last executing test programs: 2m32.349972426s ago: executing program 1 (id=19): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00030000b6cd31d4696a00"/26, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) readahead(0xffffffffffffffff, 0x7, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x80340, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023893) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0xa000, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xffe}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x800}], 0x1, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x4, 0x1800}, {0x1, 0x0, 0x800}], 0x2) llistxattr(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000400)=""/84, 0x54) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448e1, &(0x7f0000000240)={0x0, 0x0, "be5eec", 0x0, 0xff}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='erofs\x00', 0x200000, 0x0) 2m30.070309567s ago: executing program 1 (id=22): pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="d04711", 0x3}], 0x1, 0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000002c0)=0x2) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000100)=""/172, 0xac}, {0x0}], 0x2, 0x2, 0x2) syz_io_uring_setup(0x45f49, &(0x7f0000000080)={0x0, 0x85f5, 0x2000, 0x3, 0x2f2, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000240)) socket(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x4, 0x0) execve(&(0x7f0000002380)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x2808000, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300020c0000e02abd700000000000050006"], 0x60}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x12, r7, 0x80000000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m16.942342985s ago: executing program 1 (id=39): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x749203) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000600)=0x83) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000480)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0xf5ae, 0x3180, 0x7ffd, 0x400248}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x6, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r1) sendfile(r0, r0, 0x0, 0xb) 2m15.32597478s ago: executing program 1 (id=43): r0 = memfd_secret(0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x50) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000002c0)={0x4000, r2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) setsockopt$inet_group_source_req(r6, 0x0, 0x2b, 0x0, 0x0) recvmsg(r5, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 2m10.994434457s ago: executing program 1 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xee) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x2, 0x21, 0x1, 0x200, &(0x7f00000003c0)="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"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@cgroup=r6, 0xd, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x10, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) 2m6.387237236s ago: executing program 1 (id=53): close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 1m50.063707325s ago: executing program 32 (id=53): close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 1m16.185963356s ago: executing program 0 (id=114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) unshare(0x8020480) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r5, 0x0, 0x2840) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f00001b4000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000000)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) eventfd(0xc) unshare(0x6060600) r8 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, 0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1m13.609547558s ago: executing program 0 (id=116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x25dfdbfd, {0xa, 0x10, 0x80, 0x10, 0x0, 0x0, 0x0, 0x8, 0x16}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x20}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40080) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4e1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, &(0x7f0000000300)={0x7, 0x0, 0x1, {0x0, 0x4001, 0x0, 0x4}}) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r8, &(0x7f0000004980), 0x0, 0x20008000) setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m11.023188539s ago: executing program 0 (id=117): syz_open_dev$usbfs(0x0, 0x77, 0x600) r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c005af07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfe, 0xffff0000, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x50) shutdown(r5, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sched_getattr(r1, &(0x7f00000000c0)={0x38}, 0x38, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x503}, 0x1c) getsockopt$inet6_mreq(r6, 0x29, 0x10, 0x0, &(0x7f00000000c0)) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa5287dc3a4014c31ed56ad59300", 0x15}, 0x48, 0xfffffffffffffffa) socket$netlink(0x10, 0x3, 0x0) 1m10.148865254s ago: executing program 4 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FIBMAP(r3, 0x1, 0xffffffffffffffff) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r4, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) epoll_pwait(r6, &(0x7f00000000c0)=[{}], 0x1, 0x200, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40)={0x2000000b}) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x9) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', 0x0, &(0x7f00000004c0), 0x21, 0x0) 1m5.805933385s ago: executing program 4 (id=124): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}}, 0x2200c840) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) process_mrelease(0xffffffffffffffff, 0x0) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 59.602832218s ago: executing program 4 (id=128): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000240)=0x8b, 0x100000500) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xb8}, {0x4, 0x6}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x4, @time={0x6, 0x3ff}, {0x6, 0x4}, {}, @result={0xd, 0x4}}], 0x38) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$FICLONE(r3, 0x40049409, r1) ioctl$SG_IO(r6, 0x2285, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f4", 0x27}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x1, 0x4000005, 0x0, 0x0, 0x2, 0x10000}) userfaultfd(0x80001) 59.549480796s ago: executing program 0 (id=129): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') read$msr(r4, &(0x7f0000000040)=""/59, 0xffb5) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x44, r7, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x55a3, 0x7, 0x9, 0xbf6, 0x7, 0x1, 0x3bd]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}}, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)}, {&(0x7f0000000540)='c6V', 0x3}], 0x2}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000f32000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0}, &(0x7f0000000800)=0x40) 57.019187071s ago: executing program 4 (id=131): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0xfffffffa, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, 0x0, 0x2410, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x15, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r5, r5, &(0x7f0000000000)=0x7, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x34000, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="3183000000000000000019000000aa2ede037022eeb097079c3a6c9b"], 0x14}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000940), 0x10) listen(0xffffffffffffffff, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) sendmmsg(r7, &(0x7f0000002380), 0x0, 0x100) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) 56.970331597s ago: executing program 0 (id=132): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x20000400) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x50) pipe2$9p(&(0x7f00000001c0), 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmmsg$unix(r7, 0x0, 0x0, 0x4) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r7, &(0x7f0000000500)=ANY=[], 0x78) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) socket(0x10, 0x80002, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109025f000301006000090400000001"], 0x0) 52.105716569s ago: executing program 4 (id=135): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$setownex(r0, 0xf, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000007480)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x10001}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0xffffffffffffffff, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff8}}, 0x0, 0x0, 0x9, 0x4, 0x1c4, 0x0, 0xfe}, 0x9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r5, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000007700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4044}, 0x24044011) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0) 51.697757275s ago: executing program 0 (id=138): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000066c0)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setownex(r6, 0xf, &(0x7f0000000280)={0x0, r5}) syz_emit_ethernet(0xa8, &(0x7f00000003c0)=ANY=[@ANYBLOB="01008040000baaaaaaaaaabb86dd6012000800723afffe800092725cbb3a9c6301f0fcf883b9dd000000000000000000040000bbff02000000000000000005b87884cc072874d81f39d5380000000000018600907800006a0200000000ffffffff190aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 47.820110852s ago: executing program 4 (id=142): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x40800) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000200)=r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r6], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pimreg0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @private}, &(0x7f0000000240)=0xc) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r12, 0x25, 0x6, @val=@netfilter={0x1, 0x0, 0xfff0003, 