last executing test programs:
33.441037395s ago: executing program 1 (id=355):
r0 = socket(0x2b, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r6, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x40002}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r7, 0x0, 0x0)
listen(r6, 0x1ad72f7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
30.534966721s ago: executing program 0 (id=357):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = memfd_secret(0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000fc0)={0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x0, &(0x7f0000000340)={0xffffffff, 0x4})
socket$inet_tcp(0x2, 0x1, 0x0)
fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x28, 0x6, 0x2)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
recvmmsg(r2, &(0x7f0000008940), 0x0, 0x102, &(0x7f0000008ac0))
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
26.140806884s ago: executing program 1 (id=366):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$kcm(0x2, 0xa, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-4'], 0x9)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r4 = gettid()
process_vm_writev(r4, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
clock_gettime(0x0, 0x0)
recvmmsg(r0, &(0x7f0000006780), 0x0, 0x43, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newtaction={0x64, 0x30, 0x9, 0x70bd28, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x800, 0x0, 0x7, 0x0, 0x7}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r6 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r6, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0)
24.001124431s ago: executing program 0 (id=368):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$update(0x2, r0, &(0x7f0000000080)="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", 0xfff)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000001080)={0x0, 0x2ac6, 0xe8, 0x0, 0x7})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001180)={'syztnl2\x00', &(0x7f0000001100)={'ip6gre0\x00', 0x0, 0x29, 0x19, 0x0, 0x95dc, 0x42, @mcast2, @loopback, 0x1, 0x10, 0x7, 0x1c}})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001200), 0x2000)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000001240)={0x0, 0x2, 0x9, 0x3, 0x80000000})
getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001300)={@private1}, &(0x7f0000001340)=0x14)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000001480)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001440)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40080)
r3 = syz_genetlink_get_family_id$nl80211(0x0, r2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}}, 0x4084)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000018c0)={<r5=>r2, 0x6, 0x81, 0xffffffffffff0001})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
recvfrom(r5, &(0x7f0000001940), 0x0, 0x100, &(0x7f0000001980)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @private=0xa010102}, 0x4, 0x3, 0x1, 0x1}}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r5, 0xb4)
getresuid(&(0x7f0000001ac0), &(0x7f0000001b00)=<r6=>0x0, 0x0)
setfsuid(0x0)
ioprio_get$uid(0x3, r6)
times(0x0)
truncate(&(0x7f0000001c00)='./file0\x00', 0xfbd6)
socket$inet_tcp(0x2, 0x1, 0x0)
22.707534275s ago: executing program 1 (id=371):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$inet(0x2, 0xa, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000001200)={0x50000012})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000300)={0xa000201b})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000600))
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
sendfile(r5, r5, &(0x7f0000000080)=0xfffffffffffffffd, 0x7f03)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x2, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0)
22.681181124s ago: executing program 2 (id=372):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1d, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffeb3)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000ac0), 0x88603, 0x0)
lseek(r1, 0x7, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0)
mq_notify(r2, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/164, 0xa4}], 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003", @ANYRES32=r0, @ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_emit_ethernet(0x6e, &(0x7f0000000700)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "01b02b", 0x0, 0x6c, 0x0, @loopback, @local, [@srh]}}}}}}}, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
r6 = dup(0xffffffffffffffff)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a00000000000000050000001400050020010000000000", @ANYRES32=r9], 0x4c}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x500, 0x0, 0xa04002a3, r7})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000), 0xfe3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10)
dup3(r10, r4, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
20.503592845s ago: executing program 0 (id=374):
r0 = inotify_init()
accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x101, 0x300, 0x0, 0x101, 0x300}})
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6, 0x2, 0x3, 0xcef, 0x6, 0x5})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0xb, 0xff}, @broadcast, @multicast1, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)
syz_usb_connect$uac1(0x1, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
18.714492257s ago: executing program 3 (id=375):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20)
recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c40)=""/158, 0x9e}], 0x1}, 0x2}], 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080), 0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r6 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r6, 0x107, 0xd, 0x0, &(0x7f0000000000))
16.543477191s ago: executing program 3 (id=376):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3})
r2 = socket(0x28, 0x5, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000001)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600040001", 0x37}], 0x1}, 0x0)
unshare(0x22020600)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
open_by_handle_at(r7, 0x0, 0x200000)
r8 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe45)
listen(r3, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r9, &(0x7f0000000cc0), 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
accept4$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0x100000, 0x4, 0x1, 0x1, 0x3})
16.319066197s ago: executing program 4 (id=377):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
close(r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='hugetlbfs\x00', 0x20, &(0x7f0000000440)='^%\x00')
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4000080)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
16.200924838s ago: executing program 2 (id=378):
syz_emit_ethernet(0xc8, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$phonet(0x23, 0x2, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
connect$netrom(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
syz_clone3(&(0x7f00000002c0)={0x8500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000200))
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c)
15.948166625s ago: executing program 3 (id=379):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$admmidi(0x0, 0x20, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
read$midi(r5, 0x0, 0x14)
close_range(r4, 0xffffffffffffffff, 0x0)
15.158441352s ago: executing program 1 (id=380):
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7d}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = memfd_secret(0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@deltclass={0x40, 0x29, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffff}, {0xffff, 0x4}, {0x5, 0xfff2}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0xe}}, @tclass_kind_options=@c_red={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000240)={'pimreg1\x00', 0x1000})
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000001200)={{0x2, 0x4e22, @multicast1}, {0x6, @multicast}, 0x64, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_virt_wifi\x00'})
r6 = gettid()
syz_open_procfs(r6, &(0x7f0000000040)='smaps_rollup\x00')
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001280)=ANY=[@ANYRES32=r4, @ANYBLOB='&\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="53c17158894c72135b0b776642c783b0b81ffca331c94861bb8b1d7d9fcc233c825185f6235e01a23599183a6fad0bca58abd2f2cb7cfa38f1875064bfad36f50c7c982518a751c3ebeabe1260b4b8c870db4372eb6d52d622f889", @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
14.90647407s ago: executing program 4 (id=381):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
11.835184917s ago: executing program 0 (id=382):
r0 = socket(0x18, 0x0, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x10, 0x803, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x7fff, 0xffffffffffffffff, 0x0, 0x100000001}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2c000011)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x20001)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB])
sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023893)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xc, @remote, 'ip6tnl0\x00'}}, 0x1e)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x4, 0x30, 0x7, 0x3}, &(0x7f0000000040)=0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0)
9.034400788s ago: executing program 2 (id=383):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1300, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00')
read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffa, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000140)={'wg1\x00', <r7=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r6, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x24}}, 0x0)
io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000240)={0x2, 0xff}, 0x1)
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)
9.033961119s ago: executing program 3 (id=384):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
mknodat$null(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r1 = fanotify_init(0x20, 0x1000)
fanotify_mark(r1, 0x1, 0x1, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00')
r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r2, 0x0, 0x8)
fchdir(r7)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r8, 0x0, 0xee01)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
9.033513076s ago: executing program 4 (id=385):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000140))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="660f4f573ef2ad650f07baf80c66b8469ecd8366efbafc0cedf3f38a4880828c8600050f3266b9800000c00f326635002000000f30baf80c66b8c66f318c66efbafc0cecbaf80c66b81a58198b66efbafc0ced", 0x53}], 0x1, 0x0, &(0x7f0000000200), 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in6=@mcast2, 0x4e24, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0xcd}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x0, 0x438}, {}, {0x2}, 0x70bd2b, 0x0, 0xa, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0)
unshare(0x400)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x2, 0x0, 0xfffffffd, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x0)
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a000310"], 0xf)
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6000)
9.031093081s ago: executing program 1 (id=393):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x7, &(0x7f0000000440)=@framed={{}, [@ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={<r4=>0x0, 0xbe35, 0x3, 0x3}, &(0x7f0000000300)=0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={r4, 0x3}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil)
getcwd(&(0x7f0000000040)=""/36, 0x24)
close_range(r6, 0xffffffffffffffff, 0x0)
8.971819642s ago: executing program 0 (id=386):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x48000, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, 0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x0, 0x0})
r6 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40, 0x0, 0x6a})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, 0x0, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
7.657996046s ago: executing program 4 (id=387):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
munmap(&(0x7f0000b45000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
6.058078398s ago: executing program 3 (id=388):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
brk(0x400000ffc020)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x5)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, &(0x7f0000000280)=0x40)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40101, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '%!:^,(\'+).[-@{\x00'}, &(0x7f0000000040)='({\x00', 0x3, 0x0)
ioctl$TCSETS(r5, 0x8926, &(0x7f00000000c0)={0x1fffc, 0xfffffffe, 0x0, 0x0, 0xfd, "bb40ef000180000002000000e600"})
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x81}}}}}}}, 0x0)
syz_emit_ethernet(0xa2, &(0x7f0000000100)={@local, @dev, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x68, 0x6, 0x0, @remote, @loopback, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x10, 0x0, 0x0, 0x0, {[@eol, @sack={0x5, 0x1a, [0x80, 0x7, 0x1, 0xffffff01, 0x2d04, 0x8]}, @exp_smc={0xfe, 0x6}, @generic={0x0, 0xd, "4789e40599484e657b1e91"}, @sack={0x5, 0x16, [0x4, 0x3, 0xb, 0x4, 0x3]}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x2}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)
