last executing test programs: 2m3.365947249s ago: executing program 2 (id=223): openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000, 0x40000000}], 0x0) 2m0.97711364s ago: executing program 2 (id=224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsopen(&(0x7f0000000200)='9p\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000f2, 0x1000) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=""/168, 0xa8}, {0x0}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1m59.314344081s ago: executing program 2 (id=230): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m57.396106223s ago: executing program 2 (id=232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x6e}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m48.328517608s ago: executing program 2 (id=242): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x44090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r2, 0x0, 0x0) 1m47.217648865s ago: executing program 2 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 1m30.666700085s ago: executing program 32 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 1m9.210893211s ago: executing program 3 (id=300): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93\x00\x04\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaaVR\xbf\xecX\x17\x06h\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa4&\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\x00\x00\x00\x00\x00\x00\x00N\xb1N\xfd\xacy\x11\x9cg\x0e\xd3IU\xacq\x01\x1f;S\xf4\xfc\xdf\xe9/\xb22\x06\xea\xb8\xc3\xe1\x02\xf5E5{b5\xa4\x83P\x14k\xc27I\x89V\x1d\b1\x18\x18y\xef\x02U\xd4\x00B\xf4\xfc\xf6$\xed\x98\xc3jp\x88\xa6\xf5^\xaek]\x8b\x06\xce*\x86\xb59UKG$ \x90gV\x8bt\x96i\xa79\v\x02\x00\x00\x00\x00\x00\x00\x00\xcb\x8b\r;\xf0\x10I\xe7\x8c\xf0s]\x9e\xd4\xd6\xc7\xf1\x96CX\xf1\x94\x9f\xce\xf5\x9a\xb4\xd6\xc5\xe3AVf\xe8RF\xee\x97\x8577o,\xed\xc9S\xa1G\x15F\x9f\xac\xe7\xc0\xdb\xb9\xc2\x10\x87\xe49\xc0\xe2\x99\xbf\xda\x16\xef\x9e\xd67\xa0j9\xea\xd8\xf0\x9a\x87\xa6\x9c\xb3#\xd8\xaeS\xb5\xc2\x80\x9d\xd3\xb5\xee2`Q\x95\xf1m\xa4\x1f\xe5\xab\x17\xe6\xda(\xa1\xf0\xd0\xe3\x97\xcf\x06\x1a\"\xdfT\xd3\x01\xe3>\x82\x81\"-\x8b\x05\xde\xe4\xa5m\'\xbb\xd9(D\xfb\xa9\x1d\xe4l\x93>\x98', 0x3) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20, &(0x7f00000000c0)=ANY=[]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f00001f6000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000920000/0x1000)=nil) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x77abdcce, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r0, 0x0, 0x94, 0x40000002, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m3.927601014s ago: executing program 1 (id=308): pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @random="4aa468739f85", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @private=0xa010100, @multicast, @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 1m2.490685886s ago: executing program 1 (id=309): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x20040010) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r3) socket$phonet_pipe(0x23, 0x5, 0x2) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 1m2.396849486s ago: executing program 3 (id=310): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000014007f"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0xd, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x20003, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x1000, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0xc, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={0x0, 0xa0}}, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)=""/100, 0x64}, {0x0}, {0x0}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000640)=""/133, 0x85}, {&(0x7f0000000700)=""/140, 0x8c}, {&(0x7f0000000800)=""/56, 0x38}], 0x7}, 0x1}], 0x1, 0x40000000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 56.575148615s ago: executing program 