0x1}}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="000128bd7000fedbdf25040000000c00018008000100", @ANYRES32=r7, @ANYBLOB="2000018014000200697036746e6c3000000000000000000008000300020000000c000180080003000300000048000180140002007465616d5f736c6176655f3100000000080003000200000014000200776c616e300000000000000000000000140002007866726d300000000000000000000000500001801400020076657468315f6d61637674617000000008000100", @ANYRES32=r8, @ANYBLOB="140002006d6163766c616e3100000000000000001400020064766d7270300000000000000000000008000100", @ANYBLOB="54000180140002007767320000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="800400080000000000000000", @ANYRES32=0x0, @ANYBLOB="14000200767863616e310000000000000000000008000300000000000800030000000000"], 0x138}, 0x1, 0x0, 0x0, 0x4008000}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='huge=always']) socket$key(0xf, 0x3, 0x2) 31.859507396s ago: executing program 33 (id=138): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000066c0)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setownex(r6, 0xf, &(0x7f0000000280)={0x0, r5}) syz_emit_ethernet(0xa8, &(0x7f00000003c0)=ANY=[@ANYBLOB="01008040000baaaaaaaaaabb86dd6012000800723afffe800092725cbb3a9c6301f0fcf883b9dd000000000000000000040000bbff02000000000000000005b87884cc072874d81f39d5380000000000018600907800006a0200000000ffffffff190aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 31.605245904s ago: executing program 34 (id=142): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x40800) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000200)=r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r6], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pimreg0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @private}, &(0x7f0000000240)=0xc) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r12, 0x25, 0x6, @val=@netfilter={0x1, 0x0, 0xfff0003, 0x1}}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="000128bd7000fedbdf25040000000c00018008000100", @ANYRES32=r7, @ANYBLOB="2000018014000200697036746e6c3000000000000000000008000300020000000c000180080003000300000048000180140002007465616d5f736c6176655f3100000000080003000200000014000200776c616e300000000000000000000000140002007866726d300000000000000000000000500001801400020076657468315f6d61637674617000000008000100", @ANYRES32=r8, @ANYBLOB="140002006d6163766c616e3100000000000000001400020064766d7270300000000000000000000008000100", @ANYBLOB="54000180140002007767320000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="800400080000000000000000", @ANYRES32=0x0, @ANYBLOB="14000200767863616e310000000000000000000008000300000000000800030000000000"], 0x138}, 0x1, 0x0, 0x0, 0x4008000}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='huge=always']) socket$key(0xf, 0x3, 0x2) 14.72083942s ago: executing program 2 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000980)="180000003e000b05d25a806c8c6f94f90224fc6010000500", 0x18}], 0x1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) syz_open_dev$I2C(0x0, 0x80, 0x14000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r10, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40040) 12.959294681s ago: executing program 2 (id=169): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000050000000200000000000008040000000000000007"], 0x0, 0x29, 0x0, 0x1, 0x77f, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000d30a0000004600048020"], 0x78}, 0x1, 0x0, 0x0, 0xc1}, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) syz_pidfd_open(r2, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000440)={0x0, 0x5f20, 0x10, 0x403, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="200ea52c9b6b3e9b3cc4e84a22413b50f8120b5fb0bf4d9a71", @ANYRES16=0x0, @ANYBLOB, @ANYRES8=r1, @ANYBLOB="0a00180003030303030300000c0070000500010000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004003}, 0x40011) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 8.11781574s ago: executing program 3 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newtaction={0x4e0, 0x30, 0x1, 0x0, 0x0, {}, [{0x4cc, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x484, 0xc, 0x0, 0x0, {{0xb}, {0x420, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xf36b, 0x750, 0xfffffff8, 0x101, 0x3, 0x9, 0x4, 0x4, 0x695, 0x0, 0x100, 0x4b1, 0x6, 0x0, 0x294, 0x5, 0x5, 0x6, 0x6, 0x8001, 0x418, 0x7f, 0x0, 0x7fff, 0x3f9, 0x4, 0xbff5, 0x2, 0x2, 0x81, 0x1, 0x401, 0x4, 0x182, 0x9, 0x4, 0x6, 0xf, 0x0, 0x2, 0x0, 0x8, 0xb, 0x10001, 0x0, 0x9, 0x40, 0x401, 0x3, 0xfffffff8, 0x2, 0x9, 0xc, 0x80, 0x5, 0x5381ce33, 0x4, 0x39a1, 0x6, 0x4, 0xe1, 0x1, 0xffff, 0x3, 0x3, 0x6, 0x4, 0x0, 0x3ff, 0x5, 0x100, 0x800, 0x96a, 0x10, 0x9e, 0xf51, 0x0, 0x7ff, 0x1, 0x1, 0x14c7dfe9, 0x80, 0x4, 0xe, 0x1000, 0x40, 0x10001, 0x10, 0x30f5, 0x9, 0x3, 0x9, 0xa7, 0x7386478, 0x401, 0x2, 0x3, 0x9, 0x101, 0x732, 0x75b9, 0x3, 0x400, 0x7fb6a015, 0x3, 0x10000, 0x4, 0x5, 0x7, 0x9, 0x0, 0x800, 0x7, 0x7fffffff, 0x1, 0x3, 0x6, 0x7, 0x48cc, 0x101, 0x1000, 0xf6, 0x605, 0x2, 0x5, 0xd195, 0x4, 0x80000000, 0xc8f5, 0x0, 0x0, 0xa4b2, 0xea, 0x8c0, 0xfffffd51, 0x4, 0xf, 0x1, 0x2, 0x1000, 0x0, 0xfffffff7, 0x2, 0x0, 0x0, 0x2, 0x4, 0x7, 0x0, 0x0, 0x4, 0x7, 0x0, 0x6, 0xbf, 0x40, 0x1ff, 0x80000000, 0x6, 0x1, 0xfff, 0x2, 0x2, 0x2, 0x4, 0x9, 0xd3fc, 0x9, 0x3ff, 0x3db9, 0xfffffff5, 0x180, 0x0, 0x2, 0x4000, 0x86, 0x7, 0xf, 0xfffffff9, 0x1, 0x3, 0x9, 0xc, 0x80e, 0x9, 0x5, 0x9, 0x1, 0x1d7d, 0x5, 0x1, 0x5, 0xc, 0x6, 0x7, 0x10, 0x81, 0x8, 0xfffff001, 0x1, 0xffffffff, 0x0, 0x7, 0x8, 0xffffffd7, 0x3, 0x7, 0x9, 0x0, 0x7, 0x8, 0x0, 0x8065, 0x3, 0xa, 0xb9, 0xe, 0xacf8, 0xfff, 0x588e, 0x2, 0x7fff, 0x9, 0xb3e4, 0x5, 0x4, 0x0, 0x7, 0x2, 0x1, 0x9, 0x101, 0x5, 0x3ff, 0xb89, 0x5, 0x800, 0x9, 0x20, 0x10000, 0x13, 0x5, 0x7, 0x6, 0x2, 0x9, 0x7fff, 0x101, 0x80, 0x7, 0x2, 0xa, 0x5, 0x81, 0x2, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x52}]]}, {0x3a, 0x6, "5b9c17e51380764fba054d43ff02f61628e948709c8b0c5e933bc99b63bc4a11c7a06957d07c61c33829c7812fba33a234e4bc79320f"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000006800010000080000000000000a00000000000000793f8b1423103d91a0a5978062ddf563e79e39e1d09ad3c2316f925dbc1e0001435ab9a85fde1ecaf61489a9e36f52b0fa1bf9abb34b9da1f713fe9b1168b5ca1293602cb4f4ad45b377fb81c70f076d434125e62bd9db0f28373f20253ca0dade467c1b316a5fa317f14ded14ac2fbddecf537b5a1dc769d6c1"], 0x20}}, 0x0) getpid() 6.985135929s ago: executing program 3 (id=172): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x0, 0x0) setregid(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r4, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 5.905319301s ago: executing program 3 (id=173): rename(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x490000, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001", 0x3, r3) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 4.757691715s ago: executing program 3 (id=174): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r3 = socket$inet(0xa, 0x801, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x880, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x80) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) sendto$inet6(r4, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) close(r4) write$dsp(0xffffffffffffffff, 0x0, 0x0) 3.774502551s ago: executing program 2 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, &(0x7f0000000000), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x509df34b049dab42) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x30}) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82881, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCSETSW2(r6, 0x5433, 0x0) 2.618426433s ago: executing program 2 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\x9b\xac\xe3\xbf\xa5\xdf\xbd\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x02\x00\x00\x00\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5\x1b\x88\xf8C\xaa\xa7\xbb\xfdZ\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\x00'/143, 0x6) pwrite64(r4, 0x0, 0x0, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = open(0x0, 0x1850c2, 0x14c) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x1ac, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x22048105}, 0x4080) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.874673129s ago: executing program 2 (id=177): socket(0x11, 0x3, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xee) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[], 0xff2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x2, 0x21, 0x1, 0x200, &(0x7f00000003c0)="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"}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_ACTIVATE_TARGET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x24, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.011351857s ago: executing program 3 (id=178): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"}) poll(&(0x7f0000000000)=[{r3, 0x285}, {r3, 0x40}], 0x2, 0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@multicast2, {@in6=@dev, @in6=@dev}, {{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x8, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x0, @in=@loopback}]}]}, 0x16c}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000000c0)) r7 = eventfd(0x3) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000040)={r7}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x121040, 0x0) fcntl$setlease(r8, 0x400, 0x1) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r8, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x3}) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) write$sysctl(r9, 0x0, 0x0) r10 = dup(r5) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000080)={0x2, 0x1000}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0xb, 0x4481) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0xec}) 791.912228ms ago: executing program 2 (id=179): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="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", 0xffc}, {&(0x7f0000000540)="633656a4", 0xffffff47}], 0x2}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x96}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 0s ago: executing program 3 (id=180): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x0, 0x0) setregid(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r4, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.2' (ED25519) to the list of known hosts. [ 84.115681][ T5807] cgroup: Unknown subsys name 'net' [ 84.213770][ T5807] cgroup: Unknown subsys name 'cpuset' [ 