last executing test programs: 29.519452196s ago: executing program 1 (id=2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f004f187f18b418c41f6fb5e8d1d7129133d1329a645e249be67871578514d243e21de7b093e600dacc8a4cd313aee1400d1b926a5208b730c316aacb56fd955fd5d404004d13b24b83581d0befb710a96cd8aef2fdec6e08f2a31d175ce25a67820239c3d01db07a01dc261f5bc1fa99d2a34c49e102d6c3d02c5fab067a2e293224d0e505415e772f67ef00feb20e83ddc3480d04000000000000000236f9c69cac825d598a9501985cad8dc149f129fc"], 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300040000000a881fc10c10a428219c00000000e1fb31cfa897", @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000000100"/22], 0x48) sched_setscheduler(r1, 0x6, &(0x7f00000002c0)=0x7fff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001821", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2e0000006c0001002abd7000ff9bdf", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, 0x0, &(0x7f0000000040)=""/133}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) 28.657920664s ago: executing program 2 (id=13): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d06, &(0x7f0000002180)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x3, 0x6) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x76}, "14bffd076773e618d39a90a7ddede0f1cbbfb5400507109f248002f538054f1d79f119c666d26733442cafd720bdb2541415da118792c9c7d05d58719ec0d92263e2739da7bc6b092a07f4122aea955b70195af1efcdf25f4a45cf1e36245c76d420b0a64fd997374c6ac536273d1c80341fe913eb46"}, 0x7a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x4884) tkill(0x0, 0xb) 27.491117119s ago: executing program 1 (id=14): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x40000000, 0x0) ptrace$cont(0x20, r1, 0x800009, 0x8000000000006) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) r7 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000006400)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000800)="2d9b1d00000000000000000000000000000000005315b443b7d788aec4bf4890556e91eebbdef82765cda6401bcf473eb55635e9", 0x34}], 0x1}}], 0x1, 0x4) ioctl$KVM_CREATE_DEVICE(r6, 0xc018aec0, &(0x7f00000000c0)={0x1}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000340)={r4, &(0x7f0000000040)='\x00', 0x4000, &(0x7f0000000100)={@_ha_fsid={[0x7fffffff, 0x6]}, {0xfa4d, 0x400, 0x3, 0x7}}, 0x40, &(0x7f0000000240)={@_ha_fsid}, 0x0}) connect$inet6(r4, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x4001c00) socket$nl_route(0x10, 0x3, 0x0) 21.5065321s ago: executing program 0 (id=17): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') getdents(r0, 0xfffffffffffffffd, 0x3b) socket$packet(0x11, 0x2, 0x300) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x2563e05cb9c8ea01, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00'}) lseek(r2, 0x164, 0x0) add_key(0x0, 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000004000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d", 0xcd, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) 21.06286934s ago: executing program 2 (id=18): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendto$inet(r4, &(0x7f0000000100)="1858cf4b7de292a2ec8b79b5202ca7a3", 0x10, 0x20000000, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r6, 0xc02064a5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x6, 0x2, 0x7, 0xb, 0x44, "8c00000000fffa00000000ffff00000400", 0x40fff, 0x4}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000000) pselect6(0xfffffffffffffd01, &(0x7f0000004540)={0x9, 0xc, 0x200000000000003, 0x113, 0x5, 0x9, 0x2, 0xd4}, 0x0, 0x0, 0x0, 0x0) 20.366802252s ago: executing program 4 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000700), 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x201, 0x0) write(r2, &(0x7f0000000900)='0', 0x1) unshare(0x22020600) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r3, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x4000) r4 = openat(0xffffffffffffffff, &(0x7f0000000c00)='./config\x00', 0x1, 0x3) write(r4, &(0x7f0000000d00)='0\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bf", 0xf}], 0x2}, 0x74b3fb6d7034830d) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) 20.20756533s ago: executing program 3 (id=20): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) socket$kcm(0xa, 0x2, 0x0) r1 = socket(0xb, 0x80805, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @private}, &(0x7f0000000300)=0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="140000005e09748cec0289a6268a330900250e01"], 0x14}], 0x1}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@private=0xa010100, @loopback}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@private=0xa010101, @empty}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="abaaaaaaaaaaffffffffffff0800480800280068000080029078b2ac1414aa7f000001000800907800060001"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@private2, @local, @dev={0xfe, 0x80, '\x00', 0x33}, 0x1, 0x3ff, 0x7, 0x100, 0x2, 0x2810107, r3}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x2, 'lblc\x00', 0x30, 0x80001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x2c, @private=0xa010102, 0x4e21, 0x3, 'dh\x00', 0x5, 0x8, 0x2}, {@remote, 0x4e20, 0x0, 0xc9}}, 0x44) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @remote, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x6df5}}], 0x30}, 0x8010) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000240)='FREEZING\x00', 0x9) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) 19.905118209s ago: executing program 1 (id=21): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) gettimeofday(0x0, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) unshare(0x22020600) waitid$P_PIDFD(0x3, r0, 0x0, 0x40000004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1f7) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x800000, 0x0) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='\x00', r5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') clock_gettime(0x0, &(0x7f0000000280)) 18.588374028s ago: executing program 0 (id=22): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001340)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$rxrpc(0x21, 0x2, 0x0) sendmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x39cb, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004180)='smaps_rollup\x00') read$FUSE(r8, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x102, &(0x7f00000022c0)={0x0, 0x989680}) 18.514649623s ago: executing program 4 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0xffffffffffffffff) write$bt_hci(r0, 0x0, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r1, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/sys/net/ipv4/tcp_migrate_req\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1', 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='0', 0x1) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) listen(r4, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000080)=0x1, 0x4) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) listen(r6, 0x10) shutdown(r4, 0x2) listen(r4, 0x10) write(r2, &(0x7f0000000210)="01", 0x1) sendto$packet(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x0}, 0x14) syz_ublk_setup_io_uring(0x31a, &(0x7f0000000000)={0x0, 0x1b61, 0x80, 0xffffff04, 0x38d}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 17.059966811s ago: executing program 0 (id=24): r0 = socket$inet6(0xa, 0x5, 0x7) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @private2, 0x4}, 0x1c) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)=0x4) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) close(0xffffffffffffffff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x3, 0xc, 0x9, 0x3, 0x1, 0xe, 0x8, 0x18, 0x7, 0x7f, 0x3, 0x3e}, 0xe) close(0x3) fsetxattr$security_evm(r0, &(0x7f0000000040), 0x0, 0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="400000002600090122bd7008faffffff0200000024003d802000e68008005800", @ANYRES32, @ANYBLOB="11006d80040074800400b480a4de5d99190000000800030047000000"], 0x40}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000070000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000004400038040000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 16.959576745s ago: executing program 3 (id=25): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f004f187f18b418c41f6fb5e8d1d7129133d1329a645e249be67871578514d243e21de7b093e600dacc8a4cd313aee1400d1b926a5208b730c316aacb56fd955fd5d404004d13b24b83581d0befb710a96cd8aef2fdec6e08f2a31d175ce25a67820239c3d01db07a01dc261f5bc1fa99d2a34c49e102d6c3d02c5fab067a2e293224d0e505415e772f67ef00feb20e83ddc3480d04000000000000000236f9c69cac825d598a9501985cad8dc149f129fc"], 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300040000000a881fc10c10a428219c00000000e1fb31cfa897", @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000000100"/22], 0x48) sched_setscheduler(r1, 0x6, &(0x7f00000002c0)=0x7fff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001821", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2e0000006c0001002abd7000ff9bdf", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/133}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) 16.651806754s ago: executing program 4 (id=26): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x48001002, r1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x10005) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r3, 0x0, r1, 0x0, 0x7ffff000, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/133}, 0x20) syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x10001, 0x5, 0x1, 0x0, &(0x7f00000001c0)=0x2, 0x92ffffff) 16.64377226s ago: executing program 2 (id=27): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001340)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$rxrpc(0x21, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x39cb, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004180)='smaps_rollup\x00') read$FUSE(r8, &(0x7f00000041c0)={0x2020}, 0x2024) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) recvmmsg(r0, &(0x7f0000006740), 0x0, 0x102, &(0x7f00000022c0)={0x0, 0x989680}) 15.48080975s ago: executing program 3 (id=28): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x42902, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5f75a04c4f4681a79e35f0423c86507aecc6e083515fface2a1793aab897cbf3717dfdb8d4aa7f4d39841e5f46f96e1398c9c95ddc3744fd4118a709b8757eeda9db80cea73f9fb3fdf981ecc001633d2d7fbe1227cf370731c608f094f1655d954189d52dd1735af7098487de5b", 0x6e}], 0x1) ustat(0x7, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getpriority(0x1, 0xffffffffffffffff) sendmsg$netlink(r6, &(0x7f0000000040), 0x800) ustat(0x7, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b20, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) 13.375691156s ago: executing program 3 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000023c0)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) syz_open_dev$I2C(&(0x7f00000001c0), 0xcda, 0x0) r2 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x4000) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x100) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'dummy0\x00', @random="8ed3e46724fa"}) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000040)=""/67) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x5000) 13.160857289s ago: executing program 4 (id=30): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2710, @hyper}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x4, 0x800) r2 = getpid() capset(&(0x7f0000000000)={0x20071026, r2}, &(0x7f0000000040)={0xc0f, 0x8, 0x9, 0x1, 0x0, 0xfff}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x20a, 0x4) setsockopt$inet6_int(r4, 0x29, 0x42, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000048c0)="04e9", 0x2}], 0x1}}], 0x1, 0x4000001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x40042c1) open$dir(&(0x7f0000000280)='./file1\x00', 0x202001, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000022a00)={0x8000001, 0x0, 0x0, 0x0, 0x2}) 11.905934123s ago: executing program 2 (id=31): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x1101) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x28}, 0x28) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sched_setscheduler(r1, 0x6, &(0x7f00000002c0)=0x7fff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001821", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) 9.425482502s ago: executing program 4 (id=32): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40), 0x0, 0x42, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe5400048028000180070001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r3, 0x0) socket(0x80000000000000a, 0x2, 0x0) 8.178772583s ago: executing program 2 (id=33): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x402) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0xfe}, 0x800, 0x0, 0x1, 0x1, 0x0, 0xffff}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x3ff, 0x0, 0x3, 0xb, 0x0, 0x5}, &(0x7f00000000c0)=0x20) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="18200000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00'], &(0x7f0000000040)='GPL\x00', 0x40, 0xe8, &(0x7f0000000080)=""/232, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x1], &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0xc}, {0x5, 0x2, 0x9, 0x6}, {0x3, 0x2, 0x5, 0xc}, {0x1, 0x4, 0x7, 0x9}], 0x10, 0x1}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185042, 0x1ef) fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xfffffffb) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c5a00, 0x0) sendfile(r4, r5, 0x0, 0x20fffe82) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8810) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x46, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x18040) r8 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000000)=0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 7.600385125s ago: executing program 1 (id=34): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 7.288441508s ago: executing program 0 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[]) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000440)="5800000014001923060000000000000010ff000000000069d6e580dfee0000004e32f61bcdf1e422676b001000000100800000000000001000aadc28dad12c0d03cf77ce8196c2b228742e6faa000000c600000000000000", 0x58}], 0x1) 5.808402158s ago: executing program 0 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x48884) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x10, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r2, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_raw(0x1d, 0x3, 0x1) pivot_root(0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_gfeatures={0x33, 0x6, [{}, {}, {}, {}, {}, {}]}}) r7 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000045000/0x4000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000900)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r11, 0xc0104d08, &(0x7f0000000900)) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000680)={{0x2, r8, 0x0, r10, 0x0, 0x40, 0x7}, 0x6, 0xff, 0x4000e1, 0x719, r0, r9, 0xd}) 5.805189697s ago: executing program 1 (id=37): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001340)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$rxrpc(0x21, 0x2, 0x0) sendmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x39cb, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020}, 0x2024) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) recvmmsg(r0, &(0x7f0000006740), 0x0, 0x102, &(0x7f00000022c0)={0x0, 0x989680}) 5.692986464s ago: executing program 3 (id=38): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xc7b, 0x4, 0x3, 0x0, 0xdb}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x13, 0x8000000000000004}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x100) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="a6", 0x1, 0x20000045, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1, 0xc0029c, 0x0) r6 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, r5, 0x6}, 0x94) 5.639246652s ago: executing program 4 (id=39): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x84c3, 0x2, 'client1\x00', 0x6, "9a9ef454d661393f", "6d626530536b329960e36376b7bee05dd08db1d5ab620cbe40665e9b731e606d", 0x0, 0x9}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000200)='K', 0x1}], 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000480)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x56e, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x18, "", [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xf, 0xf3}}}}}]}}]}}, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write(r4, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) r5 = add_key$keyring(&(0x7f0000001340), &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000340)='+-', 0x2, r5) sendmsg$can_j1939(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="eb69699b3c6d3a5fec0e3daae47bbda66f748b4964bdfaab1f9ea4f45eafd6bd52a4a923b776ed3af47cacccb0c4d7e4a8e79d551a6b11367410373c7b88d50a115217ed33f8c70d4e1731f0853376cc86ebe4bdb7553dd0c59198048ed7e43ad3a92db4b8b162c8359ffb8f0dc1d78f6b552bf3461ff484a6b72e70470d4bc9f58bd1944690256e4af96789f43b9b4568607a17804d8256c3af", 0x9a}, 0x1, 0x0, 0x0, 0x20000010}, 0x48084) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB='\v\x00'], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r6, 0x1000) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) io_uring_enter(0xffffffffffffffff, 0x6242, 0xfffffffd, 0xa0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.922560045s ago: executing program 3 (id=40): shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000240)=""/80) open(&(0x7f0000000280)='.