6.050119116s ago: executing program 2 (id=389):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d3, 0x3c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@broadcast}]}, 0x104}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa, 0x3}]}, @struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x3d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f006bbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x0, &(0x7f00000005c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'ipvlan0\x00', @remote})
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xa00, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
4.787352696s ago: executing program 4 (id=390):
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
epoll_create1(0x80000)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0)
io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf03, 0x4002, 0x2, 0x64})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001440), 0x20000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d031, 0xffffffffffffffff, 0x0)
r1 = socket(0xa, 0x801, 0x0)
getsockopt(r1, 0x29, 0x40, 0x0, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)=[{0x0}], 0x1}, 0x40002102)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
fcntl$setstatus(r6, 0x4, 0x2c00)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB="23731dce0ab573797a592951ea0000dd00"/27], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]})
4.641734181s ago: executing program 0 (id=391):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
io_setup(0x401, &(0x7f0000000000)=<r1=>0x0)
io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000080)="ac12476d86f63b836dc334d371b1b665ad926e41b8e6b8754ff28223f6", 0x1d, 0x71babf60, 0x0, 0x1}, &(0x7f00000001c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10)
r2 = socket(0x21, 0x2, 0x2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
connect$rxrpc(r2, &(0x7f0000000240)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200)
ioctl$KVM_GET_DEBUGREGS(r7, 0x8080aea1, 0x0)
fsopen(&(0x7f0000000000)='erofs\x00', 0x0)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r8 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
r9 = dup(r8)
write$FUSE_INIT(r9, &(0x7f0000000080)={0x4f}, 0xfffffdef)
setsockopt(r9, 0x1, 0x20, 0x0, 0x0)
read$FUSE(r9, &(0x7f0000002000)={0x2020}, 0xfffffc7c)
recvmmsg(r2, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
4.620429251s ago: executing program 1 (id=392):
r0 = socket(0x2a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000002a80)={0x2020}, 0xb79)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100))
r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x109702, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000140))
flock(r0, 0x4)
3.454511061s ago: executing program 2 (id=394):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000070000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
socket(0x1e, 0x4, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={<r4=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, 0x0)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
r6 = socket(0x2b, 0x80801, 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0xffffffffffffffc4, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x404c000}, 0x40003)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0)
74.519828ms ago: executing program 3 (id=395):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0b9e7efa9d0a17", 0x46}], 0x1}, 0x4008048)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x190, 0x80, 0x2dde1e3ad56d4950, 0x4b0, 0xffffff53, 0x1, 0x8, 0x1, {0xf, 0x3}, {0x9, 0x7}, {0xffffffff, 0x3}, {0x2, 0x1}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x7fffffff, 0x4, 0x1, 0x2, 0x6, 0x8000, 0x0, 0x100, 0x0, 0xa})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)={0x34, r7, 0x301, 0x0, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
12.298275ms ago: executing program 4 (id=396):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x8000)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
userfaultfd(0x801)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000180), &(0x7f00000001c0)=0x10)
sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={<r6=>0x0, 0xaf3}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000000c0)={r6, 0xe005, 0x9}, 0x8)
0s ago: executing program 2 (id=397):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
munmap(&(0x7f0000893000/0x4000)=nil, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff0585000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000400)=[@mss={0x2, 0x4}, @sack_perm, @sack_perm, @mss={0x2, 0x1}, @timestamp, @timestamp, @mss={0x2, 0x4}, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts.
[ 83.152775][ T5816] cgroup: Unknown subsys name 'net'
[ 83.351657][ T5816] cgroup: Unknown subsys name 'cpuset'
[ 83.360609][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 84.961728][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 87.795501][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 87.827306][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 87.847835][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 87.855811][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 87.865050][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 87.865443][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 87.874220][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 87.888229][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 87.898205][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 87.898211][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 87.898867][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 87.919408][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 87.922198][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 87.934436][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 87.940749][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 87.968074][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 88.001032][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 88.008193][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 88.008224][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 88.023034][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 88.029215][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 88.037335][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 88.045460][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 88.057969][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 88.065883][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 88.616548][ T5838] chnl_net:caif_netlink_parms(): no params data found
[ 88.806521][ T5827] chnl_net:caif_netlink_parms(): no params data found
[ 88.878660][ T5826] chnl_net:caif_netlink_parms(): no params data found
[ 88.930027][ T5833] chnl_net:caif_netlink_parms(): no params data found
[ 88.943172][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.950893][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.958410][ T5838] bridge_slave_0: entered allmulticast mode
[ 88.965747][ T5838] bridge_slave_0: entered promiscuous mode
[ 88.991738][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.999112][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.006287][ T5838] bridge_slave_1: entered allmulticast mode
[ 89.013899][ T5838] bridge_slave_1: entered promiscuous mode
[ 89.090439][ T5840] chnl_net:caif_netlink_parms(): no params data found
[ 89.132992][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.184592][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 89.230767][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.238141][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.245497][ T5827] bridge_slave_0: entered allmulticast mode
[ 89.254256][ T5827] bridge_slave_0: entered promiscuous mode
[ 89.312074][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.319660][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.326858][ T5827] bridge_slave_1: entered allmulticast mode
[ 89.334427][ T5827] bridge_slave_1: entered promiscuous mode
[ 89.403875][ T5838] team0: Port device team_slave_0 added
[ 89.430384][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.437691][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.445024][ T5833] bridge_slave_0: entered allmulticast mode
[ 89.452672][ T5833] bridge_slave_0: entered promiscuous mode
[ 89.477781][ T5838] team0: Port device team_slave_1 added
[ 89.483881][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.491950][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.499924][ T5826] bridge_slave_0: entered allmulticast mode
[ 89.507380][ T5826] bridge_slave_0: entered promiscuous mode
[ 89.522605][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.529924][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.537193][ T5833] bridge_slave_1: entered allmulticast mode
[ 89.544411][ T5833] bridge_slave_1: entered promiscuous mode
[ 89.566871][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.609502][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.616646][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.624226][ T5826] bridge_slave_1: entered allmulticast mode
[ 89.631567][ T5826] bridge_slave_1: entered promiscuous mode
[ 89.694095][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 89.717825][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 89.724807][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 89.751127][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 89.776413][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.784323][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.794629][ T5840] bridge_slave_0: entered allmulticast mode
[ 89.802108][ T5840] bridge_slave_0: entered promiscuous mode
[ 89.812567][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.826895][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 89.851063][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 89.858440][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 89.884585][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 89.905855][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.915583][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.923319][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.930598][ T5840] bridge_slave_1: entered allmulticast mode
[ 89.938316][ T5840] bridge_slave_1: entered promiscuous mode
[ 89.969075][ T5837] Bluetooth: hci3: command tx timeout
[ 89.979694][ T5827] team0: Port device team_slave_0 added
[ 89.989919][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 90.016233][ T5833] team0: Port device team_slave_0 added
[ 90.027263][ T5827] team0: Port device team_slave_1 added
[ 90.047649][ T5837] Bluetooth: hci1: command tx timeout
[ 90.102996][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 90.115077][ T5833] team0: Port device team_slave_1 added
[ 90.127167][ T5837] Bluetooth: hci0: command tx timeout
[ 90.127181][ T55] Bluetooth: hci2: command tx timeout
[ 90.138255][ T55] Bluetooth: hci4: command tx timeout
[ 90.190257][ T5826] team0: Port device team_slave_0 added
[ 90.198960][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 90.238126][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 90.245112][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.274635][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.292398][ T5838] hsr_slave_0: entered promiscuous mode
[ 90.299206][ T5838] hsr_slave_1: entered promiscuous mode
[ 90.308497][ T5826] team0: Port device team_slave_1 added
[ 90.330046][ T5840] team0: Port device team_slave_0 added
[ 90.336677][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 90.344075][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.371085][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.382886][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.390448][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.416516][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.443542][ T5840] team0: Port device team_slave_1 added
[ 90.450340][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.457973][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.484629][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.555147][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 90.562770][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.588845][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.624794][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 90.632006][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.658336][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.670820][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.677889][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.704104][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.716680][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.723814][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.750059][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.873909][ T5827] hsr_slave_0: entered promiscuous mode
[ 90.880692][ T5827] hsr_slave_1: entered promiscuous mode