84.223230][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.941002][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.671897][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.682255][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.690914][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.719790][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.728241][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.736607][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.736609][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.744267][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.751289][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.758833][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.767271][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.773342][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.779955][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.789453][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.794635][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.805918][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.814387][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.815000][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.826050][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.837523][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.849068][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.856914][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.865382][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.873346][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.892117][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.333041][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 89.627563][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.634817][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.643422][ T5820] bridge_slave_0: entered allmulticast mode [ 89.653492][ T5820] bridge_slave_0: entered promiscuous mode [ 89.673355][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.682305][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.690389][ T5820] bridge_slave_1: entered allmulticast mode [ 89.698539][ T5820] bridge_slave_1: entered promiscuous mode [ 89.749422][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 89.822259][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 89.838290][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.864033][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.906549][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.016799][ T5820] team0: Port device team_slave_0 added [ 90.047137][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 90.079954][ T5820] team0: Port device team_slave_1 added [ 90.194009][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.201566][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.208863][ T5819] bridge_slave_0: entered allmulticast mode [ 90.216902][ T5819] bridge_slave_0: entered promiscuous mode [ 90.225233][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.233072][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.240489][ T5835] bridge_slave_0: entered allmulticast mode [ 90.247854][ T5835] bridge_slave_0: entered promiscuous mode [ 90.256565][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.263532][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.289622][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.303321][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.310362][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.336394][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.374789][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.382257][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.389983][ T5819] bridge_slave_1: entered allmulticast mode [ 90.397461][ T5819] bridge_slave_1: entered promiscuous mode [ 90.404266][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.411668][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.419268][ T5835] bridge_slave_1: entered allmulticast mode [ 90.427007][ T5835] bridge_slave_1: entered promiscuous mode [ 90.519537][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.530386][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.538421][ T5818] bridge_slave_0: entered allmulticast mode [ 90.546022][ T5818] bridge_slave_0: entered promiscuous mode [ 90.554478][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.562151][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.569612][ T5818] bridge_slave_1: entered allmulticast mode [ 90.577582][ T5818] bridge_slave_1: entered promiscuous mode [ 90.619567][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.659674][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.673268][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.685139][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.740580][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.807585][ T5820] hsr_slave_0: entered promiscuous mode [ 90.814305][ T5820] hsr_slave_1: entered promiscuous mode [ 90.824554][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.833880][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.842068][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.847168][ T5830] Bluetooth: hci0: command tx timeout [ 90.850163][ T5821] bridge_slave_0: entered allmulticast mode [ 90.862425][ T5821] bridge_slave_0: entered promiscuous mode [ 90.887911][ T5819] team0: Port device team_slave_0 added [ 90.898333][ T5835] team0: Port device team_slave_0 added [ 90.919070][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.926318][ T5830] Bluetooth: hci4: command tx timeout [ 90.926514][ T5830] Bluetooth: hci2: command tx timeout [ 90.931814][ T5827] Bluetooth: hci3: command tx timeout [ 90.942869][ T5827] Bluetooth: hci1: command tx timeout [ 90.948608][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.956190][ T5821] bridge_slave_1: entered allmulticast mode [ 90.963448][ T5821] bridge_slave_1: entered promiscuous mode [ 90.985937][ T5819] team0: Port device team_slave_1 added [ 90.993576][ T5835] team0: Port device team_slave_1 added [ 91.032049][ T5818] team0: Port device team_slave_0 added [ 91.104334][ T5818] team0: Port device team_slave_1 added [ 91.128767][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.154100][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.161267][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.187256][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.220598][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.227820][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.254407][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.283353][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.293191][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.301071][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.327450][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.345176][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.352422][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.378462][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.391010][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.399131][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.425868][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.471286][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.478555][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.504803][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.584978][ T5821] team0: Port device team_slave_0 added [ 91.594207][ T5821] team0: Port device team_slave_1 added [ 91.620190][ T5819] hsr_slave_0: entered promiscuous mode [ 91.627091][ T5819] hsr_slave_1: entered promiscuous mode [ 91.633427][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.641272][ T5819] Cannot create hsr debugfs directory [ 91.751927][ T5835] hsr_slave_0: entered promiscuous mode [ 91.760658][ T5835] hsr_slave_1: entered promiscuous mode [ 91.767133][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.774709][ T5835] Cannot create hsr debugfs directory [ 91.800106][ T5818] hsr_slave_0: entered promiscuous mode [ 91.806996][ T5818] hsr_slave_1: entered promiscuous mode [ 91.813124][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.821123][ T5818] Cannot create hsr debugfs directory [ 91.834239][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.841683][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.868288][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.900317][ T96] cfg80211: failed to load regulatory.db [ 91.929311][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.936662][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.962988][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.150309][ T5821] hsr_slave_0: entered promiscuous mode [ 92.157805][ T5821] hsr_slave_1: entered promiscuous mode [ 92.164118][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.172385][ T5821] Cannot create hsr debugfs directory [ 92.408476][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.447519][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.489878][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.546004][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.673864][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.688275][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.722401][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.734327][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.818360][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.832815][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.844946][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.859135][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.926647][ T5827] Bluetooth: hci0: command tx timeout [ 92.970728][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.999649][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.006570][ T5827] Bluetooth: hci2: command tx timeout [ 93.006616][ T5827] Bluetooth: hci3: command tx timeout [ 93.006665][ T5827] Bluetooth: hci4: command tx timeout [ 93.006740][ T5827] Bluetooth: hci1: command tx timeout [ 