1 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000400)=0x82c1336) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r5, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 56.093451742s ago: executing program 3 (id=317): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x3a98c2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x10001, {}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {0x0}, 0x96000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 51.794648644s ago: executing program 3 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sched_rr_get_interval(r0, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300"/18], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000075266f83000000000000000004000000ffffffffc3000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtfilter={0xefc, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x41}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_u32={{0x8}, {0xea0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffef, 0xfff1}}, @TCA_U32_LINK={0x8, 0x3, 0x2c0000}, @TCA_U32_DIVISOR={0x8, 0x4, 0xfe}, @TCA_U32_ACT={0xe84, 0x7, [@m_skbedit={0x30, 0x7, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0xfffffbff, 0x10000000, 0x2, 0x8}, 0x80, 0xd}, [{0xc9, 0x2, 0x1, 0x400, 0x8, 0x1}, {0x0, 0x6, 0x47ecf86e, 0x0, 0x1, 0x6}, {0x2, 0x2072, 0x425, 0x7fff, 0x1, 0x77}, {0x1, 0x8, 0x10001, 0x1, 0x4, 0x10}, {0x5, 0x1000, 0x2, 0x83, 0x3, 0x8}, {0xfffffffc, 0x8, 0x1, 0x1, 0x80000000}, {0x5d, 0x1000, 0x1ff, 0xe849, 0x8, 0x4}, {0x7, 0x2, 0x28, 0x4, 0x7, 0x7}, {0x8, 0x1, 0x9b, 0x6, 0x4, 0x8000}, {0x80, 0x2, 0x7, 0x5, 0x7ff, 0x893}, {0x2, 0x2, 0x5, 0x3, 0x65, 0x9}, {0x1, 0x4, 0x4, 0x9, 0x6, 0xe}, {0xffff, 0x100, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x7ff, 0x5, 0x7, 0x5, 0x1}, {0x7, 0x7fff, 0x0, 0x4004, 0x9, 0x80}, {0x5, 0x48, 0xa94, 0x6, 0xffffffff, 0xff}, {0x7, 0xff00, 0x4, 0x7, 0x9, 0xb}, {0x5, 0xa3, 0xb, 0x9, 0x4800, 0x6b}, {0x9, 0x1, 0x2, 0x1, 0x8, 0x2f1}, {0xd32, 0x1000, 0x80, 0x81, 0x9, 0x1}, {0xf5, 0x9, 0x3, 0xb000000, 0x4, 0x5}, {0x4, 0x400, 0x1, 0x7ff, 0x36, 0x7}, {0xfffffffe, 0x80000000, 0x3, 0x0, 0xc, 0x1}, {0x10, 0x3, 0x3, 0x7, 0x2, 0xfffffffa}, {0xfffffff7, 0x4, 0x1, 0x6c88, 0x5, 0x10000}, {0x9, 0xec35, 0x2, 0x9, 0x6, 0x9}, {0x2, 0x0, 0x3, 0x8, 0x6, 0x1000}, {0xfffffffb, 0x200, 0x2, 0x5, 0xfffffffc, 0x7}, {0x3, 0x401, 0x1, 0xf3, 0xef0, 0xfffffffa}, {0x3, 0x0, 0x8, 0xe32, 0x400, 0x8}, {0x7f, 0x4, 0xfffffffe, 0xfffffffb, 0x1, 0x80}, {0x4, 0x8, 0x6, 0x99, 0x6, 0x1000}, {0x593, 0x8, 0x6, 0x7, 0xd2df, 0x4}, {0x0, 0x7, 0x1, 0xaf96, 0x10, 0xfffffff7}, {0x0, 0x5, 0x1ff, 0x7, 0x1ff, 0x4}, {0x3, 0x3ff, 0x3, 0x3, 0x19, 0xb5}, {0x2, 0x3, 0xf0, 0xff, 0xfffffffe, 0x8b}, {0x10000, 0x1ff, 0x2, 0x97cf, 0x45b}, {0x9, 0x3, 0x80000000, 0x80000000, 0x0, 0xb}, {0x9, 0xd9f5, 0xe3, 0xb, 0x5, 0x4}, {0x7, 0xf, 0x2, 0x3, 0x10000, 0xfffff001}, {0x8, 0xfffffffb, 0xfff, 0x4, 0x731b482, 0x8}, {0x1, 0xc738, 0x9, 0x2, 0x8, 0x7}, {0x7, 0x7ff, 0x8, 0xffffffd8, 0x0, 0xfffffffb}, {0x200, 0x3, 0x3, 0xfff, 0x2, 0x2}, {0x0, 0x1, 0xff, 0xffffd21c, 0x4, 0x3}, {0xe2, 0x0, 0x9, 0x4, 0xfffff001, 0x400}, {0x0, 0x1000, 0x80, 0x4, 0x4f, 0xfffffffe}, {0x7e, 0x400, 0x8, 0x5, 0x7, 0x8}, {0x8, 0x0, 0x6, 0x2, 0x5, 0xffffff81}, {0x8, 0x100, 0xff, 0x1ff, 0x964, 0x8000}, {0x80, 0x0, 0x3, 0x4, 0x1, 0x18}, {0x5, 0xcc7, 0x8, 0x80, 0x0, 0x1}, {0x3, 0x4, 0x5, 0x7e, 0x8, 0xfffffff5}, {0x2, 0x9, 0x8, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x3ff, 0x2df, 0x6}, {0xc, 0x20c05, 0xb, 0x101, 0x2}, {0x3, 0x56, 0x6, 0x3, 0x7, 0x9}, {0x5, 0x6, 0x8, 0x7, 0x7, 0x1}, {0x5, 0x7, 0x9, 0xd3, 0x8, 0x1}, {0x3, 0x1, 0x455, 0xc9000000, 0x9, 0x10000}, {0x9, 0x8, 0x8, 0x0, 0x1, 0x9}, {0xb47, 0x1, 0x2, 0x852, 0xf, 0xff}, {0xe, 0x3, 0x401, 0x3, 0x9, 0xffffa36b}, {0x4, 0x80000001, 0x2, 0x9f0, 0x2, 0x6}, {0xfffffffc, 0x80000000, 0x0, 0x0, 0xd, 0x4}, {0x5, 0x4, 0x401, 0x0, 0x9, 0x1}, {0x1, 0x5, 0x8, 0x0, 