[ 90.886810][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 90.895281][ T5827] Cannot create hsr debugfs directory
[ 90.935438][ T5833] hsr_slave_0: entered promiscuous mode
[ 90.943018][ T5833] hsr_slave_1: entered promiscuous mode
[ 90.949551][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 90.957407][ T5833] Cannot create hsr debugfs directory
[ 91.090502][ T5826] hsr_slave_0: entered promiscuous mode
[ 91.096850][ T5826] hsr_slave_1: entered promiscuous mode
[ 91.103581][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 91.111207][ T5826] Cannot create hsr debugfs directory
[ 91.214594][ T5840] hsr_slave_0: entered promiscuous mode
[ 91.221782][ T5840] hsr_slave_1: entered promiscuous mode
[ 91.228221][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 91.236551][ T5840] Cannot create hsr debugfs directory
[ 91.567376][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 91.598861][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 91.641365][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 91.663267][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 91.755249][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 91.778398][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 91.803623][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 91.831413][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 91.892284][ T881] cfg80211: failed to load regulatory.db
[ 91.910651][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 91.941314][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 91.968140][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 92.003436][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 92.047259][ T55] Bluetooth: hci3: command tx timeout
[ 92.100436][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.123896][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 92.130768][ T55] Bluetooth: hci1: command tx timeout
[ 92.142268][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 92.174352][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.185581][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 92.209348][ T55] Bluetooth: hci4: command tx timeout
[ 92.210120][ T5842] Bluetooth: hci0: command tx timeout
[ 92.220291][ T5837] Bluetooth: hci2: command tx timeout
[ 92.239462][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.251689][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 92.286255][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.299984][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.307284][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.362191][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.369355][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.381709][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.388853][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.411956][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.419136][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.453921][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 92.502370][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 92.532262][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 92.572759][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 92.641084][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.775972][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.831595][ T62] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.838833][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.925121][ T62] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.932362][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.030337][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.050152][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[ 93.063590][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[ 93.120592][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[ 93.131357][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.159674][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.167021][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.200141][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.207344][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.223086][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[ 93.264205][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.271404][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.314290][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.321664][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.395727][ T5838] veth0_vlan: entered promiscuous mode
[ 93.505057][ T5838] veth1_vlan: entered promiscuous mode
[ 93.519980][ T5827] veth0_vlan: entered promiscuous mode
[ 93.592145][ T5827] veth1_vlan: entered promiscuous mode
[ 93.633632][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.693980][ T5838] veth0_macvtap: entered promiscuous mode
[ 93.738471][ T5838] veth1_macvtap: entered promiscuous mode
[ 93.813183][ T5827] veth0_macvtap: entered promiscuous mode
[ 93.842559][ T5827] veth1_macvtap: entered promiscuous mode
[ 93.864628][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.903961][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.934765][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 93.948471][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 93.960555][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.993158][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.004738][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.015452][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.024689][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.039777][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 94.051383][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 94.063966][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 94.095505][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 94.129552][ T5842] Bluetooth: hci3: command tx timeout
[ 94.144378][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.155223][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.164348][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.173798][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.207312][ T5842] Bluetooth: hci1: command tx timeout
[ 94.253712][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 94.287612][ T5837] Bluetooth: hci2: command tx timeout
[ 94.289327][ T55] Bluetooth: hci4: command tx timeout
[ 94.293175][ T5842] Bluetooth: hci0: command tx timeout
[ 94.390853][ T5826] veth0_vlan: entered promiscuous mode
[ 94.442757][ T5826] veth1_vlan: entered promiscuous mode
[ 94.478622][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.486607][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.512435][ T5833] veth0_vlan: entered promiscuous mode
[ 94.540826][ T5826] veth0_macvtap: entered promiscuous mode
[ 94.559351][ T5833] veth1_vlan: entered promiscuous mode
[ 94.580044][ T5840] veth0_vlan: entered promiscuous mode
[ 94.586523][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.594753][ T5840] veth1_vlan: entered promiscuous mode
[ 94.601637][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.604949][ T5826] veth1_macvtap: entered promiscuous mode
[ 94.664163][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.678838][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.733228][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.744597][ T5833] veth0_macvtap: entered promiscuous mode
[ 94.744636][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.760997][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 94.780391][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 94.794533][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 94.810067][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 94.822929][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 94.860435][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 94.866385][ T5840] veth0_macvtap: entered promiscuous mode
[ 94.892263][ T5833] veth1_macvtap: entered promiscuous mode
[ 94.911031][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 94.929668][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 94.942873][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 94.961317][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 94.988762][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.019750][ T5840] veth1_macvtap: entered promiscuous mode
[ 95.044572][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.061476][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.077140][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.085988][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.174003][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 95.256055][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 95.283739][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 95.294329][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 95.304373][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 95.314882][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 95.330254][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.370196][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 95.519763][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 95.708026][ T5923] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 96.374773][ T5842] Bluetooth: hci3: command tx timeout
[ 96.376147][ T55] Bluetooth: hci1: command tx timeout
[ 96.380248][ T5842] Bluetooth: hci0: command tx timeout
[ 96.380295][ T5842] Bluetooth: hci2: command tx timeout
[ 96.380334][ T5842] Bluetooth: hci4: command tx timeout
[ 96.417566][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 96.434517][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 96.609859][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 96.740209][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 96.752697][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.777718][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 96.796104][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 96.883937][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 96.899624][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 96.937048][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 96.966414][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 96.986691][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 97.067796][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 97.079748][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.091019][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 97.101571][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 97.979797][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 97.990867][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 98.001052][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 98.011853][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 98.025958][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 98.037706][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 98.051121][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.093235][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.360899][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.370050][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.379988][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.393491][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.403062][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.131361][ T5942] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 99.387463][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.653380][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.956497][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.712964][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.943715][ T5955] mmap: syz.3.11 (5955) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 101.497682][ T5953] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[ 101.506705][ T5953] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[ 101.720693][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.765123][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.002801][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.010856][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.047321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[ 102.055582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[ 102.227723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[ 102.534952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[ 102.807484][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.815340][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.823188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 103.327856][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.350675][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.411181][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.421704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 103.559096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[ 103.587257][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.685909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[ 104.890631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[ 105.197951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[ 105.198375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!!