93.033470][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.044030][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.101883][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.223279][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.240256][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.271843][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.279258][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.294466][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.319036][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.339380][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.354825][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.362365][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.381256][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.388465][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.409679][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.437787][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.444947][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.462638][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.511602][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.518893][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.533435][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.540616][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.603313][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.610515][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.683783][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.800414][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.819371][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.826637][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.881781][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.889030][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.087891][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.204012][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.247895][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.324721][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.364790][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.372131][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.415483][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.422708][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.514314][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.571129][ T5819] veth0_vlan: entered promiscuous mode [ 94.604778][ T5819] veth1_vlan: entered promiscuous mode [ 94.623174][ T5820] veth0_vlan: entered promiscuous mode [ 94.663381][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.701191][ T5820] veth1_vlan: entered promiscuous mode [ 94.761312][ T5818] veth0_vlan: entered promiscuous mode [ 94.781573][ T5819] veth0_macvtap: entered promiscuous mode [ 94.812565][ T5819] veth1_macvtap: entered promiscuous mode [ 94.824172][ T5818] veth1_vlan: entered promiscuous mode [ 94.938934][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.949412][ T5820] veth0_macvtap: entered promiscuous mode [ 94.968543][ T5821] veth0_vlan: entered promiscuous mode [ 94.981323][ T5820] veth1_macvtap: entered promiscuous mode [ 94.999084][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.017491][ T5832] Bluetooth: hci0: command tx timeout [ 95.021865][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.034023][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.043066][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.052480][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.082881][ T5821] veth1_vlan: entered promiscuous mode [ 95.093683][ T5832] Bluetooth: hci1: command tx timeout [ 95.099557][ T5827] Bluetooth: hci4: command tx timeout [ 95.100705][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.105111][ T5827] Bluetooth: hci3: command tx timeout [ 95.114016][ T5830] Bluetooth: hci2: command tx timeout [ 95.127959][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.167679][ T5818] veth0_macvtap: entered promiscuous mode [ 95.189132][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.198117][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.207824][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.216730][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.230098][ T5818] veth1_macvtap: entered promiscuous mode [ 95.254898][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.293422][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.341717][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.390253][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.399923][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.410308][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.419226][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.494151][ T5821] veth0_macvtap: entered promiscuous mode [ 95.524371][ T5821] veth1_macvtap: entered promiscuous mode [ 95.538501][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.553905][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.698346][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.714718][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.738173][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.763787][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.800428][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.802054][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.818319][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.818367][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.833961][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.834796][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.851664][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.860495][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.977546][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.981177][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.985397][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.107663][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.108071][ T5835] veth0_vlan: entered promiscuous mode [ 96.127265][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.217996][ T5835] veth1_vlan: entered promiscuous mode [ 96.383157][ T980] Process accounting resumed [ 96.924502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.933993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 97.086263][ T5830] Bluetooth: hci0: command tx timeout [ 97.166700][ T5830] Bluetooth: hci3: command tx timeout [ 97.188929][ T5832] Bluetooth: hci4: command tx timeout [ 97.195222][ T5832] Bluetooth: hci2: command tx timeout [ 97.201923][ T5832] Bluetooth: hci1: command tx timeout [ 97.210058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.219761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.231607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.539466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.641164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.743540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.846013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.886576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.131917][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.186830][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.019675][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.028675][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.383452][ T5932] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.730513][ T5930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.635876][ T5924] ALSA: mixer_oss: invalid OSS volume 'MONITO' [ 100.821471][ T5835] veth0_macvtap: entered promiscuous mode [ 101.514965][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 102.145116][ T5835] veth1_macvtap: entered promiscuous mode [ 102.866526][ T5937] sctp: failed to load transform for md5: -2 [ 103.566595][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.618702][ T5950] batadv1: entered promiscuous mode [ 103.651135][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.703232][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.713564][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.736905][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.749984][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.390590][ T5956] vim2m vim2m.0: vidioc_s_fmt queue busy [ 104.695953][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.896749][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 104.967708][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.982320][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.001903][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 105.041414][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.075239][ T24] usb 4-1: config 0 descriptor?? [ 105.102872][ T5960] Zero length message leads to an empty skb [ 105.119276][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 105.125341][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 105.144138][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.175255][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 105.186621][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.042326][ T5968] block nbd2: not configured, cannot reconfigure [ 107.055774][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.124814][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.321927][ T5959] syz.1.12 (5959) used greatest stack depth: 17088 bytes left [ 107.833441][ T5983] netlink: 'syz.2.17': attribute type 39 has an invalid length. [ 108.369999][ T5987] mmap: syz.1.15 (5987) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.716942][ T5986] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.094543][ T10] usb 4-1: USB disconnect, device number 2 [ 110.503793][ T5995] syz.0.18: attempt to access beyond end of device [ 110.503793][ T5995] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 110.662841][ T5999] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.691143][ T5995] FAT-fs (loop1): unable to read boot sector [ 110.755200][ T6004] process 'syz.1.19' launched './file2' with NULL argv: empty string added [ 110.960420][ T6005] erofs (device nbd1): cannot find valid erofs superblock [ 111.422962][ T6004] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 112.926024][ T5830] Bluetooth: hci0: command 0x080f tx timeout [ 113.276906][ T6026] vim2m vim2m.0: vidioc_s_fmt queue busy [ 114.418208][ T6018] kvm: pic: non byte write [ 118.380115][ T6045] sctp: [Deprecated]: syz.2.27 (pid 6045) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.380115][ T6045] Use struct sctp_sack_info instead [ 118.401828][ T6045] sctp: [Deprecated]: syz.2.27 (pid 6045) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.401828][ T6045] Use struct sctp_sack_info instead [ 121.151260][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32'. [ 121.162847][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32'. [ 122.053316][ T6071] capability: warning: `syz.0.31' uses deprecated v2 capabilities in a way that may be insecure [ 123.824592][ T6081] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 126.344206][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz.4.41'. [ 130.704392][ T6143] netlink: 52 bytes leftover after parsing attributes in process `syz.4.47'. [ 130.754498][ T6143] netlink: 52 bytes leftover after parsing attributes in process `syz.4.47'. [ 130.764664][ T6143] netlink: 52 bytes leftover after parsing attributes in process `syz.4.47'. [ 133.444384][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.517023][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.979250][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033d16c00: rx timeout, send abort [ 134.989687][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888033d16c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 135.393644][ T6163] binder: BINDER_SET_CONTEXT_MGR already set [ 135.400211][ T6163] binder: 6157:6163 ioctl 4018620d 200000000040 returned -16 [ 136.055501][ T6163] Falling back ldisc for ttyprintk. [ 136.948762][ T6166] erofs (device nbd0): cannot find valid erofs superblock [ 137.177023][ T6165] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 137.720563][ T6172] bridge1: entered promiscuous mode [ 139.223479][ T5830] Bluetooth: hci0: command 0x080f tx timeout [ 143.425065][ T6195] Bluetooth: MGMT ver 1.23 [ 143.431995][ T6195] Bluetooth: hci0: unsupported parameter 39401 [ 143.438386][ T6195] Bluetooth: hci0: unsupported parameter 512 [ 143.495249][ T6195] Bluetooth: hci0: unsupported parameter 39401 [ 143.503025][ T6195] Bluetooth: hci0: unsupported parameter 512 [ 144.690056][ T6208] batadv_slave_0: entered promiscuous mode [ 144.696699][ T6208] macvtap1: entered allmulticast mode [ 144.702514][ T6208] batadv_slave_0: entered allmulticast mode [ 144.760353][ T6204] loop6: detected capacity change from 0 to 524287999 [ 144.773457][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.781977][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.790349][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.804139][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.812602][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.821215][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.829736][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.838214][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.846714][ T6204] ldm_validate_partition_table(): Disk read failed. [ 144.857916][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.866324][ T6204] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.875010][ T6204] Dev loop6: unable to read RDB block 0 [ 145.120423][ T6204] loop6: unable to read partition table [ 145.126872][ T6204] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 150.002020][ T6235] NILFS (nullb0): couldn't find nilfs on the device [ 152.844873][ T5899] IPVS: starting estimator thread 0... [ 153.980314][ T6258] IPVS: using max 27 ests per chain, 64800 per kthread [ 154.291210][ T6247] syz.4.72 uses obsolete (PF_INET,SOCK_PACKET) [ 155.518137][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.528337][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.537488][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.549444][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.563758][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.179434][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 157.990253][ T5830] Bluetooth: hci5: command tx timeout [ 158.084822][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 158.781776][ T6290] random: crng reseeded on system resumption [ 160.414477][ T5830] Bluetooth: hci5: command tx timeout [ 160.609121][ T6291] ALSA: mixer_oss: invalid index 40000 [ 161.724868][ T1112] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.859559][ T6308] batadv1: entered promiscuous mode [ 161.983931][ T1112] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.470895][ T6320] SET target dimension over the limit! [ 162.596479][ T5830] Bluetooth: hci5: command tx timeout [ 163.393475][ T6322] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 163.971982][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.85'. [ 164.582432][ T6329] sctp: failed to load transform for md5: -2 [ 164.656482][ T5830] Bluetooth: hci5: command tx timeout [ 164.669357][ T1112] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.243159][ T6346] netlink: 36 bytes leftover after parsing attributes in process `syz.4.87'. [ 168.930553][ T6364] netlink: 'syz.2.90': attribute type 21 has an invalid length. [ 168.939138][ T6364] netlink: 'syz.2.90': attribute type 6 has an invalid length. [ 168.947339][ T6364] netlink: 132 bytes leftover after parsing attributes in process `syz.2.90'. [ 168.984118][ T6275] chnl_net:caif_netlink_parms(): no params data found [ 170.196107][ T6344] sctp: failed to load transform for md5: -2 [ 171.518201][ T6369] sctp: failed to load transform for md5: -2 [ 171.931843][ T6373] sctp: failed to load transform for md5: -2 [ 172.057546][ T6376] sctp: failed to load transform for md5: -2 [ 172.148544][ T6378] sctp: failed to load transform for md5: -2 [ 173.296219][ T6406] vim2m vim2m.0: vidioc_s_fmt queue busy [ 173.822264][ T980] Process accounting resumed [ 174.258779][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.386575][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.394555][ T6275] bridge_slave_0: entered allmulticast mode [ 174.403185][ T6275] bridge_slave_0: entered promiscuous mode [ 174.420276][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.427884][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.442100][ T6275] bridge_slave_1: entered allmulticast mode [ 174.573643][ T6275] bridge_slave_1: entered promiscuous mode [ 175.661706][ T6419] netlink: 'syz.3.97': attribute type 4 has an invalid length. [ 176.384142][ T6275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.404215][ T30] audit: type=1326 audit(1747362830.815:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0248f8e969 code=0x7ffc0000 [ 176.467381][ T30] audit: type=1326 audit(1747362830.885:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0248f8e969 code=0x7ffc0000 [ 176.478891][ T6275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.530910][ T30] audit: type=1326 audit(1747362830.885:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0248f8e969 code=0x7ffc0000 [ 176.702816][ T30] audit: type=1326 audit(1747362830.885:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0248f8e969 code=0x7ffc0000 [ 176.764561][ T1112] bridge_slave_1: left allmulticast mode [ 176.771536][ T30] audit: type=1326 audit(1747362831.215:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0248f8e969 code=0x7ffc0000 [ 176.794680][ T1112] bridge_slave_1: left promiscuous mode [ 176.817445][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.818633][ T30] audit: type=1326 audit(1747362831.215:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6427 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0248f8e969 code=0x7ffc0000 [ 177.215381][ T6451] Illegal XDP return value 4294967294 on prog (id 38) dev N/A, expect packet loss! [ 177.870645][ T1112] bridge_slave_0: left allmulticast mode [ 177.904167][ T1112] bridge_slave_0: left promiscuous mode [ 177.939180][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.976048][ T5875] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 178.384599][ T5875] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 178.394453][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.402716][ T5875] usb 3-1: Product: syz [ 178.407069][ T5875] usb 3-1: Manufacturer: syz [ 178.411707][ T5875] usb 3-1: SerialNumber: syz [ 178.435532][ T5875] usb 3-1: config 0 descriptor?? [ 178.989865][ T6463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.238687][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.252929][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.267278][ T1112] bond0 (unregistering): Released all slaves [ 179.289700][ T6438] pimreg3: entered allmulticast mode [ 179.357138][ T6275] team0: Port device team_slave_0 added [ 179.383114][ T6275] team0: Port device team_slave_1 added [ 181.223161][ T5875] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 181.468379][ T6475] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.519949][ T5875] peak_usb 3-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 182.270577][ T6485] binfmt_misc: register: failed to install interpreter file ./file0 [ 182.578096][ T5830] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 182.590182][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: kworker/u9:4 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 182.590215][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.590230][ T5830] Workqueue: hci3 hci_rx_work [ 182.590290][ T5830] Call Trace: [ 182.590303][ T5830] [ 182.590316][ T5830] dump_stack_lvl+0x189/0x250 [ 182.590350][ T5830] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.590379][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.590438][ T5830] sysfs_create_dir_ns+0x259/0x280 [ 182.590465][ T5830] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 182.590491][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 182.590523][ T5830] kobject_add_internal+0x59f/0xb40 [ 182.590567][ T5830] kobject_add+0x155/0x220 [ 182.590606][ T5830] ? __pfx_kobject_add+0x10/0x10 [ 182.590639][ T5830] ? _raw_spin_unlock+0x28/0x50 [ 182.590667][ T5830] ? get_device_parent+0x366/0x3a0 [ 182.590699][ T5830] device_add+0x408/0xb50 [ 182.590731][ T5830] hci_conn_add_sysfs+0xd5/0x1e0 [ 182.590765][ T5830] le_conn_complete_evt+0xc3a/0x1220 [ 182.590804][ T5830] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 