last executing test programs: 1m41.137029219s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m37.138145864s ago: executing program 0 (id=12): r0 = socket(0xa, 0x3, 0x3a) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) getresuid(&(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x7}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0), 0x12020, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) renameat(r2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 1m24.161319826s ago: executing program 1 (id=26): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0xc040400) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20100) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5463, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 1m22.552190579s ago: executing program 0 (id=30): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000340)=0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_clone3(0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x9, 0x100000001, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x6, 0x6a], 0xeeee8000, 0x300092}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m22.389295188s ago: executing program 1 (id=31): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000700005040100000000000000070000", @ANYRES32=r2, @ANYBLOB="1400018008000100000001000500030003"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m19.019585881s ago: executing program 1 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setregid(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0xc840) sendmsg$nl_route_sched(r3, 0x0, 0x24040084) socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(r4, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/171, 0xab}], 0x1, 0x4f, 0xfff4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) 1m15.368501424s ago: executing program 1 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, &(0x7f00000001c0)={0x1, 0x0, 0x103, 0x0, {0x1, 0x1, 0x1, 0x1}}) 1m12.703083935s ago: executing program 1 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde9}, 0x38) io_uring_enter(0xffffffffffffffff, 0x1fe5, 0xbf89, 0xc, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x10, 0x20, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$xdp(0x2c, 0x3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1m6.963233098s ago: executing program 32 (id=30): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000340)=0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_clone3(0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x9, 0x100000001, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x6, 0x6a], 0xeeee8000, 0x300092}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m6.916555383s ago: executing program 1 (id=41): socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000580), 0x7fffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x1e, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000002180)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00&g\xeb_i\xaa\xe6>\x04\x879\xa24\xa9am\xde\xb2\xd3\xcb>Joa\xc4\x1acB\xaa\xc1\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb4\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\x00\x00\x00\x00\x00\x00\xff\xffL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x3b5}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, r2, r1, r3, &(0x7f0000000340)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c8b, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x43, 0xffffffff}}], 0x1, 0x0, 0x0) 51.353936108s ago: executing program 33 (id=41): socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000580), 0x7fffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x1e, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000002180)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00&g\xeb_i\xaa\xe6>\x04\x879\xa24\xa9am\xde\xb2\xd3\xcb>Joa\xc4\x1acB\xaa\xc1\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb4\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\x00\x00\x00\x00\x00\x00\xff\xffL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x3b5}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, r2, r1, r3, &(0x7f0000000340)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c8b, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x43, 0xffffffff}}], 0x1, 0x0, 0x0) 27.24288081s ago: executing program 2 (id=76): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000000)={0x4, "b3fb6a35ac926404cc93f4bdf92839e29370530021e3ca728deeae059a09a7b6", 0x2, 0x1, 0x3, 0x2, 0x10, 0x2, 0x5, 0x4}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x119d, &(0x7f0000000240)={0x0, 0xb649, 0x1, 0x0, 0xe0}, &(0x7f0000000840), &(0x7f0000000880), &(0x7f0000000180)) read$FUSE(r3, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) 25.01525383s ago: executing program 2 (id=78): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000088}, 0x8804) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000240)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000200)={r5}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 22.468166148s ago: executing program 2 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f2, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x8080) r6 = syz_open_dev$sg(0x0, 0x7d, 0x0) write$tun(r6, &(0x7f0000000040)=ANY=[], 0xb2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) 20.589649855s ago: executing program 2 (id=81): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r1, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="c4020000180003e827bd7000fddbdf25ffffffff000000000000000000000000200100000000000000000000000000024e247fff4e24000a0a0080905e000000", @ANYRES32, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d65e000000e000000200000000000000000000000001000000000000000600000000000000000016010000000000e0000000000000be000000000000000000008000000000060000000000000001040000000000000500000000000000ffffffff00000000080000000000000003000000000000000000000006000000000400002bbd7000053500000a", @ANYRES16=r0], 0x2c4}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x61d6ce6fcc4b234b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, 0x0, 0x0, 0x4c004, &(0x7f0000000800)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/SourceSink.usb0\x00') 16.710324591s ago: executing program 4 (id=84): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002100)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x200, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000240)="e0335d1583aaa5d4", 0x8}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x3, 