[ 105.688294][ T5991] input: syz0 as /devices/virtual/input/input5
[ 107.899911][ T5842] Bluetooth: Wrong link type (-57)
[ 108.071930][ T5986] (unnamed net_device) (uninitialized): down delay (32768) is not a multiple of miimon (100), value rounded to 32700 ms
[ 108.084726][ T5986] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[ 108.130791][ T5986] Cannot find map_set index 0 as target
[ 109.089761][ T6015] netlink: 52 bytes leftover after parsing attributes in process `syz.3.20'.
[ 111.737640][ T6024] netlink: 'syz.2.22': attribute type 4 has an invalid length.
[ 112.109222][ T6038] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 116.744766][ T6065] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 116.745446][ T5884] IPVS: starting estimator thread 0...
[ 116.763699][ T6065] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 117.627774][ T6068] IPVS: using max 33 ests per chain, 79200 per kthread
[ 117.908751][ T6077] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 117.916775][ T6077] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 119.235550][ T5842] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 119.245672][ T5842] Bluetooth: hci0: Injecting HCI hardware error event
[ 119.255017][ T5842] Bluetooth: hci0: hardware error 0x00
[ 119.420154][ T6085] program syz.2.35 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 122.280332][ T5842] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 122.866084][ T6105] capability: warning: `syz.4.41' uses deprecated v2 capabilities in a way that may be insecure
[ 124.706558][ T6133] Zero length message leads to an empty skb
[ 124.725233][ T6133] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 124.744428][ T6133] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 124.759488][ T6133] xt_NFQUEUE: number of total queues is 0
[ 126.014684][ T6136] autofs: Unknown parameter 'fd0xffffffffffffffff'
[ 126.178708][ T6136] block device autoloading is deprecated and will be removed.
[ 128.339156][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'.
[ 133.778405][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 133.784936][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 134.097105][ T6183] input: syz0 as /devices/virtual/input/input6
[ 136.422846][ T6204] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 136.626442][ T6199] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 139.459068][ T6223] tipc: Started in network mode
[ 139.464263][ T6223] tipc: Node identity 7, cluster identity 4711
[ 139.470570][ T6223] tipc: Node number set to 7
[ 139.476799][ T6223] tipc: Cannot configure node identity twice
[ 143.432156][ T6242] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 148.085469][ T6279] warning: `syz.0.81' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 148.650520][ T6283] wireguard: wg1: Could not create IPv4 socket
[ 148.815877][ T5884] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 148.842696][ T5898] IPVS: starting estimator thread 0...
[ 149.072758][ T6285] IPVS: using max 27 ests per chain, 64800 per kthread
[ 149.214899][ T5884] usb 4-1: Using ep0 maxpacket: 8
[ 149.293429][ T6287] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 149.777936][ T6291] =======================================================
[ 149.777936][ T6291] WARNING: The mand mount option has been deprecated and
[ 149.777936][ T6291] and is ignored by this kernel. Remove the mand
[ 149.777936][ T6291] option from the mount to silence this warning.
[ 149.777936][ T6291] =======================================================
[ 149.819977][ T6291] syz.4.82: attempt to access beyond end of device
[ 149.819977][ T6291] loop4: rw=0, sector=64, nr_sectors = 1 limit=0
[ 149.836668][ T6291] syz.4.82: attempt to access beyond end of device
[ 149.836668][ T6291] loop4: rw=0, sector=256, nr_sectors = 1 limit=0
[ 149.851230][ T6291] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 149.863986][ T6291] syz.4.82: attempt to access beyond end of device
[ 149.863986][ T6291] loop4: rw=0, sector=512, nr_sectors = 1 limit=0
[ 149.877252][ T6291] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[ 149.887738][ T6291] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[ 149.895491][ T6291] UDF-fs: Scanning with blocksize 512 failed
[ 149.907641][ T6291] syz.4.82: attempt to access beyond end of device
[ 149.907641][ T6291] loop4: rw=0, sector=64, nr_sectors = 2 limit=0
[ 149.922465][ T6291] syz.4.82: attempt to access beyond end of device
[ 149.922465][ T6291] loop4: rw=0, sector=512, nr_sectors = 2 limit=0
[ 149.935886][ T6291] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 149.947960][ T6291] syz.4.82: attempt to access beyond end of device
[ 149.947960][ T6291] loop4: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 149.962288][ T6291] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[ 149.972217][ T6291] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[ 149.980010][ T6291] UDF-fs: Scanning with blocksize 1024 failed
[ 149.990116][ T6291] syz.4.82: attempt to access beyond end of device
[ 149.990116][ T6291] loop4: rw=0, sector=64, nr_sectors = 4 limit=0
[ 150.004304][ T6291] syz.4.82: attempt to access beyond end of device
[ 150.004304][ T6291] loop4: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 150.017830][ T6291] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 150.028780][ T6291] syz.4.82: attempt to access beyond end of device
[ 150.028780][ T6291] loop4: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 150.042214][ T6291] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[ 150.053210][ T6291] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[ 150.061992][ T6291] UDF-fs: Scanning with blocksize 2048 failed
[ 150.071248][ T6291] syz.4.82: attempt to access beyond end of device
[ 150.071248][ T6291] loop4: rw=0, sector=64, nr_sectors = 8 limit=0
[ 150.085703][ T6291] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 150.097096][ T6291] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[ 150.106791][ T6291] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[ 150.114608][ T6291] UDF-fs: Scanning with blocksize 4096 failed
[ 150.120872][ T6291] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[ 151.627208][ T5884] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 151.635069][ T5884] usb 4-1: can't read configurations, error -71
[ 152.389601][ T6300] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 152.439011][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'.
[ 153.259612][ T6309] process 'syz.3.86' launched './file0' with NULL argv: empty string added
[ 157.800719][ T6337] input input7: cannot allocate more than FF_MAX_EFFECTS effects
[ 159.320079][ T6342] tty tty25: ldisc open failed (-12), clearing slot 24
[ 160.701438][ T6353] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 165.742994][ T6388] cifs: Unknown parameter 'mode'
[ 169.577774][ T6406] x_tables: unsorted underflow at hook 3
[ 171.705124][ T6422] Cannot find del_set index 0 as target
[ 173.475104][ T6418] gfs2: not a GFS2 filesystem
[ 174.767214][ T6434] 8021q: adding VLAN 0 to HW filter on device bond0
[ 174.854128][ T6434] bond0: (slave rose0): Enslaving as an active interface with an up link
[ 175.307387][ T6443] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 175.321769][ T6443] xt_NFQUEUE: number of total queues is 0
[ 175.567076][ C1] llc_conn_state_process: llc_conn_service failed
[ 175.970884][ T6445] netlink: 80 bytes leftover after parsing attributes in process `syz.1.117'.
[ 175.985689][ T6445] netlink: 80 bytes leftover after parsing attributes in process `syz.1.117'.
