last executing test programs: 2m45.649694496s ago: executing program 2 (id=519): socket$kcm(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000440)='\\', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100020000000000000001ddffffffffffff0b4100000014001462726f61646361bcd912aecb37d873742d6c696e6b000054"], 0x30}}, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x4) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0x6) r6 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000000)="daffc3fa80002cd21721a4af36a4a2ab00000000000000025a91f64b007f0c6a680f6c787f", 0x25}, {&(0x7f0000001480)="1c7b53", 0x3}], 0x2}, 0x4b00) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m43.453354522s ago: executing program 2 (id=526): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) pipe2(&(0x7f0000000100), 0x80) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xdff9, 0x800, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m41.717525507s ago: executing program 2 (id=533): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x69e5, 0x10000, 0x0, 0x175, 0x0, r1}, &(0x7f00000003c0)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/9, 0x9}], 0x1}) io_uring_enter(r2, 0x567, 0xa1ff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r7, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004000480"], 0x44}}, 0x0) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={r7, @multicast1, @dev={0xac, 0x14, 0x14, 0x8}}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000300)={0x41, 0x2, 0x0, "444900d730faa901000000000000000000f789981008d7b15b5700e46b8be100", 0x50424752}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200000002d00010026bd7000fcdbde25040000000c0016800800bf00ffffff7f"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m40.227476829s ago: executing program 2 (id=540): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x101080) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000003c0)={{0x0, 0x6}, {0x6, 0xf0}, 0x8001, 0x4, 0xd}) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000300)=@ethtool_gfeatures={0x18}}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) syz_emit_ethernet(0xea, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xdc, 0x0, 0x20, 0xfc, 0x2, 0x0, @loopback, @loopback}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5, "b9cecc1c5262ab46f806fc3a14f95c3e2d9c8b202297208fbcb3a2cc0a0725ad6e47b97385fa462acd9c707fc3dcd0ad021fe6600646a839c57480d2b9efbc142bfc643c948e16573a04c92204e06227397c59461da8f72b682426be7c7649127da62029c213d80d5819590ebe61e132e1753daa6b99ec603d1a051638d6286b76b72b52a7ff8e765e02869dd05d9e16f38faf68f7073a0064fc1b2bd1100ab883395a14e50f6f16556c18e958d7dbe64acb6be6f0669cce75a225d8fb68bebc"}}}}}, 0x0) (async) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000080)=0x4, 0x4) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x2c, 0xffffffff, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) (async) unshare(0x6a040000) 2m38.813254067s ago: executing program 4 (id=547): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc048aeca, &(0x7f0000000200)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x13, 0xff, 0x8, 0x17, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd25, 0x3503}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x9, @empty, 0x2}}, @sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x9}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x18, 0x1c, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d2}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e24, 0x9, @private2, 0x3}}]}, 0xb8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100, 0x100, 0x89, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x4, 0x19, {0x0, 0x0, 0x1}}}}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x5, 0xffe4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0xebf, 0x5, 0x2, 0x402}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfffffffa}}}}]}, 0x78}}, 0x40080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007c80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0xe}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xffe0}}]}}]}, 0x38}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) write$sndseq(r10, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0x5}, {}, @control={0x33, 0x2, 0xd64a}}], 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r11, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r11, 0x7b1, &(0x7f0000001440)={0x0, 0x5, 0x0, 0x5}) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x0, 0x157}, 0x0, 0x0) 2m36.799131426s ago: executing program 4 (id=553): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x13, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000040000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 2m35.681138736s ago: executing program 4 (id=556): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r2, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32, @ANYBLOB="08000300"], 0x3c}}, 0x0) 2m35.30613544s ago: executing program 4 (id=558): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009042000010300000009210000000122070009058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x22, 0x2, 0x2) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) rt_sigpending(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) syz_emit_ethernet(0x82, &(0x7f00000020c0)={@multicast, @random="caf6e222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x4c, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373242b02fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34"}]}}}}}}, 0x0) (async) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffff, 0x88a03) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x0, 0xfffffffe, 0x2, 0x0, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2]}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0xa00, @loopback}}) (async) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000280)=@dstopts={0x32}, 0x8) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000006840)={0x24, 0x0, 0x0, &(0x7f00000067c0)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x7, "15"}, @global=@item_4={0x3, 0x1, 0x1, ':0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x804}, 0xe) listen(r3, 0xfffffffd) r4 = memfd_secret(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000000600060000000000980808806c0200803c0209801c000080060001000200000008000200ac1414bb05000300030000007c000080060001000200000008000200e0000002050003"], 0x8c8}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="24005a8020"], 0x40}}, 0x0) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r4, 0x2e, 0x4608, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r9, r5, 0x4, r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r6) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000040) 2m25.66168592s ago: executing program 2 (id=572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x1b8, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2f0, 0x20a, 0x278, 0x2f0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00', {}, {}, 0x0, 0x8}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1, 0x1, 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff], [], 'veth1_to_hsr\x00', 'wg0\x00', {}, {}, 0x1d, 0x0, 0x0, 0x1a}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) (async) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x3b1, 0x4) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) (async) r4 = dup(r1) (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) mkdirat(r5, &(0x7f0000000100)='./file0\x00', 0x20) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x40400c1}, 0x0) 2m23.990741187s ago: executing program 2 (id=574): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4140aecd, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000076c55e4328069f5c23661b60d6a4d6a04c0273de0cc301abfb34f67988942fc836c0b36f61c766ce59537f230e650dc4a0a2fc768587daa98f71cefa5f0bd784ebe1e9ba"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="186000000000000000000000000000001857000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="184d0000070000000000000003000000180100002020782500000000002020207b1af8ff00000000bf0600000000004007010000f8ffffffb702000008000000b7030000ff03000085000000060000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0xfffffffd, 0x28d}, &(0x7f0000000180), &(0x7f00000001c0)) syz_emit_ethernet(0x3a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000010f000000002c006500000c06907864010101ac1414aa4404000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000"], 0x0) io_uring_enter(r7, 0x708, 0x41e3, 0x0, 0x0, 0x0) 2m14.793347498s ago: executing program 3 (id=579): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040010}, 0x40000) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0xee00, 0xee00) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x649}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{0xdddd1000, 0x2000, 0x1d, 0x2, 0x6, 0x0, 0x5, 0x8, 0x9b, 0x3, 0xa, 0x2}, {0x4000, 0x959d3ad1af04a4f3, 0x0, 0x9, 0x3, 0x0, 0x7, 0x0, 0x41, 0xc9, 0x2, 0x1b}, {0x4000, 0xf000, 0x10, 0x2, 0x3, 0x6, 0xd, 0x2, 0x7, 0x80, 0x8b, 0x5}, {0xdddd0000, 0xeeee0000, 0x4, 0x80, 0x3, 0x40, 0xa, 0x6e, 0xc, 0x3, 0x5, 0x3}, {0x2, 0x2000, 0xc, 0xff, 0x5, 0x6, 0x1, 0xfa, 0xa, 0x6, 0xbd, 0xe}, {0x5000, 0x4, 0xd, 0xf0, 0x6, 0x2, 0xc, 0x8, 0xf9, 0x3, 0x0, 0x3}, {0x10000, 0xd000, 0xa, 0x2b, 0xf2, 0x4, 0x3, 0xd, 0x2, 0x3, 0x1, 0x6}, {0x4000, 0xeeee8000, 0xa, 0x20, 0x2, 0x8, 0x7, 0x7d, 0xe6, 0x7, 0x1}, {0xdddd0000, 0x200}, {0x1, 0x6}, 0x438fde02663c4333, 0x0, 0xdddd1000, 0x104000, 0x4, 0x1, 0x1, [0x9, 0x8, 0x100]}) keyctl$session_to_parent(0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028006001800ff0f000005001500000000000500010004000000"], 0x4c}}, 0x0) fcntl$setownex(r4, 0xf, &(0x7f00000005c0)={0x1, r1}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000600)=ANY=[], 0x90}}, 0x0) 2m8.868768767s ago: executing program 32 (id=568): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='itimer_expire\x00'}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x110e, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x10040, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, 0x0, 0x1, 0x5, 0xd, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x200}]}]}, 0x44}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r5, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, 0x0, 0x55) bind$inet(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 2m7.242084257s ago: executing program 33 (id=574): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4140aecd, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000076c55e4328069f5c23661b60d6a4d6a04c0273de0cc301abfb34f67988942fc836c0b36f61c766ce59537f230e650dc4a0a2fc768587daa98f71cefa5f0bd784ebe1e9ba"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="186000000000000000000000000000001857000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="184d0000070000000000000003000000180100002020782500000000002020207b1af8ff00000000bf0600000000004007010000f8ffffffb702000008000000b7030000ff03000085000000060000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0xfffffffd, 0x28d}, &(0x7f0000000180), &(0x7f00000001c0)) syz_emit_ethernet(0x3a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000010f000000002c006500000c06907864010101ac1414aa4404000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000"], 0x0) io_uring_enter(r7, 0x708, 0x41e3, 0x0, 0x0, 0x0) 2m5.745539239s ago: executing program 3 (id=584): bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x12, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000400000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100008000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m5.261659911s ago: executing program 3 (id=585): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000c80)={{0x5, 0x1, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x213, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe8eb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0xb, 0xc9f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2000000, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61928afd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5, 0xf, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4000000000]}) 2m4.906002731s ago: executing program 3 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x28}}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 1m59.635156228s ago: executing program 1 (id=589): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x28000600) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) unshare(0x2c020400) r3 = fsopen(&(0x7f00000025c0)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000040)='\xe3U\xa7j\x11\xa1\xbe\x18', &(0x7f00000000c0)='\f', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000f10100000008000300000000", @ANYRES32=r2, @ANYBLOB="0c009900f40000002e000000080026007f17000008009f0001000000"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff2c0d3c1b}, 0x8090) 1m57.677102868s ago: executing program 1 (id=591): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$unix(r6, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4, 0x0, 0x8}, 0x18) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='aufs\x00', 0x200040, &(0x7f00000000c0)='@\x00') setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) 1m57.274725162s ago: executing program 3 (id=593): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x200) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x9468, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r3, 0x4010744d, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000240)=""/81) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000300)=0xff, 0x4) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m56.356542551s ago: executing program 0 (id=595): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) getpgrp(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x9000000, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m56.193620247s ago: executing program 1 (id=596): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000330001002bbd70000800040003"], 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x40480d4) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000700)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee01}}, './file0\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0}, &(0x7f0000000800)=0xc) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r9, &(0x7f00000004c0)=""/57, 0x39) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r11, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x78, 0x0, 0x3, {0x0, 0x0, 0x0, {0x4, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x3, 0x0, 0x0, 0x4000, 0x25daa903, 0xffffffffffffffff, r12, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x888000, &(0x7f0000000400)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0xe5a}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}]}}) lsetxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000900)={{}, {}, [{0x2, 0x0, r4}, {0x2, 0x6, 0xee00}, {0x2, 0x2, r5}, {0x2, 0x0, r6}, {0x2, 0x0, r7}, {0x2, 0x5, r8}], {0x4, 0x1}, [{0x8, 0x4, r12}], {0x10, 0x5}, {0x20, 0x1}}, 0x5c, 0x1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) chdir(&(0x7f0000000040)='./file0\x00') fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) 1m55.144015519s ago: executing program 0 (id=597): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x121100) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, '.\x00'}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x5, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x4, 0x5}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @func={0xf, 0x0, 0x0, 0xc, 0x5}, @var={0xa, 0x0, 0x0, 0xe, 0x1, 0x2}, @float={0x3, 0x0, 0x0, 0x10, 0xc}, @enum64={0x7, 0x5, 0x0, 0x13, 0x0, 0xb, [{0x3, 0x1, 0x8}, {0xd, 0x9, 0xfffff800}, {0xd, 0xe, 0x6}, {0x2, 0x5, 0x6}, {0x2, 0x8, 0x6}]}, @ptr={0x8, 0x0, 0x0, 0x2, 0x1}, @typedef={0x8, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x4f, 0x2e, 0x61]}}, &(0x7f00000002c0)=""/238, 0xc1, 0xee, 0x0, 0x1, 0x10000, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xff, 0x0, 0x5, 0x49000, r1, 0x3, '\x00', 0x0, r2, 0x1, 0x2, 0x2, 0x6, @value=r3, @void, @void, @value}, 0x50) close(r4) r5 = timerfd_create(0x9, 0x80800) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000440)={{0x0, 0x0, 0x4, 0x0, 0xd5}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='start_task_reaping\x00', r1, 0x0, 0xf6}, 0x18) write(r6, &(0x7f0000000500)="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", 0xfc0) r7 = accept4$unix(r1, 0x0, &(0x7f0000001500), 0x80000) sendmmsg(r7, &(0x7f0000007540)=[{{&(0x7f0000001540)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000015c0)="acc30d6cdaa80cd4e03c2584d54c40c8dfd5fef1c1141b14e3c590c196266d48d3706641368bc39bbeeb6e75cf33820187945571a8bb82cdf896845466bccffdb7e5e41eb18e78a10b021c438e1272dc34d6c737aee53eff3ae1c72b3623e03bfd27bb7c45fd97", 0x67}, {&(0x7f0000001640)="e62730375510a71e2a4f5086f86cec55a64387975a4b8b0388cf95996064a84b344039fba72d4c1d96734a2462d7", 0x2e}, {&(0x7f0000001680)="13226b8c2bb6e1d6e17f60d16efba6b463118b49e65e8ca228fbc55da19b1f65fa9054fc3eb263dc5455ec653c0b87c4e1906f5908578e0cc870de5c5d04963a574d2105a9ef69df35e75b9be4", 0x4d}, {&(0x7f0000001700)="01def66dc0b038f549aea9c8f762f3c385486e4a59b35cbc69d82d31a6d1e40cb3a8add8dc0dc5492f90b5f3b5d815d116dd0c51e55ad381ea149772f08d199ceb69203644af801cefbdb1c6339b0bf3f88de35f63876a080c5cc9296a905fe2e05a6f0b29e923f91295b9accd0a87bbe1323fa15270b0623c3371a7ecdf92dce0975c781f1a39f243501342500fc930477961f52fd6a2caca98b95e34", 0x9d}, {&(0x7f00000017c0)="1532143024ff9b6d8cf58732faaf1efa820d22c1f94f52c8d63a03f0", 0x1c}, {&(0x7f0000001800)="956b1ae03fafc92d35d3c3accf3fbed86581eae0cd646a7b44fdf2adcdb0e144f3b9c60404f397cfc1ca006843cdc000b58152907fb88d3e79396352168f16bd3231fe898b1b5a29d5f33380c96f4bb95b13aa4ba4c31217cd7b63", 0x5b}, {&(0x7f0000001880)="b3b1f3dff6ce07a564f52b623da2d7d233f5c78be4216cb697083583bcbd6edee17bd541bd4f5ceb6e3317a89c1fd41fea96426557f62ff2253078e4332de3bdc78a0bbdfa68f773fe89d6b8ecf68fd3baa18e8c0a300b902e720780276fa223504e868bb27053730705a44b8f807b28ce13af013b7e3fff7bfc627dc32b1372851b8756ca45d482d1", 0x89}, {0x0}], 0x8}}, {{&(0x7f0000001ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x4, 0x2, {0xa, 0x4e23, 0x3, @local, 0x9}}}, 0x80, &(0x7f0000002d80)=[{0x0}, {0x0}, {&(0x7f0000002c40)="ebf455161722b67580855abac9bbf7", 0xf}, {&(0x7f0000002c80)="55efd41ad5db43dae473fdac81516456748e8f7e19c4ad036d18f4c1ce5507be8a1847eae16ad6b8f2a0be2a313950b2f54d9574e38c984c3a11b4e59c16218f45d4569fe95594cab1f064d1c773d01dc9c80bb0bf3bc5acf332308fdb1e3f0d1e611d71e5fd4b31996e3fb42899db07195404644c0e0fb7fff736345f615f91be2174ee481913c3e63a4822bbb859f8287a1f9592c9a1f852cc7bb2e39aaa78b4e83e3aeed4d1e205584502af68aa68767babb33c43fdbe411da5521859718a567456a1fa34432590b26ffab666c4002bafc9dda3cf5816f0515641b16f93bc7aa6323d990e", 0xe6}], 0x4, &(0x7f0000002dc0)=[{0xc8, 0x115, 0xbef, "f34a8209c760a8693988a93f605d7de69c442b8b8566db7ded415b07188f1f6ded62bdf0bb03b814f5c81328073f502efc547211f912f99614926e4cfa16d380fe8b51f1aef86984de5c89ed1ec2e5fc2e55e289173bd03fca1344fb12ca5fe5efc82c7d68bba46569e6f3805c628597316d3d9a0bb5c01597f0d29fa559a809211a5b7b282a04375c619e98bebb877bf2081b88c7f7dea5a92445cbfacf6342175e59a924b6e50f8b17038f62bb0972c2812a15912c8e17"}], 0xc8}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002ec0)="81110cc25c241034b20e19a3c15f32f04fe2fdf12c2d32c3ba6857b9e0d4b077945b1083c5f72257af35b346cb7033f38ac146931f63f89f8f1219756866667df09bb0a285cf52b08bbafb338d9060020bdd8675743027d697b7239a4e15d09df6423ff923b1e6d51f70e07eca8eace3ec8c92e9dbb059", 0x77}], 0x1, &(0x7f0000002f80)=[{0x10, 0xd, 0x7}, {0xf88, 0x6, 0x9, "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"}, {0x50, 0x1, 0x5, "c2a13fd354feb29d915495eec9f1c39c683502ea392cf0f53ce260aaa80d38c5312fd46445fe86ac37a3a18305ee25c14daf289a6e10047a43ee728f16"}], 0xfe8}}, {{&(0x7f00000040c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000005240)=[{&(0x7f0000005140)="e7d63d727551553ff1b953da878eb645091cd1a83525215375c08353150e1ce448a9ec3b2451333e6ad895a3e258bc35a76038f5e2426c02880709c1103a549061ddd3f0f1fe9b5506cab120771a312fa4471b84236684ff3b77222f6bb7f8dcda53ab3829b609da72bf1896a961686e762dad8dfa75eb654446ca7bf74c156ec4fcbb8e220fb7a6", 0x88}, {&(0x7f0000005200)="717f07f2", 0x4}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000074c0)=[{0x48, 0x108, 0x80000000, "ba3fa97f48a8599b14301b81baf6cfbf7d72b9b88cf6a1bbda4cf019a41000523d08295c4c0281da036e58da2030e658cde13d"}], 0x48}}], 0x5, 0x4000000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007680), r1) ppoll(&(0x7f00000076c0)=[{r3}, {r0, 0x4105}, {r4, 0x10}], 0x3, &(0x7f0000007700), &(0x7f0000007740)={[0x8000000000000000]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000077c0)={&(0x7f0000007780)='tegra_dma_complete_cb\x00', r1, 0x0, 0xcfa}, 0x18) prlimit64(0x0, 0x3, &(0x7f0000007800)={0x28c1, 0x9}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000007940)={&(0x7f0000007840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000007900)={&(0x7f00000078c0)={0x30, 0x0, 0x500, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x2, @bearer=@l2={'ib', 0x3a, 'netpci0\x00'}}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40844}, 0x4048090) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x2000)=nil) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000007a80)={&(0x7f0000007980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000007a40)={&(0x7f00000079c0)={0x50, r8, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040011}, 0x8001) sendfile(r6, r5, &(0x7f0000007ac0)=0x7f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000007b40)={0x1, &(0x7f0000007b00)=[{0x7, 0x8, 0x4, 0x2}]}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000007cc0)={r1, &(0x7f0000007b80)="3b02394a4d23986a9cd91b3d0af5222ac6a8ed70ae773b599100628f4e128c92f75b71e2ebf3415407", &(0x7f0000007bc0)=""/241}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000007d00)={0x2, 0x7, {0x0}, {}, 0x8b9, 0x6}) prlimit64(r9, 0xf, &(0x7f0000007d40)={0x400, 0x2}, &(0x7f0000007d80)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r10, &(0x7f0000007e80)={&(0x7f0000007dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000007e40)={&(0x7f0000007e00)={0x30, r8, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x77}, @void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1m54.897177011s ago: executing program 1 (id=598): setresuid(0x0, 0xee00, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x3, 0x10) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setresgid(0xee00, 0xee01, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='adfs\x00', 0x8000, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) close(0xffffffffffffffff) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000003c0)="1a00ebbc325ccfcc9527000002000000afd2cd249436aae6951c5252ee5706c6b7939effcf9ae5471b20aab55275233a41f2731a9ce140764fb7051dae69c21c1088", 0x42) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000180)=0x3, 0x12) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0x78, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f0000000480), 0x48, 0x10, &(0x7f0000000380), &(0x7f0000000500), 0x8, 0x70, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) 1m54.810953726s ago: executing program 0 (id=599): bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x12, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000500000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100008000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m54.614756161s ago: executing program 0 (id=600): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200092008000000e9000000000000000300060000000000020000000000000000000000000000000100010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 1m54.221717929s ago: executing program 1 (id=601): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setregid(0x0, 0xee01) r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) (async) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semop(r0, &(0x7f0000000000)=[{0x1, 0x8001, 0x1000}], 0x1) (async) semop(r0, &(0x7f0000000000)=[{0x1, 0x8001, 0x1000}], 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECUREBITS(0x1c, 0x2b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000140)="13146000000370", 0x7}], 0x1) 1m53.654301262s ago: executing program 1 (id=602): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000731535"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000), 0x880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x20200000000000) 1m52.440235077s ago: executing program 0 (id=603): pipe(&(0x7f0000000480)={0xffffffffffffffff}) pidfd_getfd(r0, r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e24, @multicast2}, 0x9, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='ipvlan0\x00', 0x2, 0x8, 0x1}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x100}) 1m52.215545107s ago: executing program 0 (id=604): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m41.525987736s ago: executing program 34 (id=593): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x200) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x9468, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r3, 0x4010744d, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000240)=""/81) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000300)=0xff, 0x4) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m38.039281387s ago: executing program 35 (id=602): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000731535"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000), 0x880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x20200000000000) 1m36.994750876s ago: executing program 36 (id=604): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m17.81468451s ago: executing program 6 (id=582): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e6576650000600002800500040001000000140007000000000000000000000008"], 