 511.062435][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 511.068302][ C1] irqentry_exit+0x6f/0x90 [ 511.072753][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 511.078234][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 511.083540][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab d4 fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 511.103173][ C1] RSP: 0018:ffffc90002fc7618 EFLAGS: 00000206 [ 511.109262][ C1] RAX: 5555fcea6c5ca600 RBX: 0000000000000000 RCX: 5555fcea6c5ca600 [ 511.117249][ C1] RDX: 0000000000000000 RSI: ffffffff8db72142 RDI: ffffffff8be1ca00 [ 511.125258][ C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5 [ 511.133244][ C1] R10: ffffc90002fc77d8 R11: ffffffff81acff90 R12: 0000000000000002 [ 511.141235][ C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246 [ 511.149239][ C1] ? unwind_next_frame+0xa5/0x2390 [ 511.154377][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 511.160562][ C1] ? unwind_next_frame+0xa5/0x2390 [ 511.165737][ C1] ? unwind_next_frame+0xa5/0x2390 [ 511.170884][ C1] ? __x64_sys_newfstatat+0x116/0x190 [ 511.176308][ C1] ? unwind_next_frame+0xa5/0x2390 [ 511.181450][ C1] unwind_next_frame+0xc2/0x2390 [ 511.186419][ C1] ? unwind_next_frame+0xa5/0x2390 [ 511.191576][ C1] ? unwind_next_frame+0xa5/0x2390 [ 511.196725][ C1] ? vfs_fstatat+0x43/0x170 [ 511.201261][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 511.207447][ C1] arch_stack_walk+0x11c/0x150 [ 511.212249][ C1] ? __x64_sys_newfstatat+0x116/0x190 [ 511.217641][ C1] stack_trace_save+0x9c/0xe0 [ 511.222337][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 511.227753][ C1] save_stack+0xf7/0x1f0 [ 511.232036][ C1] ? __pfx_save_stack+0x10/0x10 [ 511.236928][ C1] ? __free_frozen_pages+0xc65/0xe60 [ 511.242345][ C1] ? __put_partials+0x161/0x1c0 [ 511.247212][ C1] ? put_cpu_partial+0x17c/0x250 [ 511.252160][ C1] ? __slab_free+0x2f7/0x400 [ 511.256777][ C1] ? qlist_free_all+0x97/0x140 [ 511.261581][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 511.267236][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 511.272289][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 511.277950][ C1] ? getname_flags+0xb8/0x540 [ 511.282651][ C1] ? vfs_fstatat+0x43/0x170 [ 511.287204][ C1] ? __x64_sys_newfstatat+0x116/0x190 [ 511.292614][ C1] ? page_ext_put+0x97/0xc0 [ 511.297178][ C1] __reset_page_owner+0x71/0x1f0 [ 511.302167][ C1] __free_frozen_pages+0xc65/0xe60 [ 511.307327][ C1] __put_partials+0x161/0x1c0 [ 511.312064][ C1] put_cpu_partial+0x17c/0x250 [ 511.316873][ C1] ? put_cpu_partial+0x6d/0x250 [ 511.321761][ C1] __slab_free+0x2f7/0x400 [ 511.326217][ C1] ? __phys_addr+0xd3/0x180 [ 511.330793][ C1] qlist_free_all+0x97/0x140 [ 511.335530][ C1] kasan_quarantine_reduce+0x148/0x160 [ 511.341023][ C1] __kasan_slab_alloc+0x22/0x80 [ 511.345913][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 511.351402][ C1] ? getname_flags+0xb8/0x540 [ 511.356082][ C1] getname_flags+0xb8/0x540 [ 511.360620][ C1] vfs_fstatat+0x43/0x170 [ 511.364993][ C1] __x64_sys_newfstatat+0x116/0x190 [ 511.370245][ C1] ? rcu_is_watching+0x15/0xb0 [ 511.375041][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 511.380787][ C1] ? preempt_schedule_irq+0xde/0x150 [ 511.386146][ C1] do_syscall_64+0xfa/0x3b0 [ 511.390701][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.396830][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 511.402505][ C1] ? clear_bhb_loop+0x60/0xb0 [ 511.407223][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.413158][ C1] RIP: 0033:0x7f8fd5f11b0a [ 511.417608][ C1] RSP: 002b:00007ffc33fe79b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 511.426054][ C1] RAX: ffffffffffffffda RBX: 000055c4940c4420 RCX: 00007f8fd5f11b0a [ 511.434061][ C1] RDX: 00007ffc33fe79c0 RSI: 000055c4940b2ef3 RDI: 00000000ffffff9c [ 511.442058][ C1] RBP: 000055c497e75168 R08: 00063478c1c69200 R09: 7fffffffffffffff [ 511.450054][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.458040][ C1] R13: 00007ffc33fe79c0 R14: 0000000000000000 R15: 00063478c1c69200 [ 511.466068][ C1] [ 511.469115][ C1] task:syz.1.575 state:R running task stack:24872 pid:8041 tgid:8039 ppid:5837 task_flags:0x40044c flags:0x00004002 [ 511.482633][ C1] Call Trace: [ 511.485938][ C1] [ 511.488921][ C1] __schedule+0x16a2/0x4cb0 [ 511.493484][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 511.498817][ C1] ? __pfx___schedule+0x10/0x10 [ 511.503709][ C1] ? __lock_acquire+0xab9/0xd20 [ 511.508604][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 511.513933][ C1] preempt_schedule_irq+0xb5/0x150 [ 511.519094][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 511.524955][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 511.530802][ C1] irqentry_exit+0x6f/0x90 [ 511.535253][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.541267][ C1] RIP: 0010:deref_stack_reg+0x33/0x230 [ 511.546765][ C1] Code: 53 48 83 ec 20 48 89 54 24 18 49 89 f0 49 89 ff 48 be 00 00 00 00 00 fc ff df 48 8d 5f 08 49 89 dc 49 c1 ec 03 41 80 3c 34 00 <4c> 89 04 24 74 16 48 89 df e8 1f b7 ae 00 4c 8b 04 24 48 be 00 00 [ 511.566577][ C1] RSP: 0018:ffffc90003e7ee40 EFLAGS: 00000246 [ 511.572671][ C1] RAX: fffffffffffffff0 RBX: ffffc90003e7ef70 RCX: 0000000000000000 [ 511.580695][ C1] RDX: ffffc90003e7efa8 RSI: dffffc0000000000 RDI: ffffc90003e7ef68 [ 511.588700][ C1] RBP: dffffc0000000000 R08: ffffc90003e7f4c8 R09: 0000000000000000 [ 511.596698][ C1] R10: ffffc90003e7efb8 R11: fffff520007cfdf9 R12: 1ffff920007cfdee [ 511.604688][ C1] R13: ffffc90003e7efb8 R14: ffffc90003e7ef68 R15: ffffc90003e7ef68 [ 511.612719][ C1] unwind_next_frame+0x17c4/0x2390 [ 511.617875][ C1] ? unwind_next_frame+0xa5/0x2390 [ 511.623021][ C1] ? block_invalidate_folio+0x5f7/0x730 [ 511.628625][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 511.634813][ C1] arch_stack_walk+0x11c/0x150 [ 511.639616][ C1] ? truncate_cleanup_folio+0x2d8/0x430 [ 511.645206][ C1] stack_trace_save+0x9c/0xe0 [ 511.649926][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 511.655370][ C1] ? __lock_acquire+0xab9/0xd20 [ 511.660257][ C1] kasan_save_track+0x3e/0x80 [ 511.664965][ C1] ? kasan_save_track+0x3e/0x80 [ 511.669847][ C1] ? kasan_save_free_info+0x46/0x50 [ 511.675079][ C1] ? __kasan_slab_free+0x62/0x70 [ 511.680070][ C1] ? kmem_cache_free+0x18f/0x400 [ 511.685133][ C1] ? free_buffer_head+0x55/0x220 [ 511.690101][ C1] ? try_to_free_buffers+0x232/0x2d0 [ 511.695418][ C1] ? block_invalidate_folio+0x5f7/0x730 [ 511.701070][ C1] ? free_buffer_head+0x55/0x220 [ 511.706126][ C1] kasan_save_free_info+0x46/0x50 [ 511.711182][ C1] __kasan_slab_free+0x62/0x70 [ 511.715980][ C1] kmem_cache_free+0x18f/0x400 [ 511.720807][ C1] free_buffer_head+0x55/0x220 [ 511.725604][ C1] try_to_free_buffers+0x232/0x2d0 [ 511.730778][ C1] block_invalidate_folio+0x5f7/0x730 [ 511.736789][ C1] ? shmem_mapping+0xd/0x50 [ 511.741334][ C1] ? __pfx_block_invalidate_folio+0x10/0x10 [ 511.747257][ C1] ? folio_mapping+0x16f/0x240 [ 511.752054][ C1] ? __pfx_block_invalidate_folio+0x10/0x10 [ 511.757975][ C1] truncate_cleanup_folio+0x2d8/0x430 [ 511.763395][ C1] truncate_inode_pages_range+0x233/0xda0 [ 511.769173][ C1] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 511.775488][ C1] ? smp_call_function_many_cond+0xbc5/0x12d0 [ 511.781588][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.786865][ C1] ? __pfx_has_bh_in_lru+0x10/0x10 [ 511.792018][ C1] blkdev_flush_mapping+0x108/0x270 [ 511.797243][ C1] ? bdev_release+0x40f/0x650 [ 511.801952][ C1] bdev_release+0x417/0x650 [ 511.806495][ C1] ? __pfx_blkdev_release+0x10/0x10 [ 511.811728][ C1] blkdev_release+0x15/0x20 [ 511.816262][ C1] __fput+0x449/0xa70 [ 511.820287][ C1] task_work_run+0x1d4/0x260 [ 511.824922][ C1] ? __pfx_task_work_run+0x10/0x10 [ 511.830078][ C1] do_exit+0x6b5/0x22e0 [ 511.834272][ C1] ? do_raw_spin_lock+0x121/0x290 [ 511.839328][ C1] ? __pfx_do_exit+0x10/0x10 [ 511.843961][ C1] do_group_exit+0x21c/0x2d0 [ 511.848574][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.853791][ C1] get_signal+0x125e/0x1310 [ 511.858343][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 511.863927][ C1] ? count_memcg_event_mm+0x21/0x260 [ 511.869249][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 511.875458][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 511.880944][ C1] exit_to_user_mode_loop+0x75/0x110 [ 511.886257][ C1] do_syscall_64+0x2bd/0x3b0 [ 511.890875][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.896114][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.902209][ C1] ? clear_bhb_loop+0x60/0xb0 [ 511.906924][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.912843][ C1] RIP: 0033:0x7f640398e929 [ 511.917284][ C1] RSP: 002b:00007f6404776038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 511.925726][ C1] RAX: 0000000000010106 RBX: 00007f6403bb6080 RCX: 00007f640398e929 [ 511.933722][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 511.941715][ C1] RBP: 00007f6403a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 511.949709][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 511.957706][ C1] R13: 0000000000000001 R14: 00007f6403bb6080 R15: 00007ffe9728fd48 [ 511.965723][ C1] [ 511.968766][ C1] rcu: rcu_preempt kthread starved for 1258 jiffies! g22429 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 511.979908][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 511.989902][ C1] rcu: RCU grace-period kthread stack dump: [ 511.995811][ C1] task:rcu_preempt state:R running task stack:26792 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 512.009354][ C1] Call Trace: [ 512.012654][ C1] [ 512.015613][ C1] __schedule+0x16a2/0x4cb0 [ 512.020170][ C1] ? schedule+0x165/0x360 [ 512.024534][ C1] ? __pfx___schedule+0x10/0x10 [ 512.029435][ C1] ? schedule+0x91/0x360 [ 512.033719][ C1] schedule+0x165/0x360 [ 512.037911][ C1] schedule_timeout+0x12b/0x270 [ 512.042793][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 512.048195][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 512.054131][ C1] ? __pfx_process_timeout+0x10/0x10 [ 512.059453][ C1] ? prepare_to_swait_event+0x341/0x380 [ 512.065035][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 512.069927][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 512.076112][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 512.081420][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 512.086668][ C1] rcu_gp_kthread+0x99/0x390 [ 512.091295][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 512.096525][ C1] ? __kthread_parkme+0x7b/0x200 [ 512.101494][ C1] ? __kthread_parkme+0x1a1/0x200 [ 