182.590828][ T5830] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 182.590854][ T5830] ? __asan_memcpy+0x40/0x70 [ 182.590883][ T5830] ? __pfx___mutex_lock+0x10/0x10 [ 182.590913][ T5830] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.590940][ T5830] ? skb_pull_data+0xfb/0x200 [ 182.590981][ T5830] hci_le_conn_complete_evt+0x187/0x450 [ 182.591026][ T5830] hci_event_packet+0x7a2/0x1270 [ 182.591063][ T5830] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 182.591098][ T5830] ? __pfx_hci_event_packet+0x10/0x10 [ 182.591131][ T5830] ? kcov_remote_start+0x4d3/0x7f0 [ 182.591156][ T5830] ? lockdep_hardirqs_on+0x20/0x150 [ 182.591187][ T5830] ? hci_send_to_monitor+0xd7/0x4f0 [ 182.591215][ T5830] hci_rx_work+0x46a/0xe80 [ 182.591257][ T5830] ? process_scheduled_works+0x9ec/0x17a0 [ 182.591295][ T5830] process_scheduled_works+0xadb/0x17a0 [ 182.591362][ T5830] ? __pfx_process_scheduled_works+0x10/0x10 [ 182.591426][ T5830] worker_thread+0x8a0/0xda0 [ 182.591479][ T5830] kthread+0x70e/0x8a0 [ 182.591509][ T5830] ? __pfx_worker_thread+0x10/0x10 [ 182.591529][ T5830] ? __pfx_kthread+0x10/0x10 [ 182.591557][ T5830] ? __pfx_kthread+0x10/0x10 [ 182.591582][ T5830] ? _raw_spin_unlock_irq+0x23/0x50 [ 182.591606][ T5830] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.591633][ T5830] ? __pfx_kthread+0x10/0x10 [ 182.591657][ T5830] ret_from_fork+0x4b/0x80 [ 182.591678][ T5830] ? __pfx_kthread+0x10/0x10 [ 182.591703][ T5830] ret_from_fork_asm+0x1a/0x30 [ 182.591756][ T5830] [ 182.866032][ T5830] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 182.897243][ T5830] Bluetooth: hci3: failed to register connection device [ 184.088034][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.122739][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.195697][ T6275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.221056][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.247644][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.273631][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.339021][ T6492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.469651][ T6275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.167434][ T5875] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 186.903110][ T5875] usb 3-1: USB disconnect, device number 2 [ 187.734158][ T30] audit: type=1326 audit(1747362842.185:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 187.775801][ T30] audit: type=1326 audit(1747362842.185:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 187.811450][ T30] audit: type=1326 audit(1747362842.255:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbdd985927 code=0x7ffc0000 [ 187.834709][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.915633][ T30] audit: type=1326 audit(1747362842.265:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbdd92ab39 code=0x7ffc0000 [ 187.937188][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.036515][ T30] audit: type=1326 audit(1747362842.265:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbdd985927 code=0x7ffc0000 [ 188.285707][ T30] audit: type=1326 audit(1747362842.265:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbdd92ab39 code=0x7ffc0000 [ 188.350759][ T30] audit: type=1326 audit(1747362842.265:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 188.354934][ T6514] pimreg3: entered allmulticast mode [ 188.508738][ T30] audit: type=1326 audit(1747362842.265:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 188.723282][ T30] audit: type=1326 audit(1747362842.265:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 188.877457][ T30] audit: type=1326 audit(1747362842.265:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6504 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 190.028874][ T69] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 190.507365][ T6275] hsr_slave_0: entered promiscuous mode [ 190.516890][ T6275] hsr_slave_1: entered promiscuous mode [ 190.527972][ T6275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.536773][ T6275] Cannot create hsr debugfs directory [ 192.035639][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 192.195117][ T1112] hsr_slave_0: left promiscuous mode [ 192.495959][ T1112] hsr_slave_1: left promiscuous mode [ 192.502373][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.457767][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 193.457789][ T30] audit: type=1326 audit(1747362847.075:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6548 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 193.486408][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.296057][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.521411][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.534190][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.496095][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.545603][ T30] audit: type=1326 audit(1747362847.075:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6548 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 195.705671][ T10] usb 3-1: unable to read config index 0 descriptor/all [ 195.713417][ T10] usb 3-1: can't read configurations, error -71 [ 195.728144][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.732913][ T30] audit: type=1326 audit(1747362847.085:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6548 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 195.850710][ T30] audit: type=1326 audit(1747362847.085:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6548 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 195.980500][ T30] audit: type=1326 audit(1747362847.085:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6548 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 195.996693][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.445045][ T6566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.122'. [ 196.463973][ T1112] veth1_macvtap: left promiscuous mode [ 196.475755][ T30] audit: type=1326 audit(1747362847.095:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6548 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 196.506422][ T1112] veth0_macvtap: left promiscuous mode [ 196.521593][ T1112] veth1_vlan: left promiscuous mode [ 196.711356][ T30] audit: type=1326 audit(1747362847.095:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6548 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 196.771819][ T1112] veth0_vlan: left promiscuous mode [ 196.784403][ T30] audit: type=1326 audit(1747362847.095:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6548 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 196.808836][ T30] audit: type=1326 audit(1747362847.105:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6548 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 197.793978][ T30] audit: type=1326 audit(1747362847.105:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6548 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 199.326901][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 199.420177][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 200.008478][ T6585] block device autoloading is deprecated and will be removed. [ 200.028035][ T6585] ======================================================= [ 200.028035][ T6585] WARNING: The mand mount option has been deprecated and [ 200.028035][ T6585] and is ignored by this kernel. Remove the mand [ 200.028035][ T6585] option from the mount to silence this warning. [ 200.028035][ T6585] ======================================================= [ 201.123705][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 202.015196][ T10] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 202.074156][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.121228][ T10] usb 3-1: Product: syz [ 202.130627][ T10] usb 3-1: Manufacturer: syz [ 202.163787][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 202.163808][ T30] audit: type=1326 audit(1747362856.615:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 202.194072][ T10] usb 3-1: SerialNumber: syz [ 202.291555][ T10] usb 3-1: config 0 descriptor?? [ 202.460141][ T30] audit: type=1326 audit(1747362856.615:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 202.490244][ T10] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 202.605722][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 202.964476][ T30] audit: type=1326 audit(1747362856.615:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 203.014780][ T30] audit: type=1326 audit(1747362856.615:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 203.142745][ T30] audit: type=1326 audit(1747362856.615:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 203.710014][ T30] audit: type=1326 audit(1747362856.615:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 204.587450][ T30] audit: type=1326 audit(1747362856.615:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 204.651868][ T30] audit: type=1326 audit(1747362856.615:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 204.674956][ T30] audit: type=1326 audit(1747362856.615:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 204.718526][ T10] usb 3-1: USB disconnect, device number 5 [ 204.804797][ T30] audit: type=1326 audit(1747362856.615:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 206.099788][ T6626] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 206.113757][ T6626] qnx6: wrong signature (magic) in superblock #1. [ 206.120543][ T6626] qnx6: unable to read the first superblock [ 206.149844][ T6626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.130'. [ 208.688196][ T6618] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.698159][ T6618] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.721725][ T6618] bridge0: entered allmulticast mode [ 209.722057][ T6275] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.868026][ T6275] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 210.577537][ T6653] C: renamed from team_slave_0 (while UP) [ 210.745669][ T6653] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 210.753815][ T6653] netlink: 152 bytes leftover after parsing attributes in process `syz.2.136'. [ 210.764136][ T6653] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 210.842412][ T6656] netlink: 