[ 180.883468][ T6483] overlayfs: overlapping lowerdir path
[ 181.423259][ T6484] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 182.789166][ T5837] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[ 182.807065][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:4 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full)
[ 182.807114][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 182.807129][ T5837] Workqueue: hci1 hci_rx_work
[ 182.807190][ T5837] Call Trace:
[ 182.807199][ T5837] <TASK>
[ 182.807208][ T5837] dump_stack_lvl+0x241/0x360
[ 182.807247][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10
[ 182.807277][ T5837] ? __pfx__printk+0x10/0x10
[ 182.807304][ T5837] ? kernfs_path_from_node+0x2b/0x250
[ 182.807336][ T5837] ? kernfs_path_from_node+0x217/0x250
[ 182.807366][ T5837] sysfs_create_dir_ns+0x2fd/0x3f0
[ 182.807395][ T5837] ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 182.807431][ T5837] kobject_add_internal+0x435/0x8d0
[ 182.807468][ T5837] kobject_add+0x15b/0x230
[ 182.807494][ T5837] ? do_raw_spin_unlock+0x13c/0x8b0
[ 182.807522][ T5837] ? device_add+0x3e7/0xbf0
[ 182.807547][ T5837] ? __pfx_kobject_add+0x10/0x10
[ 182.807573][ T5837] ? _raw_spin_unlock+0x28/0x50
[ 182.807596][ T5837] ? get_device_parent+0x165/0x410
[ 182.807625][ T5837] device_add+0x4e5/0xbf0
[ 182.807656][ T5837] hci_conn_add_sysfs+0xe8/0x200
[ 182.807689][ T5837] le_conn_complete_evt+0xc6e/0x12a0
[ 182.807728][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10
[ 182.807750][ T5837] ? __mutex_unlock_slowpath+0x229/0x800
[ 182.807779][ T5837] ? __skb_clone+0x5c/0x6d0
[ 182.807805][ T5837] ? skb_pull_data+0x112/0x230
[ 182.807836][ T5837] hci_le_conn_complete_evt+0x18c/0x420
[ 182.807869][ T5837] hci_event_packet+0xa5c/0x1550
[ 182.807905][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10
[ 182.807940][ T5837] ? __pfx_hci_event_packet+0x10/0x10
[ 182.807977][ T5837] ? kcov_remote_start+0x490/0x7d0
[ 182.808007][ T5837] ? lockdep_hardirqs_on+0x9d/0x150
[ 182.808036][ T5837] ? hci_send_to_monitor+0xdc/0x530
[ 182.808063][ T5837] hci_rx_work+0x3f3/0xdb0
[ 182.808106][ T5837] ? process_scheduled_works+0x9cb/0x18e0
[ 182.808127][ T5837] process_scheduled_works+0xac3/0x18e0
[ 182.808180][ T5837] ? __pfx_process_scheduled_works+0x10/0x10
[ 182.808213][ T5837] ? assign_work+0x367/0x3d0
[ 182.808241][ T5837] worker_thread+0x870/0xd50
[ 182.808279][ T5837] ? __kthread_parkme+0x1a8/0x200
[ 182.808308][ T5837] ? __pfx_worker_thread+0x10/0x10
[ 182.808331][ T5837] kthread+0x7b7/0x940
[ 182.808361][ T5837] ? __pfx_worker_thread+0x10/0x10
[ 182.808385][ T5837] ? __pfx_kthread+0x10/0x10
[ 182.808410][ T5837] ? __pfx_kthread+0x10/0x10
[ 182.808436][ T5837] ? __pfx_kthread+0x10/0x10
[ 182.808461][ T5837] ? __pfx_kthread+0x10/0x10
[ 182.808487][ T5837] ? _raw_spin_unlock_irq+0x23/0x50
[ 182.808506][ T5837] ? lockdep_hardirqs_on+0x9d/0x150
[ 182.808529][ T5837] ? __pfx_kthread+0x10/0x10
[ 182.808556][ T5837] ret_from_fork+0x4b/0x80
[ 182.808576][ T5837] ? __pfx_kthread+0x10/0x10
[ 182.808602][ T5837] ret_from_fork_asm+0x1a/0x30
[ 182.808650][ T5837] </TASK>
[ 182.808681][ T5837] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 183.110627][ T5837] Bluetooth: hci1: failed to register connection device
[ 183.174429][ T6490] lo speed is unknown, defaulting to 1000
[ 183.181117][ T6490] lo speed is unknown, defaulting to 1000
[ 183.192616][ T6490] lo speed is unknown, defaulting to 1000
[ 183.324498][ T6490] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 184.043702][ T6490] lo speed is unknown, defaulting to 1000
[ 184.055496][ T6490] lo speed is unknown, defaulting to 1000
[ 184.063457][ T6490] lo speed is unknown, defaulting to 1000
[ 184.071164][ T6490] lo speed is unknown, defaulting to 1000
[ 184.078860][ T6490] lo speed is unknown, defaulting to 1000
[ 185.003256][ T5898] IPVS: starting estimator thread 0...
[ 185.613089][ T6506] IPVS: using max 38 ests per chain, 91200 per kthread
[ 185.624921][ T6502] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 185.751936][ T6511] 8021q: adding VLAN 0 to HW filter on device bond0
[ 185.766115][ T6511] team0: Port device bond0 added
[ 186.373949][ T6511] syz.1.130 (6511) used greatest stack depth: 17736 bytes left
[ 186.827338][ T6522] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 189.671405][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'.
[ 189.846269][ T5968] IPVS: starting estimator thread 0...
[ 189.968250][ T6544] IPVS: using max 26 ests per chain, 62400 per kthread
[ 194.689825][ T6573] Invalid ELF header magic: != ELF
[ 194.756971][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 194.763331][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 194.769892][ T24] lo speed is unknown, defaulting to 1000
[ 194.866599][ T6585] bond0: entered promiscuous mode
[ 195.064141][ T6585] bond_slave_0: entered promiscuous mode
[ 195.239939][ T6585] bond_slave_1: entered promiscuous mode
[ 196.043120][ T6589] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 196.142276][ T6601] netlink: 'syz.0.148': attribute type 2 has an invalid length.
[ 200.098050][ T6622] netlink: 'syz.1.160': attribute type 2 has an invalid length.
[ 200.106041][ T6622] netlink: 'syz.1.160': attribute type 1 has an invalid length.
[ 206.006478][ T6669] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 206.014480][ T6669] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 206.267582][ T6670] netlink: 80 bytes leftover after parsing attributes in process `syz.3.156'.
[ 206.368270][ T6670] netlink: 80 bytes leftover after parsing attributes in process `syz.3.156'.
[ 207.268105][ T6682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.161'.