512.106558][ C1] kthread+0x711/0x8a0 [ 512.110667][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 512.115979][ C1] ? __pfx_kthread+0x10/0x10 [ 512.120651][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.125888][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.131136][ C1] ? __pfx_kthread+0x10/0x10 [ 512.135775][ C1] ret_from_fork+0x3fc/0x770 [ 512.140393][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 512.145526][ C1] ? __switch_to_asm+0x39/0x70 [ 512.150308][ C1] ? __switch_to_asm+0x33/0x70 [ 512.155121][ C1] ? __pfx_kthread+0x10/0x10 [ 512.159746][ C1] ret_from_fork_asm+0x1a/0x30 [ 512.164558][ C1] [ 512.167601][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 512.173959][ C1] Sending NMI from CPU 1 to CPUs 0: [ 512.179200][ C0] NMI backtrace for cpu 0 [ 512.179230][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 512.179249][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 512.179260][ C0] RIP: 0010:__lock_acquire+0x82f/0xd20 [ 512.179280][ C0] Code: 41 81 e4 00 60 00 00 41 09 c4 4c 89 f9 48 c1 e9 20 89 ca c1 c2 04 41 29 cc 44 31 e2 44 01 f9 41 29 d7 89 d6 c1 c6 06 44 31 fe <01> ca 89 f0 c1 c0 08 29 f1 31 c8 01 d6 29 c2 89 c1 c1 c1 10 31 d1 [ 512.179293][ C0] RSP: 0000:ffffc90000006530 EFLAGS: 00000086 [ 512.179309][ C0] RAX: 0000000000000007 RBX: 0000000000000003 RCX: 000000009be35b6b [ 512.179319][ C0] RDX: 000000005384031c RSI: 00000000ee0c7af3 RDI: ffffffff8de95280 [ 512.179330][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81ab7a9d [ 512.179340][ C0] R10: ffffc90000006738 R11: fffff52000000ce9 R12: 00000000c6ada59f [ 512.179352][ C0] R13: ffffffff8de95d70 R14: ffffffff8de95de8 R15: 000000000f0cbde7 [ 512.179364][ C0] FS: 0000000000000000(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 512.179377][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.179387][ C0] CR2: 00007f38eb3e5904 CR3: 0000000021ede000 CR4: 00000000003526f0 [ 512.179401][ C0] Call Trace: [ 512.179407][ C0] [ 512.179417][ C0] ? is_module_text_address+0x1d/0x1e0 [ 512.179440][ C0] lock_acquire+0x120/0x360 [ 512.179454][ C0] ? is_module_text_address+0x1d/0x1e0 [ 512.179479][ C0] ? unwind_next_frame+0xa5/0x2390 [ 512.179496][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 512.179512][ C0] ? is_module_text_address+0x1d/0x1e0 [ 512.179534][ C0] ? x86_64_start_kernel+0x143/0x1c0 [ 512.179557][ C0] is_module_text_address+0x39/0x1e0 [ 512.179579][ C0] ? is_module_text_address+0x1d/0x1e0 [ 512.179600][ C0] ? x86_64_start_kernel+0x143/0x1c0 [ 512.179634][ C0] kernel_text_address+0x94/0xe0 [ 512.179658][ C0] ? x86_64_start_kernel+0x143/0x1c0 [ 512.179680][ C0] __kernel_text_address+0xd/0x40 [ 512.179703][ C0] unwind_get_return_address+0x4d/0x90 [ 512.179721][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 512.179742][ C0] arch_stack_walk+0xfc/0x150 [ 512.179763][ C0] ? x86_64_start_kernel+0x143/0x1c0 [ 512.179787][ C0] stack_trace_save+0x9c/0xe0 [ 512.179807][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 512.179832][ C0] kasan_save_track+0x3e/0x80 [ 512.179852][ C0] ? kasan_save_track+0x3e/0x80 [ 512.179891][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 512.179913][ C0] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 512.179936][ C0] ? ref_tracker_alloc+0x133/0x460 [ 512.179960][ C0] ? dst_init+0xd9/0x450 [ 512.179982][ C0] ? dst_alloc+0x12a/0x170 [ 512.180002][ C0] ? ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 512.180027][ C0] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 512.180051][ C0] ? ip_route_output_flow+0x2a/0x150 [ 512.180072][ C0] ? ip_route_me_harder+0x6b9/0xfe0 [ 512.180097][ C0] ? synproxy_send_tcp+0x359/0x6c0 [ 512.180128][ C0] ? synproxy_send_client_synack+0x8bb/0xe20 [ 512.180146][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 512.180168][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 512.180190][ C0] ? nft_do_chain+0x40c/0x1920 [ 512.180210][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 512.180231][ C0] ? nf_hook_slow+0xc2/0x220 [ 512.180247][ C0] ? NF_HOOK+0x206/0x3a0 [ 512.180263][ C0] ? NF_HOOK+0x30c/0x3a0 [ 512.180279][ C0] ? __netif_receive_skb+0x143/0x380 [ 512.180293][ C0] ? process_backlog+0x60e/0x14f0 [ 512.180308][ C0] ? __napi_poll+0xc4/0x480 [ 512.180339][ C0] ? net_rx_action+0x707/0xe30 [ 512.180355][ C0] ? handle_softirqs+0x283/0x870 [ 512.180371][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 512.180394][ C0] ? irq_exit_rcu+0x9/0x30 [ 512.180409][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 512.180434][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 512.180452][ C0] ? pv_native_safe_halt+0x13/0x20 [ 512.180475][ C0] ? default_idle+0x13/0x20 [ 512.180491][ C0] ? default_idle_call+0x74/0xb0 [ 512.180507][ C0] ? do_idle+0x1e8/0x510 [ 512.180524][ C0] ? cpu_startup_entry+0x44/0x60 [ 512.180541][ C0] ? rest_init+0x2de/0x300 [ 512.180559][ C0] ? start_kernel+0x47d/0x500 [ 512.180576][ C0] ? x86_64_start_reservations+0x24/0x30 [ 512.180616][ C0] ? nft_do_chain+0x40c/0x1920 [ 512.180640][ C0] __kasan_kmalloc+0x93/0xb0 [ 512.180663][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 512.180687][ C0] ? ref_tracker_alloc+0x133/0x460 [ 512.180713][ C0] ref_tracker_alloc+0x133/0x460 [ 512.180739][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 512.180773][ C0] ? rcu_is_watching+0x15/0xb0 [ 512.180792][ C0] dst_init+0xd9/0x450 [ 512.180816][ C0] dst_alloc+0x12a/0x170 [ 512.180840][ C0] ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 512.180871][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 512.180896][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 512.180920][ C0] ? __lock_acquire+0xab9/0xd20 [ 512.180936][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 512.180963][ C0] ? ip_route_me_harder+0x494/0xfe0 [ 512.180992][ C0] ip_route_output_flow+0x2a/0x150 [ 512.181013][ C0] ? ip_route_me_harder+0x6a7/0xfe0 [ 512.181039][ C0] ip_route_me_harder+0x6b9/0xfe0 [ 512.181068][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 512.181108][ C0] synproxy_send_tcp+0x359/0x6c0 [ 512.181131][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 512.181158][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 512.181177][ C0] ? nft_symhash_reduce+0x4c8/0x560 [ 512.181197][ C0] ? synproxy_pernet+0x45/0x270 [ 512.181223][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 512.181250][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 512.181274][ C0] ? nf_ip_checksum+0x13c/0x510 [ 512.181298][ C0] nft_synproxy_do_eval+0x345/0x570 [ 512.181324][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 512.181347][ C0] ? queue_work_on+0x115/0x270 [ 512.181365][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.181390][ C0] ? queue_work_on+0x1ed/0x270 [ 512.181412][ C0] nft_do_chain+0x40c/0x1920 [ 512.181433][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.181458][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 512.181475][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 512.181495][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 