'syz.4.135': attribute type 4 has an invalid length. [ 210.973285][ T6275] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 211.733198][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 211.740903][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 211.759951][ T5130] Bluetooth: hci3: command 0x0406 tx timeout [ 211.771457][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 212.036241][ T6651] warning: `syz.3.137' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 212.506419][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 212.506439][ T30] audit: type=1326 audit(1747362866.965:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 213.220087][ T30] audit: type=1326 audit(1747362866.965:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 213.648435][ T30] audit: type=1326 audit(1747362866.995:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbdd985927 code=0x7ffc0000 [ 218.605683][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 220.534683][ T30] audit: type=1326 audit(1747362866.995:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbdd92ab39 code=0x7ffc0000 [ 221.525745][ T30] audit: type=1326 audit(1747362866.995:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 221.585667][ T30] audit: type=1326 audit(1747362866.995:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 229.809028][ T30] audit: type=1326 audit(1747362866.995:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 229.864060][ T30] audit: type=1326 audit(1747362866.995:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 229.947893][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.957289][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.966448][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.977634][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.986111][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.125171][ T30] audit: type=1326 audit(1747362866.995:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 230.158188][ T6697] TCP: TCP_TX_DELAY enabled [ 230.379453][ T30] audit: type=1326 audit(1747362866.995:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 230.401480][ T30] audit: type=1326 audit(1747362866.995:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 230.674154][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 231.407986][ T30] audit: type=1326 audit(1747362866.995:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 231.544664][ T30] audit: type=1326 audit(1747362866.995:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 231.795260][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 232.135629][ T5832] Bluetooth: hci0: command tx timeout [ 232.247946][ T6713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.733257][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.746301][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.754886][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.766494][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.780877][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.793493][ T30] audit: type=1326 audit(1747362866.995:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffbdd98e969 code=0x7ffc0000 [ 232.875223][ T30] audit: type=1326 audit(1747362867.035:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbdd985927 code=0x7ffc0000 [ 232.919204][ T30] audit: type=1326 audit(1747362867.035:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6667 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbdd92ab39 code=0x7ffc0000 [ 232.992363][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e291800: rx timeout, send abort [ 233.221428][ T5947] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.248448][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.259346][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.268757][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.283016][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.291850][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 233.511696][ T6729] pimreg3: entered allmulticast mode [ 233.728817][ T5947] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.389010][ T5832] Bluetooth: hci0: command tx timeout [ 235.005953][ T5832] Bluetooth: hci4: command tx timeout [ 235.626098][ T6740] ALSA: mixer_oss: invalid OSS volume 'MONITO' [ 235.700024][ T5832] Bluetooth: hci5: command tx timeout [ 235.907544][ T5947] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.677922][ T5832] Bluetooth: hci0: command tx timeout [ 236.765353][ T5947] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.084899][ T6691] chnl_net:caif_netlink_parms(): no params data found [ 237.099768][ T5832] Bluetooth: hci4: command tx timeout [ 238.096078][ T5832] Bluetooth: hci5: command tx timeout [ 238.715828][ T5832] Bluetooth: hci0: command tx timeout [ 239.166982][ T5832] Bluetooth: hci4: command tx timeout [ 239.229490][ T6691] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.257266][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.299557][ T6691] bridge_slave_0: entered allmulticast mode [ 239.356881][ T6691] bridge_slave_0: entered promiscuous mode [ 239.607133][ T6691] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.672458][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.709477][ T6691] bridge_slave_1: entered allmulticast mode [ 239.760572][ T6691] bridge_slave_1: entered promiscuous mode [ 240.045282][ T6796] qnx4: no qnx4 filesystem (no root dir). [ 240.057391][ T6796] ubi31: attaching mtd0 [ 240.067835][ T6796] ubi31: scanning is finished [ 240.072792][ T6796] ubi31: empty MTD device detected [ 240.205602][ T5832] Bluetooth: hci5: command tx timeout [ 241.249790][ T5832] Bluetooth: hci4: command tx timeout [ 241.407690][ T6796] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 241.442164][ T6691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.451799][ T6796] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 241.471827][ T6796] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 241.490395][ T6796] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 241.503560][ T6691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.525716][ T6796] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 241.543446][ T6796] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 241.560662][ T6796] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1310877868 [ 241.572504][ T6796] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 241.588224][ T6801] ubi31: background thread "ubi_bgt31d" started, PID 6801 [ 241.652467][ T6720] chnl_net:caif_netlink_parms(): no params data found [ 241.934425][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 241.934447][ T30] audit: type=1326 audit(1747362896.385:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6803 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 241.971274][ T30] audit: type=1326 audit(1747362896.385:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6803 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 242.478762][ T5832] Bluetooth: hci5: command tx timeout [ 242.536802][ T30] audit: type=1326 audit(1747362896.385:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6803 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 242.567927][ T30] audit: type=1326 audit(1747362896.385:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6803 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 242.702616][ T6691] team0: Port device team_slave_0 added [ 242.727783][ T6691] team0: Port device team_slave_1 added [ 242.822447][ T30] audit: type=1326 audit(1747362896.385:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6803 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 242.893716][ T6730] chnl_net:caif_netlink_parms(): no params data found [ 242.905194][ T30] audit: type=1326 audit(1747362896.395:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6803 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 243.288137][ T30] audit: type=1326 audit(1747362896.395:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6803 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 243.298439][ T5947] bridge_slave_1: left allmulticast mode [ 243.310197][ T30] audit: type=1326 audit(1747362896.395:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6803 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 243.322759][ T5947] bridge_slave_1: left promiscuous mode [ 244.024680][ T6821] 9pnet_fd: Insufficient options for proto=fd [ 244.036845][ T6816] nftables ruleset with unbound set [ 244.069148][ T30] audit: type=1326 audit(1747362896.395:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6803 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 244.093062][ T30] audit: type=1326 audit(1747362896.395:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6803 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbd6e38e969 code=0x7ffc0000 [ 244.110736][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.156960][ T5947] bridge_slave_0: left allmulticast mode [ 244.163666][ T5947] bridge_slave_0: left promiscuous mode [ 244.172899][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.614975][ T5947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.631497][ T5947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.654412][ T5947] bond0 (unregistering): Released all slaves [ 244.939547][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.990518][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.030682][ T6691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.665606][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.673220][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.707637][ T6691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.954502][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.990533][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.011377][ T6720] bridge_slave_0: entered allmulticast mode [ 247.030789][ T6720] bridge_slave_0: entered promiscuous mode [ 247.933647][ T6691] hsr_slave_0: entered promiscuous mode [ 248.332139][ T6691] hsr_slave_1: entered promiscuous mode [ 248.350833][ T6691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.363952][ T6691] Cannot create hsr debugfs directory [ 