0x7, 0x1000}, {0xa, 0x80, 0x6, 0x9, 0x5852, 0x1}, {0x2, 0x0, 0x7fffffff, 0xa4c8, 0x5, 0x4}, {0x9, 0x12, 0x101, 0x1000, 0x2, 0x1}, {0x6, 0x10001, 0x100, 0x3, 0xff}, {0x7d, 0x4, 0x7, 0x0, 0x81, 0x7}, {0x80000000, 0x4f, 0x101, 0x8, 0xe, 0x6}, {0x187, 0x5, 0x6, 0x1, 0x6, 0x1000}, {0x0, 0xf, 0x1, 0x8e, 0x4, 0x8}, {0x1, 0x2, 0x9, 0xffffffb5, 0x17a, 0x1}, {0x81, 0x0, 0x7ff, 0x8, 0x8001, 0x1}, {0x81, 0x2, 0x1, 0x1, 0x5, 0x6}, {0x10000, 0x2, 0x1000, 0x81, 0x4, 0x7}, {0x1, 0x1, 0x80000001, 0x6, 0x7fff, 0xfffffff8}, {0x5, 0x5, 0xad, 0x2, 0x400, 0x3}, {0x9, 0x9, 0x6, 0x2, 0x8, 0x94a}, {0x2, 0x1, 0x6, 0x10000, 0x9366, 0x5}, {0xff, 0x3, 0x4, 0x2, 0x4, 0x2}, {0x1ff, 0x7f, 0x0, 0x4, 0x6, 0x5}, {0x4, 0x9, 0x6, 0x100000, 0xfa1, 0xfffffff5}, {0x7, 0x101, 0x93d0, 0xf3, 0x3, 0x9}, {0x8000, 0x2, 0x0, 0xfb7, 0x8, 0x1000}, {0x7fff, 0x0, 0x3, 0x0, 0xff, 0x8}, {0x1a4e, 0x9, 0x6, 0x7, 0x7, 0x9}, {0x7, 0x7, 0x0, 0xf, 0x0, 0x4}, {0x9, 0x9, 0x8, 0xbc5, 0x81, 0x100}, {0x40, 0x4, 0x7, 0x800, 0x4, 0x7}, {0xb12a, 0x9, 0xa9, 0x1ff, 0x6, 0x7}, {0x100, 0x1b00, 0x1ff, 0x5, 0x1, 0x8}, {0x5df, 0x7fff, 0xc000, 0x8, 0x5, 0xca4}, {0xf, 0xa, 0x6, 0x3, 0x10000, 0x6}, {0x7, 0x200, 0x5, 0x510, 0x8, 0x7}, {0x5cc0e9e5, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x5}, {0x10, 0xfff, 0xffffffff, 0x3ff, 0x1, 0x8}, {0x1, 0x1, 0xd, 0xfff, 0x2, 0x35d}, {0x6, 0x8, 0x6, 0x8, 0x8, 0x3ff}, {0x7, 0x7, 0x5, 0x6, 0x2, 0xcdf}, {0x9, 0x7, 0xa92c, 0x9, 0xa8, 0x4}, {0x1, 0x9, 0x10001, 0xfa6, 0x3, 0x8}, {0x5, 0xdad, 0x1, 0xe2f, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x6, 0x1, 0x8001}, {0xb, 0x439d3188, 0xffff, 0x5, 0x1ff, 0x1}, {0xe2a0, 0x54, 0xffffffff, 0x6, 0x3, 0x80000000}, {0x1000, 0x4, 0xd3, 0x4, 0xdc, 0x2}, {0x6, 0x2, 0x8, 0x4, 0xfe3, 0x4}, {0x6, 0x4, 0x8, 0x9, 0x7f, 0x8}, {0x9, 0x2, 0x5, 0xfffffff8, 0xffffffff, 0x10001}, {0x0, 0x4, 0x30d, 0x2, 0x2, 0x7}, {0x8, 0xfff, 0x9, 0x2, 0x1, 0x8}, {0x8, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff}, {0x80000001, 0x5, 0x80000001, 0xdc, 0x2}, {0x80, 0x4, 0x0, 0x7, 0x1, 0x8}, {0x2, 0x200, 0x5be, 0xfffffff3, 0x7, 0x800}, {0x1000, 0x1, 0x3, 0x9, 0xa, 0x5}, {0xe, 0x4000000, 0x5ea, 0x10, 0x8, 0x80000000}, {0xf, 0x2, 0x80000001, 0x5, 0x2a59, 0x1}, {0x3e87, 0x3, 0x5, 0x9, 0x1, 0x9}, {0xffffff64, 0x0, 0x7, 0x3, 0xae85, 0x25c98821}, {0x0, 0x7, 0xd, 0x400, 0x6, 0xe6c}, {0xffffffff, 0x2, 0x0, 0x100, 0x4, 0x5855}, {0x6528, 0x5, 0x96, 0x8001, 0xe246, 0x6}], [{0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x6, 0x1}, {}, {}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0xe2e05a6e9f46ef72, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x9a2799bccd0b4636, 0x1}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xefc}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 49.281912584s ago: executing program 3 (id=322): r0 = socket$kcm(0xa, 0x922000000003, 0x11) unshare(0xa020480) setsockopt$sock_attach_bpf(r0, 0x3a, 0x24, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0}) syz_usb_connect(0x0, 0xf2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vbi(0x0, 0x3, 0x2) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r5 = fanotify_init(0x81, 0x40000) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0x2020) 45.677942703s ago: executing program 1 (id=324): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000380)=[{0xb7, 0x3, 0xfe, 0x7fff0006}]}) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x205) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x77}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1e, 0x15, &(0x7f00000007c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, 0x0, 0xa854, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x5, &(0x7f0000000300)) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') syz_open_procfs$namespace(r0, &(0x7f0000000540)='ns/time_for_children\x00') syz_io_uring_setup(0x2f41, &(0x7f0000000580)={0x0, 0xdec5, 0x13080, 0x3, 