last executing test programs: 15.61452517s ago: executing program 1 (id=9): r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000100), 0x101022, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000001fc0)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xe5e}}, 0x18) 15.351865218s ago: executing program 1 (id=10): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_usbip_server_init(0x2) write$usbip_server(r2, &(0x7f000000c300)=ANY=[], 0x3f36) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000580)={'\x00', 0x2}) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x204) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f7c000/0x3000)=nil, 0x3000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 13.287931387s ago: executing program 0 (id=16): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'batadv0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "2c9bf624d607a5a9e2843fe8ae663207000000000000004fc65ac033b7a87c1f", "1c000038353c4565abe3dcd800", "d1157590637541abeca20b9ca73977b269091c8aca21e3a616010dc44053ec09", "0f83ee263df12a6401579dcd55e31d69df95ecfcd41b0b75ef367a2297d352fc", "eef1d2fa3c932f1f8ebfc1874010684213066050ad07a2af725a1cc11d7e0bd6", "ce579275bc602e7bd0597b59", 0x400, 0xfffffffd, 0x72, 0x3, 0x6}}) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0), 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xffff, 0x2, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffc7b1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x83, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x1000006a, 0x3, 0x1, 0x2, 0x9, 0xfffffffffffeffff, 0x85, 0x3ff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000580)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x4}) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 11.861306432s ago: executing program 0 (id=20): timer_create(0xb, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000007c0)={'syz1\x00', {0x7, 0x0, 0xfffb, 0x8001}, 0x3d, [0x3, 0x0, 0x1, 0x6, 0x2, 0x0, 0x2, 0x7, 0xffffffff, 0x4, 0x7, 0xc, 0x33cf, 0x1, 0x7, 0x0, 0x306, 0x0, 0xffffffff, 0x9, 0x2, 0x6, 0x1, 0x0, 0x6, 0x7, 0x1, 0x0, 0x2, 0x10000, 0xc, 0x6, 0x10001, 0x2, 0x1000000, 0x1, 0x4, 0x8, 0x7, 0x6, 0x660, 0x3, 0xc643ecb1, 0x8, 0x5, 0x4, 0x200008a1, 0x401, 0x7, 0x6d, 0x5, 0xc, 0x6, 0x249a, 0x6, 0x5a30, 0xe788, 0x8001, 0x2, 0x5, 0xab, 0x7, 0x4, 0x6], [0x200, 0x139, 0x6, 0x271, 0x2, 0x9a9, 0x3, 0x4, 0x5, 0x5, 0x9, 0x10000, 0x10001, 0x8, 0x3ff, 0x0, 0xfff, 0x8, 0x6, 0x8, 0xc, 0x75b1, 0x0, 0x9d, 0x6, 0xb, 0x1, 0xfffffffd, 0x16f4, 0x1, 0x400, 0x5, 0x9, 0x953b, 0x8, 0x9, 0x8, 0x1, 0xec2, 0xbd, 0x9, 0xff, 0x6596, 0x8, 0x4, 0x7f, 0xb, 0x6, 0x3, 0x9, 0x7, 0x0, 0xf78, 0xd, 0x35ce0cb3, 0x0, 0x0, 0x8, 0x5b0, 0x18f, 0x10, 0x7, 0x3, 0xb], [0x222e, 0xa, 0x2, 0x3, 0x6f083aad, 0x5, 0x0, 0x1, 0xfffffffd, 0x0, 0x7d, 0x8000000, 0x1, 0x1, 0x2, 0x7ff, 0x3, 0x9, 0x1e, 0x3162, 0x800, 0x101, 0x100, 0x0, 0x6, 0x2c, 0x7, 0xfffffff8, 0xffffffff, 0x80000000, 0x3, 0x6, 0x7, 0x0, 0x4a, 0x575b089f, 0xbd3e, 0x4, 0x1, 0x9bd7, 0x3, 0x0, 0x9, 0x6, 0x7, 0x7, 0x0, 0x4, 0x401, 0xa55, 0x6, 0x3, 0x0, 0xfff, 0x40000000, 0x5, 0x7, 0x4, 0x7, 0x800, 0xffffffff, 0x81, 0x6, 0xd], [0x25, 0x8000, 0x1, 0x9, 0x3, 0xb, 0x7, 0x10000, 0x5, 0xe47f, 0x117, 0x4, 0x3, 0x3f47, 0x8000006, 0x8, 0x3, 0x1, 0x0, 0x601f, 0x2, 0x9, 0xd, 0x1, 0x9, 0x1000ff, 0x6, 0x10001, 0x5, 0x2, 0x1000, 0x10, 0x4, 0xd8, 0x2, 0x8, 0x9, 0x2, 0x7fffffff, 0x9, 0x40, 0xfffffff7, 0x7, 0x7fff, 0x7, 0x1, 0x3, 0x9, 0x0, 0x8, 0x3, 0x7, 0x1a00000, 0xe72, 0x5, 0x2, 0x1, 0x4, 0xc000000, 0x7fffffff, 0x40, 0x3, 0x2, 0x6]}, 0x45c) read$msr(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x822f01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) 10.807966471s ago: executing program 2 (id=22): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020}, 0x2020) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) 8.851772383s ago: executing program 2 (id=25): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) 8.463863307s ago: executing program 1 (id=26): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41efa, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x2) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000600)={@private=0xa010101, @local}, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) 8.329883054s ago: executing program 2 (id=28): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x4e) read$FUSE(r2, &(0x7f0000000d00)={0x2020}, 0x67) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r5, 0x80304d65, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) name_to_handle_at(r6, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="280000004e00000001000000003339000000000000070000000000000000000080000000000000000000000000000000b74114c68b13584c3164e31886f46ed2c40e5b08a3c31e880bfecb62b62ebd6d6d873d55808a96ba72de7c90f9f05f35fec26608d6f3944a41ff3dc6f7757604865d6de917f0d279e3359f8a389a2e56f9b39c7bc56072395fac8bd1810149f9780535b49fae71aaeabdf9af976ad4cf94096e3878b7b2643b958d7c5fe84b959384f03fcce24c639c0b31fb6986cf11ff4a8546b10f708b5fcdda92"], &(0x7f00000002c0), 0x400) sendfile(r4, r4, 0x0, 0xd2) openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0xf}}, 0x14) 7.307652109s ago: executing program 2 (id=29): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000440), 0x12) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000700)=[{0x0}], 0x1, 0x4782, 0x7) syz_usb_connect(0x3, 0x24, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) 7.229147871s ago: executing program 3 (id=30): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, 0x0) 5.675068174s ago: executing program 4 (id=31): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'batadv0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "2c9bf624d607a5a9e2843fe8ae663207000000000000004fc65ac033b7a87c1f", "1c000038353c4565abe3dcd800", "d1157590637541abeca20b9ca73977b269091c8aca21e3a616010dc44053ec09", "0f83ee263df12a6401579dcd55e31d69df95ecfcd41b0b75ef367a2297d352fc", "eef1d2fa3c932f1f8ebfc1874010684213066050ad07a2af725a1cc11d7e0bd6", "ce579275bc602e7bd0597b59", 