0x90}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 1m17.094756226s ago: executing program 6 (id=608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000050019000100000008000800faffffff080007000700000005fa18"], 0x4c}}, 0x0) 1m16.695935429s ago: executing program 5 (id=580): socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x92, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d002000090780000080a00000005000001ff13a6d082e275205e12a2f7ffffac6d08ffffc33d8900221f3a9362ecb688a9fa06da64345305160000000a0000001000000006fffffff900000007080a000000060000000000000002f3ab778c0b9051869c7d78e2c775e9d551b613e724439748e2adbc7d530f701e"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0401010b088d5412676c756075f3c42101f462f300dec294003ef2cfeeb311c113ad8fafdcff3501010000dd997da84512d8c5dc3aa1b1ec7954392fa0fda51c0bac7a2aa5428f82d6f5ed2c9ff85f1f59e3e55c1d25b4c0a44e329248556da98194ad9ab143b63d815f3f36e724b7d89a2ce31ee75100b95369ce55bb4b4a1cf4bfd262f71057a82ba8a8c636e8ac9c9c117301e92ae5b8273fd2ae6e8e3984fec9e50066db8a636f5d9c585e256bb0fd9e9abf7adc14a222af71f22b9ba571dbb7218d89807331359f9f054202208a51fc8f99123c908b107c9e817b08be63b14b40472f3a"], 0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x1a0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x68}}, 0x0) iopl(0x3) modify_ldt$write(0x1, &(0x7f0000000140)={0x0, 0x20000800, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000040)="b8b2cc1e00c1dba49d23bb", 0xb}], 0x1}, 0x0) getpid() sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="a000000021000100000000000000000000000000000000000000000000000001fc02000000000000000000030000000000000000fffc00000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000800005000110000000000000000000000000000000001fe800000000000000000000000000044fe8000000000000000000000000000aa200100000000"], 0xa0}}, 0x0) 1m16.349969973s ago: executing program 6 (id=609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000300ac1e00010000000000000000240001000000000000000000000000000200000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) 1m8.452778082s ago: executing program 6 (id=610): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f700", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000040)={0x7, 0x1, 0x5, 0x3ae9, 0xc7, 0x4, "02f8ffff070000fbb4883d45f400", 0x8, 0xae, 0x6, 0x8, 0x2, 0x0, 0x40}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0001000200"], 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x10, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000200)={0x1, 0x0, {0xd66b, 0x6e5, 0x201a, 0x4, 0x4, 0x2, 0x0, 0x3}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 57.77447269s ago: executing program 37 (id=580): socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x92, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d002000090780000080a00000005000001ff13a6d082e275205e12a2f7ffffac6d08ffffc33d8900221f3a9362ecb688a9fa06da64345305160000000a0000001000000006fffffff900000007080a000000060000000000000002f3ab778c0b9051869c7d78e2c775e9d551b613e724439748e2adbc7d530f701e"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0401010b088d5412676c756075f3c42101f462f300dec294003ef2cfeeb311c113ad8fafdcff3501010000dd997da84512d8c5dc3aa1b1ec7954392fa0fda51c0bac7a2aa5428f82d6f5ed2c9ff85f1f59e3e55c1d25b4c0a44e329248556da98194ad9ab143b63d815f3f36e724b7d89a2ce31ee75100b95369ce55bb4b4a1cf4bfd262f71057a82ba8a8c636e8ac9c9c117301e92ae5b8273fd2ae6e8e3984fec9e50066db8a636f5d9c585e256bb0fd9e9abf7adc14a222af71f22b9ba571dbb7218d89807331359f9f054202208a51fc8f99123c908b107c9e817b08be63b14b40472f3a"], 0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x1a0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x68}}, 0x0) iopl(0x3) modify_ldt$write(0x1, &(0x7f0000000140)={0x0, 0x20000800, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000040)="b8b2cc1e00c1dba49d23bb", 0xb}], 0x1}, 0x0) getpid() sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="a000000021000100000000000000000000000000000000000000000000000001fc02000000000000000000030000000000000000fffc00000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000800005000110000000000000000000000000000000001fe800000000000000000000000000044fe8000000000000000000000000000aa200100000000"], 0xa0}}, 0x0) 54.645514885s ago: executing program 9 (id=612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102, 0x1400}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}}, 0x24040800) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xdc, 0x1b, 0x1, 0x0, 0x0, {{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bb1, 0x3}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd26, 0x70bd29, 0x70bd2d, 0x70bd2d, 0x2, [0x5, 0x9]}}]}, 0xdc}}, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r4, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040000}, 0xc004005) write$binfmt_register(r3, &(0x7f0000000180)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\\x\xb2\xf2\x00\x00', 0x3a, ':dev/bus/usbF30#/00#\x00', 0x3a, './file0'}, 0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_migrate_pages_start\x00', r0}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 52.5694535s ago: executing program 38 (id=610): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f700", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000040)={0x7, 0x1, 0x5, 0x3ae9, 0xc7, 0x4, "02f8ffff070000fbb4883d45f400", 0x8, 0xae, 0x6, 0x8, 0x2, 0x0, 0x40}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0001000200"], 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x10, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000200)={0x1, 0x0, {0xd66b, 0x6e5, 0x201a, 0x4, 0x4, 0x2, 0x0, 0x3}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 51.443568242s ago: executing program 7 (id=616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000f50048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001"], 0xf0}}, 0x0) 50.884568986s ago: executing program 7 (id=617): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="17090100000000000000010000000500070000000000080009000000000008000a0000000000060002000100000014001f0000000000000000000000000000001000140020"], 0x5c}}, 0x0) 50.884250356s ago: executing program 8 (id=606): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newroute={0x80, 0x18, 0x400, 0x70bd26, 0x25dfdbfb, {0xa, 0x14, 0x80, 0xc1, 0xfe, 0x3, 0xfd, 0x2, 0x3200}, [@RTA_IIF={0x8}, @RTA_METRICS={0x59, 0x8, 0x0, 0x1, "ce6b09cbc01e75d9816ddae3eab72a8c592b1ce73b2279b43972f6ff1670106918f344b2b1d9305dc61438212972e921d021140f645924e54f774b76665c9cc5dc3262ad552677e1a3c7b96606ac765135821d31c2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x80}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000004) mlock(&(0x7f00000b9000/0x2000)=nil, 0x2000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)={@local, @remote, 0x1, 0x7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @local, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x2c) 50.54244822s ago: executing program 9 (id=618): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89e0, 0x1000000000000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000001, 0x30, r0, 0xd26be000) 50.346151822s ago: executing program 7 (id=619): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x121100) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, '.\x00'}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x5, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x4, 0x5}, @ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @func={0xf, 0x0, 0x0, 0xc, 0x5}, @var={0xa, 0x0, 0x0, 0xe, 0x1, 0x2}, @float={0x3, 0x0, 0x0, 0x10, 0xc}, @enum64={0x7, 0x5, 0x0, 0x13, 0x0, 0xb, [{0x3, 0x1, 0x8}, {0xd, 0x9, 0xfffff800}, {0xd, 0xe, 0x6}, {0x2, 0x5, 0x6}, {0x2, 0x8, 0x6}]}, @ptr={0x8, 0x0, 0x0, 0x2, 0x1}, @typedef={0x8, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x4f, 0x2e, 0x61]}}, &(0x7f00000002c0)=""/238, 0xc1, 0xee, 0x0, 0x1, 0x10000, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xff, 0x0, 0x5, 0x49000, r1, 0x3, '\x00', 0x0, r2, 0x1, 0x2, 0x2, 0x6, @value=r3, @void, @void, @value}, 0x50) close(r4) r5 = timerfd_create(0x9, 0x80800) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000440)={{0x0, 0x0, 0x4, 0x0, 0xd5}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='start_task_reaping\x00', r1, 0x0, 0xf6}, 0x18) write(r6, &(0x7f0000000500)="c1618be4dc32dd940f2e1f7baae0a2330320a621d8705f6f4fe18c74b57312100535e0830e46b28986d855d588cc763439f7323d900643ef664b19056d20ef3279f40239c66b5b286be4b38412e4c5432ed20ee81c6210cbcf6e1911a6e3b0c7b96eb5411785d05f67d228eface08349733c1e20e7e6f02f09190c6ed9cc17373b30be81a94d035f291aac93e419e948f48019f33ba7c0e9f290165b7b7c6b7e778b6bad57607d609579bd6c23fc4690207f745d003918efaabfb94e278f23f804f7e3f78fe49a0c30f6da5ff1da688df4dc091a7ea9f77eee56652de651ed2ddb83bb6ca35e5e86e8b177ed4f4980c32b301f7f295fc9cbe1bbc4a100e2d831368bb51cb5074b74d7af57646b464cdee1d12909017130038ca86ffe3eacd0e0ffcc1cd841c4a0e9686ae148054db9e639b0453e16a1ab63f07d076456befbff39f6502989f0ce612dbf4cc386e4d9f045d88b5dd94e4f16d59441e4f89cf2240e0ea33c6760928c5e292a1d018a0e88ef8903269520c574d0ea624af5659f33675837d95aef080998e49f6d315e4d189018a8abca2f12b89e1990e9697fb47ce3175f07b5113eb2e1d3f72a2e174cdc34dcc0fc261553c2d74f5fd883279b6df48a2fce44256a13ae9d15e270430fc440084d5e538475d00e95ea0e891bb85721b3fad74d829d914f9aac079417506cfe6f43aab3334d6f9458e88a2ba5e1262b361dd4a0caf0761222d9b9507768573e3d4a8d9d74c39892abfa08ddc4d7bf1bba76234881f98a27efd512976b677a21267ae2385c21f28f00e49f2e72e106dbac5567b78ce7fe9efdf6e9ed3ba8fe2c8f9a3db32dbad8c2d44042ffd9ad9a51d1bc678fb6e25e45f50fecc59bd0f545b42f7badc7cfe26deb9ee091149b14becf0c116c48a94b4c26c0ea176c9ad82a9995c7e09edf6f55b2ea0c8e2191c70c92516f1726577e9c529ea2cd2fc3e34ef2007b69c5dd0e20fbe59e0edfde064ae91dd882f775bb94003e0cb906710fa912ab17b53455742dba0ceeaf877a4bf5fe89f6ac56e49feaba28cf277363add83aa6367e0e6b902266f528830095c8f8691d9b0b3093e2e951c40c86723502a69f931d0db8b99a35cc70014873706c4f2235d9723780f48e6d0aece34651cc9c25d5f5cd4000e7e18d1cbb63859943fddc921d4096e30aa406ed34e8af360d36fa2c7ec68057c9ba629ff6cbc66ddf89e2ab5044ffa291881938ab894bb78e6c7bdabed9bfba6f07b4f34e98957bd0c1618d71404db0384c4f34a32d4afbd5c4040d23b217ac9ac8538b17a9136cd4cf7bc21eb7afff0c2ea17570f16711d69f97ef2bbd663c2d12dd37973fbf53d2f1f22e67dcfc523b374b18e7281c68ce8f4d0fb3f9476b46a6f64b3471583ad867e1ec0607be3ded59cc283d4dfda00a639eaa5325be0e83b97aa3924fdcef47c437415c47bdc04d631a91243fcfdcc9a4b96643b05ff26b31482a483422df2a8cd66ed74377cc68384bafe1455738b0749c81885de7078e8a797b94079b9e727f97fd23786bd150828e94b0d3b3f297b2418745508d0577628c9119d9cad6614354cecc49b6f76aec941bef6d341eac1dd46f49c50897353d8222166f610bd349e39f2340d24ae15eddc68ab900109cf63b43c5cd623f403830ef63150f51d6811a6bc5af9a164a98be3d7853511198636ab8764c7287c2e06fe4744a9e0263a85cff7fe1a0c5812222cafc3310b49886206edc2fabdec027d62ca9fbc431269e9c5f7cfba393b86d66e162a10b316472fda8cca4e62d929f43d8b65fdfc4ac9db40dc17a7d3dabd5571d71c112bf3e39c4b3aa2225cbe14849b89f031ed527b3c192e83a261a876b7054e34fa531883c38ed230c98ebf92244395e69bfa22daffd932ddf4287f249b348a3086b4876ad26cd7c31e3fbf4b677b618b1687bea00d0dc9375e470eec92799188b0fcc7d00d771dc8503512c365d966363dda06dce52ade28045fd25a2476e055dc12da8f91fd96c6340ba2b6f7b982a1052430e798859845cb06de4462665d7124b1c88d0ae9932460764d1ad37b5093ec0319b7b0fbafd75ef030fdc191a6ec0022d6ede821ad83f9b10cc3615716292aee076fa1492af29e0e42a0f5b7959f4f699f62babbf1294a83d5b0bf87d8a750de000e0351c607ba4f35b3415b3c91e70b563448ddfca27b7aa4f890cef5d3014e5b130682c8fa77460022d6030e1bc6bec6575c3748b2fa66dc17db6a4c63c897e9969293ef4e2498545c64b82875b09ca05cc5951b9ebeec5406dec45987ff7b20daeee831539f1305f0e479bf5e78d3220a467138df3684fa237f370cd3a6a3959536fafb554526b8977e53edbbb9c8d140a4fdb0bca88d4879f1edc76a0fb34ad3ff64251d735903cb9032c6cdd02eaf64f00ceaa126228cf71d83f3ea2e9ad60dc9f7ae3e93d725066c826223d5c6d4e6feb587f060c244092fe2f8acfcbd577517da65aab897d6ea9fc9f2b62a24bd6b13dda5f1169201c5bffbf8f6845cc1b1196716facabf3d51a4970d1dc87a6436b98ab68d20366d4ca188afe6820d45ebf430cc16aec38cc725309226de5ad6cd29f445c3b853488d8590a2ba5ed928a01d43f702ec25eda275f1845d16deef09612f5e3db0fdc25889e02e16620b568bad91bcb3629999b988a5e06ab3f36ebd26199a53a04d279a8c7e69f14bdb4e5e1364f4eb40eefba128bd6bf736cf376914193bb4d404c8ecdb144a79b5eca3d129d7dba4e517b1d3ae8c1e4e2e971e1d40c727335d22946b46f1cddd459ecebc62c94438e8250f1f70af0cb4e6e66ae374e7b00e63a6aa9adfd2c8a00ddca3ba11dcdd9c50332c68801038d4bfd74ce962aea099b66b4ecea4227b07ea5b1c45f0bc136107e4d6742c0d7d2db85ce9dc9aac9b777107ca00ccf52af920d22215225952158d61343ede5864a00968eb3e0da1c4c5d7ab96fe2e3b59bd14e5ca780644e6e3c1fb044e452b3fe223fe3bd36c1e6d4196b1e6ad2a5e98e52b16ece26b2737187ce6b103b3c6820521c84f9f59aa44382e17823a887e88e1a90f06754fff1401a9b07ffd9d8a9a20b00222aa856c17ef521cf6d71b6511249f1055c9fd0357505d38512d94f39a0b065649696635768a91392e80a808040db94f61fcf5722ab646632378e5065036b07799152dab987abde2488e467d82b3588c8ba1de603d05351c4e28febd8e7268ef2d48b7c299761998bd1e46478a4887fabb3c5d87bc13e2ba36ef016ae05b2689b00c52db5d398384ebe3f82ff79bb88e5aa3c448db2f5ea61e36833f28f0cff5c920caaa59b2d7c17a6411d6f5616d50de0318735c8d5dbe9626c820e183e1c250ee55bc360d75c3c0c44a3e11b44ee5af454a831937f0c4038b34376c515f8f5d967d21b4674eea23629c53ad140267a443d025c0e2fbbaeea76b1aa5574c8fcc306985b2cc54f23e059e3044f909e8b23fee8c7ef4153fbf6cc89fb238037e29b6f95b31184e1f80db1db31a0c066ce1e6fb12f8e9143af2a7368862b801280c88169fc5cb037dfdaff75ef79c120ed5bc7a1296d959a993613bb274c9828fe5afbb0a150109fe09194d3937445f0cb0572083777e9dcb7c6baa6485a8df9617fc0384cb094677258de0cf3835e9f53622c59714456e92945c9304d4ee822361cf8b84474ed60930ee095bdf26dd63bfdb0da836b9f60439fa745aabb538aa4a40a1b90d02f8ac8d3a593328cbeefe18419a791d4df25c47fcd1b75bca1128c239f1e5fa8a4fbac4d0806f208d3381a47fffcf3731c8831901bb0103b67ceda5b1e5a4eb989e92b90ce2c4c7ba3d0707d275406974c769307320ce2268e735bc2e5e5bce05a5fbdcd9cb5184ed5ee06094ee2063bdfeff233491afc83bd455fc3b913f4b26f0a6657b25bf7a1bc7179d4c772a917f7b737b9b3a818fb7ae44a95b1881f1e8e64080aec65ce713d9d859e2a3125a72395b2b9e1ce7443daa9866169c971e08b7bc5c2463ae724ee841931d6e2e4b117c69f00a843105e8ad830a53ce6e01d227a710eada25b83d6b0dd5303fb8998c6b14222fab97ce3805fabc67ad971e5052a3228041fea323bfe3d6a7c86ddcefbd2f8b8ea5398e4f45aefa7b2cf7b2a0d2de40301cc94314586bcc8682dd1559305df1580fa95fe0830cb26f2a49820ef332e73ad8b06261075af0be354232495734c9712dc448a98c9de56d8ebb5def48882d7ab14282615e968b06a16783bec9b987110127b2d46cac76ddb69287b2982261bf984ec3caa38899dc61622246e1df5dc085cb06b6ab8347f6d229f6f661b97909db7f7a8990508487e79786171895bd494e8894ea92039f433de42aa881ca36495136f35a9a8c8f613985703233aa5382acd6667366f4c9a9ad33f94e8f6a19e7598bdd27e7734f746655376b8bcb185c9d4eef4abd50ad804a54c9937a643d7f68d2dc2d44b641dcfb1515ac2bcf1ecce4c7a782c9c7efea2c93771366d2ad6c5ded7f78348bc1c002313d1143673ad344f1a7c537ba3b581ada1beb52613bfab3eed02d5432d7b00760f388133d3d6b958465ab1b519b926732452ae5d47f12a4469027a7a4df8fd69c09403b9074ff320d1c939a10d07cec9bf1c3799e8a177031b4e656112c66acedc45035b1241cb09bf530b8494a7f815d0ac0e99aec30855d8543cda355cd474baebe6f923ca9c7fdd861cf5c7ed2d3b59d3c02f57f78aac365e3caf2a88d73a19229a7a50ec7e91962c7a096c8209084bc70e8a915793226e22d9b044140d44ea364c20af54478d9337b6c90de6806683e2dac0c69eeb97452b913173340a294c702fea5f25a56ad0076c5aadcde74092dcd6877f3727b57169fc45cd55e0877a4e38d66ed31ad63c61d0b4edf802e140364c8645214f90d2f12d30cfa7b10a456770f8480e7827226d628009a755725c1563b35bd7f6a48a8159ee20964004422025a6153145c2295e5c692100c77994cdc2e7bc091c87511750f66a75349f1f522116af699c0d01237f3087056b03efcc7932cfbfcdd12fd0c9ba9077fc1b39651f5a31c09f4ddf711e1b300d478952af7368d1cedfc4a6f36f84a53103a676466e59a1680905d97d29041d05f1ffb543a4c09649716ace416503a733982c2dbae503669ab4448ed8db0d2fb237acb35052e3b04c0b3f352d3dbe118c5ff8c7f56c35945a8674e6ef4ccb26a7134cd3d58dd24ef53815a07ab03550c1663f44b6177bbfa9048d1da8d849e068281f1b6344d975e36cd7a8bbd904ab345e5558f8f2fe0b0ef63d847ec63709d34cfea47c0db3d03f9ba6eaf6b9c69ed859a7cd1ed1549f2a24701db71ed7ecc25f7876798e507ddb0f1cbaada619862224da4ba8033594f1583704a592f4abec22d65ed57835d65aa7890fd766acac887c7b3b70ff4c088917132be086e274b6eb216ee8c2674b5b05094f59eb6c132e77071e55687bb8c4eeb18edf947c8c74fbc2c2aee057fa196b25543fde3ccb87d3ce45b99fb602615230bed9c5faab9f4868d83c5393c66fef8c99cab310690426f2989a4a75ae4dcce9c5512205ab3fc7b8cb8825c32c1e06bdd3229e7653fde12c6f6d50ddbfcc87cf421a831cb85acab2075240a9d353cc73b0f6581d5dedac13566783f42dbc71ff0f5e84e7ea2c9be23832b8b99cf7a63c6915b0396c13", 0xfc0) r7 = accept4$unix(r1, 0x0, &(0x7f0000001500), 0x80000) sendmmsg(r7, &(0x7f0000007540)=[{{&(0x7f0000001540)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000015c0)="acc30d6cdaa80cd4e03c2584d54c40c8dfd5fef1c1141b14e3c590c196266d48d3706641368bc39bbeeb6e75cf33820187945571a8bb82cdf896845466bccffdb7e5e41eb18e78a10b021c438e1272dc34d6c737aee53eff3ae1c72b3623e03bfd27bb7c45fd97", 0x67}, {&(0x7f0000001640)="e62730375510a71e2a4f5086f86cec55a64387975a4b8b0388cf95996064a84b344039fba72d4c1d96734a2462d7", 0x2e}, {&(0x7f0000001680)="13226b8c2bb6e1d6e17f60d16efba6b463118b49e65e8ca228fbc55da19b1f65fa9054fc3eb263dc5455ec653c0b87c4e1906f5908578e0cc870de5c5d04963a574d2105a9ef69df35e75b9be4", 0x4d}, {&(0x7f0000001700)="01def66dc0b038f549aea9c8f762f3c385486e4a59b35cbc69d82d31a6d1e40cb3a8add8dc0dc5492f90b5f3b5d815d116dd0c51e55ad381ea149772f08d199ceb69203644af801cefbdb1c6339b0bf3f88de35f63876a080c5cc9296a905fe2e05a6f0b29e923f91295b9accd0a87bbe1323fa15270b0623c3371a7ecdf92dce0975c781f1a39f243501342500fc930477961f52fd6a2caca98b95e34", 0x9d}, {&(0x7f00000017c0)="1532143024ff9b6d8cf58732faaf1efa820d22c1f94f52c8d63a03f0", 0x1c}, {&(0x7f0000001800)="956b1ae03fafc92d35d3c3accf3fbed86581eae0cd646a7b44fdf2adcdb0e144f3b9c60404f397cfc1ca006843cdc000b58152907fb88d3e79396352168f16bd3231fe898b1b5a29d5f33380c96f4bb95b13aa4ba4c31217cd7b63992d6c9db37f", 0x61}, {&(0x7f0000001880)="b3b1f3dff6ce07a564f52b623da2d7d233f5c78be4216cb697083583bcbd6edee17bd541bd4f5ceb6e3317a89c1fd41fea96426557f62ff2253078e4332de3bdc78a0bbdfa68f773fe89d6b8ecf68fd3baa18e8c0a300b902e720780276fa223504e868bb27053730705a44b8f807b28ce13af013b7e3fff7bfc627dc32b1372851b8756ca45d482d1", 0x89}, {0x0}], 0x8}}, {{&(0x7f0000001ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x4, 0x2, {0xa, 0x4e23, 0x3, @local, 0x9}}}, 0x80, &(0x7f0000002d80)=[{0x0}, {0x0}, {&(0x7f0000002c40)="ebf455161722b67580855abac9bbf7", 0xf}, {&(0x7f0000002c80)="55efd41ad5db43dae473fdac81516456748e8f7e19c4ad036d18f4c1ce5507be8a1847eae16ad6b8f2a0be2a313950b2f54d9574e38c984c3a11b4e59c16218f45d4569fe95594cab1f064d1c773d01dc9c80bb0bf3bc5acf332308fdb1e3f0d1e611d71e5fd4b31996e3fb42899db07195404644c0e0fb7fff736345f615f91be2174ee481913c3e63a4822bbb859f8287a1f9592c9a1f852cc7bb2e39aaa78b4e83e3aeed4d1e205584502af68aa68767babb33c43fdbe411da5521859718a567456a1fa34432590b26ffab666c4002bafc9dda3cf5816f0515641b16f93bc7aa6323d990e", 0xe6}], 0x4, &(0x7f0000002dc0)=[{0xc8, 0x115, 0xbef, "f34a8209c760a8693988a93f605d7de69c442b8b8566db7ded415b07188f1f6ded62bdf0bb03b814f5c81328073f502efc547211f912f99614926e4cfa16d380fe8b51f1aef86984de5c89ed1ec2e5fc2e55e289173bd03fca1344fb12ca5fe5efc82c7d68bba46569e6f3805c628597316d3d9a0bb5c01597f0d29fa559a809211a5b7b282a04375c619e98bebb877bf2081b88c7f7dea5a92445cbfacf6342175e59a924b6e50f8b17038f62bb0972c2812a15912c8e17"}], 0xc8}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002ec0)="81110cc25c241034b20e19a3c15f32f04fe2fdf12c2d32c3ba6857b9e0d4b077945b1083c5f72257af35b346cb7033f38ac146931f63f89f8f1219756866667df09bb0a285cf52b08bbafb338d9060020bdd8675743027d697b7239a4e15d09df6423ff923b1e6d51f70e07eca8eace3ec8c92e9dbb059", 0x77}], 0x1, &(0x7f0000002f80)=[{0x10, 0xd, 0x7}, {0xf88, 0x6, 0x9, "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"}, {0x50, 0x1, 0x5, "c2a13fd354feb29d915495eec9f1c39c683502ea392cf0f53ce260aaa80d38c5312fd46445fe86ac37a3a18305ee25c14daf289a6e10047a43ee728f16"}], 0xfe8}}, {{&(0x7f00000040c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000005240)=[{&(0x7f0000005140)="e7d63d727551553ff1b953da878eb645091cd1a83525215375c08353150e1ce448a9ec3b2451333e6ad895a3e258bc35a76038f5e2426c02880709c1103a549061ddd3f0f1fe9b5506cab120771a312fa4471b84236684ff3b77222f6bb7f8dcda53ab3829b609da72bf1896a961686e762dad8dfa75eb654446ca7bf74c156ec4fcbb8e220fb7a6", 0x88}, {&(0x7f0000005200)="717f07f2", 0x4}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000074c0)=[{0x48, 0x108, 0x80000000, "ba3fa97f48a8599b14301b81baf6cfbf7d72b9b88cf6a1bbda4cf019a41000523d08295c4c0281da036e58da2030e658cde13d"}], 0x48}}], 0x5, 0x4000000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007680), r1) ppoll(&(0x7f00000076c0)=[{r3}, {r0, 0x4105}, {r4, 0x10}], 0x3, &(0x7f0000007700), &(0x7f0000007740)={[0x8000000000000000]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000077c0)={&(0x7f0000007780)='tegra_dma_complete_cb\x00', r1, 0x0, 0xcfa}, 0x18) prlimit64(0x0, 0x3, &(0x7f0000007800)={0x28c1, 0x9}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000007940)={&(0x7f0000007840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000007900)={&(0x7f00000078c0)={0x30, 0x0, 0x500, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x2, @bearer=@l2={'ib', 0x3a, 'netpci0\x00'}}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40844}, 0x4048090) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x2000)=nil) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000007a80)={&(0x7f0000007980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000007a40)={&(0x7f00000079c0)={0x50, r8, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040011}, 0x8001) sendfile(r6, r5, &(0x7f0000007ac0)=0x7f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000007b40)={0x1, &(0x7f0000007b00)=[{0x7, 0x8, 0x4, 0x2}]}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000007cc0)={r1, &(0x7f0000007b80)="3b02394a4d23986a9cd91b3d0af5222ac6a8ed70ae773b599100628f4e128c92f75b71e2ebf3415407", &(0x7f0000007bc0)=""/241}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000007d00)={0x2, 0x7, {0x0}, {}, 0x8b9, 0x6}) prlimit64(r9, 0xf, &(0x7f0000007d40)={0x400, 0x2}, &(0x7f0000007d80)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r10, &(0x7f0000007e80)={&(0x7f0000007dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000007e40)={&(0x7f0000007e00)={0x30, r8, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x77}, @void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 50.10747232s ago: executing program 9 (id=620): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r7, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x1, 0x1, r9}}, 0x40) (async) fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00') (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000040)="82dd1b158920aef2ac2dcd7ba5522137326c495624724c61", &(0x7f0000000100)=""/75, 0x4}, 0x20) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r11 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT(r11, 0xd, 0x0) shmctl$SHM_INFO(r11, 0xe, &(0x7f00000001c0)=""/111) (async) connect$inet(r10, &(0x7f0000000000)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) (async) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r12, 0x84, 0x79, 0x0, 0x0) setsockopt$inet_int(r10, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) 49.983085883s ago: executing program 7 (id=621): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000011c0)={0x2020, 0x0, 0x0}, 0x2020) r8 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r9, r9, r9) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001140)={0x0, 0x0, 0x0}, &(0x7f0000003200)=0xc) write$FUSE_ENTRY(r6, &(0x7f0000003240)={0x90, 0x0, r7, {0x1, 0x0, 0x240d, 0x9, 0x6, 0x2, {0x6, 0x9, 0x7ff, 0x34a, 0x8001, 0x2, 0x5, 0x6, 0x7fffffff, 0x1000, 0x8, r9, r10, 0x7, 0x9}}}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)={0x20, r4, 0x1, 0x70bd30, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8815}, 0x4000040) 48.719063121s ago: executing program 7 (id=622): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x43) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x8000, 0x0, 0x0) 48.391350469s ago: executing program 9 (id=623): syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x3, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x2000f7b, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x1, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x46, 0x36, 0x56, 0x8, 0x4b4, 0x8613, 0x958f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd1, 0x6e, 0xa5}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x78, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x72}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000014}, 0x2000c080) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) close(0xffffffffffffffff) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 39.878551353s ago: executing program 7 (id=624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000fff500000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000020900020073797a30000000000900010073797a3000000000080005400000000d34001180090001006d6574610000000024000280080002400000000608000340000000110800024000000019080001"], 0xb8}}, 0x20050800) 39.73264592s ago: executing program 9 (id=625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xfffffffd}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x0, 0x80ffff}, 0x18, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @private0, 0x1}, 0x1c) 39.280930073s ago: executing program 8 (id=626): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xd7ff6f83da643eb1, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000080)=0xffffe, 0x4) r3 = socket$inet(0x2, 0x4000000805, 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RXATTRCREATE(r4, &(0x7f0000000380)={0x7, 0x21, 0x1}, 0x7) listen(r3, 0x7) sendmmsg$inet_sctp(r3, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="30000000000000008400000008"], 0x30, 0x2004c850}], 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xfeda, 0x0, &(0x7f0000000300)="c7ff093b194d5bcc116ff6e525", 0x0, 0xd03, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) recvmmsg(r2, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0xec4a}], 0x1, 0x2020, 0x0) 