0x2b8}, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000000)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7e6b, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 45.64091217s ago: executing program 3 (id=325): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) sendfile(0xffffffffffffffff, r0, 0x0, 0x2389a) openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x40000, 0x10b) socket$kcm(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048019}, 0x20040840) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 43.870136912s ago: executing program 1 (id=328): r0 = open(0x0, 0x143142, 0x1a5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50040}, 0x40) r1 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) syz_clone3(&(0x7f0000000740)={0x80002000, &(0x7f0000000380), 0x0, 0x0, {0x1d}, &(0x7f0000000580)=""/145, 0x91, &(0x7f0000000680)=""/78, &(0x7f0000000700), 0x0, {r0}}, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="85000000006f4000b069ba8c0f993a7179394c5b98"], 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153}, 0x94) r4 = memfd_secret(0x80000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) clock_adjtime(0x6, &(0x7f00000007c0)={0x3, 0x1000, 0x2, 0x9972, 0xffff, 0x6, 0x3eef, 0xd6, 0x3, 0x0, 0x8, 0xd, 0x2, 0x3, 0x9, 0x5, 0xfffffffffffffff7, 0x9, 0x3, 0x3, 0x7fff, 0x4, 0x10001, 0x0, 0x1ff, 0x6}) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCGSID(r4, 0x5429, 0x0) 42.590163826s ago: executing program 1 (id=331): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={r1, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0xfffffffffffffd09, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x10) 29.274962903s ago: executing program 33 (id=325): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) sendfile(0xffffffffffffffff, r0, 0x0, 0x2389a) openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x40000, 0x10b) socket$kcm(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048019}, 0x20040840) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 27.260780649s ago: executing program 34 (id=331): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={r1, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0xfffffffffffffd09, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x10) 25.323012358s ago: executing program 0 (id=345): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000180), {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xbc, 0x128}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x444) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="01350104ff00"}) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x80041) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r7, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE \''], 0x8c) close(r7) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r10, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) read$FUSE(r8, &(0x7f00000061c0)={0x2020}, 0x115f) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r5, r4, &(0x7f0000000080)=0xb, 0x8) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x94, &(0x7f0000000000)=""/148}, &(0x7f00000000c0)="5b8e7ecf0140", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) 20.892637235s ago: executing program 0 (id=351): io_uring_setup(0x6b, &(0x7f0000000080)={0x0, 0x8dd3, 0x200, 0x3e, 0x235}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, 0x0, 0x0) ppoll(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000480)={[0x78c]}, 0x8) fsopen(&(0x7f0000000280)='ext4\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 18.127339847s ago: executing program 0 (id=354): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x10009, 0x8, 0x155c, 0x6, 0x2, 0x25d1, 0x1, 0x8000b4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x3, 0x0, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x30, 0x8, 0x1, 0x6, 0x8a, 0x79, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x0, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x8, 