0x400, 0xfffffffd, 0x72, 0x3, 0x6}}) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0), 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xffff, 0x2, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffc7b1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x83, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x1000006a, 0x3, 0x1, 0x2, 0x9, 0xfffffffffffeffff, 0x85, 0x3ff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000580)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x4}) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 5.55606792s ago: executing program 3 (id=32): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) 4.923842153s ago: executing program 0 (id=33): r0 = creat(0x0, 0xe5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x18, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x4, 0x122}]}, 0x18}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) setgroups(0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x2c) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x560e, &(0x7f0000000140)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r6, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) write$UHID_CREATE(r1, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) 4.858798789s ago: executing program 3 (id=34): syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ap_ssid, 0xffffff27, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYBLOB, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB="00d04a4c5d79580b69dc", @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_setup(0x239f, &(0x7f0000000380)=0x0) r7 = eventfd2(0x5, 0x1) io_submit(r6, 0x2, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r7, 0x0, 0x0, 0x800002, 0x0, 0x0, r7}, &(0x7f0000000100)={0x0, 0x0, 0x8000000, 0x3, 0xb, r7, 0x0, 0x0, 0x0, 0x0, 0x3, r7}]) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendmsg$AUDIT_USER(r9, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0xd0, 0x3ed, 0x10, 0x70bd2d, 0x25dfdbfd, "574786abe0456ea2c392e787dcb455d9fe808abc244ff6ba894187f393a2188797c23842c4c6a09e2b0f7fc978e1806b07fdf1ea27668b00eb486de86caccfafe75ba61a3d48c2ac63ddfeafe4bef36496964f4dee3f65430e3cb1875a076f714f8ab22c3fb9e6649e47b5b3e3cf25ebbf96e63337e403c017c5a13d8b206c618992875ac86cb78c98a97b81cb5190681ca677f38c65d075884c3204b4ba167a50f3578ad8faa10acd8a77aa808a93b4829be5ece244961b2b9ec7cb003d69", ["", "", "", "", ""]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004000) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 4.178159827s ago: executing program 1 (id=35): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020}, 0x2020) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) 4.163001133s ago: executing program 4 (id=36): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x36) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {0x0, r5, 0x1}}, 0x18) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x8002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000240)={0xf3, 0x6, 0x1}) syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], 0x0, 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 3.033729241s ago: executing program 1 (id=37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x59555956}}) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x80141, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000001c0)={0x1, 0x1ff, 0x7f, 0x0, 0x11}) write$sndseq(r2, 0x0, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x8, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@deltclass={0x50, 0x29, 0x10, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xfff1, 0xf}, {0x4, 0xe}, {0xffe0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x7, 0x5d}}, @TCA_RATE={0x6, 0x5, {0xf9, 0x5}}, @TCA_RATE={0x6, 0x5, {0x6b, 0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xb, 0xfff2}, {}, {0xd, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x4b}, @TCA_RATE={0x6, 0x5, {0xa, 0x7f}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1010}, 0x4) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000080)={0x0, @can, @vsock={0x28, 0x0, 0x2710, @my=0x0}, @can={0x1d, r11}, 0xff7f, 0x0, 0x0, 0x0, 0xd800, &(0x7f0000000040)='veth0_to_batadv\x00', 0x800, 0xef, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.735611938s ago: executing program 2 (id=38): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mkdir(0x0, 0x4) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_io_uring_submit(0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x620042, 0x0) 2.401640031s ago: executing program 0 (id=39): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00'}, 0x94) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x5}], 0x1, 0x60010000, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 1.651055364s ago: executing program 3 (id=40): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket(0x200000000000011, 0x3, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x100, 0x5, 0x130, 0x6}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1, 0x3}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001300)='memory.events.local\x00', 0x275a, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cpu.idle\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000240)={{0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e22, 0x3, 'lc\x00', 0x8, 0xf4aa, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 1.231291831s ago: executing program 1 (id=41): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x20007, 0x6, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x100000, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) set_mempolicy_home_node(&(0x7f0000a10000/0x3000)=nil, 