\x00', 0x8400, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setpgid(r2, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000440)="5800000014001923060000000000000010ff000000000069d6e580dfee0000004e32f61bcdf1e422676b001000000100800000000000001000aadc28dad12c0d03cf77ce8196c2b228742e6faa000000c600000000000000", 0x58}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, 0xfffffffffffffffc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r8, 0xffffffffffffffff, 0x34, 0x0, @void}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 3.92013575s ago: executing program 0 (id=41): syz_open_dev$sndctrl(0x0, 0x4, 0x70be42) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000001c0)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r7, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x4040040) bind$can_raw(r5, &(0x7f00000005c0), 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010015be4c385af31d4911"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) 2.829660416s ago: executing program 1 (id=42): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xa2402, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x1, 0xba, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000440)="15", 0x0, 0x7, 0x0, 0x1, 0x0}) r6 = socket(0x15, 0x4, 0x3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="01002abd7000fcdbdf25050000000c00050000000000000000000c00060001000000000000000c00040005000000000000000c00050020000000000000000c00030000020000000000000c0003000b000000000000000c00050002010000000000000d000a002f6465762f6b766d00000000"], 0x78}, 0x1, 0x0, 0x0, 0x9beab2868d505bed}, 0x4000040) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r11, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r11, 0x84, 0x3, &(0x7f0000000040)=0x8, 0x4) r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r12, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xb000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 2 (id=43): mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys/bus/pci/drivers/xhci_hcd/new_id/file0\x00', &(0x7f0000000040)='sysfs\x00', 0x102740d, 0x0) r0 = io_uring_setup(0x4005d06, &(0x7f0000000100)={0x0, 0xb6e2, 0x10000, 0x1, 0x402c4}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3a, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x0, 0x2, 0x2, 0xff, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x403, 0x1, 0xf8, 0x0, 0x7, 0xb}]}]}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x1}}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x5, 0x4) listen(r2, 0x4e) r3 = fsopen(&(0x7f0000000040)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='debug', &(0x7f0000000100)='noblock_validity', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xbc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x7, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0xd, 0x2002}, 0x20) r7 = socket$kcm(0x11, 0x200000000000003, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x8907, 0x0) mmap(0x0, 0x0, 0x3, 0x32, r7, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) r8 = openat(r6, 0x0, 0x2, 0x0) write(r8, &(0x7f0000000d00)='nf 127.0.0.1 -\\000\\:000 l\\calhost\n', 0x24) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, 0x0}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 72.045838][ T5576] cgroup: Unknown subsys name 'net' [ 72.287307][ T5576] cgroup: Unknown subsys name 'cpuset' [ 72.351719][ T5576] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.036567][ T5576] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.236144][ T5589] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.238949][ T5589] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.240569][ T5589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.243931][ T5589] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.244631][ T5589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.539530][ T4903] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.583473][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.594919][ T5601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.605979][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.608241][ T5601] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.609024][ T5601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.611840][ T5601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.613893][ T5601] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.614695][ T5601] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.626448][ T5601] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.627161][ T5601] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.662851][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.667669][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.670202][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.692966][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.772507][ T5589] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.781812][ T5589] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.785510][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.818028][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.835336][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.218179][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.219228][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.219424][ T5586] bridge_slave_0: entered allmulticast mode [ 78.223072][ T5586] bridge_slave_0: entered promiscuous mode [ 78.260744][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.260863][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.261013][ T5586] bridge_slave_1: entered allmulticast mode [ 78.267557][ T5586] bridge_slave_1: entered promiscuous mode [ 78.354019][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.368260][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.402872][ T60] Bluetooth: hci0: command tx timeout [ 78.498744][ T5586] team0: Port device team_slave_0 added [ 78.522600][ T5586] team0: Port device team_slave_1 added [ 78.641298][ T60] Bluetooth: hci2: command tx timeout [ 78.651076][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.651090][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.651119][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.730208][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.730223][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.730236][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.801321][ T60] Bluetooth: hci3: command tx timeout [ 78.801329][ T5606] Bluetooth: hci1: command tx timeout [ 78.881358][ T5606] Bluetooth: hci4: command tx timeout [ 79.186805][ T5586] hsr_slave_0: entered promiscuous mode [ 79.187671][ T5586] hsr_slave_1: entered promiscuous mode [ 79.209787][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.209917][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.210238][ T5594] bridge_slave_0: entered allmulticast mode [ 79.212390][ T5594] bridge_slave_0: entered promiscuous mode [ 79.258624][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.258712][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.258824][ T5594] bridge_slave_1: entered allmulticast mode [ 79.260245][ T5594] bridge_slave_1: entered promiscuous mode [ 79.404245][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.404527][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.404764][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.404910][ T5592] bridge_slave_0: entered allmulticast mode [ 79.406434][ T5592] bridge_slave_0: entered promiscuous mode [ 79.407638][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.407757][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.408738][ T5597] bridge_slave_0: entered allmulticast mode [ 79.410146][ T5597] bridge_slave_0: entered promiscuous mode [ 79.483414][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.483643][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.483738][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.483831][ T5592] bridge_slave_1: entered allmulticast mode [ 79.485210][ T5592] bridge_slave_1: entered promiscuous mode [ 79.486108][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.486190][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.486464][ T5597] bridge_slave_1: entered allmulticast mode [ 79.487762][ T5597] bridge_slave_1: entered promiscuous mode [ 79.579099][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.579249][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.579341][ T5596] bridge_slave_0: entered allmulticast mode [ 79.581116][ T5596] bridge_slave_0: entered promiscuous mode [ 79.639085][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.639223][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.639369][ T5596] bridge_slave_1: entered allmulticast mode [ 79.640859][ T5596] bridge_slave_1: entered promiscuous mode [ 79.648564][ T5594] team0: Port device team_slave_0 added [ 79.653958][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.658227][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.690497][ T5594] team0: Port device team_slave_1 added [ 79.694897][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.699308][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.770443][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.833216][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.833858][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.833867][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.833880][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.836259][ T5592] team0: Port device team_slave_0 added [ 79.838191][ T5597] team0: Port device team_slave_0 added [ 79.883708][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.883723][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.883747][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.887004][ T5592] team0: Port device team_slave_1 added [ 79.889829][ T5597] team0: Port device team_slave_1 added [ 80.293434][ T5596] team0: Port device team_slave_0 added [ 80.330239][ T5596] team0: Port device team_slave_1 added [ 80.333875][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.333890][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.333913][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.335208][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.335219][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.335242][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.376846][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.376861][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.376884][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.378685][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.378696][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.378718][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.447519][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.447550][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.447573][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.458884][ T5594] hsr_slave_0: entered promiscuous mode [ 80.463249][ T5594] hsr_slave_1: entered promiscuous mode [ 80.464195][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 80.464759][ T5594] Cannot create hsr debugfs directory [ 80.470365][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.470377][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.470400][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.481453][ T5606] Bluetooth: hci0: command tx timeout [ 80.653473][ T5592] hsr_slave_0: entered promiscuous mode [ 80.654255][ T5592] hsr_slave_1: entered promiscuous mode [ 80.654811][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 80.654833][ T5592] Cannot create hsr debugfs directory [ 80.685958][ T5597] hsr_slave_0: entered promiscuous mode [ 80.687576][ T5597] hsr_slave_1: entered promiscuous mode [ 80.688528][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 80.688549][ T5597] Cannot create hsr debugfs directory [ 80.721547][ T5606] Bluetooth: hci2: command tx timeout [ 80.752127][ T5596] hsr_slave_0: entered promiscuous mode [ 80.752899][ T5596] hsr_slave_1: entered promiscuous mode [ 80.753419][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 80.753440][ T5596] Cannot create hsr debugfs directory [ 80.881368][ T5606] Bluetooth: hci1: command tx timeout [ 80.891949][ T5606] Bluetooth: hci3: command tx timeout [ 80.963052][ T5606] Bluetooth: hci4: command tx timeout [ 81.280586][ T5586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.334862][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.372271][ T5586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.404964][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.440110][ T5586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.466771][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.507572][ T5586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.536278][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.763363][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.800105][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.817154][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.857236][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.877993][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.918710][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.945928][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.984721][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.107556][ T5597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.143995][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.152667][ T5597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.185870][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.189857][ T5597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.216552][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.250189][ T5597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.274027][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.388949][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.426037][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.439741][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.464973][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.472087][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.513506][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.520319][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.547754][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.561298][ T5606] Bluetooth: hci0: command tx timeout [ 82.587336][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.708119][ T5592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.746773][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.757121][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.769145][ T5592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.795162][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.803030][ T5606] Bluetooth: hci2: command tx timeout [ 82.814529][ T5592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.844335][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.849079][ T5592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.868552][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.898192][ T2848] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.898339][ T2848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.950210][ T1805] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.950347][ T1805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.963175][ T5606] Bluetooth: hci1: command tx timeout [ 82.963207][ T5606] Bluetooth: hci3: command tx timeout [ 82.998971][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.041821][ T60] Bluetooth: hci4: command tx timeout [ 83.118083][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.163132][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.163728][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.197793][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.219302][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.219430][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.318306][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.402961][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.403121][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.415973][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.466883][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.467062][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.555623][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.626243][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.626376][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.648256][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.716972][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.717221][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.844516][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.905215][ T2848] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.905327][ T2848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.989161][ T1805] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.994618][ T1805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.460807][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.642025][ T60] Bluetooth: hci0: command tx timeout [ 84.783036][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.891825][ T60] Bluetooth: hci2: command tx timeout [ 84.894587][ T5586] veth0_vlan: entered promiscuous mode [ 84.973759][ T5586] veth1_vlan: entered promiscuous mode [ 85.044478][ T60] Bluetooth: hci3: command tx timeout [ 85.044510][ T60] Bluetooth: hci1: command tx timeout [ 85.121419][ T5606] Bluetooth: hci4: command tx timeout [ 85.180596][ T5594] veth0_vlan: entered promiscuous mode [ 85.275220][ T5594] veth1_vlan: entered promiscuous mode [ 85.285853][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.286846][ T5586] veth0_macvtap: entered promiscuous mode [ 85.352216][ T5586] veth1_macvtap: entered promiscuous mode [ 85.478741][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.542412][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.560644][ T5594] veth0_macvtap: entered promiscuous mode [ 85.625563][ T5594] veth1_macvtap: entered promiscuous mode [ 85.640936][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.667721][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.914602][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.976695][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.332995][ T5592] veth0_vlan: entered promiscuous mode [ 86.387457][ T5596] veth0_vlan: entered promiscuous mode [ 86.477330][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.477412][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.545624][ T5597] veth0_vlan: entered promiscuous mode [ 86.555312][ T5592] veth1_vlan: entered promiscuous mode [ 86.584593][ T5596] veth1_vlan: entered promiscuous mode [ 86.605285][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.605302][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.650200][ T5597] veth1_vlan: entered promiscuous mode [ 86.687032][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.687045][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.797466][ T31] cfg80211: failed to load regulatory.db [ 86.883870][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.883890][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.933739][ T5592] veth0_macvtap: entered promiscuous mode [ 86.947596][ T5596] veth0_macvtap: entered promiscuous mode [ 87.011746][ T5592] veth1_macvtap: entered promiscuous mode [ 87.027658][ T5596] veth1_macvtap: entered promiscuous mode [ 87.034561][ T5597] veth0_macvtap: entered promiscuous mode [ 87.067895][ T5597] veth1_macvtap: entered promiscuous mode [ 87.114668][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.148668][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.173808][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.193223][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.200926][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.256083][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.777853][ T5800] UDC core: g1: couldn't find an available UDC or it's busy [ 92.594211][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.594230][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.695535][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.695554][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.912700][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.996525][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.996588][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.996602][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.997150][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.057550][ T2942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.059240][ T2942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.059710][ T2942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.168996][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.169015][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.204546][ T5810] syz.0.8 (5810) used greatest stack depth: 19112 bytes left [ 94.209235][ T88] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.210591][ T88] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.211037][ T88] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.410631][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.410650][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.430034][ T88] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.431028][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.431060][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.431088][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.431114][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.431141][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.432356][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.432395][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.432427][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.432458][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.432503][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.918238][ T5819] mmap: syz.0.11 (5819) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.264763][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.264790][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.111575][ T5852] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.294838][ T5845] ceph: No mds server is up or the cluster is laggy [ 105.312762][ T5687] libceph: connect (1)[c::]:6789 error -101 [ 105.317496][ T5687] libceph: mon0 (1)[c::]:6789 connect error [ 106.672629][ T5866] Bluetooth: MGMT ver 1.23 [ 108.600805][ T37] audit: type=1326 audit(1787378437.687:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5877 comm="syz.1.21" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4bc04e0d9 code=0x0 [ 109.420007][ T1805] IPVS: starting estimator thread 0... [ 109.881369][ T5898] IPVS: using max 11 ests per chain, 26400 per kthread [ 111.459827][ T5917] can0: slcan on ttyS3. [ 111.708571][ T5914] futex_wake_op: syz.4.26 tries to shift op by -1; fix this program [ 112.281106][ T5925] Zero length message leads to an empty skb [ 113.142807][ T5908] can0 (unregistered): slcan off ttyS3. [ 113.202020][ T5903] netlink: 'syz.0.24': attribute type 61 has an invalid length. [ 114.934179][ T5931] capability: warning: `syz.4.30' uses deprecated v2 capabilities in a way that may be insecure [ 115.751552][ T5929] dummy0: entered promiscuous mode [ 115.755026][ T5929] dummy0: entered allmulticast mode [ 119.218650][ T5953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.32'. [ 119.218788][ T5953] openvswitch: netlink: Flow actions attr not present in new flow. [ 121.432441][ T5970] No source specified [ 122.640297][ T36] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.801226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.821232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.831234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.841220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.851211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.861214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.871214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.881209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.891210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.901216][ T0] NOHZ tick[ 