[ 208.182659][ T30] audit: type=1326 audit(1744111393.829:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0be18d169 code=0x7ffc0000
[ 209.001735][ T6685] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 209.140355][ T30] audit: type=1326 audit(1744111393.829:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0be18d169 code=0x7ffc0000
[ 209.470986][ T30] audit: type=1326 audit(1744111393.839:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc0be18d169 code=0x7ffc0000
[ 209.545126][ T30] audit: type=1326 audit(1744111393.849:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0be18d169 code=0x7ffc0000
[ 210.628687][ T30] audit: type=1326 audit(1744111393.849:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0be18d169 code=0x7ffc0000
[ 211.894322][ T5846] Bluetooth: hci3: command 0x0406 tx timeout
[ 211.901421][ T5845] Bluetooth: hci1: command 0x0406 tx timeout
[ 211.907605][ T5847] Bluetooth: hci2: command 0x0406 tx timeout
[ 211.948742][ T30] audit: type=1326 audit(1744111393.859:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc0be18d169 code=0x7ffc0000
[ 212.225128][ T30] audit: type=1326 audit(1744111393.859:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0be18d169 code=0x7ffc0000
[ 212.249833][ T30] audit: type=1326 audit(1744111393.859:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0be18d169 code=0x7ffc0000
[ 213.130285][ T30] audit: type=1326 audit(1744111393.869:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0be18bad0 code=0x7ffc0000
[ 213.246795][ T30] audit: type=1326 audit(1744111393.869:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0be18d169 code=0x7ffc0000
[ 213.440386][ T30] audit: type=1326 audit(1744111393.879:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0be18d169 code=0x7ffc0000
[ 213.462618][ T30] audit: type=1326 audit(1744111393.889:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0be18d169 code=0x7ffc0000
[ 214.655285][ T6710] input: syz0 as /devices/virtual/input/input9
[ 215.247157][ T6719] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[ 215.253888][ T6719] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 215.286303][ T30] audit: type=1326 audit(1744111393.889:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0be18d169 code=0x7ffc0000
[ 215.338775][ T30] audit: type=1326 audit(1744111393.889:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0be18d169 code=0x7ffc0000
[ 215.382582][ T30] audit: type=1326 audit(1744111393.909:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0be18bad0 code=0x7ffc0000
[ 215.428060][ T6719] vhci_hcd vhci_hcd.0: Device attached
[ 215.932177][ T881] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[ 216.252562][ T30] audit: type=1326 audit(1744111393.919:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc0be18e997 code=0x7ffc0000
[ 216.296963][ T30] audit: type=1326 audit(1744111393.919:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0be18d169 code=0x7ffc0000
[ 216.318194][ C0] vkms_vblank_simulate: vblank timer overrun
[ 216.344884][ T30] audit: type=1326 audit(1744111393.929:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc0be18e997 code=0x7ffc0000
[ 216.366267][ C0] vkms_vblank_simulate: vblank timer overrun
[ 216.373184][ T30] audit: type=1326 audit(1744111393.929:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc0be18bdca code=0x7ffc0000
[ 216.906162][ T6731] erofs (device nullb0): cannot find valid erofs superblock
[ 217.161527][ T6735] kernel read not supported for file /!selinۡ��l���uxse���q�� ���>� (pid: 6735 comm: syz.3.175)
[ 218.308041][ T6742] netlink: 'syz.4.177': attribute type 2 has an invalid length.
[ 219.863687][ T6760] Invalid source name
[ 223.908909][ T6792] trusted_key: encrypted_key: insufficient parameters specified
[ 226.884338][ T6812] Cannot find del_set index 4 as target
[ 228.321391][ T6818] netlink: 96 bytes leftover after parsing attributes in process `syz.4.191'.
[ 228.852272][ T30] kauditd_printk_skb: 23 callbacks suppressed
[ 228.852292][ T30] audit: type=1326 audit(1744111414.629:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55a18d169 code=0x7ffc0000
[ 228.981753][ T30] audit: type=1326 audit(1744111414.659:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fe55a18d169 code=0x7ffc0000
[ 229.004889][ T30] audit: type=1326 audit(1744111414.659:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55a18d169 code=0x7ffc0000
[ 229.027872][ T30] audit: type=1326 audit(1744111414.659:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe55a18d169 code=0x7ffc0000
[ 229.914434][ T6831] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 229.928511][ T6831] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 230.250883][ T30] audit: type=1326 audit(1744111414.659:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55a18d169 code=0x7ffc0000
[ 230.335932][ T6828] tmpfs: Bad value for 'nr_inodes'
[ 230.367653][ T30] audit: type=1326 audit(1744111414.669:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe55a18d169 code=0x7ffc0000
[ 230.395832][ T30] audit: type=1326 audit(1744111414.669:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55a18d169 code=0x7ffc0000
[ 230.536074][ T6835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.195'.
[ 230.602304][ T30] audit: type=1326 audit(1744111414.809:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fe55a18d169 code=0x7ffc0000
[ 230.603224][ T30] audit: type=1326 audit(1744111414.809:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55a18d169 code=0x7ffc0000
[ 230.604056][ T30] audit: type=1326 audit(1744111414.809:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55a18d169 code=0x7ffc0000
[ 233.518190][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'.
[ 236.146302][ T6858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'.
[ 236.180193][ T6858] netlink: 18 bytes leftover after parsing attributes in process `syz.0.203'.
[ 240.683744][ T6898] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 240.907710][ T6899] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 243.227422][ T6917] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 243.238736][ T6917] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 247.356961][ T6945] syz.4.221 uses obsolete (PF_INET,SOCK_PACKET)
[ 248.312529][ T6949] Bluetooth: MGMT ver 1.23
[ 249.823089][ T6958] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 249.963064][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'.
[ 249.972274][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'.
[ 255.741243][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 255.747764][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 257.046323][ T7000] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 257.977088][ T7009] SET target dimension over the limit!
[ 261.620166][ T7030] batman_adv: batadv0: Adding interface: gretap0
[ 261.626620][ T7030] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 261.788090][ T7030] batman_adv: batadv0: Interface activated: gretap0
[ 261.829094][ T7031] /dev/nullb0: Can't open blockdev
[ 262.243463][ T7025] IPVS: set_ctl: invalid protocol: 231 10.1.1.0:0
[ 263.091890][ T7038] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 265.304302][ T5842] Bluetooth: hci1: unexpected event for opcode 0x2040
[ 265.466126][ T7056] syz.2.249 (7056): /proc/7047/oom_adj is deprecated, please use /proc/7047/oom_score_adj instead.
[ 266.089612][ T7057] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 266.567013][ T7062] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[ 270.107711][ T7085] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10
[ 271.427272][ T7097] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 272.185334][ T7100] input: syz1 as /devices/virtual/input/input11
[ 273.946167][ T7123] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 274.863561][ T7121] fuse: Unknown parameter '�roup_id'
[ 278.335352][ T7149] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 278.342579][ T7149] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 279.976168][ T7154] tmpfs: Bad value for 'nr_inodes'
[ 280.048055][ T7158] netlink: 'syz.0.275': attribute type 1 has an invalid length.
[ 280.056089][ T7158] netlink: 'syz.0.275': attribute type 2 has an invalid length.
[ 280.720122][ T7159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.274'.
[ 283.109021][ T7172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.278'.
[ 285.681339][ T7188] tty tty21: ldisc open failed (-12), clearing slot 20
[ 286.066332][ T7192] sp0: Synchronizing with TNC
[ 286.100023][ T7192] [U] �
[ 289.878581][ T30] kauditd_printk_skb: 23 callbacks suppressed
[ 289.878707][ T30] audit: type=1326 audit(1744111476.000:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7199 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93958d169 code=0x7ffc0000
[ 290.141767][ T30] audit: type=1326 audit(1744111476.000:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7199 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93958d169 code=0x7ffc0000
[ 290.180010][ T30] audit: type=1326 audit(1744111476.171:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7199 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fe93958d169 code=0x7ffc0000
[ 291.650237][ T30] audit: type=1326 audit(1744111476.171:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7199 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93958d169 code=0x7ffc0000
[ 291.675099][ T30] audit: type=1326 audit(1744111476.171:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7199 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93958d169 code=0x7ffc0000
[ 291.928275][ T30] audit: type=1326 audit(1744111476.171:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7199 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fe93958d169 code=0x7ffc0000
[ 292.135983][ T30] audit: type=1326 audit(1744111476.252:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7199 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93958d169 code=0x7ffc0000
[ 292.179277][ T30] audit: type=1326 audit(1744111476.252:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7199 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93958d169 code=0x7ffc0000
[ 292.790187][ T30] audit: type=1326 audit(1744111477.362:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7199 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe93958d169 code=0x7ffc0000
[ 292.871811][ T7216] netlink: 80 bytes leftover after parsing attributes in process `syz.1.290'.