512.181532][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 512.181557][ C0] nft_do_chain_inet+0x25d/0x340 [ 512.181579][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 512.181610][ C0] ? ipt_do_table+0x2a3/0x1630 [ 512.181630][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 512.181649][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 512.181672][ C0] nf_hook_slow+0xc2/0x220 [ 512.181692][ C0] NF_HOOK+0x206/0x3a0 [ 512.181711][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 512.181730][ C0] ? NF_HOOK+0x9a/0x3a0 [ 512.181746][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 512.181763][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 512.181783][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 512.181803][ C0] ? skb_dst+0x4f/0xd0 [ 512.181821][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 512.181853][ C0] NF_HOOK+0x30c/0x3a0 [ 512.181871][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 512.181889][ C0] ? NF_HOOK+0x9a/0x3a0 [ 512.181905][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 512.181921][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 512.181939][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 512.181961][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 512.181977][ C0] __netif_receive_skb+0x143/0x380 [ 512.181993][ C0] ? process_backlog+0x2d5/0x14f0 [ 512.182011][ C0] process_backlog+0x60e/0x14f0 [ 512.182034][ C0] ? __pfx_process_backlog+0x10/0x10 [ 512.182050][ C0] ? rcu_is_watching+0x15/0xb0 [ 512.182071][ C0] __napi_poll+0xc4/0x480 [ 512.182083][ C0] ? net_rx_action+0x46d/0xe30 [ 512.182101][ C0] net_rx_action+0x707/0xe30 [ 512.182126][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 512.182150][ C0] ? sched_balance_domains+0x8be/0x9e0 [ 512.182173][ C0] handle_softirqs+0x283/0x870 [ 512.182191][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 512.182210][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 512.182229][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 512.182253][ C0] __irq_exit_rcu+0xca/0x1f0 [ 512.182269][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 512.182289][ C0] irq_exit_rcu+0x9/0x30 [ 512.182304][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 512.182327][ C0] [ 512.182332][ C0] [ 512.182338][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 512.182355][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 512.182378][ C0] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 fd 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 512.182391][ C0] RSP: 0000:ffffffff8de07d80 EFLAGS: 000002c2 [ 512.182404][ C0] RAX: c506b4f4b6800f00 RBX: ffffffff81976938 RCX: c506b4f4b6800f00 [ 512.182416][ C0] RDX: 0000000000000001 RSI: ffffffff8d98544c RDI: ffffffff8be1ca00 [ 512.182427][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 512.182439][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0cbf0 [ 512.182451][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 512.182463][ C0] ? do_idle+0x1e8/0x510 [ 512.182485][ C0] default_idle+0x13/0x20 [ 512.182500][ C0] default_idle_call+0x74/0xb0 [ 512.182516][ C0] do_idle+0x1e8/0x510 [ 512.182535][ C0] ? __pfx_do_idle+0x10/0x10 [ 512.182559][ C0] cpu_startup_entry+0x44/0x60 [ 512.182588][ C0] rest_init+0x2de/0x300 [ 512.182609][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 512.182650][ C0] start_kernel+0x47d/0x500 [ 512.182668][ C0] x86_64_start_reservations+0x24/0x30 [ 512.182690][ C0] x86_64_start_kernel+0x143/0x1c0 [ 512.182712][ C0] common_startup_64+0x13e/0x147 [ 512.182741][ C0]