126.901216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.044544][ T5991] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 128.346835][ T3113] IPVS: starting estimator thread 0... [ 128.417096][ T3113] ------------[ cut here ]------------ [ 128.417110][ T3113] in_task() && kcov_mode_enabled(mode) [ 128.417126][ T3113] WARNING: kernel/kcov.c:894 at kcov_remote_start+0x5d6/0x710, CPU#1: kworker/u8:15/3113 [ 128.417168][ T3113] Modules linked in: [ 128.417207][ T3113] CPU: 1 UID: 0 PID: 3113 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.417253][ T3113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.417266][ T3113] Workqueue: events_unbound cfg80211_wiphy_work [ 128.417290][ T3113] RIP: 0010:kcov_remote_start+0x5d6/0x710 [ 128.417314][ T3113] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b1 e6 02 03 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 ab fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 dc a8 8a 09 89 c0 48 c7 c7 c0 52 a3 [ 128.417330][ T3113] RSP: 0018:ffffc9000e67f9d8 EFLAGS: 00010202 [ 128.417346][ T3113] RAX: 0000000000000000 RBX: ffff88803287dd00 RCX: 8000000000000001 [ 128.417360][ T3113] RDX: 0000000000000000 RSI: ffffffff8bcbbe60 RDI: ffffffff8bcbbe20 [ 128.417373][ T3113] RBP: ffff888029e64c80 R08: ffffffff8b52de52 R09: 0000000000000000 [ 128.417387][ T3113] R10: 0000000000000000 R11: ffffffff8e1c3740 R12: dffffc0000000000 [ 128.417400][ T3113] R13: ffff888061081ef8 R14: 0000000000000000 R15: ffff888061091180 [ 128.417413][ T3113] FS: 0000000000000000(0000) GS:ffff888125cf4000(0000) knlGS:0000000000000000 [ 128.417435][ T3113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.417448][ T3113] CR2: 0000001b3201fff8 CR3: 0000000033c94000 CR4: 00000000003526f0 [ 128.417468][ T3113] Call Trace: [ 128.417476][ T3113] [ 128.417489][ T3113] ieee80211_iface_work+0x20c/0x1010 [ 128.417530][ T3113] cfg80211_wiphy_work+0x29e/0x420 [ 128.417553][ T3113] ? process_scheduled_works+0x97a/0x1630 [ 128.417578][ T3113] process_scheduled_works+0xc3d/0x1630 [ 128.417635][ T3113] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.417664][ T3113] ? assign_work+0x3cf/0x5d0 [ 128.417693][ T3113] worker_thread+0xa47/0xfb0 [ 128.417733][ T3113] ? __kthread_parkme+0x71/0x1f0 [ 128.417768][ T3113] kthread+0x38b/0x470 [ 128.417797][ T3113] ? __pfx_worker_thread+0x10/0x10 [ 128.417819][ T3113] ? __pfx_kthread+0x10/0x10 [ 128.417847][ T3113] ret_from_fork+0x514/0xb70 [ 128.417879][ T3113] ? __pfx_ret_from_fork+0x10/0x10 [ 128.417907][ T3113] ? __switch_to+0xc89/0x1420 [ 128.417935][ T3113] ? __pfx_kthread+0x10/0x10 [ 128.417964][ T3113] ret_from_fork_asm+0x1a/0x30 [ 128.418000][ T3113] [ 128.418014][ T3113] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.418028][ T3113] CPU: 1 UID: 0 PID: 3113 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.418048][ T3113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.418059][ T3113] Workqueue: events_unbound cfg80211_wiphy_work [ 128.418079][ T3113] Call Trace: [ 128.418086][ T3113] [ 128.418094][ T3113] vpanic+0x56d/0xa60 [ 128.418112][ T3113] ? __pfx__printk+0x10/0x10 [ 128.418134][ T3113] ? __pfx_vpanic+0x10/0x10 [ 128.418160][ T3113] ? is_bpf_text_address+0x292/0x2b0 [ 128.418185][ T3113] ? is_bpf_text_address+0x26/0x2b0 [ 128.418218][ T3113] panic+0xc5/0xd0 [ 128.418246][ T3113] ? __pfx_panic+0x10/0x10 [ 128.418283][ T3113] ? ret_from_fork_asm+0x1a/0x30 [ 128.418307][ T3113] __warn+0x315/0x4c0 [ 128.418322][ T3113] ? kcov_remote_start+0x5d6/0x710 [ 128.418343][ T3113] ? kcov_remote_start+0x5d6/0x710 [ 128.418362][ T3113] __report_bug+0x276/0x570 [ 128.418391][ T3113] ? kcov_remote_start+0x5d6/0x710 [ 128.418413][ T3113] ? __pfx___report_bug+0x10/0x10 [ 128.418448][ T3113] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 128.418473][ T3113] ? rt_spin_lock+0x1e2/0x400 [ 128.418493][ T3113] ? rt_spin_lock+0x1e2/0x400 [ 128.418514][ T3113] ? kcov_remote_start+0x5d6/0x710 [ 128.418533][ T3113] report_bug+0x16b/0x220 [ 128.418558][ T3113] ? kcov_remote_start+0x5d6/0x710 [ 128.418575][ T3113] ? kcov_remote_start+0x5d8/0x710 [ 128.418593][ T3113] handle_bug+0x9c/0x200 [ 128.418622][ T3113] exc_invalid_op+0x1a/0x50 [ 128.418649][ T3113] asm_exc_invalid_op+0x1a/0x20 [ 128.418668][ T3113] RIP: 0010:kcov_remote_start+0x5d6/0x710 [ 128.418689][ T3113] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b1 e6 02 03 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 ab fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 dc a8 8a 09 89 c0 48 c7 c7 c0 52 a3 [ 128.418705][ T3113] RSP: 0018:ffffc9000e67f9d8 EFLAGS: 00010202 [ 128.418720][ T3113] RAX: 0000000000000000 RBX: ffff88803287dd00 RCX: 8000000000000001 [ 128.418733][ T3113] RDX: 0000000000000000 RSI: ffffffff8bcbbe60 RDI: ffffffff8bcbbe20 [ 128.418746][ T3113] RBP: ffff888029e64c80 R08: ffffffff8b52de52 R09: 0000000000000000 [ 128.418758][ T3113] R10: 0000000000000000 R11: ffffffff8e1c3740 R12: dffffc0000000000 [ 128.418771][ T3113] R13: ffff888061081ef8 R14: 0000000000000000 R15: ffff888061091180 [ 128.418792][ T3113] ? rt_spin_lock+0x1e2/0x400 [ 128.418818][ T3113] ? kcov_remote_start+0xeb/0x710 [ 128.418840][ T3113] ieee80211_iface_work+0x20c/0x1010 [ 128.418879][ T3113] cfg80211_wiphy_work+0x29e/0x420 [ 128.418901][ T3113] ? process_scheduled_works+0x97a/0x1630 [ 128.418924][ T3113] process_scheduled_works+0xc3d/0x1630 [ 128.418979][ T3113] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.419009][ T3113] ? assign_work+0x3cf/0x5d0 [ 128.419037][ T3113] worker_thread+0xa47/0xfb0 [ 128.419074][ T3113] ? __kthread_parkme+0x71/0x1f0 [ 128.419109][ T3113] kthread+0x38b/0x470 [ 128.419137][ T3113] ? __pfx_worker_thread+0x10/0x10 [ 128.419159][ T3113] ? __pfx_kthread+0x10/0x10 [ 128.419187][ T3113] ret_from_fork+0x514/0xb70 [ 128.419218][ T3113] ? __pfx_ret_from_fork+0x10/0x10 [ 128.419246][ T3113] ? __switch_to+0xc89/0x1420 [ 128.419273][ T3113] ? __pfx_kthread+0x10/0x10 [ 128.419302][ T3113] ret_from_fork_asm+0x1a/0x30 [ 128.419337][ T3113] [ 128.419591][ T3113] Kernel Offset: disabled