[ 292.881679][ T7216] netlink: 80 bytes leftover after parsing attributes in process `syz.1.290'.
[ 293.398836][ T30] audit: type=1326 audit(1744111477.534:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7199 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93958d169 code=0x7ffc0000
[ 294.281331][ T7231] sctp: [Deprecated]: syz.1.293 (pid 7231) Use of int in maxseg socket option.
[ 294.281331][ T7231] Use struct sctp_assoc_value instead
[ 294.879649][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'.
[ 301.330649][ T7271] wireguard: wg1: Could not create IPv4 socket
[ 301.883257][ T7273] netlink: 80 bytes leftover after parsing attributes in process `syz.1.304'.
[ 301.895654][ T7273] netlink: 80 bytes leftover after parsing attributes in process `syz.1.304'.
[ 306.192626][ T7286] tty tty20: ldisc open failed (-12), clearing slot 19
[ 308.990550][ T7312] xt_l2tp: invalid flags combination: 4
[ 314.285108][ T55] Bluetooth: hci4: command 0x0405 tx timeout
[ 314.810139][ T7331] netlink: 80 bytes leftover after parsing attributes in process `syz.1.319'.
[ 314.830606][ T7331] netlink: 80 bytes leftover after parsing attributes in process `syz.1.319'.
[ 316.558065][ T7353] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.326'.
[ 317.139465][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 317.156203][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 319.569333][ T7370] tmpfs: Unknown parameter '/dev/snd/seq'
[ 320.523188][ T7372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.329'.
[ 321.796286][ T7389] 8021q: adding VLAN 0 to HW filter on device bond0
[ 321.812625][ T7389] team0: Port device bond0 added
[ 323.477515][ T7386] sp0: Synchronizing with TNC
[ 323.551211][ T7394] netlink: 80 bytes leftover after parsing attributes in process `syz.0.333'.
[ 323.561502][ T7394] netlink: 80 bytes leftover after parsing attributes in process `syz.0.333'.
[ 325.073221][ T7396] lo speed is unknown, defaulting to 1000
[ 331.071277][ T7449] wireguard: wg1: Could not create IPv4 socket
[ 331.632440][ T7448] sch_tbf: burst 21990 is lower than device lo mtu (65550) !
[ 334.131938][ T7466] pim6reg: entered allmulticast mode
[ 334.137724][ T7466] pim6reg: left allmulticast mode
[ 337.035233][ T7485] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 338.022631][ T7489] tty tty3: ldisc open failed (-12), clearing slot 2
[ 339.340228][ T7498] evm: overlay not supported
[ 342.670432][ T7520] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[ 343.655352][ T7526] 9pnet_fd: Insufficient options for proto=fd
[ 347.725199][ T7548] wireguard: wg1: Could not create IPv4 socket
[ 348.406383][ T7554] sp0: Synchronizing with TNC
[ 348.444771][ T7554] [U] `��
[ 351.649086][ T7559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.372'.
[ 353.812469][ T7559] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 353.891809][ T7579] netlink: 'syz.3.376': attribute type 21 has an invalid length.
[ 354.406659][ T7585] batadv1: entered promiscuous mode
[ 361.783560][ T7621] netlink: 165 bytes leftover after parsing attributes in process `syz.4.385'.
[ 362.648309][ T5842] Bluetooth: hci2: unexpected event for opcode 0x1003
[ 363.084041][ T7625] wireguard: wg1: Could not create IPv4 socket
[ 366.045904][ T7645] tipc: New replicast peer: 255.255.255.255
[ 366.055076][ T7645] tipc: Enabled bearer <udp:syz2>, priority 10
[ 366.678166][ T5842] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 366.686911][ T5842] Bluetooth: hci2: Injecting HCI hardware error event
[ 366.695916][ T5842] Bluetooth: hci2: hardware error 0x00
[ 366.843589][ T7642] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 368.915836][ T5842] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 369.144283][ T7648] ptm ptm0: ldisc open failed (-12), clearing slot 0
[ 370.551140][ T31] INFO: task kworker/1:2:881 blocked for more than 143 seconds.
[ 370.572531][ T31] Not tainted 6.15.0-rc1-syzkaller #0
[ 370.620330][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 371.595893][ T31] task:kworker/1:2 state:D stack:22696 pid:881 tgid:881 ppid:2 task_flags:0x4208060 flags:0x00004000
[ 371.612371][ T31] Workqueue: usb_hub_wq hub_event
[ 371.617925][ T31] Call Trace:
[ 371.621426][ T31] <TASK>
[ 371.624555][ T31] __schedule+0x1b33/0x51f0
[ 371.629790][ T31] ? __pfx_try_to_wake_up+0x10/0x10
[ 372.620242][ T31] ? schedule+0x163/0x360
[ 372.631925][ T31] ? __pfx___schedule+0x10/0x10
[ 372.637568][ T31] ? schedule+0x90/0x360
[ 372.641950][ T31] ? schedule+0x90/0x360
[ 372.648349][ T31] schedule+0x163/0x360
[ 372.652603][ T31] usb_kill_urb+0x1c5/0x2e0
[ 372.657304][ T31] ? __pfx_usb_kill_urb+0x10/0x10
[ 372.662415][ T31] ? __pfx_autoremove_wake_function+0x10/0x10
[ 372.668772][ T31] usb_start_wait_urb+0x1b2/0x530
[ 372.673863][ T31] ? irqentry_exit+0x63/0x90
[ 372.678643][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 372.684360][ T31] usb_control_msg+0x2b3/0x4c0
[ 372.743288][ T7677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.396'.