0x3000, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}, 0x2}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000340)={r4}) mmap$IORING_OFF_SQES(&(0x7f0000a10000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x10000000) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xfb, 0x15, 0x49, 0x20, 0xb48, 0x1008, 0x3d42, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x84, 0x11}}]}}]}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x0, 0xffffff67, {r5}, {0xffffffffffffffff}, 0x3, 0xc}) 1.053965527s ago: executing program 2 (id=42): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d0009"], 0x0) 854.777646ms ago: executing program 0 (id=43): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4c38}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x80000001}, 0x0, 0x0) 709.000385ms ago: executing program 4 (id=44): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x34c, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x2b8, 0x2a8, 0x2a8, 0x2b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0x7, 0x1ff, 0x603, 'netbios-ns\x00', 'syz1\x00', {0xb230}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1, 0x7a}, 0x0, 0x1c0, 0x1e0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'team_slave_1\x00', {0x5, 0x4, 0x25, 0x7, 0x5, 0x1ff, 0xb, 0x18, 0x20}, {0x8}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3a8) 669.140484ms ago: executing program 3 (id=45): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, 0x0, 0x0) 543.994962ms ago: executing program 0 (id=46): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x4, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) 482.027324ms ago: executing program 4 (id=47): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0x8b, 0x100000500) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468e776011282e789dbfd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d923eaffee045993ff1eb3737b9ec29b8416714cab16f748d946050000002f010000000000000000000000000051ed68f6e8b6d92237c7838a03a25eebb2585ad1449314730ba4f08e91", 0xa8}, {&(0x7f0000001a80)="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", 0x2c1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="9e816ef4b3bb28f735f8370cb5bbec7b062fdecbd804052ca1dde813e8ca43307d9bbf48ea24c36bb84bf4ec89d234453b01c57c1a3ee05d", 0x38}, {&(0x7f00000002c0)="9ba5c1ccf6a36a84fe8c0b9c637799ff8429f7265acc76d15175d1c4168fa969a542536a3ed7f7baf33f7788b5496402365515276b", 0x35}], 0x2}}], 0x2, 0x0) shutdown(r1, 0x1) 375.142854ms ago: executing program 3 (id=48): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x0, 0x260, 0x260, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x5a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x1a, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r4, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000080)={@void, @void, @eth={@multicast, @empty, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x67, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x26) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r10, 0x0, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) 249.077392ms ago: executing program 4 (id=49): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000440), 0x12) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000700)=[{0x0}], 0x1, 0x4782, 0x7) syz_usb_connect(0x3, 0x24, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) 0s ago: executing program 4 (id=50): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.224' (ED25519) to the list of known hosts. [ 73.884307][ T5790] cgroup: Unknown subsys name 'net' [ 74.165544][ T5790] cgroup: Unknown subsys name 'cpuset' [ 74.231426][ T5790] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.850391][ T5790] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.032966][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.033927][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.035649][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.042659][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.046749][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.048556][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.049806][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.050736][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.052275][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.053456][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.054870][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.056865][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.057334][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.058521][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.063394][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.064424][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.069161][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.072861][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.074615][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.090449][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.135044][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.141449][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.145496][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.152353][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.152904][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.923525][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 80.933721][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 81.231877][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 81.279317][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 81.295776][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 81.598482][ T9] cfg80211: failed to load regulatory.db [ 81.854634][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.854735][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.855045][ T5805] bridge_slave_0: entered allmulticast mode [ 81.856825][ T5805] bridge_slave_0: entered promiscuous mode [ 81.859405][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.859525][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.859996][ T5803] bridge_slave_0: entered allmulticast mode [ 81.863901][ T5803] bridge_slave_0: entered promiscuous mode [ 81.906793][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.906894][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.907034][ T5805] bridge_slave_1: entered allmulticast mode [ 81.909535][ T5805] bridge_slave_1: entered promiscuous mode [ 81.913278][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.913395][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.913538][ T5803] bridge_slave_1: entered allmulticast mode [ 81.916078][ T5803] bridge_slave_1: entered promiscuous mode [ 82.151805][ T5120] Bluetooth: hci4: command tx timeout [ 82.151811][ T5812] Bluetooth: hci3: command tx timeout [ 82.241116][ T5812] Bluetooth: hci1: command tx timeout [ 82.241124][ T5120] Bluetooth: hci0: command tx timeout [ 82.311108][ T5120] Bluetooth: hci2: command tx timeout [ 82.391887][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.392047][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.392187][ T5800] bridge_slave_0: entered allmulticast mode [ 82.393645][ T5800] bridge_slave_0: entered promiscuous mode [ 82.474702][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.477561][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.542247][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.542393][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.542527][ T5800] bridge_slave_1: entered allmulticast mode [ 82.543989][ T5800] bridge_slave_1: entered promiscuous mode [ 82.624350][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.626394][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.626692][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.626811][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.626913][ T5801] bridge_slave_0: entered allmulticast mode [ 82.628341][ T5801] bridge_slave_0: entered promiscuous mode [ 82.711927][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.712024][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.712119][ T5802] bridge_slave_0: entered allmulticast mode [ 82.713577][ T5802] bridge_slave_0: entered promiscuous mode [ 82.861771][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.861859][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.861964][ T5801] bridge_slave_1: entered allmulticast mode [ 82.863422][ T5801] bridge_slave_1: entered promiscuous mode [ 82.921921][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.922041][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.922203][ T5802] bridge_slave_1: entered allmulticast mode [ 82.923909][ T5802] bridge_slave_1: entered promiscuous mode [ 83.254918][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.323091][ T5805] team0: Port device team_slave_0 added [ 83.325650][ T5803] team0: Port device team_slave_0 added [ 83.424146][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.483251][ T5805] team0: Port device team_slave_1 added [ 83.484744][ T5803] team0: Port device team_slave_1 added [ 83.487653][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.584465][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.754256][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.836220][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.083326][ T5800] team0: Port device team_slave_0 added [ 84.162385][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.162398][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.162416][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.165618][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.165630][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.165651][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.231178][ T5120] Bluetooth: hci3: command tx timeout [ 84.231204][ T5120] Bluetooth: hci4: command tx timeout [ 84.251892][ T5800] team0: Port device team_slave_1 added [ 84.311092][ T5120] Bluetooth: hci0: command tx timeout [ 84.311178][ T5812] Bluetooth: hci1: command tx timeout [ 84.391089][ T5812] Bluetooth: hci2: command tx timeout [ 84.482574][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.482586][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.482607][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.483538][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.483545][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.483558][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.485125][ T5801] team0: Port device team_slave_0 added [ 84.549802][ T5802] team0: Port device team_slave_0 added [ 84.590694][ T5801] team0: Port device team_slave_1 added [ 84.683357][ T5802] team0: Port device team_slave_1 added [ 84.763342][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.763350][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.763363][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.972372][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.972386][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.972408][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.192737][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.192752][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.192774][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.200023][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.200034][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.200046][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.372480][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.372496][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.372517][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.375765][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.375778][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.375800][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.446502][ T5805] hsr_slave_0: entered promiscuous mode [ 85.447986][ T5805] hsr_slave_1: entered promiscuous mode [ 85.468189][ T5803] hsr_slave_0: entered promiscuous mode [ 85.469459][ T5803] hsr_slave_1: entered promiscuous mode [ 85.473632][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 85.473726][ T5803] Cannot create hsr debugfs directory [ 85.956468][ T5800] hsr_slave_0: entered promiscuous mode [ 85.957266][ T5800] hsr_slave_1: entered promiscuous mode [ 85.957961][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 85.957978][ T5800] Cannot create hsr debugfs directory [ 86.297182][ T5801] hsr_slave_0: entered promiscuous mode [ 86.297971][ T5801] hsr_slave_1: entered promiscuous mode [ 86.298556][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 86.298574][ T5801] Cannot create hsr debugfs directory [ 86.306255][ T5802] hsr_slave_0: entered promiscuous mode [ 86.307524][ T5802] hsr_slave_1: entered promiscuous mode [ 86.308395][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 86.308416][ T5802] Cannot create hsr debugfs directory [ 86.320980][ T5812] Bluetooth: hci3: command tx timeout [ 86.321004][ T5812] Bluetooth: hci4: command tx timeout [ 86.391101][ T5120] Bluetooth: hci1: command tx timeout [ 86.391126][ T5120] Bluetooth: hci0: command tx timeout [ 86.481144][ T5812] Bluetooth: hci2: command tx timeout [ 87.719849][ T5805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.756700][ T5805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.795468][ T5805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.849001][ T5805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.953211][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.976647][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.017205][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.066481][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.163076][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.197454][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.238715][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.289408][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.391607][ T5812] Bluetooth: hci4: command tx timeout [ 88.391636][ T5812] Bluetooth: hci3: command tx timeout [ 88.394413][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.442509][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.471284][ T5120] Bluetooth: hci0: command tx timeout [ 88.471309][ T5120] Bluetooth: hci1: command tx timeout [ 88.498872][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.528126][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.551253][ T5812] Bluetooth: hci2: command tx timeout [ 88.649411][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.671943][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.720889][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.739838][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.777462][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.848315][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.876695][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.877836][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.898041][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.925024][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.925177][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.985543][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.021725][ T1493] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.021843][ T1493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.025710][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.074015][ T1493] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.074093][ T1493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.119384][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.148969][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.154788][ T1493] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.155003][ T1493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.208377][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.208541][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.284005][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.304676][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.335771][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.342850][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.396315][ T1493] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.401138][ T1493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.450402][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.490867][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.502660][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.539638][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.539797][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.559795][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.836282][ T5805] veth0_vlan: entered promiscuous mode [ 89.904086][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.905357][ T5805] veth1_vlan: entered promiscuous mode [ 90.061847][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.112796][ T5805] veth0_macvtap: entered promiscuous mode [ 90.160127][ T5805] veth1_macvtap: entered promiscuous mode [ 90.179161][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.220819][ T5803] veth0_vlan: entered promiscuous mode [ 90.243994][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.281851][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.284495][ T5803] veth1_vlan: entered