39.099841397s ago: executing program 8 (id=627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc048aeca, &(0x7f0000000200)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x13, 0xff, 0x8, 0x17, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd25, 0x3503}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x9, @empty, 0x2}}, @sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x9}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x18, 0x1c, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d2}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e24, 0x9, @private2, 0x3}}]}, 0xb8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100, 0x100, 0x89, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007c80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xffe0}}]}}]}, 0x38}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0x5}, {}, @control={0x33, 0x2, 0xd64a}}], 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r8, 0x7b1, &(0x7f0000001440)={0x0, 0x5, 0x0, 0x5}) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x0, 0x157}, 0x0, 0x0) 38.55695671s ago: executing program 9 (id=628): openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x81, [0x1, 0x6]}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, &(0x7f00000004c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x5, 0x1, 0x5, 0x8, 0x4, 0x2947, 0xf8}, 0x9c) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0xffc6, r5, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0x4, 0x401, 0x7, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f0000000200), 0x1, r5}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000340)={{0xf, 0x8}, {0x4, 0x2}, 0x2, 0x0, 0x3}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, 0x0) 21.470642079s ago: executing program 39 (id=628): openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x81, [0x1, 0x6]}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, &(0x7f00000004c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x5, 0x1, 0x5, 0x8, 0x4, 0x2947, 0xf8}, 0x9c) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0xffc6, r5, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0x4, 0x401, 0x7, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f0000000200), 0x1, r5}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000340)={{0xf, 0x8}, {0x4, 0x2}, 0x2, 0x0, 0x3}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, 0x0) 204.743004ms ago: executing program 40 (id=627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc048aeca, &(0x7f0000000200)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x13, 0xff, 0x8, 0x17, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd25, 0x3503}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x9, @empty, 0x2}}, @sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x9}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x18, 0x1c, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d2}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e24, 0x9, @private2, 0x3}}]}, 0xb8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100, 0x100, 0x89, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007c80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xffe0}}]}}]}, 0x38}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0x5}, {}, @control={0x33, 0x2, 0xd64a}}], 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r8, 0x7b1, &(0x7f0000001440)={0x0, 0x5, 0x0, 0x5}) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x0, 0x157}, 0x0, 0x0) 0s ago: executing program 41 (id=624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000fff500000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000020900020073797a30000000000900010073797a3000000000080005400000000d34001180090001006d6574610000000024000280080002400000000608000340000000110800024000000019080001"], 0xb8}}, 0x20050800) kernel console output (not intermixed with test programs): mode [ 97.449279][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.475162][ T5822] veth0_vlan: entered promiscuous mode [ 97.507963][ T5825] veth0_vlan: entered promiscuous mode [ 97.531663][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.541560][ T5825] veth1_vlan: entered promiscuous mode [ 97.548157][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.570275][ T5821] veth0_macvtap: entered promiscuous mode [ 97.588637][ T5822] veth1_vlan: entered promiscuous mode [ 97.614048][ T5821] veth1_macvtap: entered promiscuous mode [ 97.658261][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.688221][ T5825] veth0_macvtap: entered promiscuous mode [ 97.700870][ T5823] veth0_macvtap: entered promiscuous mode [ 97.713558][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.740639][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.752136][ T5823] veth1_macvtap: entered promiscuous mode [ 97.761054][ T5822] veth0_macvtap: entered promiscuous mode [ 97.773406][ T5825] veth1_macvtap: entered promiscuous mode [ 97.783448][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.793905][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.807054][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.816118][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.838013][ T5822] veth1_macvtap: entered promiscuous mode [ 98.327859][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.394745][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.458108][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.480537][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.500580][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.510940][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.550425][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.563874][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.588458][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.598749][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.612858][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.622442][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.631684][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.641324][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.670206][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.681988][ T5943] Bluetooth: MGMT ver 1.23 [ 98.686716][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.698834][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.707700][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.771223][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.785509][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.967560][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.993753][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.025481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.034591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.049953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.152526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.219803][ T5144] Bluetooth: hci0: command tx timeout [ 99.318122][ T5144] Bluetooth: hci1: command tx timeout [ 99.323708][ T5144] Bluetooth: hci3: command tx timeout [ 99.344126][ T5144] Bluetooth: hci2: command tx timeout [ 99.365174][ T5827] Bluetooth: hci4: command tx timeout [ 101.080759][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.116886][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.843286][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.862925][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.726046][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.733938][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.772737][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.785747][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.793626][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.825672][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.688620][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.689137][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.015882][ T5962] loop6: detected capacity change from 0 to 524287999 [ 106.091486][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.100862][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.100978][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.101079][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.101183][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.101306][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.101512][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.101616][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.101698][ T5962] ldm_validate_partition_table(): Disk read failed. [ 106.101745][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.101852][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.102057][ T5962] Dev loop6: unable to read RDB block 0 [ 106.102477][ T5962] loop6: unable to read partition table [ 106.102692][ T5962] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 106.165681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.166712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.167863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.168961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.374650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.447779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 107.792094][ T5971] vxcan1 speed is unknown, defaulting to 1000 [ 107.794658][ T5971] vxcan1 speed is unknown, defaulting to 1000 [ 107.796381][ T5971] vxcan1 speed is unknown, defaulting to 1000 [ 108.360224][ T5971] infiniband syz2: set active [ 108.360269][ T5971] infiniband syz2: added vxcan1 [ 108.361683][ T5971] syz2: rxe_create_cq: returned err = -12 [ 108.361812][ T5971] infiniband syz2: Couldn't create ib_mad CQ [ 108.361941][ T5971] infiniband syz2: Couldn't open port 1 [ 108.399913][ T5971] RDS/IB: syz2: added [ 108.400163][ T5971] smc: adding ib device syz2 with port count 1 [ 108.400236][ T5971] smc: ib device syz2 port 1 has pnetid [ 108.706452][ T5965] ubi31: attaching mtd0 [ 108.708195][ T5965] ubi31: scanning is finished [ 108.708211][ T5965] ubi31: empty MTD device detected [ 108.721660][ T5971] vxcan1 speed is unknown, defaulting to 1000 [ 108.968962][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 108.969710][ T5895] vxcan1 speed is unknown, defaulting to 1000 [ 108.970181][ T5971] vxcan1 speed is unknown, defaulting to 1000 [ 108.971797][ T5965] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 108.971823][ T5965] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 108.971842][ T5965] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 108.971861][ T5965] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 108.971880][ T5965] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 108.971897][ T5965] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 108.971915][ T5965] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4127992967 [ 108.971936][ T5965] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 108.972297][ T5980] ubi31: background thread "ubi_bgt31d" started, PID 5980 [ 109.754359][ T30] audit: type=1326 audit(1749523187.949:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5986 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 109.754417][ T30] audit: type=1326 audit(1749523187.949:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5986 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 109.754462][ T30] audit: type=1326 audit(1749523187.949:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5986 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 109.754506][ T30] audit: type=1326 audit(1749523187.949:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5986 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 109.754551][ T30] audit: type=1326 audit(1749523187.949:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5986 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f923dd8d290 code=0x7ffc0000 [ 109.754594][ T30] audit: type=1326 audit(1749523187.949:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5986 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 109.754638][ T30] audit: type=1326 audit(1749523187.949:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5986 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 109.754681][ T30] audit: type=1326 audit(1749523187.949:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5986 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 109.754726][ T30] audit: type=1326 audit(1749523187.949:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5986 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 109.754771][ T30] audit: type=1326 audit(1749523187.949:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5986 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 109.793552][ T5971] vxcan1 speed is unknown, defaulting to 1000 [ 110.158493][ T5971] vxcan1 speed is unknown, defaulting to 1000 [ 110.388593][ T5971] vxcan1 speed is unknown, defaulting to 1000 [ 110.795147][ T5990] warning: `syz.0.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.797757][ T5990] netlink: 'syz.0.11': attribute type 10 has an invalid length. [ 110.877743][ T5990] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.904200][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.009347][ T5961] tty tty29: ldisc open failed (-12), clearing slot 28 [ 111.436266][ T5999] usb usb1: usbfs: process 5999 (syz.1.13) did not claim interface 0 before use [ 111.602476][ T5999] Zero length message leads to an empty skb [ 111.634368][ T5999] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.824654][ T5999] syz_tun: entered promiscuous mode [ 111.839902][ T5999] syz_tun: left promiscuous mode [ 115.957816][ T6030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.753136][ T6032] netlink: 'syz.0.22': attribute type 11 has an invalid length. [ 120.008690][ T6041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'. [ 120.080803][ T6037] netlink: 'syz.2.23': attribute type 11 has an invalid length. [ 120.182212][ T6047] loop6: detected capacity change from 0 to 524287999 [ 120.190591][ T6047] buffer_io_error: 7 callbacks suppressed [ 120.190610][ T6047] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.256505][ T6049] sctp: [Deprecated]: syz.0.26 (pid 6049) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.256505][ T6049] Use struct sctp_sack_info instead [ 120.279002][ T6047] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.279126][ T6047] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.279224][ T6047] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.279342][ T6047] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.279468][ T6047] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.279586][ T6047] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.279686][ T6047] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.279755][ T6047] ldm_validate_partition_table(): Disk read failed. [ 120.279803][ T6047] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.279904][ T6047] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.280150][ T6047] Dev loop6: unable to read RDB block 0 [ 120.280602][ T6047] loop6: unable to read partition table [ 120.280813][ T6047] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 120.312675][ T6051] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.451266][ T6054] sctp: [Deprecated]: syz.1.27 (pid 6054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.451266][ T6054] Use struct sctp_sack_info instead [ 123.919003][ T6073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.33'. [ 125.421221][ T6087] capability: warning: `syz.0.37' uses 32-bit capabilities (legacy support in use) [ 125.672992][ T6094] loop6: detected capacity change from 0 to 524287999 [ 125.684959][ T6094] buffer_io_error: 7 callbacks suppressed [ 125.684986][ T6094] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.700367][ T6094] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.710117][ T6094] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.719757][ T6094] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.729559][ T6094] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.739836][ T6094] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.749758][ T6094] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.759378][ T6094] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.768263][ T6094] ldm_validate_partition_table(): Disk read failed. [ 125.775713][ T6094] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.785298][ T6094] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.797203][ T6094] Dev loop6: unable to read RDB block 0 [ 125.808936][ T6094] loop6: unable to read partition table [ 125.817744][ T6094] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 126.137031][ T6095] netlink: 208 bytes leftover after parsing attributes in process `syz.0.37'. [ 126.723058][ T6104] sctp: [Deprecated]: syz.4.40 (pid 6104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.723058][ T6104] Use struct sctp_sack_info instead [ 126.941112][ T6104] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (335544320 ns) > initial count (40 ns). Using initial count to start timer. [ 128.567497][ T6114] netlink: 'syz.4.42': attribute type 11 has an invalid length. [ 132.532012][ T6144] sctp: [Deprecated]: syz.4.52 (pid 6144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.532012][ T6144] Use struct sctp_sack_info instead [ 133.233316][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.250277][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.389076][ T6149] tipc: Started in network mode [ 133.394265][ T6149] tipc: Node identity 0000000000000000000000000000e26c, cluster identity 4711 [ 133.410411][ T6149] tipc: Enabling of bearer rejected, failed to enable media [ 133.458606][ T6150] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 133.887121][ T6160] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 136.462795][ T6182] syz.0.66 uses obsolete (PF_INET,SOCK_PACKET) [ 136.479696][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.64'. [ 136.733837][ T6190] sctp: [Deprecated]: syz.2.65 (pid 6190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.733837][ T6190] Use struct sctp_sack_info instead [ 137.855686][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 138.284446][ T10] usb 1-1: device descriptor read/64, error -71 [ 139.351650][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 140.638881][ T5901] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 140.857683][ T6223] netlink: 172 bytes leftover after parsing attributes in process `syz.0.72'. [ 140.902028][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 140.963895][ T5901] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 141.027345][ T5901] usb 2-1: config 0 has no interface number 0 [ 141.103734][ T5901] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 141.147907][ T5901] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 141.179461][ T5901] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 141.203227][ T5901] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 141.584419][ T6236] sctp: [Deprecated]: syz.4.78 (pid 6236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.584419][ T6236] Use struct sctp_sack_info instead [ 142.195959][ T5901] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 142.205138][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.213162][ T5901] usb 2-1: Product: syz [ 142.217712][ T5901] usb 2-1: Manufacturer: syz [ 142.222431][ T5901] usb 2-1: SerialNumber: syz [ 142.251438][ T5901] usb 2-1: config 0 descriptor?? [ 142.488112][ T5901] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 142.502011][ T5901] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.237/input/input5 [ 142.531178][ T6242] FAULT_INJECTION: forcing a failure. [ 142.531178][ T6242] name failslab, interval 1, probability 0, space 0, times 1 [ 142.581088][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.2.80 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 142.581117][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.581134][ T6242] Call Trace: [ 142.581146][ T6242] [ 142.581156][ T6242] dump_stack_lvl+0x189/0x250 [ 142.581201][ T6242] ? __pfx____ratelimit+0x10/0x10 [ 142.581234][ T6242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.581260][ T6242] ? __pfx__printk+0x10/0x10 [ 142.581283][ T6242] ? ref_tracker_alloc+0x318/0x460 [ 142.581312][ T6242] should_fail_ex+0x414/0x560 [ 142.581340][ T6242] should_failslab+0xa8/0x100 [ 142.581363][ T6242] kmem_cache_alloc_noprof+0x73/0x3c0 [ 142.581382][ T6242] ? skb_clone+0x212/0x3a0 [ 142.581409][ T6242] skb_clone+0x212/0x3a0 [ 142.581434][ T6242] __netlink_deliver_tap+0x404/0x850 [ 142.581478][ T6242] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.581498][ T6242] netlink_deliver_tap+0x19c/0x1b0 [ 142.581518][ T6242] netlink_unicast+0x72f/0x8d0 [ 142.581545][ T6242] netlink_sendmsg+0x805/0xb30 [ 142.581571][ T6242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.581597][ T6242] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.581616][ T6242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.581637][ T6242] __sock_sendmsg+0x219/0x270 [ 142.581668][ T6242] ____sys_sendmsg+0x505/0x830 [ 142.581698][ T6242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.581727][ T6242] ? import_iovec+0x74/0xa0 [ 142.581746][ T6242] ___sys_sendmsg+0x21f/0x2a0 [ 142.581770][ T6242] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.581825][ T6242] ? __fget_files+0x2a/0x420 [ 142.581851][ T6242] ? __fget_files+0x3a0/0x420 [ 142.581889][ T6242] __x64_sys_sendmsg+0x19b/0x260 [ 142.581918][ T6242] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.581955][ T6242] ? __pfx_ksys_write+0x10/0x10 [ 142.581976][ T6242] ? rcu_is_watching+0x15/0xb0 [ 142.582012][ T6242] ? do_syscall_64+0xbe/0x3b0 [ 142.582035][ T6242] do_syscall_64+0xfa/0x3b0 [ 142.582052][ T6242] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.582082][ T6242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.582102][ T6242] ? clear_bhb_loop+0x60/0xb0 [ 142.582127][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.582147][ T6242] RIP: 0033:0x7f4ab018e929 [ 142.582172][ T6242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.582188][ T6242] RSP: 002b:00007f4ab0fc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.582210][ T6242] RAX: ffffffffffffffda RBX: 00007f4ab03b5fa0 RCX: 00007f4ab018e929 [ 142.582225][ T6242] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 142.582237][ T6242] RBP: 00007f4ab0fc5090 R08: 0000000000000000 R09: 0000000000000000 [ 142.582249][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.582261][ T6242] R13: 0000000000000000 R14: 00007f4ab03b5fa0 R15: 00007fff28000318 [ 142.582292][ T6242] [ 143.190934][ T6250] misc userio: Can't change port type on an already running userio instance [ 143.538132][ T6262] loop6: detected capacity change from 0 to 524287999 [ 143.558015][ T6262] buffer_io_error: 7 callbacks suppressed [ 143.563850][ T6262] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.573888][ T6262] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.583951][ T6262] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.596693][ T6262] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.606946][ T6262] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.617583][ T6262] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.627849][ T6262] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.638031][ T6262] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.647349][ T6262] ldm_validate_partition_table(): Disk read failed. [ 143.654606][ T6262] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.664722][ T6262] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.677663][ T6262] Dev loop6: unable to read RDB block 0 [ 143.692385][ T6262] loop6: unable to read partition table [ 143.704249][ T6262] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 144.269398][ T10] usb 2-1: USB disconnect, device number 2 [ 144.290656][ T10] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 144.325684][ T6264] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 144.404257][ T6264] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 144.420826][ T6268] netlink: 172 bytes leftover after parsing attributes in process `syz.3.89'. [ 144.464595][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 145.912532][ T6283] sctp: [Deprecated]: syz.3.93 (pid 6283) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.912532][ T6283] Use struct sctp_sack_info instead [ 146.984441][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.119814][ T6293] binder: 6291:6293 ioctl c0306201 2000000003c0 returned -14 [ 147.146089][ T6296] dummy0: entered promiscuous mode [ 147.178203][ T6296] dummy0: left promiscuous mode [ 147.184756][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 147.191945][ T10] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 147.204462][ T10] usb 1-1: config 2 has no interface number 0 [ 147.216617][ T10] usb 1-1: config 2 interface 31 has no altsetting 0 [ 147.242561][ T10] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 147.283536][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.316319][ T10] usb 1-1: Product: syz [ 147.321544][ T10] usb 1-1: Manufacturer: syz [ 147.330854][ T10] usb 1-1: SerialNumber: syz [ 147.348895][ T5827] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 147.667033][ T6306] Invalid logical block size (19) [ 148.237373][ T10] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 148.274897][ T10] usb 1-1: USB disconnect, device number 4 [ 148.658859][ T6315] netlink: 172 bytes leftover after parsing attributes in process `syz.2.103'. [ 148.904414][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 149.199969][ T6321] dummy0: entered promiscuous mode [ 150.414455][ T980] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 151.436321][ T980] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.504425][ T980] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 