0x0, 0xffffff81, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x2844f66d, 0x7, 0xbe, 0x4007f, 0xffffffff, 0xb212], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000077, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffd, 0x80a, 0x4, 0x5, 0x1000, 0x0, 0x200b395, 0x400004, 0x80000000, 0x4, 0x19, 0x7, 0x1, 0x3, 0x3, 0x8, 0x9, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x4e, 0xf1, 0x4, 0xab00060, 0x5, 0x1, 0x6, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1ca, 0x4, 0x80000004, 0x7fffffff, 0x8, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x1ff, 0x80000001, 0x5, 0x5, 0x491, 0x5, 0x200006, 0x8, 0x400, 0xfffffffe, 0x404, 0x41, 0x6, 0xee4b, 0x2000004, 0x8000, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x0, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e59, 0x5, 0xd3, 0x8, 0x3437, 0x289d, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x80, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x203, 0x5, 0x1], [0xa772, 0x3, 0x200005, 0x1afa, 0xbfc, 0x8, 0xb, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x1e, 0x7f, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x539a, 0x936, 0x6, 0x80008001, 0x59, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x2, 0x10004, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xfff, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x1, 0xfffffff9, 0xd, 0xc, 0x463f, 0x7fffffff, 0x7fffffff, 0x8006, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1}}], 0x1, 0x20040010) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000080, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 15.897672183s ago: executing program 5 (id=355): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$unix(r1, 0x0, 0xc800) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x7, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc10c5541, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r4 = syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400100, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, 0x0, 0x0, 0x40800) openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 15.8311685s ago: executing program 0 (id=356): syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c", 0x15) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x3, 0xeb, 0x3, 0x0, 0xd}) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0", 0x25}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0xfffffffffffffeeb, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000200)=""/81, 0x73}], 0x2}, 0x42) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 14.327352305s ago: executing program 5 (id=357): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000400000000020000000000001202000000020000000000000e030000000000000000005f00db519448fb81bc5b679ee056627a2db04ff8cbb222978edd412f1f50417f6f06deda57e25215b8663a5d6be143c7ad027d0754dcf6ad7b19a8cef08a790e334df598c27eafdb109cdf7f4dc51eaf7e28ead362f4"], 0x0, 0x54}, 0x28) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379", @ANYBLOB="b9fa55fc2d4cdda0437bcdb4026719de98724e5fcdb8a770dd656ceaa67ae79bc30bd890ce97f6d13c6fa37fb4132f0d438b5a7d5a4f39d63f411515db112d8de10079659438f705586d8c1867779ff8a5d6c79e5b467dda97a4530200000000000000aa4bd89cc61325a7af"], 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fa6b079a848a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0x40806685, &(0x7f0000000240)={0x4, 0xffffffffffffffff, 'id1\x00'}) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 13.916720472s ago: executing program 0 (id=358): syz_open_dev$loop(0x0, 0x1, 0x122c42) socket$kcm(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/diskstats\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r3, 0x0, &(0x7f0000000800)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005ec0)={'ip6_vti0\x00', &(0x7f0000005e40)={'ip6gre0\x00', 0x0, 0x71, 0x2, 0x3, 0xfffffffd, 0x42, @dev={0xfe, 