0x10000, 0x2000, &(0x7f0000191000/0x2000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000200)={0xc000, 0x1000000, 0x8}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000040)={0x10000, 0x1f000}) fsetxattr$system_posix_acl(r3, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x8001, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x229) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) 15.602749544s ago: executing program 3 (id=86): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='./sys\x00', 0xbf) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb080002"], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) write(r1, &(0x7f0000001100)='0000:00:06.0', 0xc) syz_usb_connect(0x5, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040d01040806620007050102000200032401"], 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 12.563809959s ago: executing program 4 (id=87): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={r1, r2+10000000}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000480)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$snddsp(&(0x7f000028f000/0x2000)=nil, 0x2000, 0x7, 0x100010, 0xffffffffffffffff, 0xa000) getpriority(0x2, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12.380373364s ago: executing program 3 (id=88): openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x2, 0x57, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x10005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x400007, 0x5, 0x1003, 0x40000101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 12.208644366s ago: executing program 3 (id=89): r0 = socket(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x800, 0x0, 0x9, 0x0, 0x0, 0x2]}}, 0x5c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000540)={0x1, 0x3, 0xe65, 0x400000005, 0x6, 0x5, 0x8, 0xcc3, 0x0, 0x100000a, 0x100402, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000140)) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x1, @empty, 0xa98}, {0xa, 0x4e22, 0x800, @mcast2, 0x4}, 0x1, {[0x0, 0x6, 0x0, 0xfffffffc, 0xc, 0x0, 0x9]}}, 0x5c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040f0401410604"], 0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5cc1f802, 0x80003}) fcntl$lock(r6, 0x24, &(0x7f0000000280)={0x2, 0x2, 0x2, 0x14}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/169, 0xa9}], 0x1, 0xfd, 0xb10) r9 = dup3(r5, r0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) 12.03946905s ago: executing program 3 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='4\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r7, &(0x7f00000002c0)='1', 0x1) close(r7) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) close(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='./dev/nullb1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='zonefs\x00', 0x0, 0x0) 10.877290892s ago: executing program 4 (id=91): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x90}}, 0x4000) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f815dcdb6cf3c57b707"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4e", 0x27}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2d", 0x28}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a", 0x3c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd", 0xa1}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.739499653s ago: executing program 2 (id=92): semctl$SEM_STAT(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000000)=""/178) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) stat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001008, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) write(0xffffffffffffffff, &(0x7f0000000300)='1', 0x1) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000180)=""/246) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.stat\x00', 0x0, 0x0) 9.073392457s ago: executing program 2 (id=93): epoll_create1(0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000180)={"458b8be0", 0x3aa1, 0x0, 0x0, 0x54, 0x5, "a4e112e6241ac421827f5d65ba4464", 'o\bm\b', "5aaed6a5", "9e1ddb75", ["a2a3aa137ebc2da6d6e49728", "4358abcecc46491af363fd91", "b19f708f2588be8bf258b93f", "e45edd1f34b6b4cc57901c97"]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) 9.061811631s ago: executing program 3 (id=94): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), 0x0}, 0x20) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a41d39b78057b7b3c16c91cbbadefcf9ec61259915a0e5d03c1403e5fb5424d07d479b047e9a9858276c82b3829ac35ec93de49fc08ecc8ddd27dc63b63ab836f519ac4e7a2769856d1841cd2a8ac05f75453e2ea0f92b40b61f590db72592301c8407bede7cb97ad015a74f9e2b4259bed300edfd5e1d4cd16f2c9b5ef"], 0x310) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r6}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000100)={0x28, 0x3, 0x0, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000000)=0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x7, 0x0, 0x0, 0x2, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x32, 0x0, 0x1, 0xfffffffe}, 0x28) 7.327919618s ago: executing program 3 (id=95): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r4, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0xffffffffffffff16) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000009f440000000000006b0a00fe0000000073130000000000009c000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r5, 0x29, 0x3c, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005dc0)={@ifindex, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x47) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) 7.06471364s ago: executing program 4 (id=96): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) dup(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$alg(0x26, 0x5, 0x0) close(0xffffffffffffffff) syz_io_uring_setup(0xf02, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002380)=""/4070, 0xfe6}], 0x1, 0x4, 0x0, {0x0, 0x0, 0x1, '\x00', 0x0}}) sched_setparam(r0, &(0x7f0000000100)=0x80) shutdown(r3, 0x1) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r6, 0x0, 0x0) write$UHID_INPUT(r6, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) 5.538149037s ago: executing program 4 (id=97): pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='cgroup.