151.585341][ T980] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 151.617599][ T980] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 151.637905][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.690887][ T6338] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.713287][ T6363] netlink: 72 bytes leftover after parsing attributes in process `syz.1.109'. [ 153.430641][ T6366] wg1: entered promiscuous mode [ 153.458237][ T6366] wg1: entered allmulticast mode [ 153.763060][ T6376] netlink: 172 bytes leftover after parsing attributes in process `syz.0.117'. [ 154.003488][ T6384] loop2: detected capacity change from 0 to 7 [ 154.042622][ T5822] loop2: [POWERTEC] p1 p2 p3 p4 [ 154.062537][ T5822] loop2: p1 start 491519 is beyond EOD, truncated [ 154.074804][ T5822] loop2: p2 start 172752896 is beyond EOD, truncated [ 154.102023][ T5822] loop2: p3 start 196608 is beyond EOD, truncated [ 154.131022][ T5822] loop2: p4 size 1969750016 extends beyond EOD, truncated [ 154.212511][ T6387] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.227110][ T6384] loop2: [POWERTEC] p1 p2 p3 p4 [ 154.269392][ T6387] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 154.295618][ T6384] loop2: p1 start 491519 is beyond EOD, truncated [ 154.302170][ T6384] loop2: p2 start 172752896 is beyond EOD, truncated [ 154.378748][ T6384] loop2: p3 start 196608 is beyond EOD, truncated [ 154.472487][ T6399] dummy0: entered promiscuous mode [ 154.567079][ T6384] loop2: p4 size 1969750016 extends beyond EOD, truncated [ 154.581003][ T980] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 154.600311][ T6387] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.608663][ T980] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input6 [ 155.092847][ T6387] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 155.314778][ T6399] dummy0: left promiscuous mode [ 155.578671][ T980] usb 2-1: USB disconnect, device number 3 [ 155.584643][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 155.634964][ T6406] tap0: tun_chr_ioctl cmd 1074025675 [ 155.640355][ T6406] tap0: persist enabled [ 155.684246][ T5828] udevd[5828]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 155.696988][ T6387] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.721242][ T6387] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 155.738354][ T6408] tap0: tun_chr_ioctl cmd 1074025675 [ 155.803600][ T6408] tap0: persist enabled [ 155.872910][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 155.890372][ T5828] udevd[5828]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 155.916017][ T6387] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.922002][ T6387] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 155.932819][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 156.193873][ T6387] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 156.284033][ T6387] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 156.664421][ T980] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.836479][ T980] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 156.856581][ T980] usb 1-1: config 0 has no interface number 0 [ 156.906419][ T980] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.960941][ T980] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 156.987873][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.678438][ T980] usb 1-1: Product: syz [ 157.685436][ T980] usb 1-1: Manufacturer: syz [ 157.690092][ T980] usb 1-1: SerialNumber: syz [ 157.698823][ T980] usb 1-1: config 0 descriptor?? [ 157.747695][ T980] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 158.573856][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.589446][ T6456] batadv_slave_1: entered promiscuous mode [ 158.608714][ T6456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.136'. [ 158.942557][ T43] usb 1-1: USB disconnect, device number 5 [ 158.972123][ T43] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 159.185258][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 160.127699][ T6473] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 160.196436][ T6474] capability: warning: `syz.3.141' uses deprecated v2 capabilities in a way that may be insecure [ 162.125217][ T6482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.915697][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 163.989427][ T6504] xt_hashlimit: size too large, truncated to 1048576 [ 164.001699][ T6504] xt_hashlimit: max too large, truncated to 1048576 [ 164.099541][ T10] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 164.125113][ T10] usb 5-1: config 0 has no interface number 0 [ 164.139953][ T10] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.168796][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 164.184702][ T5839] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 164.200030][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.405091][ T10] usb 5-1: Product: syz [ 164.469487][ T10] usb 5-1: Manufacturer: syz [ 164.515320][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 164.557791][ T10] usb 5-1: SerialNumber: syz [ 164.727584][ T5839] usb 4-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config [ 164.785442][ T10] usb 5-1: config 0 descriptor?? [ 165.759980][ T5839] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.782949][ T10] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 166.553116][ T6520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.156'. [ 166.679410][ T5973] bond0: (slave wlan1): link status definitely down, disabling slave [ 166.790428][ T5839] usb 4-1: string descriptor 0 read error: -71 [ 166.796903][ T5839] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 166.806500][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.834267][ T24] usb 5-1: USB disconnect, device number 2 [ 166.855047][ T5839] usb 4-1: config 0 descriptor?? [ 166.870931][ T24] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 166.884064][ T5839] usb 4-1: can't set config #0, error -71 [ 166.976454][ T5839] usb 4-1: USB disconnect, device number 2 [ 169.591300][ T6545] loop9: detected capacity change from 0 to 7 [ 169.635179][ T6545] buffer_io_error: 6 callbacks suppressed [ 169.635199][ T6545] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.684958][ T6545] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.693007][ T6545] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.718530][ T6545] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.738021][ T6545] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.754989][ T6545] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.772374][ T6545] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.216725][ T6557] sctp: [Deprecated]: syz.3.165 (pid 6557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.216725][ T6557] Use struct sctp_sack_info instead [ 170.264734][ T6545] ldm_validate_partition_table(): Disk read failed. [ 170.281810][ T6545] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.434816][ T980] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 170.449672][ T6545] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.506364][ T6562] netlink: 'syz.2.166': attribute type 11 has an invalid length. [ 170.593816][ T6545] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.673003][ T6545] Dev loop9: unable to read RDB block 0 [ 171.114684][ T6545] loop9: unable to read partition table [ 171.115044][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 171.120625][ T6545] loop9: partition table beyond EOD, [ 171.157630][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.177527][ T980] usb 5-1: config 255 has an invalid interface number: 7 but max is 0 [ 171.190545][ T980] usb 5-1: config 255 has no interface number 0 [ 171.197000][ T6545] truncated [ 171.200747][ T6545] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 171.200747][ T6545] ) failed (rc=-5) [ 171.227266][ T980] usb 5-1: config 255 interface 7 altsetting 78 bulk endpoint 0x3 has invalid maxpacket 1024 [ 171.248005][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.261904][ T6564] batadv_slave_1: entered promiscuous mode [ 171.268514][ T980] usb 5-1: config 255 interface 7 has no altsetting 0 [ 171.292999][ T980] usb 5-1: New USB device found, idVendor=06e0, idProduct=0319, bcdDevice=1f.59 [ 171.317202][ T6564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.168'. [ 171.326634][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.357723][ T980] usb 5-1: Product: syz [ 171.382014][ T980] usb 5-1: Manufacturer: syz [ 171.396266][ T980] usb 5-1: SerialNumber: syz [ 171.479965][ T6548] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.741329][ T980] ti_usb_3410_5052 5-1:255.7: TI USB 3410 1 port adapter converter detected [ 171.755435][ T980] ti_usb_3410_5052 5-1:255.7: missing endpoints [ 171.790706][ T980] usb 5-1: USB disconnect, device number 3 [ 171.844597][ T5839] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 171.991942][ T6577] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.798784][ T6579] netlink: 172 bytes leftover after parsing attributes in process `syz.1.173'. [ 172.828255][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.872346][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.938249][ T5839] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 172.974482][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.003732][ T5839] usb 1-1: config 0 descriptor?? [ 173.186727][ T6585] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 173.556961][ T6595] netlink: 'syz.2.176': attribute type 11 has an invalid length. [ 173.865659][ T5839] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 175.037159][ T6610] ubi31: detaching mtd0 [ 175.048921][ T6610] ubi31: mtd0 is detached [ 175.689570][ T5839] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 175.698503][ T5839] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 175.720023][ T5839] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -32 [ 175.793877][ T6619] netlink: 128 bytes leftover after parsing attributes in process `syz.4.185'. [ 175.827668][ T6619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.185'. [ 175.899795][ T5839] usb 1-1: USB disconnect, device number 6 [ 176.954879][ T6630] loop6: detected capacity change from 0 to 524287999 [ 176.962497][ T6630] buffer_io_error: 9 callbacks suppressed [ 176.962514][ T6630] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.979501][ T6630] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.987545][ T6630] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.995587][ T6630] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.003569][ T6630] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.012564][ T6630] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.020610][ T6630] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.028627][ T6630] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.034657][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 177.036572][ T6630] ldm_validate_partition_table(): Disk read failed. [ 177.051086][ T6630] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.154540][ T6630] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.162675][ T6630] Dev loop6: unable to read RDB block 0 [ 177.168774][ T6630] loop6: unable to read partition table [ 177.174744][ T6630] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 177.734443][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 177.741036][ T6634] vxcan1 speed is unknown, defaulting to 1000 [ 177.759055][ T43] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 177.786848][ T43] usb 2-1: config 0 has no interface number 0 [ 177.794388][ T10] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 177.808013][ T43] usb 2-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.827066][ T43] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 177.840795][ T43] usb 2-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 177.852798][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.875870][ T43] usb 2-1: Product: syz [ 177.880112][ T43] usb 2-1: Manufacturer: syz [ 177.895645][ T43] usb 2-1: SerialNumber: syz [ 177.915061][ T43] usb 2-1: config 0 descriptor?? [ 178.113840][ T6648] netlink: 'syz.0.194': attribute type 11 has an invalid length. [ 178.235052][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 178.249972][ T43] spcp8x5 2-1:0.191: SPCP8x5 converter detected [ 178.329459][ T10] usb 5-1: can't read configurations, error -61 [ 178.505518][ T43] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 178.613159][ T43] usb 2-1: USB disconnect, device number 4 [ 178.655408][ T10] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 178.713185][ T43] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 178.731895][ T43] spcp8x5 2-1:0.191: device disconnected [ 178.827186][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 178.844791][ T10] usb 5-1: can't read configurations, error -61 [ 178.851822][ T10] usb usb5-port1: attempt power cycle [ 178.858302][ T5956] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 179.027973][ T5956] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 179.046890][ T5956] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 179.059397][ T5956] usb 3-1: config 135 has no interface number 0 [ 179.078222][ T5956] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 179.090460][ T6637] netlink: 264 bytes leftover after parsing attributes in process `syz.3.190'. [ 179.094670][ T5956] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 179.103522][ T6637] netlink: 56 bytes leftover after parsing attributes in process `syz.3.190'. [ 179.122780][ T6659] netlink: 'syz.0.198': attribute type 5 has an invalid length. [ 179.133755][ T5956] usb 3-1: config 135 interface 230 has no altsetting 0 [ 179.147583][ T5956] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 179.157787][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.182494][ T6660] kvm: emulating exchange as write [ 179.207115][ T5956] usb 3-1: Product: syz [ 179.215224][ T10] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 179.249834][ T5956] usb 3-1: Manufacturer: syz [ 179.258689][ T5956] usb 3-1: SerialNumber: syz [ 179.281584][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 179.298145][ T10] usb 5-1: can't read configurations, error -61 [ 179.472870][ T10] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 179.765190][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 179.772933][ T10] usb 5-1: can't read configurations, error -61 [ 179.852219][ T10] usb usb5-port1: unable to enumerate USB device [ 182.432055][ T6676] xt_hashlimit: size too large, truncated to 1048576 [ 182.439058][ T6676] xt_hashlimit: max too large, truncated to 1048576 [ 182.474033][ T6678] netlink: 'syz.0.203': attribute type 10 has an invalid length. [ 182.632895][ T6678] team0: Port device dummy0 added [ 182.746069][ T43] usb 3-1: USB disconnect, device number 2 [ 182.988843][ T6687] netlink: 'syz.0.206': attribute type 11 has an invalid length. [ 186.600695][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 186.600714][ T30] audit: type=1326 audit(1749523265.009:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 186.657392][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'. [ 186.682896][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 186.690632][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'. [ 186.712849][ T30] audit: type=1326 audit(1749523265.039:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 186.744608][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'. [ 186.775120][ T30] audit: type=1326 audit(1749523265.059:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 186.869682][ T30] audit: type=1326 audit(1749523265.059:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 186.962078][ T30] audit: type=1326 audit(1749523265.059:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 186.983770][ T30] audit: type=1326 audit(1749523265.059:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 187.006784][ T30] audit: type=1326 audit(1749523265.059:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 187.113437][ T30] audit: type=1326 audit(1749523265.059:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 187.142127][ T30] audit: type=1326 audit(1749523265.059:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 187.168186][ T30] audit: type=1326 audit(1749523265.059:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923dd8e929 code=0x7ffc0000 [ 187.640230][ T6751] sctp: [Deprecated]: syz.0.225 (pid 6751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.640230][ T6751] Use struct sctp_sack_info instead [ 187.690065][ T6749] sctp: [Deprecated]: syz.1.226 (pid 6749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.690065][ T6749] Use struct sctp_sack_info instead [ 187.725658][ T6749] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (335544320 ns) > initial count (40 ns). Using initial count to start timer. [ 187.746494][ T6751] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (335544320 ns) > initial count (40 ns). Using initial count to start timer. [ 187.929138][ T6759] sctp: [Deprecated]: syz.2.227 (pid 6759) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.929138][ T6759] Use struct sctp_sack_info instead [ 188.023423][ T6759] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (335544320 ns) > initial count (40 ns). Using initial count to start timer. [ 189.365822][ T6779] 9pnet_fd: Insufficient options for proto=fd [ 189.707212][ T6780] netlink: 'syz.1.233': attribute type 1 has an invalid length. [ 190.512745][ T6787] netlink: 128 bytes leftover after parsing attributes in process `syz.2.235'. [ 190.548506][ T6787] netlink: 40 bytes leftover after parsing attributes in process `syz.2.235'. [ 192.548577][ T6819] FAULT_INJECTION: forcing a failure. [ 192.548577][ T6819] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 192.577093][ T6819] CPU: 1 UID: 0 PID: 6819 Comm: syz.4.245 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 192.577115][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.577124][ T6819] Call Trace: [ 192.577130][ T6819] [ 192.577137][ T6819] dump_stack_lvl+0x189/0x250 [ 192.577173][ T6819] ? __pfx____ratelimit+0x10/0x10 [ 192.577196][ T6819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.577218][ T6819] ? __pfx__printk+0x10/0x10 [ 192.577242][ T6819] should_fail_ex+0x414/0x560 [ 192.577266][ T6819] _copy_to_user+0x31/0xb0 [ 192.577282][ T6819] simple_read_from_buffer+0xe1/0x170 [ 192.577305][ T6819] proc_fail_nth_read+0x1df/0x250 [ 192.577329][ T6819] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.577352][ T6819] ? rw_verify_area+0x258/0x650 [ 192.577368][ T6819] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.577390][ T6819] vfs_read+0x200/0x980 [ 192.577411][ T6819] ? __pfx___mutex_lock+0x10/0x10 [ 192.577425][ T6819] ? __pfx_vfs_read+0x10/0x10 [ 192.577442][ T6819] ? __fget_files+0x2a/0x420 [ 192.577465][ T6819] ? __fget_files+0x3a0/0x420 [ 192.577484][ T6819] ? __fget_files+0x2a/0x420 [ 192.577510][ T6819] ksys_read+0x145/0x250 [ 192.577528][ T6819] ? __pfx_ksys_read+0x10/0x10 [ 192.577542][ T6819] ? rcu_is_watching+0x15/0xb0 [ 192.577568][ T6819] ? do_syscall_64+0xbe/0x3b0 [ 192.577584][ T6819] do_syscall_64+0xfa/0x3b0 [ 192.577596][ T6819] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.577627][ T6819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.577642][ T6819] ? clear_bhb_loop+0x60/0xb0 [ 192.577660][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.577675][ T6819] RIP: 0033:0x7f65b898d33c [ 192.577692][ T6819] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 192.577704][ T6819] RSP: 002b:00007f65b971f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.577724][ T6819] RAX: ffffffffffffffda RBX: 00007f65b8bb5fa0 RCX: 00007f65b898d33c [ 192.577735][ T6819] RDX: 000000000000000f RSI: 00007f65b971f0a0 RDI: 0000000000000004 [ 192.577744][ T6819] RBP: 00007f65b971f090 R08: 0000000000000000 R09: 0000000000000000 [ 192.577753][ T6819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.577761][ T6819] R13: 0000000000000000 R14: 00007f65b8bb5fa0 R15: 00007ffc76d79078 [ 192.577784][ T6819] [ 192.942132][ T6822] sctp: [Deprecated]: syz.0.244 (pid 6822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.942132][ T6822] Use struct sctp_sack_info instead [ 194.552100][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.558732][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.814706][ T6841] netlink: 128 bytes leftover after parsing attributes in process `syz.2.249'. [ 194.844184][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.249'. [ 194.945198][ T6843] Smack: duplicate mount options [ 194.992847][ T6847] Invalid logical block size (19) [ 197.513592][ T6882] sctp: [Deprecated]: syz.0.262 (pid 6882) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.513592][ T6882] Use struct sctp_sack_info instead [ 197.715686][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 197.752650][ T6884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.263'. [ 197.998023][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 198.017811][ T43] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2007, setting to 1024 [ 198.043334][ T43] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 198.043855][ T6889] netlink: 128 bytes leftover after parsing attributes in process `syz.4.264'. [ 198.059215][ T43] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 198.079445][ T6889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.264'. [ 198.091519][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.101399][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.109983][ T43] usb 4-1: Product: syz [ 198.115686][ T6891] vxcan1 speed is unknown, defaulting to 1000 [ 198.123941][ T43] usb 4-1: Manufacturer: ï”ㅑ陡셎⪔爺ëºî ê®ªå¬ ä¼´ï‘¿å‡¿ì­Šë¿€ì‚„雳ꖞﶿ㻦겲â‚å¡©å¹­ãš…ã¬¥éˆ¼î®›å¿µæŒæ°—ã¡…áŸìœ›î»è³“꼽鳶â§â¦”혣é¢ë¹’⑘쎰ᷠ碆离೔譗렎ì±âƒ¸ç—¶ï¤Šä®ºë‰Šêƒ”ẹ셫ٞ褫凂·å›ã˜§ã´Œì §ç§‹é´ ï¾å¶®á²˜æ“±ä¬™ [ 198.207710][ T43] usb 4-1: SerialNumber: syz [ 198.723883][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.784798][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.974185][ T6874] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.006200][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.017578][ T6916] batadv_slave_1: entered promiscuous mode [ 199.039910][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 199.076737][ T6918] tipc: Started in network mode [ 199.087086][ T6918] tipc: Node identity 0000000000000000000000000000e26c, cluster identity 4711 [ 199.115648][ T6918] tipc: Enabling of bearer rejected, failed to enable media [ 199.191021][ T6892] netlink: 264 bytes leftover after parsing attributes in process `syz.1.265'. [ 199.214622][ T6874] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.374091][ T6892] netlink: 56 bytes leftover after parsing attributes in process `syz.1.265'. [ 199.420010][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 199.420030][ T30] audit: type=1326 audit(1749523277.829:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b898e929 code=0x7ffc0000 [ 199.482655][ T30] audit: type=1326 audit(1749523277.829:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b898e929 code=0x7ffc0000 [ 199.504610][ T30] audit: type=1326 audit(1749523277.869:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b898e929 code=0x7ffc0000 [ 199.529206][ T30] audit: type=1326 audit(1749523277.869:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b898e929 code=0x7ffc0000 [ 199.551513][ T30] audit: type=1326 audit(1749523277.869:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b898e929 code=0x7ffc0000 [ 199.552587][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'. [ 199.574902][ T30] audit: type=1326 audit(1749523277.869:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b898e929 code=0x7ffc0000 [ 199.812961][ T6929] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 199.972700][ T30] audit: type=1326 audit(1749523277.869:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b898e929 code=0x7ffc0000 [ 199.998151][ T6874] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.032169][ T30] audit: type=1326 audit(1749523277.869:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b898e929 code=0x7ffc0000 [ 200.072716][ T30] audit: type=1326 audit(1749523277.889:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b898e929 code=0x7ffc0000 [ 200.102453][ T30] audit: type=1326 audit(1749523277.889:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b898e929 code=0x7ffc0000 [ 200.385501][ T6874] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.375769][ T6874] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.403106][ T6941] kthread_run failed with err -4 [ 201.426158][ T6948] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 201.439428][ T6948] netlink: 'syz.0.281': attribute type 2 has an invalid length. [ 201.494015][ T6874] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.569867][ T6874] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.612896][ T6874] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.644431][ T5919] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 201.754509][ T43] cdc_ncm 4-1:1.0: bind() failure [ 201.785103][ T43] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 201.824568][ T43] cdc_ncm 4-1:1.1: bind() failure [ 201.839398][ T5919] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.863583][ T43] usb 4-1: USB disconnect, device number 3 [ 201.877849][ T5919] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 201.908712][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.917626][ T5919] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 201.929478][ T6961] batadv_slave_1: entered promiscuous mode [ 201.935459][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.961081][ T6961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.286'. [ 201.993932][ T6936] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 