248.414223][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.431984][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.449080][ T6720] bridge_slave_1: entered allmulticast mode [ 248.478042][ T6720] bridge_slave_1: entered promiscuous mode [ 248.494803][ T6844] tipc: Started in network mode [ 248.502358][ T6844] tipc: Node identity 7, cluster identity 4711 [ 248.508789][ T6844] tipc: Node number set to 7 [ 248.853917][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 248.854061][ T30] audit: type=1326 audit(1747362903.295:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd6e385927 code=0x7ffc0000 [ 249.054762][ T30] audit: type=1326 audit(1747362903.365:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd6e32ab39 code=0x7ffc0000 [ 249.243715][ T30] audit: type=1326 audit(1747362903.375:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd6e385927 code=0x7ffc0000 [ 249.488251][ T30] audit: type=1326 audit(1747362903.385:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd6e32ab39 code=0x7ffc0000 [ 249.634490][ T30] audit: type=1326 audit(1747362903.385:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd6e385927 code=0x7ffc0000 [ 249.706422][ T30] audit: type=1326 audit(1747362903.395:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd6e32ab39 code=0x7ffc0000 [ 249.788369][ T30] audit: type=1326 audit(1747362903.395:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd6e385927 code=0x7ffc0000 [ 249.877671][ T30] audit: type=1326 audit(1747362903.415:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd6e32ab39 code=0x7ffc0000 [ 249.961223][ T30] audit: type=1326 audit(1747362903.425:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd6e385927 code=0x7ffc0000 [ 250.044577][ T30] audit: type=1326 audit(1747362903.435:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6853 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd6e32ab39 code=0x7ffc0000 [ 250.608380][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 253.446454][ T6720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.523955][ T5947] hsr_slave_0: left promiscuous mode [ 253.534551][ T5947] hsr_slave_1: left promiscuous mode [ 253.557809][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.580838][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.594200][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.604490][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.629351][ T5947] veth1_macvtap: left promiscuous mode [ 253.635463][ T5947] veth0_macvtap: left promiscuous mode [ 253.643557][ T5947] veth1_vlan: left promiscuous mode [ 253.649675][ T5947] veth0_vlan: left promiscuous mode [ 253.793942][ T5947] pimreg3 (unregistering): left allmulticast mode [ 254.297889][ T6866] evm: overlay not supported [ 254.322308][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 255.731616][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.738551][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.425097][ T5947] team0 (unregistering): Port device team_slave_1 removed [ 256.478980][ T5947] team0 (unregistering): Port device team_slave_0 removed [ 257.528210][ T6720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.551328][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.560244][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.569742][ T5832] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 257.571241][ T6730] bridge_slave_0: entered allmulticast mode [ 257.593447][ T6730] bridge_slave_0: entered promiscuous mode [ 257.606700][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.614552][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.622878][ T6730] bridge_slave_1: entered allmulticast mode [ 257.632522][ T6730] bridge_slave_1: entered promiscuous mode [ 257.911833][ T6730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.967066][ T6730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.623900][ T6730] team0: Port device team_slave_0 added [ 258.680685][ T6720] team0: Port device team_slave_0 added [ 258.758475][ T6730] team0: Port device team_slave_1 added [ 258.954096][ T6720] team0: Port device team_slave_1 added [ 259.014615][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.033493][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.076098][ T6730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.696213][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.703426][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.745709][ T6730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.800058][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.477554][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.503921][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.570110][ T6720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.585014][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.624687][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.651731][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.680740][ T6720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.098724][ T6730] hsr_slave_0: entered promiscuous mode [ 261.498196][ T6730] hsr_slave_1: entered promiscuous mode [ 261.504718][ T6730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.513803][ T6730] Cannot create hsr debugfs directory [ 261.673768][ T5832] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 261.692111][ T5832] Bluetooth: hci3: Injecting HCI hardware error event [ 261.701591][ T5832] Bluetooth: hci3: hardware error 0x00 [ 261.722529][ T5832] slab kmalloc-2k start ffff88805f089000 pointer offset 1368 size 2048 [ 261.745590][ T5832] list_del corruption. prev->next should be ffff88805f08f558, but was 0000000000000000. (prev=ffff88805f089558) [ 261.759299][ T5832] ------------[ cut here ]------------ [ 261.764802][ T5832] kernel BUG at lib/list_debug.c:64! [ 261.770619][ T5832] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 261.776906][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:6 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 261.789092][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.799185][ T5832] Workqueue: hci3 hci_error_reset [ 261.804263][ T5832] RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 [ 261.811326][ T5832] Code: e8 4b 8d 48 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 ec 19 68 fd 49 8b 17 48 c7 c7 00 0b c1 8b 48 89 de 4c 89 f9 e8 17 e2 6f fc 90 <0f> 0b 4c 89 f7 e8 1c 8d 48 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 bd [ 261.830966][ T5832] RSP: 0018:ffffc90004517840 EFLAGS: 00010246 [ 261.837077][ T5832] RAX: 000000000000006d RBX: ffff88805f08f558 RCX: 2705460507324e00 [ 261.845091][ T5832] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 261.853103][ T5832] RBP: ffff88805f08d010 R08: 0000000000000003 R09: 0000000000000004 [ 261.861140][ T5832] R10: dffffc0000000000 R11: fffffbfff1bba944 R12: 1ffff1100be112ab [ 261.869148][ T5832] R13: dffffc0000000000 R14: ffff88805f089558 R15: ffff88805f089558 [ 261.877145][ T5832] FS: 0000000000000000(0000) GS:ffff8881260f9000(0000) knlGS:0000000000000000 [ 261.886082][ T5832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.892692][ T5832] CR2: 00007fbd6e5a36b0 CR3: 0000000060c3a000 CR4: 00000000003526f0 [ 261.900745][ T5832] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.908746][ T5832] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 261.916755][ T5832] Call Trace: [ 261.920130][ T5832] [ 261.923099][ T5832] bt_accept_unlink+0x39/0x240 [ 261.927887][ T5832] l2cap_sock_teardown_cb+0x17e/0x460 [ 261.933278][ T5832] l2cap_chan_del+0xb2/0x5e0 [ 261.937881][ T5832] l2cap_conn_del+0x388/0x680 [ 261.942744][ T5832] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 261.948300][ T5832] hci_conn_hash_flush+0x10a/0x230 [ 261.953424][ T5832] hci_dev_close_sync+0xaef/0x1330 [ 261.958550][ T5832] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 261.964132][ T5832] ? process_scheduled_works+0x9ec/0x17a0 [ 261.969960][ T5832] hci_error_reset+0x127/0x3e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 261.974739][ T5832] ? process_scheduled_works+0x9ec/0x17a0 [ 261.980602][ T5832] process_scheduled_works+0xadb/0x17a0 [ 261.986180][ T5832] ? __pfx_process_scheduled_works+0x10/0x10 [ 261.992214][ T5832] worker_thread+0x8a0/0xda0 [ 261.997010][ T5832] kthread+0x70e/0x8a0 [ 262.001106][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 262.006397][ T5832] ? __pfx_kthread+0x10/0x10 [ 262.011030][ T5832] ? __pfx_kthread+0x10/0x10 [ 262.015636][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 262.020850][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.026070][ T5832] ? __pfx_kthread+0x10/0x10 [ 262.030684][ T5832] ret_from_fork+0x4b/0x80 [ 262.035134][ T5832] ? __pfx_kthread+0x10/0x10 [ 262.039734][ T5832] ret_from_fork_asm+0x1a/0x30 [ 262.044611][ T5832] [ 262.049046][ T5832] Modules linked in: [ 262.054350][ T5832] ---[ end trace 0000000000000000 ]--- [ 262.073356][ T5832] RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 [ 262.080798][ T5832] Code: e8 4b 8d 48 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 ec 19 68 fd 49 8b 17 48 c7 c7 00 0b c1 8b 48 89 de 4c 89 f9 e8 17 e2 6f fc 90 <0f> 0b 4c 89 f7 e8 1c 8d 48 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 bd [ 262.105787][ T5832] RSP: 0018:ffffc90004517840 EFLAGS: 00010246 [ 262.111955][ T5832] RAX: 000000000000006d RBX: ffff88805f08f558 RCX: 2705460507324e00 [ 262.120134][ T5832] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 262.285437][ T5832] RBP: ffff88805f08d010 R08: 0000000000000003 R09: 0000000000000004 [ 262.318937][ T5832] R10: dffffc0000000000 R11: fffffbfff1bba944 R12: 1ffff1100be112ab [ 262.402766][ T5832] R13: dffffc0000000000 R14: ffff88805f089558 R15: ffff88805f089558 [ 262.432564][ T5832] FS: 0000000000000000(0000) GS:ffff8881261f9000(0000) knlGS:0000000000000000 [ 262.442164][ T5832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.449518][ T5832] CR2: 0000001b2f81fce4 CR3: 000000007e36e000 CR4: 00000000003526f0 [ 262.458809][ T5832] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 262.468181][ T5832] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 262.476534][ T5832] Kernel panic - not syncing: Fatal exception [ 262.482944][ T5832] Kernel Offset: disabled [ 262.487731][ T5832] Rebooting in 86400 seconds..