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a", 0x42}], 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf25020000000900010073797a320000000014000200766c616e3100"/46], 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) write(0xffffffffffffffff, &(0x7f0000000400)='dummy_udc.0', 0xb) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c00ff840001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c3258e6248ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x3}, 0x1c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0xb8, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x5e}, {0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 0s ago: executing program 4 (id=98): socket$inet6_sctp(0xa, 0x0, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x11}, @void, @ipv4=@tipc={{0x5, 0x4, 0x0, 0x16, 0x2c, 0x66, 0x0, 0x8, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x2, 0x20, 0x0, 0x2, 0x1, 0x2, 0x0, 0x9, 0x23a, 0x2, 0x4e20, 0x4e20}}}}}, 0x30) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000001580)=@xdp={0x2c, 0xa, 0x0, 0x3}, 0x80, &(0x7f0000000300)=[{0x0}], 0x1}, 0x8c1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 90.316593][ T5570] cgroup: Unknown subsys name 'net' [ 90.559664][ T5570] cgroup: Unknown subsys name 'cpuset' [ 90.632947][ T5570] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.778843][ T197] cfg80211: failed to load regulatory.db [ 92.546583][ T5570] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.327204][ T5590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.337420][ T5590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.357536][ T5593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.374924][ T5593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.388574][ T5593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.401843][ T5593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.405507][ T5593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.409761][ T5593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.419147][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.420732][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.571697][ T4898] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.587274][ T4898] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.604279][ T4898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.626353][ T5590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.628762][ T5590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.629480][ T5590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.629493][ T5593] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.649591][ T5590] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.692780][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.701617][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.717071][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.736574][ T5593] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.737558][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.741404][ T5593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.741659][ T5593] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.483154][ T5590] Bluetooth: hci0: command tx timeout [ 98.562286][ T5590] Bluetooth: hci1: command tx timeout [ 98.722654][ T5590] Bluetooth: hci4: command tx timeout [ 98.802629][ T5590] Bluetooth: hci3: command tx timeout [ 98.802742][ T5590] Bluetooth: hci2: command tx timeout [ 99.202786][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.203517][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.203706][ T5589] bridge_slave_0: entered allmulticast mode [ 99.205676][ T5589] bridge_slave_0: entered promiscuous mode [ 99.270895][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.270977][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.271092][ T5589] bridge_slave_1: entered allmulticast mode [ 99.274840][ T5589] bridge_slave_1: entered promiscuous mode [ 99.395756][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.395875][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.396021][ T5588] bridge_slave_0: entered allmulticast mode [ 99.397774][ T5588] bridge_slave_0: entered promiscuous mode [ 99.478289][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.478412][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.478979][ T5588] bridge_slave_1: entered allmulticast mode [ 99.480795][ T5588] bridge_slave_1: entered promiscuous mode [ 99.513007][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.513251][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.513456][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.513623][ T5596] bridge_slave_0: entered allmulticast mode [ 99.516026][ T5596] bridge_slave_0: entered promiscuous mode [ 99.517551][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.517675][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.517839][ T5597] bridge_slave_0: entered allmulticast mode [ 99.520177][ T5597] bridge_slave_0: entered promiscuous mode [ 99.521870][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.521993][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.529624][ T5599] bridge_slave_0: entered allmulticast mode [ 99.538990][ T5599] bridge_slave_0: entered promiscuous mode [ 99.618372][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.618677][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.618864][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.619241][ T5596] bridge_slave_1: entered allmulticast mode [ 99.621115][ T5596] bridge_slave_1: entered promiscuous mode [ 99.692967][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.693051][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.693181][ T5597] bridge_slave_1: entered allmulticast mode [ 99.695744][ T5597] bridge_slave_1: entered promiscuous mode [ 99.697061][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.697179][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.697306][ T5599] bridge_slave_1: entered allmulticast mode [ 99.699181][ T5599] bridge_slave_1: entered promiscuous mode [ 99.815121][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.880653][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.884490][ T5589] team0: Port device team_slave_0 added [ 99.900697][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.908514][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.924978][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.950726][ T5589] team0: Port device team_slave_1 added [ 99.959669][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.962620][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.976957][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.074848][ T5588] team0: Port device team_slave_0 added [ 100.139233][ T5588] team0: Port device team_slave_1 added [ 100.140256][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.140266][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.140285][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.148416][ T5596] team0: Port device team_slave_0 added [ 100.159875][ T5597] team0: Port device team_slave_0 added [ 100.199011][ T5599] team0: Port device team_slave_0 added [ 100.221612][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.221624][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.221643][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.234731][ T5596] team0: Port device team_slave_1 added [ 100.250479][ T5597] team0: Port device team_slave_1 added [ 100.277478][ T5599] team0: Port device team_slave_1 added [ 100.349048][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.349061][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.349080][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.429627][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.429644][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.429672][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.431576][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.431587][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.431606][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.433884][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.433935][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.434005][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.455265][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.455298][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.455364][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.562299][ T5590] Bluetooth: hci0: command tx timeout [ 100.575163][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.575212][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.575306][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.580389][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.580422][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.580494][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.591322][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.591362][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.591434][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.643370][ T5590] Bluetooth: hci1: command tx timeout [ 100.802459][ T5590] Bluetooth: hci4: command tx timeout [ 100.882345][ T5590] Bluetooth: hci2: command tx timeout [ 100.882363][ T59] Bluetooth: hci3: command tx timeout [ 101.131651][ T5589] hsr_slave_0: entered promiscuous mode [ 101.136254][ T5589] hsr_slave_1: entered promiscuous mode [ 101.237360][ T5588] hsr_slave_0: entered promiscuous mode [ 101.238310][ T5588] hsr_slave_1: entered promiscuous mode [ 101.239169][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 101.239271][ T5588] Cannot create hsr debugfs directory [ 101.369139][ T5597] hsr_slave_0: entered promiscuous mode [ 101.370063][ T5597] hsr_slave_1: entered promiscuous mode [ 101.370776][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 101.370793][ T5597] Cannot create hsr debugfs directory [ 101.394346][ T5596] hsr_slave_0: entered promiscuous mode [ 101.397740][ T5596] hsr_slave_1: entered promiscuous mode [ 101.400459][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 101.400483][ T5596] Cannot create hsr debugfs directory [ 101.423125][ T5599] hsr_slave_0: entered promiscuous mode [ 101.424214][ T5599] hsr_slave_1: entered promiscuous mode [ 101.424883][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 101.424900][ T5599] Cannot create hsr debugfs directory [ 102.420237][ T5589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.467647][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.476472][ T5589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.506212][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.509492][ T5589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.539676][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.569840][ T5589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.596771][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.642597][ T5590] Bluetooth: hci0: command tx timeout [ 102.698550][ T5597] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.722436][ T5590] Bluetooth: hci1: command tx timeout [ 102.756610][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.761587][ T5597] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.786879][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.817769][ T5597] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.837744][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.874064][ T5597] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.882482][ T5590] Bluetooth: hci4: command tx timeout [ 102.907606][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.962588][ T5590] Bluetooth: hci2: command tx timeout [ 102.974035][ T5590] Bluetooth: hci3: command tx timeout [ 103.064660][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.096853][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.101787][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.146986][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.150709][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.181056][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.211250][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.236100][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.396284][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.437020][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.451091][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.508170][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.521435][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.547442][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.579130][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.608161][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.660074][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.751798][ T5588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.786489][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.798357][ T5588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.835739][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.853596][ T5588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.878299][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.901355][ T5588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.927281][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.929681][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.984385][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.984728][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.028280][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.056650][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.056833][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.195646][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.240625][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.240784][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.275047][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.307930][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.309613][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.428183][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.454048][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.521523][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.521791][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.574165][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.574273][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.624065][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.685814][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.690889][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.691071][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.724099][ T5590] Bluetooth: hci0: command tx timeout [ 104.800020][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.800656][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.802707][ T5590] Bluetooth: hci1: command tx timeout [ 104.901795][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.963878][ T5590] Bluetooth: hci4: command tx timeout [ 105.005310][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.005475][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.042307][ T5590] Bluetooth: hci3: command tx timeout [ 105.042338][ T5590] Bluetooth: hci2: command tx timeout [ 105.125782][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.125999][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.561734][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.978428][ T5589] veth0_vlan: entered promiscuous mode [ 106.000835][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.095540][ T5589] veth1_vlan: entered promiscuous mode [ 106.371226][ T5597] veth0_vlan: entered promiscuous mode [ 106.415496][ T5589] veth0_macvtap: entered promiscuous mode [ 106.433648][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.460227][ T5589] veth1_macvtap: entered promiscuous mode [ 106.476832][ T5597] veth1_vlan: entered promiscuous mode [ 106.561980][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.615081][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.705368][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.759288][ T5597] veth0_macvtap: entered promiscuous mode [ 106.868094][ T5597] veth1_macvtap: entered promiscuous mode [ 106.870502][ T5596] veth0_vlan: entered promiscuous mode [ 106.886402][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.090217][ T5596] veth1_vlan: entered promiscuous mode [ 107.150095][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.211994][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.389499][ T3278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.389526][ T3278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.412028][ T5599] veth0_vlan: entered promiscuous mode [ 107.547956][ T5596] veth0_macvtap: entered promiscuous mode [ 107.608230][ T5599] veth1_vlan: entered promiscuous mode [ 107.629917][ T3278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.629938][ T3278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.710060][ T5596] veth1_macvtap: entered promiscuous mode [ 107.996074][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.996095][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.039433][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.110414][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.154603][ T5588] veth0_vlan: entered promiscuous mode [ 108.160920][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.160938][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.190840][ T5599] veth0_macvtap: entered promiscuous mode [ 108.239828][ T5599] veth1_macvtap: entered promiscuous mode [ 108.294707][ T5588] veth1_vlan: entered promiscuous mode [ 108.370560][ T5775] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.561978][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.800305][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.002446][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.028441][ T5588] veth0_macvtap: entered promiscuous mode [ 109.270313][ T5588] veth1_macvtap: entered promiscuous mode [ 109.307048][ T3278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.307070][ T3278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.648851][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.729429][ T3278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.729451][ T3278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.771974][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.238214][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.238231][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.372214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.382215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.392215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.402215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.412220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.422211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.432211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.442209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.452210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.462210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.610961][ T3278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.610982][ T3278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.798889][ T3278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.163129][ T3278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.163851][ T3278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.208304][ T3278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.209080][ T3278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.209283][ T3278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.434328][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.434349][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.037211][ T3278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.107965][ T5817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.107988][ T5817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.770396][ T1012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.809044][ T3324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.084006][ T1173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.084153][ T1173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.084279][ T1173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.084942][ T1173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.085187][ T1173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.472573][ T1129] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.576111][ T1129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.576573][ T1129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.582359][ T1173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.596819][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.277318][ T5829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14'. [ 123.678614][ T5835] Bluetooth: MGMT ver 1.23 [ 123.696872][ T5833] No fuse device found [ 123.697001][ T5833] No fuse device found [ 123.697039][ T5833] No fuse device found [ 123.697074][ T5833] No fuse device found [ 123.697106][ T5833] No fuse device found [ 123.697139][ T5833] No fuse device found [ 123.697172][ T5833] No fuse device found [ 123.697205][ T5833] No fuse device found [ 123.697233][ T5833] No fuse device found [ 123.697265][ T5833] No fuse device found [ 124.577343][ T5835] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 124.596247][ T5694] udevd[5694]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 124.932605][ T5723] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 125.118120][ T5853] capability: warning: `syz.3.19' uses deprecated v2 capabilities in a way that may be insecure [ 125.257403][ T5723] usb 5-1: not running at top speed; connect to a high speed hub [ 125.257564][ T5723] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 125.260897][ T5723] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.260965][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.307455][ T5851] ucma_write: process 21 (syz.3.19) changed security contexts after opening file descriptor, this is not allowed. [ 126.578832][ T5723] gspca_main: spca501-2.14.0 probing 0000:0000 [ 126.713990][ T5853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.764844][ T59] Bluetooth: hci0: command 0x0401 tx timeout [ 127.083171][ T197] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.127769][ T5723] gspca_spca501: reg write: error -110 [ 127.127846][ T5723] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 127.127944][ T5723] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 127.215724][ T5723] uvcvideo 5-1:1.0: Found UVC 1.00 device (0000:0000) [ 127.304259][ T5723] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 127.304750][ T5723] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 127.304807][ T5723] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 127.364289][ T5723] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -5 [ 127.382285][ T197] usb 3-1: Using ep0 maxpacket: 8 [ 127.398371][ T197] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 127.401710][ T197] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.401760][ T197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.565574][ T197] usb 3-1: config 0 descriptor?? [ 129.436428][ T5880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23'. [ 129.436464][ T5880] netlink: 44 bytes leftover after parsing attributes in process `syz.3.23'. [ 129.548081][ T5882] openvswitch: netlink: IPv4 tun info is not correct [ 129.588390][ T5715] usb 5-1: USB disconnect, device number 2 [ 129.631608][ T5884] binder: 5881:5884 ioctl c0306201 0 returned -14 [ 133.423751][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 133.702679][ T197] usbhid 3-1:0.0: can't add hid device: -32 [ 133.702800][ T197] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 133.767746][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.767835][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.236549][ T5899] ======================================================= [ 134.236549][ T5899] WARNING: The mand mount option has been deprecated and [ 134.236549][ T5899] and is ignored by this kernel. Remove the mand [ 134.236549][ T5899] option from the mount to silence this warning. [ 134.236549][ T5899] ======================================================= [ 134.236643][ T5899] 9p: Bad value for 'rfdno' [ 135.890839][ T5911] bridge0: port 3(veth0) entered blocking state [ 135.890917][ T5911] bridge0: port 3(veth0) entered disabled state [ 135.891060][ T5911] veth0: entered allmulticast mode [ 135.910489][ T5911] veth0: entered promiscuous mode [ 136.009355][ T5911] bridge0: port 3(veth0) entered blocking state [ 136.009724][ T5911] bridge0: port 3(veth0) entered forwarding state [ 136.612296][ T5723] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.059485][ T5921] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 137.064344][ T5921] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 137.923245][ T5702] usb 3-1: USB disconnect, device number 2 [ 138.510821][ T5912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31'. [ 142.642335][ T5723] usb 4-1: device descriptor read/64, error -110 [ 143.072782][ T5723] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 143.532294][ T5723] usb 4-1: device descriptor read/64, error -32 [ 145.918026][ T5723] usb usb4-port1: attempt power cycle [ 147.512884][ T5964] process 'syz.4.37' launched './file2' with NULL argv: empty string added [ 158.191684][ T5590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.226305][ T5590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.240533][ T5590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.250380][ T5590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.260932][ T5590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.099882][ T59] Bluetooth: hci5: command tx timeout [ 165.124599][ T5590] Bluetooth: hci5: command tx timeout [ 167.202587][ T5590] Bluetooth: hci5: command tx timeout [ 169.410827][ T5590] Bluetooth: hci5: command tx timeout [ 170.758632][ T6034] syz.4.55 (6034): drop_caches: 2 [ 170.853813][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 