202.036597][ T5919] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.238490][ T5956] usb 3-1: USB disconnect, device number 4 [ 202.256044][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 202.426719][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 202.449351][ T43] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 202.466249][ T6971] veth0_vlan: entered allmulticast mode [ 202.470075][ T43] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 202.487695][ T43] usb 4-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 202.499121][ T43] usb 4-1: config 0 has no interface number 0 [ 202.507925][ T43] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 202.522151][ T43] usb 4-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 202.617278][ T6972] veth0_vlan: left promiscuous mode [ 202.626240][ T6972] veth0_vlan: entered promiscuous mode [ 202.629752][ T43] usb 4-1: config 0 has no interface number 0 [ 202.903150][ T43] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 202.987462][ T43] usb 4-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 203.088990][ T43] usb 4-1: config 0 has no interface number 0 [ 203.191351][ T43] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 203.383167][ T43] usb 4-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 203.428430][ T43] usb 4-1: config 0 has no interface number 0 [ 203.451325][ T43] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 203.666713][ T43] usb 4-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 203.680490][ T43] usb 4-1: config 0 has no interface number 0 [ 203.688473][ T43] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 204.352830][ T43] usb 4-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 204.364504][ T43] usb 4-1: config 0 has no interface number 0 [ 204.372252][ T43] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 204.397569][ T43] usb 4-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 204.498752][ T43] usb 4-1: config 0 has no interface number 0 [ 204.552384][ T43] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 204.584535][ T43] usb 4-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 204.643630][ T43] usb 4-1: config 0 has no interface number 0 [ 204.688369][ T43] usb 4-1: New USB device found, idVendor=0421, idProduct=b018, bcdDevice=95.ff [ 204.714903][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.741630][ T43] usb 4-1: Product: syz [ 204.748218][ T6990] veth2: entered promiscuous mode [ 204.753317][ T6990] veth2: entered allmulticast mode [ 204.758691][ T43] usb 4-1: Manufacturer: syz [ 204.763354][ T43] usb 4-1: SerialNumber: syz [ 204.778065][ T43] usb 4-1: config 0 descriptor?? [ 204.810422][ T43] usb 4-1: bad CDC descriptors [ 204.973329][ T5901] usb 4-1: USB disconnect, device number 4 [ 205.034459][ T43] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 205.214507][ T5956] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 205.224347][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 205.234969][ T43] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 205.257017][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.306883][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.372884][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.392319][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.404957][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 205.411705][ T43] usb 3-1: Product: syz [ 205.422157][ T5956] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.434627][ T43] usb 3-1: Manufacturer: syz [ 205.452944][ T43] usb 3-1: SerialNumber: syz [ 205.456551][ T5956] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.508366][ T5956] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.570154][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.594448][ T5901] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 205.611439][ T5956] usb 2-1: Product: syz [ 205.630709][ T5956] usb 2-1: Manufacturer: syz [ 205.637546][ T5956] usb 2-1: SerialNumber: syz [ 205.699201][ T43] usb 3-1: 0:2 : does not exist [ 205.762669][ T43] usb 3-1: USB disconnect, device number 5 [ 205.782991][ T5901] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 205.815028][ T5901] usb 4-1: config 0 has no interface number 0 [ 205.821500][ T5901] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.870414][ T5901] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 205.882371][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.890542][ T5956] usb 2-1: skipping empty audio interface (v1) [ 205.910155][ T5901] usb 4-1: Product: syz [ 205.914475][ T5901] usb 4-1: Manufacturer: syz [ 205.919190][ T5901] usb 4-1: SerialNumber: syz [ 205.929297][ T5901] usb 4-1: config 0 descriptor?? [ 205.975229][ T5901] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 205.998448][ T5956] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 206.029857][ T5956] usb 2-1: USB disconnect, device number 5 [ 206.118127][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 206.214585][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 206.379402][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.606717][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.616984][ T24] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 206.626942][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.632749][ T5901] usb 4-1: USB disconnect, device number 5 [ 206.638730][ T24] usb 5-1: config 0 descriptor?? [ 206.682222][ T5901] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 206.731686][ T7032] binder: 7031:7032 ioctl c0306201 2000000003c0 returned -14 [ 206.770217][ T7032] binder: 7031:7032 ioctl c0306201 200000000440 returned -14 [ 207.394123][ T24] elan 0003:04F3:0755.0002: unbalanced delimiter at end of report description [ 207.476064][ T24] elan 0003:04F3:0755.0002: Hid Parse failed [ 207.526561][ T24] elan 0003:04F3:0755.0002: probe with driver elan failed with error -22 [ 207.574625][ T24] usb 5-1: USB disconnect, device number 8 [ 207.861336][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 207.870425][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 207.936686][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 207.945669][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 208.716036][ T5956] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 209.262740][ T7073] netlink: 64 bytes leftover after parsing attributes in process `syz.2.312'. [ 209.407118][ T7083] process 'syz.0.315' launched '/dev/fd/3' with NULL argv: empty string added [ 209.428035][ T5956] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 209.438973][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.463675][ T5956] usb 5-1: Product: syz [ 209.488403][ T5956] usb 5-1: Manufacturer: syz [ 209.509083][ T5956] usb 5-1: SerialNumber: syz [ 209.542911][ T5956] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 209.630701][ T5901] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 210.340610][ T24] kernel write not supported for file /input/event2 (pid: 24 comm: kworker/1:0) [ 210.514355][ T24] usb 5-1: USB disconnect, device number 9 [ 210.978675][ T5901] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 211.009762][ T5901] ath9k_htc: Failed to initialize the device [ 211.444140][ T24] usb 5-1: ath9k_htc: USB layer deinitialized [ 212.154052][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 212.207083][ T7117] overlayfs: missing 'lowerdir' [ 212.238173][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 213.366598][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 213.366615][ T30] audit: type=1326 audit(1749523804.506:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7124 comm="syz.1.328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97c8f8e929 code=0x0 [ 214.149598][ T7135] kthread_run failed with err -4 [ 214.683932][ T7151] binder: 7149:7151 ioctl c0306201 2000000003c0 returned -14 [ 217.403692][ T7181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.215453][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 218.256524][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 218.369338][ T7199] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 218.492302][ T5901] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 218.646734][ T5901] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 218.660455][ T5901] usb 4-1: config 0 has no interface number 0 [ 218.695842][ T5901] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.747098][ T5901] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 218.756332][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.770231][ T5901] usb 4-1: Product: syz [ 218.779291][ T5901] usb 4-1: Manufacturer: syz [ 218.806977][ T5901] usb 4-1: SerialNumber: syz [ 218.828726][ T5901] usb 4-1: config 0 descriptor?? [ 218.862964][ T5901] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 220.020036][ T980] usb 4-1: USB disconnect, device number 6 [ 220.604462][ T980] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 221.093969][ T7230] netlink: 64 bytes leftover after parsing attributes in process `syz.0.354'. [ 222.575297][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 222.630413][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 222.690861][ T7267] tipc: Enabling of bearer rejected, failed to enable media [ 222.870788][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 224.460499][ T7287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.699133][ T7297] xt_connbytes: Forcing CT accounting to be enabled [ 224.706104][ T7297] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 225.131411][ T7310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.439502][ T7327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'. [ 226.409909][ T7331] xt_connbytes: Forcing CT accounting to be enabled [ 226.448585][ T7319] can: request_module (can-proto-5) failed. [ 226.460295][ T7331] Cannot find set identified by id 0 to match [ 226.770195][ T7335] veth2: entered promiscuous mode [ 226.778186][ T7335] veth2: entered allmulticast mode [ 227.591186][ T7336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.825079][ T7360] netlink: 128 bytes leftover after parsing attributes in process `syz.1.390'. [ 228.834420][ T7360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.390'. [ 229.701096][ T24] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 229.894155][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51 [ 229.908376][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.945058][ T24] usb 4-1: config 0 descriptor?? [ 230.108877][ T24] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4 [ 230.324614][ T24] gspca_sn9c20x: Write register 1000 failed -71 [ 230.369516][ T24] gspca_sn9c20x: Device initialization failed [ 230.431095][ T24] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 230.484723][ T24] usb 4-1: USB disconnect, device number 7 [ 231.563472][ T5839] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 232.099974][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 232.113893][ T5839] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 232.133420][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 232.164642][ T5839] usb 3-1: Product: syz [ 232.168903][ T5839] usb 3-1: Manufacturer: syz [ 232.175171][ T7408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.408'. [ 232.200680][ T5839] usb 3-1: SerialNumber: syz [ 232.226203][ T5839] usb 3-1: config 0 descriptor?? [ 232.624317][ T7410] mmap: syz.3.409 (7410) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 232.683084][ T5839] usb 3-1: USB disconnect, device number 6 [ 232.915690][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 233.103624][ T24] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 233.120842][ T24] usb 1-1: config 0 has no interface number 0 [ 233.141134][ T24] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.170032][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 233.194791][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.217587][ T24] usb 1-1: Product: syz [ 233.221828][ T24] usb 1-1: Manufacturer: syz [ 233.236721][ T24] usb 1-1: SerialNumber: syz [ 233.249645][ T24] usb 1-1: config 0 descriptor?? [ 233.271365][ T24] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 233.965901][ T24] usb 1-1: USB disconnect, device number 7 [ 234.122698][ T24] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 234.155330][ T7431] tipc: Started in network mode [ 234.280043][ T7431] tipc: Node identity 0000000000000000000000000000e26c, cluster identity 4711 [ 234.377218][ T7431] tipc: Enabling of bearer rejected, failed to enable media [ 236.062417][ T7445] loop6: detected capacity change from 0 to 524287999 [ 236.078791][ T7445] buffer_io_error: 6 callbacks suppressed [ 236.084634][ T7445] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.094375][ T7445] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.103956][ T7445] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.113800][ T7445] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.123619][ T7445] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.133628][ T7445] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.143600][ T7445] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.153283][ T7445] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.162184][ T7445] ldm_validate_partition_table(): Disk read failed. [ 236.169757][ T7445] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.179431][ T7445] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.190790][ T7445] Dev loop6: unable to read RDB block 0 [ 236.202469][ T7445] loop6: unable to read partition table [ 236.211304][ T7445] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 238.438505][ T7460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.424'. [ 239.776500][ T7491] netlink: 'syz.4.430': attribute type 1 has an invalid length. [ 240.704776][ T7495] xt_hashlimit: size too large, truncated to 1048576 [ 240.791085][ T7495] xt_hashlimit: max too large, truncated to 1048576 [ 240.847075][ T7497] binder: 7496:7497 ioctl c0306201 2000000003c0 returned -14 [ 241.024214][ T7501] binder: 7498:7501 ioctl c0306201 2000000003c0 returned -14 [ 241.089579][ T7506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.439'. [ 241.138926][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 244.728002][ T7549] FAULT_INJECTION: forcing a failure. [ 244.728002][ T7549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.889699][ T7549] CPU: 0 UID: 0 PID: 7549 Comm: syz.2.454 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 244.889728][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.889741][ T7549] Call Trace: [ 244.889749][ T7549] [ 244.889758][ T7549] dump_stack_lvl+0x189/0x250 [ 244.889796][ T7549] ? __pfx____ratelimit+0x10/0x10 [ 244.889829][ T7549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.889860][ T7549] ? __pfx__printk+0x10/0x10 [ 244.889882][ T7549] ? __might_fault+0xb0/0x130 [ 244.889918][ T7549] should_fail_ex+0x414/0x560 [ 244.889948][ T7549] _copy_from_user+0x2d/0xb0 [ 244.889970][ T7549] __sys_bpf+0x1ed/0x860 [ 244.889998][ T7549] ? __pfx___sys_bpf+0x10/0x10 [ 244.890035][ T7549] ? ksys_write+0x22a/0x250 [ 244.890062][ T7549] ? __pfx_ksys_write+0x10/0x10 [ 244.890082][ T7549] ? rcu_is_watching+0x15/0xb0 [ 244.890121][ T7549] __x64_sys_bpf+0x7c/0x90 [ 244.890154][ T7549] do_syscall_64+0xfa/0x3b0 [ 244.890172][ T7549] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.890204][ T7549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.890224][ T7549] ? clear_bhb_loop+0x60/0xb0 [ 244.890249][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.890269][ T7549] RIP: 0033:0x7f4ab018e929 [ 244.890287][ T7549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.890304][ T7549] RSP: 002b:00007f4ab0fc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.890325][ T7549] RAX: ffffffffffffffda RBX: 00007f4ab03b5fa0 RCX: 00007f4ab018e929 [ 244.890339][ T7549] RDX: 0000000000000028 RSI: 0000200000000800 RDI: 0000000000000012 [ 244.890352][ T7549] RBP: 00007f4ab0fc5090 R08: 0000000000000000 R09: 0000000000000000 [ 244.890365][ T7549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.890377][ T7549] R13: 0000000000000000 R14: 00007f4ab03b5fa0 R15: 00007fff28000318 [ 244.890409][ T7549] [ 245.485003][ T5912] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 245.635433][ T5912] usb 5-1: device descriptor read/64, error -71 [ 245.742802][ T7558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.754424][ T7558] batadv_slave_1: entered promiscuous mode [ 245.778102][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 246.036145][ T5912] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 246.197172][ T5912] usb 5-1: device descriptor read/64, error -71 [ 247.067339][ T5912] usb usb5-port1: attempt power cycle [ 247.100576][ T7564] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 247.541321][ T5912] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 247.591825][ T5912] usb 5-1: device descriptor read/8, error -71 [ 248.641618][ T7589] loop6: detected capacity change from 0 to 524287999 [ 248.657536][ T7589] buffer_io_error: 7 callbacks suppressed [ 248.663433][ T7589] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.673185][ T7589] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.682757][ T7589] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.692490][ T7589] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.702333][ T7589] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.712232][ T7589] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.722181][ T7589] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.731916][ T7589] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.740987][ T7589] ldm_validate_partition_table(): Disk read failed. [ 248.748622][ T7589] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.758360][ T7589] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.770653][ T7589] Dev loop6: unable to read RDB block 0 [ 248.783722][ T7589] loop6: unable to read partition table [ 248.792778][ T7589] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 250.538326][ T5956] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 250.902710][ T7615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.445960][ T5956] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 251.500307][ T5956] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 251.536722][ T5956] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 251.570592][ T5912] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 251.583559][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.641063][ T7605] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 251.695641][ T5956] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 252.520259][ T5912] usb 2-1: New USB device found, idVendor=8420, idProduct=157a, bcdDevice=77.64 [ 252.535631][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.543873][ T5912] usb 2-1: Product: syz [ 252.548285][ T5912] usb 2-1: Manufacturer: syz [ 252.553100][ T5912] usb 2-1: SerialNumber: syz [ 252.576208][ T5912] usb 2-1: config 0 descriptor?? [ 252.757947][ T7644] binder: BINDER_SET_CONTEXT_MGR already set [ 252.798769][ T7644] binder: 7642:7644 ioctl 4018620d 200000000040 returned -16 [ 252.827851][ T5956] usb 3-1: USB disconnect, device number 7 [ 252.857246][ T7644] binder: 7642:7644 ioctl c0306201 2000000003c0 returned -14 [ 253.622775][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.676366][ T7647] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 253.791083][ T980] usb 2-1: USB disconnect, device number 6 [ 253.990425][ T7663] netlink: 'syz.3.488': attribute type 10 has an invalid length. [ 254.007455][ T7663] bond0: (slave wlan1): Opening slave failed [ 254.314068][ T7676] netlink: 64 bytes leftover after parsing attributes in process `syz.4.496'. [ 256.459324][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.465688][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.113440][ T7702] overlayfs: failed to resolve 'fowner>00000000000000000000': -2 [ 260.794512][ T7743] 9pnet_fd: Insufficient options for proto=fd [ 261.495830][ T7748] netlink: 'syz.0.516': attribute type 11 has an invalid length. [ 262.120136][ T7762] loop6: detected capacity change from 0 to 524287999 [ 262.135504][ T7762] buffer_io_error: 7 callbacks suppressed [ 262.141385][ T7762] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.151020][ T7762] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.160386][ T7762] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.169925][ T7762] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.179368][ T7762] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.189237][ T7762] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.199030][ T7762] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.208625][ T7762] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.217841][ T7762] ldm_validate_partition_table(): Disk read failed. [ 262.225268][ T7762] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.234938][ T7762] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.246472][ T7762] Dev loop6: unable to read RDB block 0 [ 262.258287][ T7762] loop6: unable to read partition table [ 262.267322][ T7762] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 264.251415][ T7771] netlink: 'syz.2.526': attribute type 39 has an invalid length. [ 264.364708][ T7773] netlink: 64 bytes leftover after parsing attributes in process `syz.4.527'. [ 265.123740][ T7791] sctp: [Deprecated]: syz.0.534 (pid 7791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.123740][ T7791] Use struct sctp_sack_info instead [ 265.803465][ T7784] netlink: 'syz.2.533': attribute type 11 has an invalid length. [ 266.431000][ T7803] lo: entered allmulticast mode [ 266.483671][ T7806] lo: left allmulticast mode [ 266.641280][ T7809] netlink: 'syz.4.539': attribute type 1 has an invalid length. [ 267.327761][ T7803] vxcan1 speed is unknown, defaulting to 1000 [ 268.402893][ T7835] dummy0: entered promiscuous mode [ 268.435265][ T7835] dummy0: left promiscuous mode [ 270.619294][ T7890] Invalid logical block size (19) [ 270.948911][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 271.806723][ T5956] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 271.985797][ T5956] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 272.035569][ T5956] usb 5-1: config 0 has no interface number 0 [ 272.077454][ T5956] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.151910][ T5956] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.225026][ T5956] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 272.272785][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.332718][ T5956] usb 5-1: config 0 descriptor?? [ 273.737804][ T5956] usbhid 5-1:0.32: can't add hid device: -71 [ 273.811369][ T5956] usbhid 5-1:0.32: probe with driver usbhid failed with error -71 [ 273.904585][ T5956] usb 5-1: USB disconnect, device number 14 [ 277.326452][ C1] sched: DL replenish lagged too much [ 277.691138][ T7928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.567'. [ 278.557156][ T7931] ======================================================= [ 278.557156][ T7931] WARNING: The mand mount option has been deprecated and [ 278.557156][ T7931] and is ignored by this kernel. Remove the mand [ 278.557156][ T7931] option from the mount to silence this warning. [ 278.557156][ T7931] ======================================================= [ 283.741967][ T7955] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.575'. [ 289.517859][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'. [ 289.545675][ T7961] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.555122][ T7961] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.563939][ T7961] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.572742][ T7961] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.597608][ T7961] vxlan0: entered promiscuous mode [ 299.083371][ T7975] netlink: 'syz.0.581': attribute type 1 has an invalid length. [ 305.176711][ T5901] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 307.325436][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.340590][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.350394][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.362323][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.382574][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.449226][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.482519][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.490523][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.500821][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.517108][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.940639][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.950582][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.963180][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.974358][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.988342][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.693479][ T5144] Bluetooth: hci0: command tx timeout [ 310.074963][ T7862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.177075][ T8014] dvmrp0: entered allmulticast mode [ 310.242867][ T8007] vxcan1 speed is unknown, defaulting to 1000 [ 311.190902][ T5144] Bluetooth: hci1: command tx timeout [ 311.792651][ T5144] Bluetooth: hci0: command tx timeout [ 312.694426][ T8000] vxcan1 speed is unknown, defaulting to 1000 [ 313.236318][ T5144] Bluetooth: hci1: command tx timeout [ 313.386139][ T8007] chnl_net:caif_netlink_parms(): no params data found [ 313.416441][ T8021] vxcan1 speed is unknown, defaulting to 1000 [ 313.872402][ T5144] Bluetooth: hci0: command tx timeout [ 314.013487][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.033975][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.041294][ T8007] bridge_slave_0: entered allmulticast mode [ 314.071804][ T8007] bridge_slave_0: entered promiscuous mode [ 314.129016][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.150014][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.169980][ T8007] bridge_slave_1: entered allmulticast mode [ 314.194258][ T8007] bridge_slave_1: entered promiscuous mode [ 314.394100][ T8007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.410805][ T8007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.617823][ T8007] team0: Port device team_slave_0 added [ 314.664688][ T8007] team0: Port device team_slave_1 added [ 315.316734][ T5144] Bluetooth: hci1: command tx timeout [ 315.954057][ T5144] Bluetooth: hci0: command tx timeout [ 317.392570][ T5144] Bluetooth: hci1: command tx timeout [ 317.802943][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.809314][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.591985][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.601300][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.609979][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.618358][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.639768][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.712523][ T5827] Bluetooth: hci5: command tx timeout [ 328.925948][ T5144] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 328.935410][ T5144] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 328.943575][ T5144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 328.952127][ T5144] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 328.967469][ T5144] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 329.793598][ T5144] Bluetooth: hci5: command tx timeout [ 329.937515][ T5827] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 329.951880][ T5827] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 329.960329][ T5827] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 329.972897][ T5827] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 329.982627][ T5827] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 331.076074][ T5144] Bluetooth: hci6: command tx timeout [ 331.858441][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.875469][ T5827] Bluetooth: hci5: command tx timeout [ 331.884807][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.952998][ T8007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.042986][ T5144] Bluetooth: hci7: command tx timeout [ 332.083076][ T8000] chnl_net:caif_netlink_parms(): no params data found [ 332.123434][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.130461][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.189758][ T8007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.409993][ T8078] vxcan1 speed is unknown, defaulting to 1000 [ 332.508658][ T8007] hsr_slave_0: entered promiscuous mode [ 332.528880][ T8007] hsr_slave_1: entered promiscuous mode [ 332.555764][ T8007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.574730][ T8007] Cannot create hsr debugfs directory [ 332.850441][ T8067] vxcan1 speed is unknown, defaulting to 1000 [ 333.157084][ T5144] Bluetooth: hci6: command tx timeout [ 333.318100][ T8073] vxcan1 speed is unknown, defaulting to 1000 [ 333.901001][ T7862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.958996][ T5827] Bluetooth: hci5: command tx timeout [ 334.081509][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.097400][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.112769][ T5827] Bluetooth: hci7: command tx timeout [ 334.124703][ T8000] bridge_slave_0: entered allmulticast mode [ 334.148526][ T8000] bridge_slave_0: entered promiscuous mode [ 334.268402][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.292681][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.315541][ T8000] bridge_slave_1: entered allmulticast mode [ 334.347496][ T8000] bridge_slave_1: entered promiscuous mode [ 334.773965][ T8000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.791605][ T8000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.094117][ T8000] team0: Port device team_slave_0 added [ 335.126256][ T8000] team0: Port device team_slave_1 added [ 335.232776][ T5827] Bluetooth: hci6: command tx timeout [ 335.373710][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.380724][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.420256][ T8000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.542287][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.558550][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.590600][ T8000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.906604][ T8007] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.084763][ T8007] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.123597][ T8007] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.195809][ T5827] Bluetooth: hci7: command tx timeout [ 336.235624][ T8007] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 336.336727][ T8000] hsr_slave_0: entered promiscuous mode [ 336.349032][ T8000] hsr_slave_1: entered promiscuous mode [ 336.359511][ T8000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.372705][ T8000] Cannot create hsr debugfs directory [ 336.379281][ T8078] chnl_net:caif_netlink_parms(): no params data found [ 336.420150][ T8073] chnl_net:caif_netlink_parms(): no params data found [ 336.677741][ T8067] chnl_net:caif_netlink_parms(): no params data found [ 337.276329][ T8073] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.291601][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.301793][ T8073] bridge_slave_0: entered allmulticast mode [ 337.313167][ T5827] Bluetooth: hci6: command tx timeout [ 337.333161][ T8073] bridge_slave_0: entered promiscuous mode [ 337.463104][ T8073] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.470311][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.486908][ T8073] bridge_slave_1: entered allmulticast mode [ 337.498610][ T8073] bridge_slave_1: entered promiscuous mode [ 337.760899][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.780432][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.790344][ T8078] bridge_slave_0: entered allmulticast mode [ 337.807008][ T8078] bridge_slave_0: entered promiscuous mode [ 337.821653][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.831668][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.849491][ T8078] bridge_slave_1: entered allmulticast mode [ 337.870970][ T8078] bridge_slave_1: entered promiscuous mode [ 337.934455][ T8073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.952962][ T8067] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.960153][ T8067] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.972330][ T8067] bridge_slave_0: entered allmulticast mode [ 337.984641][ T8067] bridge_slave_0: entered promiscuous mode [ 338.121203][ T8073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.169208][ T8067] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.190199][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.203295][ T8067] bridge_slave_1: entered allmulticast mode [ 338.219055][ T8067] bridge_slave_1: entered promiscuous mode [ 338.278120][ T5827] Bluetooth: hci7: command tx timeout [ 338.316274][ T8078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.428709][ T8078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.535885][ T8073] team0: Port device team_slave_0 added [ 338.561206][ T8067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.584091][ T8067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.692326][ T8078] team0: Port device team_slave_0 added [ 338.737742][ T8073] team0: Port device team_slave_1 added [ 338.849924][ T8078] team0: Port device team_slave_1 added [ 338.940628][ T8073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.952707][ T8073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.990349][ T8073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.186593][ T8073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.203907][ T8073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.245001][ T8073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.269545][ T8067] team0: Port device team_slave_0 added [ 339.286705][ T8067] team0: Port device team_slave_1 added [ 339.367464][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.380387][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.414756][ T8078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.442240][ T8000] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 339.554854][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.561871][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.600647][ T8078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.620260][ T8000] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 339.779698][ T8000] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 339.814512][ T8000] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 339.842035][ T8007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.869759][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.878292][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.918372][ T8067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.941592][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.951455][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.989439][ T8067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.076843][ T8073] hsr_slave_0: entered promiscuous mode [ 340.096256][ T8073] hsr_slave_1: entered promiscuous mode [ 340.108886][ T8073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.120059][ T8073] Cannot create hsr debugfs directory [ 340.429391][ T8078] hsr_slave_0: entered promiscuous mode [ 340.451294][ T8078] hsr_slave_1: entered promiscuous mode [ 340.462096][ T8078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.477749][ T8078] Cannot create hsr debugfs directory [ 340.712342][ T8067] hsr_slave_0: entered promiscuous mode [ 340.720630][ T8067] hsr_slave_1: entered promiscuous mode [ 340.735808][ T8067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.749030][ T8067] Cannot create hsr debugfs directory [ 340.961139][ T8007] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.090851][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.098183][ T7853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.308777][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.316027][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.049066][ T8000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.160024][ T8000] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.260114][ T8078] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 342.391121][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.398397][ T5973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.436692][ T8078] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 342.511593][ T8078] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 342.589285][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.596556][ T5973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.800351][ T8078] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 343.156801][ T8073] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 343.191652][ T8073] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 343.253498][ T8007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.318593][ T8073] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 343.425548][ T8073] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 343.609859][ T8067] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 343.830338][ T8067] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 343.880883][ T8067] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 344.042594][ T8067] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 344.318169][ T8000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.489345][ T8078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.790075][ T8078] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.874947][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.882157][ T7858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.964388][ T8073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.017119][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.024385][ T7858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.277014][ T8073] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.350803][ T8007] veth0_vlan: entered promiscuous mode [ 345.410939][ T8078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.439013][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.446289][ T6035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.498387][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.505664][ T6035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.579476][ T8007] veth1_vlan: entered promiscuous mode [ 345.638360][ T8067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.795896][ T8067] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.895617][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.902868][ T7853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.979402][ T8007] veth0_macvtap: entered promiscuous mode [ 346.076684][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.083941][ T5973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.146679][ T8007] veth1_macvtap: entered promiscuous mode [ 346.301235][ T8000] veth0_vlan: entered promiscuous mode [ 346.387739][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.500650][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.540246][ T8000] veth1_vlan: entered promiscuous mode [ 346.580558][ T8078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.605636][ T8007] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.667106][ T8007] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.692798][ T8007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.701585][ T8007] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.986410][ T8000] veth0_macvtap: entered promiscuous mode [ 347.098038][ T8000] veth1_macvtap: entered promiscuous mode [ 347.312328][ T8000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.438198][ T8000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.545677][ T8000] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.591694][ T8000] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.626373][ T8000] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.666455][ T8000] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.713732][ T7855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.721623][ T7855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.898344][ T8073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.973596][ T8067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.096557][ T6035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.128325][ T6035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.510398][ T8078] veth0_vlan: entered promiscuous mode [ 348.604413][ T7858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.612317][ T7858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.740607][ T8078] veth1_vlan: entered promiscuous mode [ 348.907775][ T8178] netlink: 64 bytes leftover after parsing attributes in process `syz.6.582'. [ 348.986575][ T7858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.052286][ T7858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.218601][ T8078] veth0_macvtap: entered promiscuous mode [ 349.355326][ T8078] veth1_macvtap: entered promiscuous mode [ 349.667287][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.736552][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.6.608'. [ 349.849441][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.967391][ T8078] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.062734][ T8078] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.071520][ T8078] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.169756][ T8078] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.171475][ T7862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.837244][ T7862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.417665][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.427314][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.436008][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.444583][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.470226][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.551671][ T8198] vxcan1 speed is unknown, defaulting to 1000 [ 370.764305][ T7853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.795191][ T7853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.951973][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.981792][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.126222][ T8067] veth0_vlan: entered promiscuous mode [ 371.153884][ T8073] veth0_vlan: entered promiscuous mode [ 371.220041][ T8073] veth1_vlan: entered promiscuous mode [ 371.322147][ T8067] veth1_vlan: entered promiscuous mode [ 371.511654][ T8073] veth0_macvtap: entered promiscuous mode [ 371.568047][ T5144] Bluetooth: hci2: command tx timeout [ 371.611311][ T8073] veth1_macvtap: entered promiscuous mode [ 371.650755][ T8067] veth0_macvtap: entered promiscuous mode [ 371.738666][ T8067] veth1_macvtap: entered promiscuous mode [ 371.837253][ T8073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.912061][ T8067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.999002][ T8067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.031359][ T8073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.063084][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.9.612'. [ 372.086647][ T8067] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.114288][ T8067] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.135333][ T8067] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.163539][ T8067] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.278390][ T8073] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.299721][ T8073] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.311504][ T8073] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.326939][ T8073] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.966345][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.012926][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.169682][ T8198] chnl_net:caif_netlink_parms(): no params data found [ 373.234799][ T6331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.260910][ T6331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.498795][ T6331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.538040][ T6331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.633030][ T5144] Bluetooth: hci2: command tx timeout [ 373.679458][ T7860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.718673][ T7860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.917397][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.973515][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.980889][ T8198] bridge_slave_0: entered allmulticast mode [ 374.074142][ T8198] bridge_slave_0: entered promiscuous mode [ 374.161487][ T8198] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.204452][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.247838][ T8198] bridge_slave_1: entered allmulticast mode [ 374.269889][ T8198] bridge_slave_1: entered promiscuous mode [ 375.266125][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.276077][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.286029][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.295718][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.305111][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.678017][ T8198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.722453][ T5827] Bluetooth: hci2: command tx timeout [ 375.795983][ T8198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.551089][ T8198] team0: Port device team_slave_0 added [ 376.596066][ T8222] vxcan1 speed is unknown, defaulting to 1000 [ 376.704264][ T8198] team0: Port device team_slave_1 added [ 377.424781][ T5827] Bluetooth: hci4: command tx timeout [ 377.798628][ T5827] Bluetooth: hci2: command tx timeout [ 377.972071][ T8198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.002590][ T8198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.732909][ T8198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.744889][ T5827] Bluetooth: hci4: command tx timeout [ 380.751087][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.775023][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.885683][ T8198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.752663][ T5827] Bluetooth: hci4: command tx timeout [ 385.985155][ T8198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.015888][ T5827] Bluetooth: hci4: command tx timeout [ 386.605024][ T8198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.542930][ T8222] chnl_net:caif_netlink_parms(): no params data found [ 427.826170][ T5144] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 427.835673][ T5144] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 427.844918][ T5144] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 427.854596][ T5144] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 427.867087][ T5144] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 428.079878][ T5827] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 428.102258][ T5827] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 428.110909][ T5827] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 428.119799][ T5827] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 428.134238][ T5827] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 428.254003][ T5144] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 428.264522][ T5144] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 428.276556][ T5144] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 428.285448][ T5144] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 428.302072][ T5144] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 429.953213][ T5827] Bluetooth: hci8: command tx timeout [ 430.193022][ T5827] Bluetooth: hci9: command tx timeout [ 430.352761][ T5827] Bluetooth: hci10: command tx timeout [ 430.481621][ T8290] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 430.494836][ T8290] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 430.504248][ T8290] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 430.524187][ T8290] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 430.532372][ T8290] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 432.033098][ T8290] Bluetooth: hci8: command tx timeout [ 432.273273][ T8290] Bluetooth: hci9: command tx timeout [ 432.433055][ T8290] Bluetooth: hci10: command tx timeout [ 432.520730][ T8290] Bluetooth: hci0: command 0x0406 tx timeout [ 432.527182][ T8289] Bluetooth: hci1: command 0x0406 tx timeout [ 432.592927][ T8289] Bluetooth: hci11: command tx timeout [ 434.112766][ T8289] Bluetooth: hci8: command tx timeout [ 434.353177][ T8289] Bluetooth: hci9: command tx timeout [ 434.512960][ T8289] Bluetooth: hci10: command tx timeout [ 434.673303][ T8289] Bluetooth: hci11: command tx timeout [ 435.083127][ T8290] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 435.108046][ T8290] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 435.123897][ T8290] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 435.132152][ T8290] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 435.149929][ T8290] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 436.194364][ T8289] Bluetooth: hci8: command tx timeout [ 436.433308][ T8289] Bluetooth: hci9: command tx timeout [ 436.593578][ T8289] Bluetooth: hci10: command tx timeout [ 436.753078][ T8289] Bluetooth: hci11: command tx timeout [ 438.835889][ T8289] Bluetooth: hci11: command tx timeout [ 440.681644][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.690092][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.953705][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 453.078783][ T8303] Bluetooth: hci6: command 0x0406 tx timeout [ 453.092872][ T8303] Bluetooth: hci7: command 0x0406 tx timeout [ 472.354228][ T8302] Bluetooth: hci12: command tx timeout [ 475.292018][ T8302] Bluetooth: hci12: command tx timeout [ 477.313035][ T8302] Bluetooth: hci12: command tx timeout [ 479.392837][ T8302] Bluetooth: hci12: command tx timeout [ 489.029283][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 489.044954][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 489.053564][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 489.063841][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 489.072230][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 489.081915][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 489.090735][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 489.099481][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 489.115919][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 489.152761][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 489.333400][ T8290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 489.342984][ T8290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 489.360397][ T8290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.369998][ T8290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.386252][ T8290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 491.155332][ T8290] Bluetooth: hci1: command tx timeout [ 491.208874][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 491.218465][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 491.226864][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 491.234693][ T8302] Bluetooth: hci0: command tx timeout [ 491.244144][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 491.252148][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 491.473260][ T51] Bluetooth: hci2: command tx timeout [ 493.237623][ T51] Bluetooth: hci1: command tx timeout [ 493.321107][ T51] Bluetooth: hci4: command tx timeout [ 493.327029][ T8290] Bluetooth: hci0: command tx timeout [ 493.552995][ T51] Bluetooth: hci2: command tx timeout [ 495.253622][ T8290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 495.265895][ T8290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 495.274619][ T8290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 495.283012][ T8290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 495.290810][ T8290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 495.312895][ T8290] Bluetooth: hci1: command tx timeout [ 495.393111][ T51] Bluetooth: hci0: command tx timeout [ 495.398651][ T8290] Bluetooth: hci4: command tx timeout [ 495.632895][ T8290] Bluetooth: hci2: command tx timeout [ 497.316508][ T8290] Bluetooth: hci5: command tx timeout [ 497.397486][ T8290] Bluetooth: hci1: command tx timeout [ 497.472898][ T8290] Bluetooth: hci4: command tx timeout [ 497.478387][ T8290] Bluetooth: hci0: command tx timeout [ 497.715174][ T8290] Bluetooth: hci2: command tx timeout [ 499.393563][ T8290] Bluetooth: hci5: command tx timeout [ 499.552744][ T8290] Bluetooth: hci4: command tx timeout [ 501.473063][ T51] Bluetooth: hci5: command tx timeout [ 502.129315][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.142649][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.563251][ T8290] Bluetooth: hci5: command tx timeout [ 550.273478][ T8289] Bluetooth: hci8: command 0x0406 tx timeout [ 550.279652][ T8289] Bluetooth: hci9: command 0x0406 tx timeout [ 552.755076][ T8290] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 552.764835][ T8290] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 552.773174][ T8290] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 552.810068][ T8290] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 552.823498][ T8290] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 553.219306][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 553.229955][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 553.238617][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 553.247247][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 553.264207][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 553.347931][ T8302] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 553.358200][ T8302] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 553.372244][ T8302] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 553.381906][ T8302] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 553.392241][ T8302] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 553.537659][ T8302] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 553.546844][ T8302] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 553.556182][ T8302] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 553.574783][ T8302] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 553.589000][ T8302] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 554.913194][ T8302] Bluetooth: hci6: command tx timeout [ 555.312964][ T8302] Bluetooth: hci7: command tx timeout [ 555.399322][ T8302] Bluetooth: hci10: command 0x0406 tx timeout [ 555.405703][ T8289] Bluetooth: hci11: command 0x0406 tx timeout [ 555.472808][ T51] Bluetooth: hci13: command tx timeout [ 555.635952][ T51] Bluetooth: hci14: command tx timeout [ 555.755644][ T8290] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 555.765261][ T8290] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 555.778489][ T8290] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 555.788970][ T8290] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 555.797063][ T8290] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 556.992994][ T8290] Bluetooth: hci6: command tx timeout [ 557.392882][ T8290] Bluetooth: hci7: command tx timeout [ 557.552884][ T8290] Bluetooth: hci13: command tx timeout [ 557.713005][ T8290] Bluetooth: hci14: command tx timeout [ 557.872937][ T8290] Bluetooth: hci15: command tx timeout [ 559.073365][ T8290] Bluetooth: hci6: command tx timeout [ 559.473314][ T8290] Bluetooth: hci7: command tx timeout [ 559.632882][ T8290] Bluetooth: hci13: command tx timeout [ 559.793151][ T8290] Bluetooth: hci14: command tx timeout [ 559.952789][ T8290] Bluetooth: hci15: command tx timeout [ 561.153034][ T8290] Bluetooth: hci6: command tx timeout [ 561.554612][ T8290] Bluetooth: hci7: command tx timeout [ 561.714995][ T8290] Bluetooth: hci13: command tx timeout [ 561.883270][ T8290] Bluetooth: hci14: command tx timeout [ 562.037317][ T8290] Bluetooth: hci15: command tx timeout [ 563.562690][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.569080][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.112839][ T8290] Bluetooth: hci15: command tx timeout [ 591.237763][ T8290] Bluetooth: hci12: command 0x0406 tx timeout [ 611.191422][ T5827] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 611.201458][ T5827] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 611.211351][ T5827] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 611.235481][ T5827] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 611.243639][ T5827] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 611.374036][ T8289] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 611.391103][ T8289] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 611.400007][ T8289] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 611.408530][ T8289] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 611.416786][ T8289] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 611.727639][ T8289] Bluetooth: hci1: command 0x0406 tx timeout [ 611.734171][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 611.740229][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 612.223507][ T8290] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 612.241148][ T8290] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 612.250801][ T8290] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 612.260659][ T8290] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 612.270197][ T8290] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 613.312656][ T8290] Bluetooth: hci16: command tx timeout [ 613.474200][ T8290] Bluetooth: hci17: command tx timeout [ 613.499637][ T8302] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 613.511444][ T8302] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 613.520469][ T8302] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 613.533899][ T8302] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 613.541738][ T8302] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 614.352787][ T8302] Bluetooth: hci18: command tx timeout [ 615.392731][ T8302] Bluetooth: hci16: command tx timeout [ 615.553474][ T8302] Bluetooth: hci17: command tx timeout [ 615.632615][ T8302] Bluetooth: hci19: command tx timeout [ 616.258486][ T51] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 616.268121][ T51] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 616.277486][ T51] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 616.286683][ T51] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 616.299398][ T51] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 616.432840][ T51] Bluetooth: hci18: command tx timeout [ 616.839994][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 617.472644][ T8290] Bluetooth: hci16: command tx timeout [ 617.638829][ T8290] Bluetooth: hci17: command tx timeout [ 617.712830][ T8290] Bluetooth: hci19: command tx timeout [ 618.353157][ T8290] Bluetooth: hci20: command tx timeout [ 618.513074][ T8290] Bluetooth: hci18: command tx timeout [ 618.592959][ T31] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 618.600682][ T31] Not tainted 6.16.0-rc1-syzkaller #0 [ 618.622874][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 618.631626][ T31] task:kworker/u8:0 state:D stack:21160 pid:12 tgid:12 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 618.683470][ T31] Workqueue: events_unbound linkwatch_event [ 618.699370][ T31] Call Trace: [ 618.719010][ T31] [ 618.722036][ T31] __schedule+0x16a2/0x4cb0 [ 618.802763][ T31] ? __kasan_slab_free+0x62/0x70 [ 618.807803][ T31] ? process_scheduled_works+0xade/0x17b0 [ 618.885218][ T31] ? __lock_acquire+0xa81/0xd20 [ 618.890182][ T31] ? schedule+0x165/0x360 [ 618.928175][ T31] ? __pfx___schedule+0x10/0x10 [ 618.951759][ T31] ? schedule+0x91/0x360 [ 618.972602][ T31] schedule+0x165/0x360 [ 618.976879][ T31] schedule_preempt_disabled+0x13/0x30 [ 618.982390][ T31] __mutex_lock+0x724/0xe80 [ 618.997967][ T31] ? __mutex_lock+0x51b/0xe80 [ 619.017665][ T31] ? linkwatch_event+0xe/0x60 [ 619.039413][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 619.052620][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 619.060676][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 619.077585][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 619.087903][ T31] linkwatch_event+0xe/0x60 [ 619.098164][ T31] process_scheduled_works+0xade/0x17b0 [ 619.108087][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 619.119949][ T31] worker_thread+0x8a0/0xda0 [ 619.132698][ T31] kthread+0x70e/0x8a0 [ 619.136868][ T31] ? __pfx_worker_thread+0x10/0x10 [ 619.142040][ T31] ? __pfx_kthread+0x10/0x10 [ 619.171506][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 619.182926][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.192271][ T31] ? __pfx_kthread+0x10/0x10 [ 619.202044][ T31] ret_from_fork+0x3fc/0x770 [ 619.211802][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 619.221986][ T31] ? __switch_to_asm+0x39/0x70 [ 619.231918][ T31] ? __switch_to_asm+0x33/0x70 [ 619.255726][ T31] ? __pfx_kthread+0x10/0x10 [ 619.260425][ T31] ret_from_fork_asm+0x1a/0x30 [ 619.279325][ T31] [ 619.283069][ T31] INFO: task dhcpcd:5489 blocked for more than 143 seconds. [ 619.290412][ T31] Not tainted 6.16.0-rc1-syzkaller #0 [ 619.306623][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 619.322661][ T31] task:dhcpcd state:D stack:21384 pid:5489 tgid:5489 ppid:5488 task_flags:0x400140 flags:0x00004002 [ 619.343418][ T31] Call Trace: [ 619.346768][ T31] [ 619.349753][ T31] __schedule+0x16a2/0x4cb0 [ 619.372894][ T31] ? stack_trace_save+0x9c/0xe0 [ 619.377835][ T31] ? __lock_acquire+0xa81/0xd20 [ 619.396561][ T31] ? schedule+0x165/0x360 [ 619.400987][ T31] ? __pfx___schedule+0x10/0x10 [ 619.415544][ T31] ? schedule+0x91/0x360 [ 619.419880][ T31] schedule+0x165/0x360 [ 619.431820][ T31] schedule_preempt_disabled+0x13/0x30 [ 619.440907][ T31] __mutex_lock+0x724/0xe80 [ 619.452169][ T31] ? __mutex_lock+0x51b/0xe80 [ 619.492638][ T31] ? rtnl_dumpit+0x92/0x200 [ 619.497252][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 619.502348][ T31] ? __build_skb_around+0x257/0x3e0 [ 619.522593][ T31] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 619.528064][ T31] rtnl_dumpit+0x92/0x200 [ 619.549628][ T31] netlink_dump+0x62a/0xe20 [ 619.554694][ T8290] Bluetooth: hci16: command tx timeout [ 619.560600][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 619.581301][ T31] ? netlink_lookup+0x30/0x200 [ 619.588259][ T31] ? netlink_lookup+0x30/0x200 [ 619.610971][ T31] ? netlink_lookup+0x30/0x200 [ 619.615939][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 619.621203][ T31] rtnetlink_rcv_msg+0x9eb/0xb70 [ 619.645208][ T31] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 619.650674][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 619.665642][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 619.681754][ T31] ? __pfx_rtnl_dumpit+0x10/0x10 [ 619.690184][ T31] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 619.702131][ T31] netlink_rcv_skb+0x208/0x470 [ 619.713287][ T8290] Bluetooth: hci17: command tx timeout [ 619.731376][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 619.739340][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.752931][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 619.758210][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 619.772388][ T31] netlink_unicast+0x75b/0x8d0 [ 619.780430][ T31] netlink_sendmsg+0x805/0xb30 [ 619.793156][ T8290] Bluetooth: hci19: command tx timeout [ 619.809887][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.815804][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 619.821159][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.846662][ T31] __sock_sendmsg+0x219/0x270 [ 619.851455][ T31] __sys_sendto+0x3bd/0x520 [ 619.865897][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 619.871023][ T31] ? count_memcg_event_mm+0x21/0x260 [ 619.936995][ T31] ? exc_page_fault+0x76/0xf0 [ 619.941865][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 619.963108][ T31] __x64_sys_sendto+0xde/0x100 [ 619.967992][ T31] do_syscall_64+0xfa/0x3b0 [ 619.989618][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.000787][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.011246][ T31] ? clear_bhb_loop+0x60/0xb0 [ 620.021892][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.032057][ T31] RIP: 0033:0x7f1f8bfbc407 [ 620.042376][ T31] RSP: 002b:00007ffc1f4861f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 620.051302][ T31] RAX: ffffffffffffffda RBX: 00007f1f8bf32740 RCX: 00007f1f8bfbc407 [ 620.078638][ T31] RDX: 0000000000000014 RSI: 00007ffc1f486280 RDI: 000000000000000f [ 620.101562][ T31] RBP: 00007ffc1f486264 R08: 00007ffc1f486264 R09: 000000000000000c [ 620.110892][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc1f4a6b70 [ 620.127814][ T31] R13: 00007f1f8bf326c8 R14: 00007ffc1f486360 R15: 00007ffc1f496940 [ 620.140178][ T31] [ 620.148977][ T31] INFO: task kworker/u8:10:6035 blocked for more than 144 seconds. [ 620.162273][ T31] Not tainted 6.16.0-rc1-syzkaller #0 [ 620.188512][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 620.210876][ T31] task:kworker/u8:10 state:D stack:22600 pid:6035 tgid:6035 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 620.232518][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 620.238859][ T31] Call Trace: [ 620.242173][ T31] [ 620.254414][ T31] __schedule+0x16a2/0x4cb0 [ 620.259021][ T31] ? __lock_acquire+0xa81/0xd20 [ 620.271340][ T31] ? schedule+0x165/0x360 [ 620.279406][ T31] ? __pfx___schedule+0x10/0x10 [ 620.310181][ T31] ? schedule+0x91/0x360 [ 620.325971][ T31] schedule+0x165/0x360 [ 620.330231][ T31] schedule_preempt_disabled+0x13/0x30 [ 620.342598][ T31] __mutex_lock+0x724/0xe80 [ 620.347192][ T31] ? look_up_lock_class+0x74/0x170 [ 620.352368][ T31] ? __mutex_lock+0x51b/0xe80 [ 620.372620][ T31] ? addrconf_verify_work+0x19/0x30 [ 620.377917][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 620.401788][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 620.423058][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 620.428359][ T31] addrconf_verify_work+0x19/0x30 [ 620.433811][ T51] Bluetooth: hci20: command tx timeout [ 620.450209][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 620.458672][ T31] process_scheduled_works+0xade/0x17b0 [ 620.471637][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 620.480421][ T31] worker_thread+0x8a0/0xda0 [ 620.496524][ T31] kthread+0x70e/0x8a0 [ 620.500693][ T31] ? __pfx_worker_thread+0x10/0x10 [ 620.525794][ T31] ? __pfx_kthread+0x10/0x10 [ 620.530476][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 620.547454][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.556877][ T31] ? __pfx_kthread+0x10/0x10 [ 620.561551][ T31] ret_from_fork+0x3fc/0x770 [ 620.572206][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 620.581514][ T31] ? __switch_to_asm+0x39/0x70 [ 620.592226][ T31] ? __switch_to_asm+0x33/0x70 [ 620.612650][ T51] Bluetooth: hci18: command tx timeout [ 620.632839][ T31] ? __pfx_kthread+0x10/0x10 [ 620.637522][ T31] ret_from_fork_asm+0x1a/0x30 [ 620.642345][ T31] [ 620.659627][ T31] INFO: task kworker/u8:16:7862 blocked for more than 145 seconds. [ 620.672125][ T31] Not tainted 6.16.0-rc1-syzkaller #0 [ 620.684518][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 620.702585][ T31] task:kworker/u8:16 state:D stack:21160 pid:7862 tgid:7862 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 620.730849][ T31] Workqueue: netns cleanup_net [ 620.742509][ T31] Call Trace: [ 620.745863][ T31] [ 620.748842][ T31] __schedule+0x16a2/0x4cb0 [ 620.769097][ T31] ? __lock_acquire+0xa81/0xd20 [ 620.779129][ T31] ? schedule+0x165/0x360 [ 620.788621][ T31] ? __pfx___schedule+0x10/0x10 [ 620.802672][ T31] ? schedule+0x91/0x360 [ 620.807006][ T31] schedule+0x165/0x360 [ 620.811215][ T31] schedule_preempt_disabled+0x13/0x30 [ 620.826002][ T31] __mutex_lock+0x724/0xe80 [ 620.830582][ T31] ? __mutex_lock+0x51b/0xe80 [ 620.843180][ T31] ? rtnl_net_dev_lock+0x257/0x2f0 [ 620.848376][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 620.862676][ T31] ? rtnl_net_dev_lock+0x36/0x2f0 [ 620.867775][ T31] ? rtnl_net_dev_lock+0x36/0x2f0 [ 620.891762][ T31] rtnl_net_dev_lock+0x257/0x2f0 [ 620.905836][ T31] register_netdevice_notifier_dev_net+0x33/0x240 [ 620.912339][ T31] nsim_create+0xd31/0xef0 [ 620.928719][ T31] __nsim_dev_port_add+0x70a/0xb20 [ 620.938921][ T31] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 620.952969][ T31] ? queue_delayed_work_on+0x1f7/0x280 [ 620.958525][ T31] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 620.975108][ T31] ? timer_init_key+0x171/0x2d0 [ 620.980054][ T31] nsim_dev_port_add_all+0x35/0xe0 [ 620.993231][ T31] nsim_dev_reload_up+0x451/0x780 [ 620.998351][ T31] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 621.018532][ T31] devlink_reload+0x4e9/0x8d0 [ 621.027425][ T31] ? __pfx_devlink_reload+0x10/0x10 [ 621.038404][ T31] ? xa_get_mark+0x70f/0x7b0 [ 621.047141][ T31] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 621.062624][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 621.068703][ T31] ? class_remove_file_ns+0x121/0x160 [ 621.087744][ T31] ops_undo_list+0x187/0x990 [ 621.102755][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 621.121499][ T31] cleanup_net+0x4c5/0x800 [ 621.126445][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 621.131452][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.142471][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 621.148278][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 621.172745][ T31] process_scheduled_works+0xade/0x17b0 [ 621.178418][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 621.198791][ T31] worker_thread+0x8a0/0xda0 [ 621.222112][ T31] kthread+0x70e/0x8a0 [ 621.226608][ T31] ? __pfx_worker_thread+0x10/0x10 [ 621.231785][ T31] ? __pfx_kthread+0x10/0x10 [ 621.242503][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.247791][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.265959][ T31] ? __pfx_kthread+0x10/0x10 [ 621.270636][ T31] ret_from_fork+0x3fc/0x770 [ 621.290165][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 621.298124][ T31] ? __switch_to_asm+0x39/0x70 [ 621.317823][ T31] ? __switch_to_asm+0x33/0x70 [ 621.326504][ T31] ? __pfx_kthread+0x10/0x10 [ 621.331183][ T31] ret_from_fork_asm+0x1a/0x30 [ 621.345566][ T31] [ 621.348733][ T31] INFO: task syz-executor:8067 blocked for more than 146 seconds. [ 621.362590][ T31] Not tainted 6.16.0-rc1-syzkaller #0 [ 621.373003][ T31] Blocked by coredump. [ 621.377646][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 621.406758][ T31] task:syz-executor state:D stack:21960 pid:8067 tgid:8067 ppid:1 task_flags:0x40054c flags:0x00004006 [ 621.432956][ T31] Call Trace: [ 621.436317][ T31] [ 621.439289][ T31] __schedule+0x16a2/0x4cb0 [ 621.453779][ T31] ? stack_trace_save+0x9c/0xe0 [ 621.458720][ T31] ? __lock_acquire+0xa81/0xd20 [ 621.474148][ T31] ? schedule+0x165/0x360 [ 621.478585][ T31] ? __pfx___schedule+0x10/0x10 [ 621.506081][ T31] ? schedule+0x91/0x360 [ 621.510437][ T31] schedule+0x165/0x360 [ 621.528732][ T31] schedule_preempt_disabled+0x13/0x30 [ 621.541180][ T31] __mutex_lock+0x724/0xe80 [ 621.552998][ T31] ? __mutex_lock+0x51b/0xe80 [ 621.557776][ T31] ? tun_chr_close+0x3e/0x1c0 [ 621.572509][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 621.577656][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 621.591785][ T31] tun_chr_close+0x3e/0x1c0 [ 621.596703][ T31] __fput+0x449/0xa70 [ 621.600764][ T31] task_work_run+0x1d1/0x260 [ 621.620771][ T31] ? __pfx_task_work_run+0x10/0x10 [ 621.629822][ T31] ? kmem_cache_free+0x18f/0x400 [ 621.646810][ T31] do_exit+0x6ad/0x22e0 [ 621.651063][ T31] ? do_raw_spin_lock+0x121/0x290 [ 621.672493][ T31] ? __pfx_do_exit+0x10/0x10 [ 621.677213][ T31] do_group_exit+0x21c/0x2d0 [ 621.681846][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.696410][ T31] get_signal+0x125e/0x1310 [ 621.701035][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 621.711709][ T31] ? fput_close_sync+0x119/0x200 [ 621.738691][ T31] ? kmem_cache_free+0x309/0x400 [ 621.747896][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 621.763251][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 621.768817][ T31] exit_to_user_mode_loop+0x75/0x110 [ 621.782910][ T31] do_syscall_64+0x2bd/0x3b0 [ 621.787574][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.802074][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.808603][ T31] ? clear_bhb_loop+0x60/0xb0 [ 621.826546][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.842479][ T31] RIP: 0033:0x7fac5f58d33c [ 621.846976][ T31] RSP: 002b:00007ffe2d45a2e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 621.868307][ T31] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fac5f58d33c [ 621.876997][ T51] Bluetooth: hci19: command tx timeout [ 621.892653][ T31] RDX: 0000000000000030 RSI: 00007ffe2d45a3a0 RDI: 00000000000000f9 [ 621.900697][ T31] RBP: 00007ffe2d45a34c R08: 0000000000000000 R09: 0079746972756365 [ 621.918378][ T31] R10: 00007fac5f7817e0 R11: 0000000000000246 R12: 0000000000000009 [ 621.948919][ T31] R13: 0000555590f71590 R14: 000000000005e837 R15: 00007ffe2d45a3a0 [ 621.964427][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 621.982826][ T31] [ 621.987711][ T31] INFO: task syz-executor:8073 blocked for more than 146 seconds. [ 622.041523][ T31] Not tainted 6.16.0-rc1-syzkaller #0 [ 622.055585][ T31] Blocked by coredump. [ 622.060247][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 622.077818][ T31] task:syz-executor state:D stack:21960 pid:8073 tgid:8073 ppid:1 task_flags:0x40054c flags:0x00004006 [ 622.103414][ T31] Call Trace: [ 622.106765][ T31] [ 622.109744][ T31] __schedule+0x16a2/0x4cb0 [ 622.124899][ T31] ? stack_trace_save+0x9c/0xe0 [ 622.142022][ T31] ? __lock_acquire+0xa81/0xd20 [ 622.148977][ T31] ? schedule+0x165/0x360 [ 622.162264][ T31] ? __pfx___schedule+0x10/0x10 [ 622.172345][ T31] ? schedule+0x91/0x360 [ 622.182778][ T31] schedule+0x165/0x360 [ 622.187006][ T31] schedule_preempt_disabled+0x13/0x30 [ 622.204643][ T31] __mutex_lock+0x724/0xe80 [ 622.209207][ T31] ? __mutex_lock+0x51b/0xe80 [ 622.224432][ T31] ? tun_chr_close+0x3e/0x1c0 [ 622.229190][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 622.247979][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 622.256888][ T31] tun_chr_close+0x3e/0x1c0 [ 622.261471][ T31] __fput+0x449/0xa70 [ 622.275449][ T31] task_work_run+0x1d1/0x260 [ 622.280204][ T31] ? __pfx_task_work_run+0x10/0x10 [ 622.296442][ T31] ? kmem_cache_free+0x18f/0x400 [ 622.301558][ T31] do_exit+0x6ad/0x22e0 [ 622.312493][ T31] ? do_raw_spin_lock+0x121/0x290 [ 622.317603][ T31] ? __pfx_do_exit+0x10/0x10 [ 622.322349][ T31] do_group_exit+0x21c/0x2d0 [ 622.346128][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.351432][ T31] get_signal+0x125e/0x1310 [ 622.361777][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 622.371902][ T31] ? __pfx___x64_sys_wait4+0x10/0x10 [ 622.385507][ T31] ? fput_close_sync+0x119/0x200 [ 622.390535][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 622.406256][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 622.411829][ T31] exit_to_user_mode_loop+0x75/0x110 [ 622.423145][ T31] do_syscall_64+0x2bd/0x3b0 [ 622.427811][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.452465][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.458630][ T31] ? clear_bhb_loop+0x60/0xb0 [ 622.474777][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.480743][ T31] RIP: 0033:0x7fefd1384b97 [ 622.495233][ T31] RSP: 002b:00007ffdfa2d4eb0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 622.512694][ T31] RAX: fffffffffffffe00 RBX: 0000000000000007 RCX: 00007fefd1384b97 [ 622.520731][ T31] RDX: 0000000040000000 RSI: 00007ffdfa2d4f1c RDI: 00000000ffffffff [ 622.533713][ T8290] Bluetooth: hci20: command tx timeout [ 622.556993][ T31] RBP: 00007ffdfa2d4f1c R08: 0000000000000000 R09: 0000000000000000 [ 622.570035][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 622.583456][ T31] R13: 000055555befd590 R14: 000000000005ebac R15: 00007ffdfa2d4f70 [ 622.591526][ T31] [ 622.605663][ T31] INFO: task syz-executor:8078 blocked for more than 147 seconds. [ 622.622799][ T31] Not tainted 6.16.0-rc1-syzkaller #0 [ 622.628741][ T31] Blocked by coredump. [ 622.650323][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 622.671562][ T31] task:syz-executor state:D stack:21224 pid:8078 tgid:8078 ppid:1 task_flags:0x40054c flags:0x00004006 [ 622.703595][ T31] Call Trace: [ 622.706944][ T31] [ 622.709909][ T31] __schedule+0x16a2/0x4cb0 [ 622.726685][ T31] ? stack_trace_save+0x9c/0xe0 [ 622.731628][ T31] ? __lock_acquire+0xa81/0xd20 [ 622.741522][ T31] ? schedule+0x165/0x360 [ 622.762674][ T31] ? __pfx___schedule+0x10/0x10 [ 622.767686][ T31] ? schedule+0x91/0x360 [ 622.776176][ T31] schedule+0x165/0x360 [ 622.780419][ T31] schedule_preempt_disabled+0x13/0x30 [ 622.795293][ T31] __mutex_lock+0x724/0xe80 [ 622.799873][ T31] ? __mutex_lock+0x51b/0xe80 [ 622.812131][ T31] ? tun_chr_close+0x3e/0x1c0 [ 622.823583][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 622.828707][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 622.847995][ T31] tun_chr_close+0x3e/0x1c0 [ 622.860218][ T31] __fput+0x449/0xa70 [ 622.872647][ T31] task_work_run+0x1d1/0x260 [ 622.877335][ T31] ? __pfx_task_work_run+0x10/0x10 [ 622.892529][ T31] ? kmem_cache_free+0x18f/0x400 [ 622.897651][ T31] do_exit+0x6ad/0x22e0 [ 622.901865][ T31] ? do_raw_spin_lock+0x121/0x290 [ 622.918586][ T31] ? __pfx_do_exit+0x10/0x10 [ 622.929347][ T31] do_group_exit+0x21c/0x2d0 [ 622.938984][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.957454][ T31] get_signal+0x125e/0x1310 [ 622.962087][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 622.978543][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 622.988360][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 623.002701][ T31] exit_to_user_mode_loop+0x75/0x110 [ 623.008076][ T31] do_syscall_64+0x2bd/0x3b0 [ 623.025984][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.031357][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.049808][ T31] ? clear_bhb_loop+0x60/0xb0 [ 623.071777][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.081727][ T31] RIP: 0033:0x7fc78738e221 [ 623.092610][ T31] RSP: 002b:00007ffe6d702ab0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 623.101095][ T31] RAX: 0000000000000003 RBX: 0000000000000014 RCX: 00007fc78738e221 [ 623.121818][ T31] RDX: 0000000000090800 RSI: 00007fc787410e59 RDI: 00000000ffffff9c [ 623.131476][ T31] RBP: 00007ffe6d702b5c R08: 0000000000000000 R09: 0000000000000000 [ 623.159890][ T31] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000006 [ 623.172722][ T31] R13: 0000000000000000 R14: 000000000005ef9c R15: 00007ffe6d702bb0 [ 623.180784][ T31] [ 623.194249][ T31] INFO: task syz-executor:8222 blocked for more than 147 seconds. [ 623.202119][ T31] Not tainted 6.16.0-rc1-syzkaller #0 [ 623.220436][ T31] Blocked by coredump. [ 623.229633][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 623.248651][ T31] task:syz-executor state:D stack:22760 pid:8222 tgid:8222 ppid:1 task_flags:0x40054c flags:0x00004006 [ 623.278828][ T31] Call Trace: [ 623.282182][ T31] [ 623.291792][ T31] __schedule+0x16a2/0x4cb0 [ 623.300723][ T31] ? stack_trace_save+0x9c/0xe0 [ 623.312154][ T31] ? __lock_acquire+0xa81/0xd20 [ 623.320521][ T31] ? schedule+0x165/0x360 [ 623.334682][ T31] ? __pfx___schedule+0x10/0x10 [ 623.339635][ T31] ? schedule+0x91/0x360 [ 623.352825][ T31] schedule+0x165/0x360 [ 623.357063][ T31] schedule_preempt_disabled+0x13/0x30 [ 623.377646][ T31] __mutex_lock+0x724/0xe80 [ 623.382245][ T31] ? __mutex_lock+0x51b/0xe80 [ 623.392721][ T31] ? tun_chr_close+0x3e/0x1c0 [ 623.397485][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 623.417186][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 623.422394][ T31] tun_chr_close+0x3e/0x1c0 [ 623.435989][ T31] __fput+0x449/0xa70 [ 623.440042][ T31] task_work_run+0x1d1/0x260 [ 623.457217][ T31] ? __pfx_task_work_run+0x10/0x10 [ 623.472078][ T31] ? kmem_cache_free+0x18f/0x400 [ 623.492555][ T31] do_exit+0x6ad/0x22e0 [ 623.496808][ T31] ? do_raw_spin_lock+0x121/0x290 [ 623.501881][ T31] ? __pfx_do_exit+0x10/0x10 [ 623.521268][ T31] do_group_exit+0x21c/0x2d0 [ 623.527209][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.541194][ T31] get_signal+0x125e/0x1310 [ 623.546252][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 623.551869][ T31] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 623.582078][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 623.599254][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 623.609159][ T31] exit_to_user_mode_loop+0x75/0x110 [ 623.623716][ T31] do_syscall_64+0x2bd/0x3b0 [ 623.628399][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.642547][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.648728][ T31] ? clear_bhb_loop+0x60/0xb0 [ 623.670150][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.684308][ T31] RIP: 0033:0x7fe827f907bc [ 623.688798][ T31] RSP: 002b:00007ffcbb4e1f10 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 623.708415][ T31] RAX: 000000000000002c RBX: 00007fe828ce4620 RCX: 00007fe827f907bc [ 623.734101][ T31] RDX: 000000000000002c RSI: 00007fe828ce4670 RDI: 0000000000000003 [ 623.742247][ T31] RBP: 0000000000000000 R08: 00007ffcbb4e1f64 R09: 000000000000000c [ 623.761667][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 623.777441][ T31] R13: 0000000000000000 R14: 00007fe828ce4670 R15: 0000000000000000 [ 623.801634][ T31] [ 623.805315][ T31] INFO: task syz-executor:8280 blocked for more than 148 seconds. [ 623.822801][ T31] Not tainted 6.16.0-rc1-syzkaller #0 [ 623.828759][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 623.850837][ T31] task:syz-executor state:D stack:25992 pid:8280 tgid:8280 ppid:1 task_flags:0x400140 flags:0x00004004 [ 623.873526][ T31] Call Trace: [ 623.876891][ T31] [ 623.879861][ T31] __schedule+0x16a2/0x4cb0 [ 623.895970][ T31] ? __lock_acquire+0xa81/0xd20 [ 623.900907][ T31] ? schedule+0x165/0x360 [ 623.916453][ T31] ? __pfx___schedule+0x10/0x10 [ 623.921421][ T31] ? schedule+0x91/0x360 [ 623.931852][ T31] schedule+0x165/0x360 [ 623.940999][ T31] schedule_preempt_disabled+0x13/0x30 [ 623.960386][ T31] __mutex_lock+0x724/0xe80 [ 623.965498][ T31] ? __mutex_lock+0x51b/0xe80 [ 623.970243][ T31] ? ib_get_eth_speed+0x151/0x7b0 [ 623.989359][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 624.000248][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 624.015125][ T31] ? _raw_spin_unlock+0x28/0x50 [ 624.020069][ T31] ? ib_device_get_netdev+0x220/0x2f0 [ 624.036076][ T31] ib_get_eth_speed+0x151/0x7b0 [ 624.041022][ T31] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 624.055966][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 624.061254][ T31] ? rxe_query_port+0x6b/0x3b0 [ 624.078177][ T31] rxe_query_port+0x93/0x3b0 [ 624.091614][ T31] ib_query_port+0x170/0x830 [ 624.098359][ T31] ib_setup_port_attrs+0x24e/0x2070 [ 624.111539][ T31] ? rcu_is_watching+0x15/0xb0 [ 624.120258][ T31] ? device_add+0x9bb/0xb50 [ 624.132628][ T31] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 624.138336][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 624.153029][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 624.159112][ T31] ? device_add+0x70b/0xb50 [ 624.192773][ T31] add_one_compat_dev+0x3d6/0x5c0 [ 624.197914][ T31] rdma_dev_init_net+0x1dd/0x270 [ 624.212480][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 624.218061][ T31] ops_init+0x35c/0x5c0 [ 624.222270][ T31] setup_net+0x219/0x4b0 [ 624.239337][ T31] ? __pfx_setup_net+0x10/0x10 [ 624.248492][ T31] ? copy_net_ns+0x304/0x4d0 [ 624.260012][ T31] ? down_read_killable+0x1d1/0x350 [ 624.269574][ T31] copy_net_ns+0x31b/0x4d0 [ 624.288172][ T31] create_new_namespaces+0x3f3/0x720 [ 624.300352][ T31] ? security_capable+0x7e/0x2e0 [ 624.309696][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 624.321240][ T31] ksys_unshare+0x4c8/0x8c0 [ 624.329966][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 624.344363][ T31] __x64_sys_unshare+0x38/0x50 [ 624.349207][ T31] do_syscall_64+0xfa/0x3b0 [ 624.363677][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.370854][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.389721][ T31] ? clear_bhb_loop+0x60/0xb0 [ 624.403979][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.409947][ T31] RIP: 0033:0x7f5ceed90127 [ 624.423421][ T31] RSP: 002b:00007ffe5365a048 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 624.431923][ T31] RAX: ffffffffffffffda RBX: 00007f5ceefb5f40 RCX: 00007f5ceed90127 [ 624.442447][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 624.456262][ T31] RBP: 00007f5ceefb6738 R08: 0000000000000000 R09: 0000000000000000 [ 624.473582][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 624.481639][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 624.506228][ T31] [ 624.509391][ T31] INFO: task syz-executor:8283 blocked for more than 149 seconds. [ 624.533310][ T31] Not tainted 6.16.0-rc1-syzkaller #0 [ 624.539275][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.557590][ T31] task:syz-executor state:D stack:25992 pid:8283 tgid:8283 ppid:1 task_flags:0x400140 flags:0x00004004 [ 624.583750][ T31] Call Trace: [ 624.591436][ T31] [ 624.595035][ T8290] Bluetooth: hci20: command tx timeout [ 624.615772][ T31] __schedule+0x16a2/0x4cb0 [ 624.620375][ T31] ? arch_stack_walk+0xfc/0x150 [ 624.632486][ T31] ? __lock_acquire+0xa81/0xd20 [ 624.637431][ T31] ? schedule+0x165/0x360 [ 624.641818][ T31] ? __pfx___schedule+0x10/0x10 [ 624.656021][ T31] ? schedule+0x91/0x360 [ 624.660349][ T31] schedule+0x165/0x360 [ 624.670582][ T31] schedule_preempt_disabled+0x13/0x30 [ 624.694915][ T31] __mutex_lock+0x724/0xe80 [ 624.699496][ T31] ? __mutex_lock+0x51b/0xe80 [ 624.712800][ T31] ? register_netdevice_notifier_net+0x1a/0xa0 [ 624.719028][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 624.741475][ T31] ? net_generic+0x1e/0x240 [ 624.751353][ T31] ? net_generic+0x1e/0x240 [ 624.762764][ T31] register_netdevice_notifier_net+0x1a/0xa0 [ 624.768835][ T31] ops_init+0x35c/0x5c0 [ 624.784488][ T31] setup_net+0x219/0x4b0 [ 624.788821][ T31] ? __pfx_setup_net+0x10/0x10 [ 624.810714][ T31] ? copy_net_ns+0x304/0x4d0 [ 624.818917][ T31] ? down_read_killable+0x1d1/0x350 [ 624.831489][ T31] copy_net_ns+0x31b/0x4d0 [ 624.843853][ T31] create_new_namespaces+0x3f3/0x720 [ 624.849239][ T31] ? security_capable+0x7e/0x2e0 [ 624.866499][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 624.872313][ T31] ksys_unshare+0x4c8/0x8c0 [ 624.882707][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 624.887816][ T31] ? rcu_is_watching+0x15/0xb0 [ 624.909290][ T31] __x64_sys_unshare+0x38/0x50 [ 624.920183][ T31] do_syscall_64+0xfa/0x3b0 [ 624.929881][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.940073][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.953681][ T31] ? clear_bhb_loop+0x60/0xb0 [ 624.958446][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.974616][ T31] RIP: 0033:0x7f9607990127 [ 624.979099][ T31] RSP: 002b:00007fffb25832a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 625.009550][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.027480][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.034009][ T31] RAX: ffffffffffffffda RBX: 00007f9607bb5f40 RCX: 00007f9607990127 [ 625.042035][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 625.086525][ T31] RBP: 00007f9607bb6738 R08: 0000000000000000 R09: 0000000000000000 [ 625.108230][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 625.120611][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 625.144153][ T31] [ 625.147346][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 625.167094][ T31] INFO: task syz-executor:8285 blocked for more than 149 seconds. [ 625.182896][ T31] Not tainted 6.16.0-rc1-syzkaller #0 [ 625.188852][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 625.217332][ T31] task:syz-executor state:D stack:25992 pid:8285 tgid:8285 ppid:1 task_flags:0x400140 flags:0x00004004 [ 625.242085][ T31] Call Trace: [ 625.245655][ T31] [ 625.248632][ T31] __schedule+0x16a2/0x4cb0 [ 625.262488][ T31] ? __lock_acquire+0xa81/0xd20 [ 625.267427][ T31] ? schedule+0x165/0x360 [ 625.271808][ T31] ? __pfx___schedule+0x10/0x10 [ 625.286470][ T31] ? schedule+0x91/0x360 [ 625.290802][ T31] schedule+0x165/0x360 [ 625.313349][ T31] schedule_preempt_disabled+0x13/0x30 [ 625.318904][ T31] __mutex_lock+0x724/0xe80 [ 625.334300][ T31] ? __mutex_lock+0x51b/0xe80 [ 625.339061][ T31] ? rtnl_newlink+0x8db/0x1c70 [ 625.352657][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 625.357764][ T31] ? ns_capable+0x8a/0xf0 [ 625.362142][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 625.379718][ T31] rtnl_newlink+0x8db/0x1c70 [ 625.387116][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 625.392243][ T31] ? __lock_acquire+0xab9/0xd20 [ 625.404430][ T31] ? __lock_acquire+0xab9/0xd20 [ 625.413154][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 625.418431][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 625.439459][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 625.448236][ T31] ? kernel_text_address+0xa5/0xe0 [ 625.462687][ T31] ? __kernel_text_address+0xd/0x40 [ 625.467960][ T31] ? unwind_get_return_address+0x4d/0x90 [ 625.485764][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 625.492003][ T31] ? arch_stack_walk+0xfc/0x150 [ 625.503086][ T31] ? __lock_acquire+0xab9/0xd20 [ 625.517468][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 625.527654][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 625.541604][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 625.552012][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 625.564949][ T31] netlink_rcv_skb+0x208/0x470 [ 625.569804][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 625.589477][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 625.600927][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 625.614625][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 625.619926][ T31] netlink_unicast+0x75b/0x8d0 [ 625.636030][ T31] netlink_sendmsg+0x805/0xb30 [ 625.640890][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.659953][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 625.668178][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.682725][ T31] __sock_sendmsg+0x219/0x270 [ 625.687498][ T31] __sys_sendto+0x3bd/0x520 [ 625.692045][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 625.709347][ T31] ? fput_close_sync+0x119/0x200 [ 625.730429][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 625.736173][ T31] __x64_sys_sendto+0xde/0x100 [ 625.740999][ T31] do_syscall_64+0xfa/0x3b0 [ 625.759135][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.770904][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.780450][ T31] ? clear_bhb_loop+0x60/0xb0 [ 625.792822][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.798793][ T31] RIP: 0033:0x7f0a2a3907bc [ 625.831443][ T31] RSP: 002b:00007ffedd666350 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 625.840329][ T31] RAX: ffffffffffffffda RBX: 00007f0a2b0e4620 RCX: 00007f0a2a3907bc [ 625.852489][ T31] RDX: 000000000000002c RSI: 00007f0a2b0e4670 RDI: 0000000000000003 [ 625.860531][ T31] RBP: 0000000000000000 R08: 00007ffedd6663a4 R09: 000000000000000c [ 625.887933][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 625.902643][ T31] R13: 0000000000000000 R14: 00007f0a2b0e4670 R15: 0000000000000000 [ 625.910714][ T31] [ 625.929574][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 625.941298][ T31] INFO: task syz-executor:8288 blocked for more than 150 seconds. [ 625.956586][ T31] Not tainted 6.16.0-rc1-syzkaller #0 [ 625.969808][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 625.991329][ T31] task:syz-executor state:D stack:25992 pid:8288 tgid:8288 ppid:1 task_flags:0x400140 flags:0x00004006 [ 626.033133][ T31] Call Trace: [ 626.036500][ T31] [ 626.039470][ T31] __schedule+0x16a2/0x4cb0 [ 626.053469][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 626.058767][ T31] ? __lock_acquire+0xa81/0xd20 [ 626.072436][ T31] ? schedule+0x165/0x360 [ 626.076855][ T31] ? __pfx___schedule+0x10/0x10 [ 626.081768][ T31] ? schedule+0x91/0x360 [ 626.092486][ T31] schedule+0x165/0x360 [ 626.096727][ T31] schedule_preempt_disabled+0x13/0x30 [ 626.102235][ T31] __mutex_lock+0x724/0xe80 [ 626.119703][ T31] ? setup_net+0x219/0x4b0 [ 626.145088][ T31] ? copy_net_ns+0x31b/0x4d0 [ 626.149773][ T31] ? __mutex_lock+0x51b/0xe80 [ 626.165423][ T31] ? register_nexthop_notifier+0x80/0x210 [ 626.171240][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 626.182583][ T31] ? __lock_acquire+0xab9/0xd20 [ 626.187538][ T31] register_nexthop_notifier+0x80/0x210 [ 626.206549][ T31] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 626.218558][ T31] ? __asan_memset+0x22/0x50 [ 626.231568][ T31] ops_init+0x35c/0x5c0 [ 626.244767][ T31] setup_net+0x219/0x4b0 [ 626.249115][ T31] ? __pfx_setup_net+0x10/0x10 [ 626.264484][ T31] ? copy_net_ns+0x304/0x4d0 [ 626.269157][ T31] ? down_read_killable+0x1d1/0x350 [ 626.282782][ T31] copy_net_ns+0x31b/0x4d0 [ 626.287282][ T31] create_new_namespaces+0x3f3/0x720 [ 626.302287][ T31] ? security_capable+0x7e/0x2e0 [ 626.311544][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 626.330284][ T31] ksys_unshare+0x4c8/0x8c0 [ 626.335464][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 626.340566][ T31] __x64_sys_unshare+0x38/0x50 [ 626.363042][ T31] do_syscall_64+0xfa/0x3b0 [ 626.367639][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.381819][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.388523][ T31] ? clear_bhb_loop+0x60/0xb0 [ 626.402619][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.408588][ T31] RIP: 0033:0x7fcab2b90127 [ 626.425333][ T31] RSP: 002b:00007ffea1867ad8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 626.442684][ T31] RAX: ffffffffffffffda RBX: 00007fcab2db5f40 RCX: 00007fcab2b90127 [ 626.450734][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 626.474858][ T31] RBP: 00007fcab2db6738 R08: 0000000000000000 R09: 0000000000000000 [ 626.491648][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 626.501968][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 626.520482][ T31] [ 626.524140][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 626.549492][ T31] INFO: task syz-executor:8293 blocked for more than 151 seconds. [ 626.559383][ T31] Not tainted 6.16.0-rc1-syzkaller #0 [ 626.574788][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.596331][ T31] task:syz-executor state:D stack:25992 pid:8293 tgid:8293 ppid:1 task_flags:0x400140 flags:0x00004006 [ 626.621546][ T31] Call Trace: [ 626.626257][ T31] [ 626.629252][ T31] __schedule+0x16a2/0x4cb0 [ 626.645820][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 626.651129][ T31] ? __lock_acquire+0xa81/0xd20 [ 626.665920][ T31] ? schedule+0x165/0x360 [ 626.670382][ T31] ? __pfx___schedule+0x10/0x10 [ 626.690839][ T31] ? schedule+0x91/0x360 [ 626.698611][ T31] schedule+0x165/0x360 [ 626.712791][ T31] schedule_preempt_disabled+0x13/0x30 [ 626.718336][ T31] __mutex_lock+0x724/0xe80 [ 626.732868][ T31] ? setup_net+0x219/0x4b0 [ 626.742201][ T31] ? copy_net_ns+0x31b/0x4d0 [ 626.757015][ T31] ? __mutex_lock+0x51b/0xe80 [ 626.761785][ T31] ? register_nexthop_notifier+0x80/0x210 [ 626.777433][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 626.789786][ T31] ? __lock_acquire+0xab9/0xd20 [ 626.806713][ T31] register_nexthop_notifier+0x80/0x210 [ 626.812358][ T31] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 626.822677][ T31] ? __asan_memset+0x22/0x50 [ 626.827344][ T31] ops_init+0x35c/0x5c0 [ 626.831557][ T31] setup_net+0x219/0x4b0 [ 626.859507][ T31] ? __pfx_setup_net+0x10/0x10 [ 626.864637][ T31] ? copy_net_ns+0x304/0x4d0 [ 626.869280][ T31] ? down_read_killable+0x1d1/0x350 [ 626.887064][ T31] copy_net_ns+0x31b/0x4d0 [ 626.891578][ T31] create_new_namespaces+0x3f3/0x720 [ 626.916181][ T31] ? security_capable+0x7e/0x2e0 [ 626.921231][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 626.940273][ T31] ksys_unshare+0x4c8/0x8c0 [ 626.952791][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 626.957915][ T31] __x64_sys_unshare+0x38/0x50 [ 626.972128][ T31] do_syscall_64+0xfa/0x3b0 [ 626.977105][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.982374][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.001456][ T31] ? clear_bhb_loop+0x60/0xb0 [ 627.021232][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.033034][ T31] RIP: 0033:0x7fdadd190127 [ 627.037540][ T31] RSP: 002b:00007ffdece57ea8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 627.059667][ T31] RAX: ffffffffffffffda RBX: 00007fdadd3b5f40 RCX: 00007fdadd190127 [ 627.069779][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 627.086756][ T31] RBP: 00007fdadd3b6738 R08: 0000000000000000 R09: 0000000000000000 [ 627.102561][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 627.110606][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 627.133988][ T31] [ 627.137095][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 627.159845][ T31] [ 627.159845][ T31] Showing all locks held in the system: [ 627.169681][ T31] 3 locks held by kworker/0:1/10: [ 627.182836][ T31] #0: ffff8880330e0948 ((wq_completion)wg-kex-wg2#18){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 627.206462][ T31] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 627.265858][ T31] #2: ffff88807e2fc890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbd0 [ 627.288651][ T31] 3 locks held by kworker/u8:0/12: [ 627.297966][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 627.316808][ T31] #1: ffffc90000117bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 627.337362][ T31] #2: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 627.350797][ T31] 1 lock held by khungtaskd/31: [ 627.372515][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 627.391812][ T31] 2 locks held by dhcpcd/5489: [ 627.397081][ T31] #0: ffff888048a216d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 627.417059][ T31] #1: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 627.441794][ T31] 2 locks held by getty/5584: [ 627.449379][ T31] #0: ffff88803090b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 627.477167][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 627.500953][ T31] 3 locks held by kworker/1:4/5919: [ 627.507029][ T31] 2 locks held by kworker/1:5/5944: [ 627.512279][ T31] 2 locks held by kworker/1:6/5945: [ 627.527249][ T31] 2 locks held by kworker/1:7/5946: [ 627.540548][ T31] 3 locks held by kworker/u8:10/6035: [ 627.550976][ T31] #0: ffff88814c454148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 627.578890][ T31] #1: ffffc9000aff7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 627.608205][ T31] #2: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 627.622595][ T31] 6 locks held by kworker/u8:16/7862: [ 627.628038][ T31] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 627.658176][ T31] #1: ffffc9001c85fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 627.682456][ T31] #2: ffffffff8f4f1150 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 627.691879][ T31] #3: ffff88805eb3a0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 627.721003][ T31] #4: ffff88805eb3b250 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 627.741482][ T31] #5: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 627.751337][ T31] 1 lock held by syz.3.593/8021: [ 627.772928][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x87/0x1f0 [ 627.781854][ T31] 1 lock held by syz-executor/8067: [ 627.799198][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 627.813761][ T31] 1 lock held by syz-executor/8073: [ 627.819022][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 627.842846][ T31] 1 lock held by syz-executor/8078: [ 627.848132][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 627.877386][ T31] 1 lock held by syz.5.580/8190: [ 627.892984][ T31] 1 lock held by syz-executor/8198: [ 627.898259][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 627.923531][ T31] 1 lock held by syz-executor/8222: [ 627.928802][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 627.969616][ T31] 3 locks held by kworker/1:9/8238: [ 627.983602][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 628.004728][ T31] #1: ffffc9000b087bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 628.022536][ T31] #2: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 628.046318][ T31] 3 locks held by kworker/1:11/8248: [ 628.051680][ T31] 3 locks held by kworker/1:12/8249: [ 628.079399][ T31] 6 locks held by syz-executor/8280: [ 628.088828][ T31] #0: ffffffff8f4f1150 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 628.109803][ T31] #1: ffffffff8f262a70 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 628.121672][ T31] #2: ffffffff8f262c30 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 628.139835][ T31] #3: ffff888062790f60 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 628.153887][ T31] #4: ffff888062791258 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3b0 [ 628.174593][ T31] #5: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 628.195995][ T31] 2 locks held by syz-executor/8283: [ 628.201347][ T31] #0: ffffffff8f4f1150 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 628.221069][ T31] #1: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 628.232970][ T31] 1 lock held by syz-executor/8285: [ 628.238217][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 628.260739][ T31] 2 locks held by syz-executor/8288: [ 628.271240][ T31] #0: ffffffff8f4f1150 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 628.299288][ T31] #1: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 628.325057][ T31] 2 locks held by syz-executor/8293: [ 628.330414][ T31] #0: ffffffff8f4f1150 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 628.342826][ T31] #1: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 628.361889][ T31] 1 lock held by syz-executor/8312: [ 628.368629][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 628.391814][ T31] 1 lock held by syz-executor/8313: [ 628.402235][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 628.422229][ T31] 1 lock held by syz-executor/8319: [ 628.427982][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 628.452690][ T31] 1 lock held by syz-executor/8322: [ 628.457964][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 628.486301][ T31] 1 lock held by syz-executor/8325: [ 628.491600][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 628.513186][ T31] 1 lock held by syz-executor/8335: [ 628.518464][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 628.537275][ T31] 1 lock held by syz-executor/8337: [ 628.548715][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 628.570197][ T31] 1 lock held by syz-executor/8338: [ 628.577321][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 628.605644][ T31] 1 lock held by syz-executor/8341: [ 628.610923][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0