[ 372.779288][ T31] ? __pfx_usb_control_msg+0x10/0x10
[ 372.905217][ T31] ? __kasan_kmalloc+0x9d/0xb0
[ 372.936014][ T31] hub_port_init+0xcbe/0x2730
[ 373.069547][ T31] hub_event+0x281c/0x50f0
[ 373.104983][ T31] ? preempt_schedule_irq+0xfe/0x1c0
[ 373.135900][ T31] ? __pfx_hub_event+0x10/0x10
[ 373.161721][ T31] ? lock_acquire+0x167/0x2f0
[ 373.194315][ T31] ? process_scheduled_works+0x9cb/0x18e0
[ 373.242749][ T31] process_scheduled_works+0xac3/0x18e0
[ 373.280122][ T31] ? __pfx_process_scheduled_works+0x10/0x10
[ 373.315065][ T31] ? assign_work+0x367/0x3d0
[ 373.338598][ T31] worker_thread+0x870/0xd50
[ 373.343305][ T31] ? __kthread_parkme+0x1a8/0x200
[ 373.348543][ T31] ? __pfx_worker_thread+0x10/0x10
[ 373.353726][ T31] kthread+0x7b7/0x940
[ 373.357991][ T31] ? __pfx_worker_thread+0x10/0x10
[ 373.363198][ T31] ? __pfx_kthread+0x10/0x10
[ 373.368134][ T31] ? __pfx_kthread+0x10/0x10
[ 373.372893][ T31] ? __pfx_kthread+0x10/0x10
[ 373.377648][ T31] ? __pfx_kthread+0x10/0x10
[ 373.382275][ T31] ? _raw_spin_unlock_irq+0x23/0x50
[ 373.387698][ T31] ? lockdep_hardirqs_on+0x9d/0x150
[ 373.392970][ T31] ? __pfx_kthread+0x10/0x10
[ 373.398711][ T31] ret_from_fork+0x4b/0x80
[ 373.404386][ T31] ? __pfx_kthread+0x10/0x10
[ 373.409406][ T31] ret_from_fork_asm+0x1a/0x30
[ 373.414230][ T31] </TASK>
[ 373.418214][ T31]
[ 373.418214][ T31] Showing all locks held in the system:
[ 373.426132][ T31] 1 lock held by khungtaskd/31:
[ 373.431086][ T31] #0: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180
[ 373.441093][ T31] 5 locks held by kworker/1:2/881:
[ 373.449112][ T31] #0: ffff888021eb2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0
[ 373.463957][ T31] #1: ffffc9000368fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0
[ 373.479976][ T31] #2: ffff888145b62198 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0
[ 373.490560][ T31] #3: ffff888145b65510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2494/0x50f0
[ 373.514924][ T31] #4: ffff888029957e68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x24cd/0x50f0
[ 373.525100][ T31] 2 locks held by getty/5583:
[ 373.534216][ T31] #0: ffff8880361590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 373.565504][ T31] #1: ffffc900033262f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700
[ 373.582208][ T31] 1 lock held by syz.0.391/7640:
[ 373.591657][ T31] 2 locks held by syz.4.396/7674:
[ 373.597804][ T31] #0: ffff88807a94e808 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240
[ 373.608992][ T31] #1: ffffffff8ed434f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x384/0x830
[ 373.620303][ T31]
[ 373.731508][ T31] =============================================
[ 373.731508][ T31]
[ 373.741389][ T31] NMI backtrace for cpu 0
[ 373.741423][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full)
[ 373.741441][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 373.741452][ T31] Call Trace:
[ 373.741459][ T31] <TASK>
[ 373.741465][ T31] dump_stack_lvl+0x241/0x360
[ 373.741496][ T31] ? __pfx_dump_stack_lvl+0x10/0x10
[ 373.741518][ T31] ? __pfx__printk+0x10/0x10
[ 373.741548][ T31] nmi_cpu_backtrace+0x4ab/0x4e0
[ 373.741582][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 373.741606][ T31] ? _printk+0xd5/0x120
[ 373.741629][ T31] ? __wake_up_klogd+0xcc/0x110
[ 373.741656][ T31] ? __pfx__printk+0x10/0x10
[ 373.741703][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 373.741724][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320
[ 373.741759][ T31] watchdog+0x1058/0x10a0
[ 373.741781][ T31] ? watchdog+0x1ea/0x10a0
[ 373.741805][ T31] ? __pfx_watchdog+0x10/0x10
[ 373.741823][ T31] kthread+0x7b7/0x940
[ 373.741852][ T31] ? __pfx_watchdog+0x10/0x10
[ 373.741871][ T31] ? __pfx_kthread+0x10/0x10
[ 373.741896][ T31] ? __pfx_kthread+0x10/0x10
[ 373.741932][ T31] ? __pfx_kthread+0x10/0x10
[ 373.741957][ T31] ? __pfx_kthread+0x10/0x10
[ 373.741982][ T31] ? _raw_spin_unlock_irq+0x23/0x50
[ 373.742001][ T31] ? lockdep_hardirqs_on+0x9d/0x150
[ 373.742023][ T31] ? __pfx_kthread+0x10/0x10
[ 373.742049][ T31] ret_from_fork+0x4b/0x80
[ 373.742068][ T31] ? __pfx_kthread+0x10/0x10
[ 373.742094][ T31] ret_from_fork_asm+0x1a/0x30
[ 373.742139][ T31] </TASK>
[ 373.742171][ T31] Sending NMI from CPU 0 to CPUs 1:
[ 373.912578][ C1] NMI backtrace for cpu 1
[ 373.912596][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full)
[ 373.912616][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 373.912627][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 373.912652][ C1] Code: cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 91 1f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90
[ 373.912666][ C1] RSP: 0018:ffffc90000197dc0 EFLAGS: 000002c6
[ 373.912682][ C1] RAX: b3638067893fee00 RBX: ffffffff81979ece RCX: ffffffff8c28a95c
[ 373.912695][ C1] RDX: 0000000000000001 RSI: ffffffff8e687a11 RDI: ffffffff8ca0e1e0
[ 373.912706][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732b5b R09: 1ffff110170e656b
[ 373.912719][ C1] R10: dffffc0000000000 R11: ffffed10170e656c R12: 1ffff92000032fd2
[ 373.912739][ C1] R13: 1ffff11003ad8b40 R14: 0000000000000001 R15: dffffc0000000000
[ 373.912751][ C1] FS: 0000000000000000(0000) GS:ffff8881250c9000(0000) knlGS:0000000000000000
[ 373.912764][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 373.912776][ C1] CR2: 00007f75c1978ab8 CR3: 000000007c1fe000 CR4: 00000000003526f0
[ 373.912790][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 373.912800][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 373.912810][ C1] Call Trace:
[ 373.912818][ C1] <TASK>
[ 373.912825][ C1] default_idle+0x13/0x20
[ 373.912846][ C1] default_idle_call+0x74/0xb0
[ 373.912869][ C1] do_idle+0x22e/0x5d0
[ 373.912892][ C1] ? __pfx_do_idle+0x10/0x10
[ 373.912920][ C1] cpu_startup_entry+0x42/0x60
[ 373.912938][ C1] start_secondary+0xfe/0x100
[ 373.912953][ C1] common_startup_64+0x13e/0x147
[ 373.912984][ C1] </TASK>
[ 373.913805][ T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 374.096648][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full)
[ 374.106721][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 374.116783][ T31] Call Trace:
[ 374.120072][ T31] <TASK>
[ 374.123013][ T31] dump_stack_lvl+0x241/0x360
[ 374.127709][ T31] ? __pfx_dump_stack_lvl+0x10/0x10
[ 374.132920][ T31] ? __pfx__printk+0x10/0x10
[ 374.137524][ T31] ? vscnprintf+0x5d/0x90
[ 374.141869][ T31] panic+0x349/0x880
[ 374.145775][ T31] ? __pfx_preempt_schedule+0x10/0x10
[ 374.151151][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320
[ 374.157318][ T31] ? __pfx_panic+0x10/0x10
[ 374.161739][ T31] ? __pfx_delay_tsc+0x10/0x10
[ 374.166518][ T31] ? nmi_trigger_cpumask_backtrace+0x1d4/0x320
[ 374.172778][ T31] ? preempt_schedule_thunk+0x16/0x30
[ 374.178163][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320
[ 374.184338][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[ 374.190508][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[ 374.196682][ T31] watchdog+0x1097/0x10a0
[ 374.201016][ T31] ? watchdog+0x1ea/0x10a0
[ 374.205445][ T31] ? __pfx_watchdog+0x10/0x10
[ 374.210139][ T31] kthread+0x7b7/0x940
[ 374.214218][ T31] ? __pfx_watchdog+0x10/0x10
[ 374.218905][ T31] ? __pfx_kthread+0x10/0x10
[ 374.223508][ T31] ? __pfx_kthread+0x10/0x10
[ 374.228109][ T31] ? __pfx_kthread+0x10/0x10
[ 374.232709][ T31] ? __pfx_kthread+0x10/0x10
[ 374.237309][ T31] ? _raw_spin_unlock_irq+0x23/0x50
[ 374.242514][ T31] ? lockdep_hardirqs_on+0x9d/0x150
[ 374.247720][ T31] ? __pfx_kthread+0x10/0x10
[ 374.252321][ T31] ret_from_fork+0x4b/0x80
[ 374.256741][ T31] ? __pfx_kthread+0x10/0x10
[ 374.261338][ T31] ret_from_fork_asm+0x1a/0x30
[ 374.266124][ T31] </TASK>
[ 374.269497][ T31] Kernel Offset: disabled
[ 374.273824][ T31] Rebooting in 86400 seconds..