171.082317][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 171.085180][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 171.089642][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 171.091281][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 171.345465][ T6042] syz.3.56 uses obsolete (PF_INET,SOCK_PACKET) [ 172.026554][ T6047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.57'. [ 173.223673][ T5590] Bluetooth: hci6: command tx timeout [ 174.342945][ T5858] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 174.533994][ T5858] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=b8.82 [ 174.535867][ T5858] usb 4-1: config 251 has an invalid interface number: 243 but max is 0 [ 174.535910][ T5858] usb 4-1: config 251 has no interface number 0 [ 174.535941][ T5858] usb 4-1: config 251 interface 243 has no altsetting 0 [ 174.578900][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.578927][ T5858] usb 4-1: Product: syz [ 174.578941][ T5858] usb 4-1: Manufacturer: syz [ 174.578956][ T5858] usb 4-1: SerialNumber: syz [ 175.292434][ T5590] Bluetooth: hci6: command tx timeout [ 176.210185][ T6074] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 176.525206][ T5858] sisusb 4-1:251.243: Invalid USB2VGA device [ 176.525247][ T5858] sisusb 4-1:251.243: probe with driver sisusb failed with error -22 [ 176.530914][ T5858] usb 4-1: USB disconnect, device number 5 [ 176.688563][ T6083] openvswitch: netlink: Message has 8 unknown bytes. [ 176.688945][ T999] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.189079][ T999] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.372960][ T5590] Bluetooth: hci6: command tx timeout [ 177.799823][ T6097] device-mapper: ioctl: name not supplied when creating device [ 178.117920][ T6093] Zero length message leads to an empty skb [ 179.443846][ T5590] Bluetooth: hci6: command tx timeout [ 180.532197][ T999] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.676443][ T999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.209163][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 192.599361][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.599478][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.599668][ T5986] bridge_slave_0: entered allmulticast mode [ 192.605172][ T5986] bridge_slave_0: entered promiscuous mode [ 192.659670][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.659754][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.659935][ T5986] bridge_slave_1: entered allmulticast mode [ 192.661994][ T5986] bridge_slave_1: entered promiscuous mode [ 193.452154][ T6154] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 194.419134][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.419200][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.595250][ T5986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.690320][ T5986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.526686][ T5858] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 197.742374][ T5858] usb 4-1: Using ep0 maxpacket: 8 [ 197.744306][ T5858] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 197.745426][ T5858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.745476][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.829656][ T5858] usb 4-1: config 0 descriptor?? [ 197.908379][ T5858] usb 4-1: can't set config #0, error -71 [ 197.974937][ T5858] usb 4-1: USB disconnect, device number 6 [ 197.979792][ T5986] team0: Port device team_slave_0 added [ 198.050199][ T5986] team0: Port device team_slave_1 added [ 199.731663][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.731682][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.731711][ T5986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.968464][ T999] bridge_slave_1: left allmulticast mode [ 199.968637][ T999] bridge_slave_1: left promiscuous mode [ 199.999659][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.266515][ T6186] netlink: 460 bytes leftover after parsing attributes in process `syz.2.81'. [ 201.421419][ T999] bridge_slave_0: left allmulticast mode [ 201.421460][ T999] bridge_slave_0: left promiscuous mode [ 201.421680][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.761757][ T6199] netlink: 76 bytes leftover after parsing attributes in process `syz.3.86'. [ 202.761851][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 204.189366][ T993] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 204.807517][ T993] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 204.837695][ T993] usb 4-1: config 1 has an invalid interface number: 13 but max is 0 [ 204.837879][ T993] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.837944][ T993] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 204.837965][ T993] usb 4-1: config 1 has no interface number 1 [ 204.901432][ T993] usb 4-1: config 1 interface 13 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 204.901708][ T993] usb 4-1: config 1 interface 13 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 204.901778][ T993] usb 4-1: config 1 interface 13 has no altsetting 0 [ 205.000950][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.001142][ T993] usb 4-1: Product: syz [ 205.001285][ T993] usb 4-1: Manufacturer: syz [ 205.001349][ T993] usb 4-1: SerialNumber: syz [ 205.739719][ T993] usb 4-1: can't set config #1, error -71 [ 205.788713][ T993] usb 4-1: USB disconnect, device number 7 [ 205.966462][ T5590] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 205.988753][ T6205] binder: 6204:6205 ioctl ae60 0 returned -22 [ 206.334404][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.393187][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.459117][ T999] bond0 (unregistering): Released all slaves [ 206.493602][ T6215] null_blk: nullb1: using native zone append [ 206.518154][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.518167][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.518189][ T5986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.582326][ T6188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.582353][ T6188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.631211][ T6188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.631239][ T6188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.368651][ T6215] null_blk: disk nullb1 created [ 212.470832][ T5986] hsr_slave_0: entered promiscuous mode [ 212.472816][ T5986] hsr_slave_1: entered promiscuous mode [ 212.516769][ T5986] debugfs: 'hsr0' already exists in 'hsr' [ 212.516798][ T5986] Cannot create hsr