promiscuous mode [ 90.288579][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.363099][ T1179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.374941][ T1179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.380393][ T1179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.388332][ T1179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.536503][ T5801] veth0_vlan: entered promiscuous mode [ 90.614550][ T5803] veth0_macvtap: entered promiscuous mode [ 90.643673][ T5801] veth1_vlan: entered promiscuous mode [ 90.645532][ T5803] veth1_macvtap: entered promiscuous mode [ 90.707378][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.707402][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.727775][ T5802] veth0_vlan: entered promiscuous mode [ 90.773404][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.790273][ T5802] veth1_vlan: entered promiscuous mode [ 90.811021][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.811037][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.826801][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.834093][ T5800] veth0_vlan: entered promiscuous mode [ 90.887729][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.890514][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.897384][ T5801] veth0_macvtap: entered promiscuous mode [ 90.903337][ T5800] veth1_vlan: entered promiscuous mode [ 90.904779][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.910616][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.927456][ T5801] veth1_macvtap: entered promiscuous mode [ 91.030417][ T5802] veth0_macvtap: entered promiscuous mode [ 91.287747][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.288593][ T5802] veth1_macvtap: entered promiscuous mode [ 92.189934][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.217815][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.217831][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.222636][ T5800] veth0_macvtap: entered promiscuous mode [ 92.248300][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.261627][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.287956][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.288322][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.288804][ T5800] veth1_macvtap: entered promiscuous mode [ 92.303833][ T1551] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.336562][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.358331][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.358347][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.440893][ T1179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.501835][ T1179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.507946][ T1179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.524334][ T1179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.544601][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.634048][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.736216][ T5930] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.788424][ T990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.852692][ T1493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.860521][ T1493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.901029][ T1493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.956416][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.956432][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.244722][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.244740][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.314160][ T5935] netlink: 'syz.1.8': attribute type 2 has an invalid length. [ 93.314245][ T5935] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8'. [ 93.392454][ T1551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.392469][ T1551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.526262][ T5939] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 93.560758][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.560783][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.700983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 93.701930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 93.703075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 93.704235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 93.705124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 93.879527][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.879546][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.184684][ T1551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.184702][ T1551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.538161][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.723770][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 94.776355][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 94.776380][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.776397][ T9] usb 1-1: Product: syz [ 94.776409][ T9] usb 1-1: Manufacturer: syz [ 94.776421][ T9] usb 1-1: SerialNumber: syz [ 94.831654][ T9] usb 1-1: config 0 descriptor?? [ 94.961009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.978280][ T9] ttusb_dec_send_command: command bulk message failed: error -22 [ 94.978537][ T9] ttusb-dec 1-1:0.0: probe with driver ttusb-dec failed with error -22 [ 94.988990][ T5950] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 94.989010][ T5950] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 94.990523][ T5950] vhci_hcd vhci_hcd.0: Device attached [ 95.077073][ T10] usb 1-1: USB disconnect, device number 2 [ 95.211142][ T1238] vhci_hcd: vhci_device speed not set [ 95.271293][ T1238] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 95.380989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.621157][ T5961] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 95.786449][ T5961] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.786472][ T5961] usb 4-1: config 0 has no interfaces? [ 95.794686][ T5961] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 95.794703][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 95.794712][ T5961] usb 4-1: Product: syz [ 95.794719][ T5961] usb 4-1: Manufacturer: syz [ 95.794725][ T5961] usb 4-1: SerialNumber: syz [ 95.799607][ T5961] usb 4-1: config 0 descriptor?? [ 95.895147][ T5951] vhci_hcd: connection reset by peer [ 95.912248][ T1179] vhci_hcd: stop threads [ 95.912760][ T1179] vhci_hcd: release socket [ 95.912976][ T1179] vhci_hcd: disconnect device [ 96.090441][ T5885] usb 4-1: USB disconnect, device number 2 [ 96.720971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.231132][ T43] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 97.633080][ T43] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.633099][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 97.635334][ T43] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 97.635393][ T43] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 97.635403][ T43] usb 5-1: Product: syz [ 97.635410][ T43] usb 5-1: Manufacturer: syz [ 97.635417][ T43] usb 5-1: SerialNumber: syz [ 97.722770][ T43] usb 5-1: config 0 descriptor?? [ 97.968204][ T43] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 97.980997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.001296][ T43] usb 5-1: USB disconnect, device number 2 [ 98.398935][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.791633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.388265][ T5885] IPVS: starting estimator thread 0... [ 99.635254][ T6002] IPVS: using max 14 ests per chain, 33600 per kthread [ 100.221980][ T5893] IPVS: starting estimator thread 0... [ 100.361303][ T6007] IPVS: using max 14 ests per chain, 33600 per kthread [ 100.381256][ T1238] vhci_hcd: vhci_device speed not set [ 101.525806][ T5893] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.711112][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 101.714699][ T5893] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 101.714713][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.714722][ T5893] usb 5-1: Product: syz [ 101.714729][ T5893] usb 5-1: Manufacturer: syz [ 101.714735][ T5893] usb 5-1: SerialNumber: syz [ 101.792082][ T5893] usb 5-1: config 0 descriptor?? [ 101.812169][ T5893] ttusb_dec_send_command: command bulk message failed: error -22 [ 101.812294][ T5893] ttusb-dec 5-1:0.0: probe with driver ttusb-dec failed with error -22 [ 102.001593][ T5893] usb 5-1: USB disconnect, device number 3 [ 103.118333][ T6024] gfs2: error -5 reading superblock [ 103.188257][ T6025] mkiss: ax0: crc mode is auto. [ 106.095280][ T5953] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 106.095318][ T5953] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.095344][ T5953] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.095369][ T5953] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.095394][ T5953] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.095419][ T5953] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.095443][ T5953] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.095468][ T5953] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.095492][ T5953] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.095516][ T5953] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.116612][ T6028] syz.2.29 (6028) used greatest stack depth: 17816 bytes left [ 106.233105][ T5953] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 106.252992][ T6026] syz.2.29 (6026) used greatest stack depth: 15560 bytes left [ 107.527127][ T5963] IPVS: starting estimator thread 0... [ 107.540081][ T6058] fido_id[6058]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 107.621507][ T6069] IPVS: using max 8 ests per chain, 19200 per kthread [ 108.201094][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.281101][ T5953] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 108.351709][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 108.359484][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 108.359508][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.359525][ T9] usb 2-1: Product: syz [ 108.359537][ T9] usb 2-1: Manufacturer: syz [ 108.359549][ T9] usb 2-1: SerialNumber: syz [ 108.416319][ T9] usb 2-1: config 0 descriptor?? [ 108.433815][ T5953] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.433843][ T5953] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.439231][ T5953] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 108.439253][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 108.439270][ T5953] usb 3-1: Product: syz [ 108.439282][ T5953] usb 3-1: Manufacturer: syz [ 108.439295][ T5953] usb 3-1: SerialNumber: syz [ 108.502182][ T9] ttusb_dec_send_command: command bulk message failed: error -22 [ 108.502414][ T9] ttusb-dec 2-1:0.0: probe with driver ttusb-dec failed with error -22 [ 108.564413][ T5953] usb 3-1: config 0 descriptor?? [ 108.647841][ T5963] usb 2-1: USB disconnect, device number 2 [ 108.732707][ T5953] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 108.789503][ T5885] usb 3-1: USB disconnect, device number 2 [ 108.837851][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.968968][ T6095] syzkaller1: entered promiscuous mode [ 108.968992][ T6095] syzkaller1: entered allmulticast mode [ 109.205527][ T6076] ------------[ cut here ]------------ [ 109.205548][ T6076] WARNING: CPU: 0 PID: 6076 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 109.205588][ T6076] Modules linked in: [ 109.205623][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.1.41 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.205643][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.205656][ T6076] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 109.205678][ T6076] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 72 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 d4 3e 04 09 0f 1f 40 00 90 90 [ 109.205695][ T6076] RSP: 0018:ffffc90006647d00 EFLAGS: 00010206 [ 109.205710][ T6076] RAX: d2bf042f274c1300 RBX: ffff88814d00c100 RCX: 0000000000000000 [ 109.205723][ T6076] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 109.205734][ T6076] RBP: ffffc90006647e68 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 109.205747][ T6076] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff1100522c1fd [ 109.205779][ T6076] R13: 0000000000000000 R14: ffff88814d00c108 R15: ffff888024655a00 [ 109.205792][ T6076] FS: 000055556433e500(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 109.205808][ T6076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.205831][ T6076] CR2: 00002000000db030 CR3: 0000000023032000 CR4: 00000000003526f0 [ 109.205846][ T6076] Call Trace: [ 109.205857][ T6076] [ 109.205864][ T6076] do_exit+0x105/0x2300 [ 109.205885][ T6076] ? rt_mutex_slowunlock+0x493/0x8a0 [ 109.205900][ T6076] ? __pfx_do_exit+0x10/0x10 [ 109.205913][ T6076] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 109.205929][ T6076] ? rt_spin_unlock+0x161/0x200 [ 109.205942][ T6076] do_group_exit+0x21c/0x2d0 [ 109.205954][ T6076] __x64_sys_exit_group+0x3f/0x40 [ 109.205964][ T6076] x64_sys_call+0x21f7/0x2200 [ 109.205974][ T6076] do_syscall_64+0xfa/0xfa0 [ 109.205987][ T6076] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.206000][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.206010][ T6076] ? clear_bhb_loop+0x60/0xb0 [ 109.206025][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.206034][ T6076] RIP: 0033:0x7ff6fd11f749 [ 109.206046][ T6076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.206054][ T6076] RSP: 002b:00007ffef4aeaba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 109.206064][ T6076] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff6fd11f749 [ 109.206070][ T6076] RDX: 00007ff6fc381000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.206076][ T6076] RBP: 00007ffef4aeac0c R08: 0000000000005ba4 R09: 00000000000927c0 [ 109.206082][ T6076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 109.206087][ T6076] R13: 00000000000927c0 R14: 000000000001a2b0 R15: 00007ffef4aeac60 [ 109.206103][ T6076] [ 109.206109][ T6076] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.206117][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.1.41 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.206128][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.206133][ T6076] Call Trace: [ 109.206138][ T6076] [ 109.206141][ T6076] dump_stack_lvl+0x99/0x250 [ 109.206156][ T6076] ? __asan_memcpy+0x40/0x70 [ 109.206168][ T6076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.206181][ T6076] ? __pfx__printk+0x10/0x10 [ 109.206199][ T6076] vpanic+0x237/0x6d0 [ 109.206208][ T6076] ? __pfx_vpanic+0x10/0x10 [ 109.206223][ T6076] panic+0xb9/0xc0 [ 109.206232][ T6076] ? __pfx_panic+0x10/0x10 [ 109.206249][ T6076] __warn+0x31b/0x4b0 [ 109.206257][ T6076] ? kcov_task_exit+0x13c/0x150 [ 109.206270][ T6076] ? kcov_task_exit+0x13c/0x150 [ 109.206282][ T6076] report_bug+0x2be/0x4f0 [ 109.206294][ T6076] ? kcov_task_exit+0x13c/0x150 [ 109.206307][ T6076] ? kcov_task_exit+0x13c/0x150 [ 109.206318][ T6076] ? kcov_task_exit+0x13e/0x150 [ 109.206330][ T6076] handle_bug+0x84/0x160 [ 109.206339][ T6076] exc_invalid_op+0x1a/0x50 [ 109.206349][ T6076] asm_exc_invalid_op+0x1a/0x20 [ 109.206358][ T6076] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 109.206370][ T6076] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 72 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 d4 3e 04 09 0f 1f 40 00 90 90 [ 109.206377][ T6076] RSP: 0018:ffffc90006647d00 EFLAGS: 00010206 [ 109.206385][ T6076] RAX: d2bf042f274c1300 RBX: ffff88814d00c100 RCX: 0000000000000000 [ 109.206392][ T6076] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 109.206398][ T6076] RBP: ffffc90006647e68 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 109.206404][ T6076] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff1100522c1fd [ 109.206411][ T6076] R13: 0000000000000000 R14: ffff88814d00c108 R15: ffff888024655a00 [ 109.206420][ T6076] ? rt_spin_lock+0x1c1/0x3e0 [ 109.206436][ T6076] do_exit+0x105/0x2300 [ 109.206454][ T6076] ? rt_mutex_slowunlock+0x493/0x8a0 [ 109.206467][ T6076] ? __pfx_do_exit+0x10/0x10 [ 109.206480][ T6076] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 109.206495][ T6076] ? rt_spin_unlock+0x161/0x200 [ 109.206507][ T6076] do_group_exit+0x21c/0x2d0 [ 109.206519][ T6076] __x64_sys_exit_group+0x3f/0x40 [ 109.206528][ T6076] x64_sys_call+0x21f7/0x2200 [ 109.206537][ T6076] do_syscall_64+0xfa/0xfa0 [ 109.206550][ T6076] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.206562][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.206574][ T6076] ? clear_bhb_loop+0x60/0xb0 [ 109.206585][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.206594][ T6076] RIP: 0033:0x7ff6fd11f749 [ 109.206602][ T6076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.206609][ T6076] RSP: 002b:00007ffef4aeaba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 109.206618][ T6076] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff6fd11f749 [ 109.206624][ T6076] RDX: 00007ff6fc381000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.206630][ T6076] RBP: 00007ffef4aeac0c R08: 0000000000005ba4 R09: 00000000000927c0 [ 109.206636][ T6076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 109.206642][ T6076] R13: 00000000000927c0 R14: 000000000001a2b0 R15: 00007ffef4aeac60 [ 109.206657][ T6076] [ 109.206993][ T6076] Kernel Offset: disabled