debugfs directory [ 212.760156][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.797511][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.798867][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.800057][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.801047][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.151468][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.154494][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.172054][ T6028] bridge_slave_0: entered allmulticast mode [ 213.182500][ T6028] bridge_slave_0: entered promiscuous mode [ 214.162674][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.196425][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.208461][ T6028] bridge_slave_1: entered allmulticast mode [ 214.284602][ T6028] bridge_slave_1: entered promiscuous mode [ 218.123131][ T6028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.160815][ T6028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.113765][ T6259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.524478][ T6267] netlink: 'syz.2.93': attribute type 11 has an invalid length. [ 219.779834][ T5590] ------------[ cut here ]------------ [ 219.779847][ T5590] refcnt < 0 [ 219.779862][ T5590] WARNING: net/bluetooth/hci_conn.c:631 at hci_conn_timeout+0xff/0x2c0, CPU#1: kworker/u9:2/5590 [ 219.779915][ T5590] Modules linked in: [ 219.779955][ T5590] CPU: 1 UID: 0 PID: 5590 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 219.779979][ T5590] Tainted: [L]=SOFTLOCKUP [ 219.779985][ T5590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.779996][ T5590] Workqueue: hci0 hci_conn_timeout [ 219.780020][ T5590] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 219.780051][ T5590] Code: 48 89 df e8 33 cd 09 00 eb 07 e8 cc 0b 8b f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 37 a1 fe ff e8 b2 0b 8b f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 219.780066][ T5590] RSP: 0018:ffffc90004a37ad0 EFLAGS: 00010293 [ 219.780082][ T5590] RAX: ffffffff8a3ace3e RBX: ffff888037560000 RCX: ffff888038811f00 [ 219.780095][ T5590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.780106][ T5590] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 219.780118][ T5590] R10: dffffc0000000000 R11: ffffed1006eac003 R12: dffffc0000000000 [ 219.780135][ T5590] R13: dffffc0000000000 R14: ffff888037560ac0 R15: ffff888037560010 [ 219.780152][ T5590] FS: 0000000000000000(0000) GS:ffff888125d32000(0000) knlGS:0000000000000000 [ 219.780170][ T5590] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.780185][ T5590] CR2: 0000001b32411ff8 CR3: 0000000037822000 CR4: 00000000003526f0 [ 219.780209][ T5590] Call Trace: [ 219.780218][ T5590] [ 219.780229][ T5590] ? process_scheduled_works+0xa20/0x14e0 [ 219.780257][ T5590] process_scheduled_works+0xa8e/0x14e0 [ 219.780314][ T5590] ? __pfx_process_scheduled_works+0x10/0x10 [ 219.780345][ T5590] ? assign_work+0x3cf/0x5d0 [ 219.780368][ T5590] worker_thread+0xa47/0xfb0 [ 219.780409][ T5590] kthread+0x388/0x470 [ 219.780434][ T5590] ? __pfx_worker_thread+0x10/0x10 [ 219.780452][ T5590] ? __pfx_kthread+0x10/0x10 [ 219.780478][ T5590] ret_from_fork+0x514/0xb70 [ 219.780508][ T5590] ? __pfx_ret_from_fork+0x10/0x10 [ 219.780534][ T5590] ? __switch_to+0xc89/0x1420 [ 219.780561][ T5590] ? __pfx_kthread+0x10/0x10 [ 219.780589][ T5590] ret_from_fork_asm+0x1a/0x30 [ 219.780642][ T5590] [ 219.780657][ T5590] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 219.780673][ T5590] CPU: 1 UID: 0 PID: 5590 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 219.780697][ T5590] Tainted: [L]=SOFTLOCKUP [ 219.780703][ T5590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.780714][ T5590] Workqueue: hci0 hci_conn_timeout [ 219.780739][ T5590] Call Trace: [ 219.780746][ T5590] [ 219.780753][ T5590] vpanic+0x56c/0xa60 [ 219.780781][ T5590] ? __pfx__printk+0x10/0x10 [ 219.780801][ T5590] ? __pfx_vpanic+0x10/0x10 [ 219.780827][ T5590] ? is_bpf_text_address+0x292/0x2b0 [ 219.780846][ T5590] ? is_bpf_text_address+0x26/0x2b0 [ 219.780870][ T5590] panic+0xc5/0xd0 [ 219.780896][ T5590] ? __pfx_panic+0x10/0x10 [ 219.780930][ T5590] ? ret_from_fork_asm+0x1a/0x30 [ 219.780963][ T5590] __warn+0x315/0x4c0 [ 219.780989][ T5590] ? hci_conn_timeout+0xff/0x2c0 [ 219.781017][ T5590] ? hci_conn_timeout+0xff/0x2c0 [ 219.781069][ T5590] __report_bug+0x276/0x570 [ 219.781094][ T5590] ? hci_conn_timeout+0xff/0x2c0 [ 219.781121][ T5590] ? __pfx___report_bug+0x10/0x10 [ 219.781136][ T5590] ? add_lock_to_list+0xc7/0x100 [ 219.781158][ T5590] ? lockdep_unlock+0x5d/0xd0 [ 219.781183][ T5590] ? __lock_acquire+0x13e8/0x2ce0 [ 219.781208][ T5590] ? hci_conn_timeout+0xff/0x2c0 [ 219.781230][ T5590] report_bug+0x16a/0x220 [ 219.781248][ T5590] ? hci_conn_timeout+0xff/0x2c0 [ 219.781272][ T5590] ? hci_conn_timeout+0x101/0x2c0 [ 219.781297][ T5590] handle_bug+0x9c/0x200 [ 219.781319][ T5590] exc_invalid_op+0x1a/0x50 [ 219.781340][ T5590] asm_exc_invalid_op+0x1a/0x20 [ 219.781356][ T5590] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 219.781381][ T5590] Code: 48 89 df e8 33 cd 09 00 eb 07 e8 cc 0b 8b f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 37 a1 fe ff e8 b2 0b 8b f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 219.781395][ T5590] RSP: 0018:ffffc90004a37ad0 EFLAGS: 00010293 [ 219.781411][ T5590] RAX: ffffffff8a3ace3e RBX: ffff888037560000 RCX: ffff888038811f00 [ 219.781424][ T5590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.781434][ T5590] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 219.781445][ T5590] R10: dffffc0000000000 R11: ffffed1006eac003 R12: dffffc0000000000 [ 219.781457][ T5590] R13: dffffc0000000000 R14: ffff888037560ac0 R15: ffff888037560010 [ 219.781477][ T5590] ? hci_conn_timeout+0xfe/0x2c0 [ 219.781508][ T5590] ? process_scheduled_works+0xa20/0x14e0 [ 219.781528][ T5590] process_scheduled_works+0xa8e/0x14e0 [ 219.781573][ T5590] ? __pfx_process_scheduled_works+0x10/0x10 [ 219.781597][ T5590] ? assign_work+0x3cf/0x5d0 [ 219.781630][ T5590] worker_thread+0xa47/0xfb0 [ 219.781671][ T5590] kthread+0x388/0x470 [ 219.781698][ T5590] ? __pfx_worker_thread+0x10/0x10 [ 219.781717][ T5590] ? __pfx_kthread+0x10/0x10 [ 219.781744][ T5590] ret_from_fork+0x514/0xb70 [ 219.781776][ T5590] ? __pfx_ret_from_fork+0x10/0x10 [ 219.781809][ T5590] ? __switch_to+0xc89/0x1420 [ 219.781841][ T5590] ? __pfx_kthread+0x10/0x10 [ 219.781866][ T5590] ret_from_fork_asm+0x1a/0x30 [ 219.781906][ T5590] [ 219.783601][ T5590] Kernel Offset: disabled