0x80, '\x00', 0x38}, @mcast1, 0x40, 0x80, 0x1, 0x7f}}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x4d6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 12.83198854s ago: executing program 5 (id=359): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000200)="083972bdb3a605c4c1188e9986dd02ff4284860186ddba71f16b7d", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11.168151734s ago: executing program 4 (id=361): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x3ffffffffc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) sched_setaffinity(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000020c0)=""/4086, &(0x7f0000000180)=0xff6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf255c00000008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x48851}, 0x800) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r7, 0x3) accept4$bt_l2cap(r7, 0x0, 0x0, 0x80800) 10.466211813s ago: executing program 4 (id=362): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r5) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8.697909061s ago: executing program 5 (id=363): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0xfffffffe, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) read(r1, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8000000000000003, 0x16b142) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0x2, 0xf2c, 0x32314d59, 0x1, 0x9, [{0x1, 0x2}, {0x2, 0x3}, {0x4, 0xfffffffb}, {0x9, 0x100006}, {0xa, 0x4}, {0x1ff, 0xfffffbff}, {0x0, 0x9}, {0x5, 0x1}], 0x7, 0xb, 0x2, 0x0, 0x1}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000001b80)=@vmx={0x10d, 0x0, 0x2080, {0xdddd1000, 0x2, {0x3}, 0x0, 0x2}, {"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", "6ebe6c1c9ea0af912caa21691ef89522faeac8b0ff0fbab12d284e81e4992e226a71d32dae02e3430284a2e05e7bf7c556a2d522872c9b0aae15cfd40b30fb46909f19c280ce2680b3de61865985df71b41b6dffb92a91aa602bfd6f9a5941b6406700dca90e1100ff2e9785e37b1b9d7108a099e1323f125f0a134b1ce4c3204f4553d2f819632db0c73c98df378ccdfc979a66d44ee278d6b7f5a2cb6ec9e76164166997574c77e43d3b6b134fe4d6f567b80f39dc0529c321a58bf486f1aeb04c0ef0eeaa316de68c7901c30bc6f3cefdc229d0225a4352192bec9a081733e6ac481338fd2e89b6c085e6e64d6ca580ca829d5f6bbe746653a0b95e5cd41a1e85168a416bcaf1952fbec7cdb2be2f8db98b51ce8e48ccdb4c41af951ca8b9bfe2441cf7e587ea9ba13a7f2bef18a2211a0169112dc17f4666bb3165c1367e6347d7a4d524144f1597e2fdda2c93ab3626f40ecd86b5645694afe881524dd75844cd725d46fe2dc6713cca751bfa346e40a4d6b7a87c5ee2e49962c3f95cc6ad07f7f9dea9de4d480278cbdb4c621ce6301a9da226959b44467b69d884b8b7ab5c8484ec2d001c09ce6f5e5637d88336e79144136eb48b71e6d88444bf31e093d06b176da79d8526b64c5f0285f68ed3f16c1366cccd41448eb4f08a8ddd271ba50bd48c71dc35fee81c2163bda2d51ce1c3e5b2541443a7f79df62f181f8da1ba80892bb9d2eeb8caac7345ba8dea83aadbcea9bfd0a4e7da369630e97f870306bd0dfe7bb9638ad50c2f4a59875d67d600ef82321b5fc2f24a7dfb304e438252c2ac5b3d0b8836bb0ae0bd578b3180c1a5eb7b86420305bef008968a19016aa34293af7c18e10e77fdcde0177447c121f5cc8218f82b5614f32163a33e65a5416e53d89aeb7ee285c5f8debbbeb269832a7e2579b48c6217d683fcd793f2bb00f29a6cc8a7487aa6cdd5efb7f66cd3185b3eaf7ed86147073e09b897ed19ea37c43a52246fb4ba096bbcff5f5ca2e933694c4aadb9fc903a026944c6a645d426c3652dcaf97d0980279328175bd9beb50cdf226feab2edf48ae88f2ca40439334a5b3cffcbf981e262b04514ee14f45ac9ba6630e396105e55a0f937683e36919ac978da2db63161dbf9a1f6dd4e84c52f8d3058be0c7db5c1a638618c6d0aafe939ecb1bbd12048d930ca68d6ce0e05f022181ab171dbd674693d9172a9b6974be6574578d833c486beba54b9a6bbf6f41122f749f42e502792ea89d13429063eecb2090394cd91941f107c455f7fa6ab7f81991a31e59db62ab9153922fa4027ffa33ac8c9234514b1af8f83c918b00fc021212dfedd298f4f283c8f4eb1a08bb984adab9ed384d2b325b2cc5c598f0d7ce3ce835198546c2eb55c2609aae02c47f628fa01ff0805deb5a6e28c75eec4668bc2653ec484eaff17e1ce0636423af90c238bf4815c52e11f67b0dbecca775ec9f18b3ddf5966a76f77f482e46072366103b50a4d5cbd5826efc63b2fa2a50196461b7145e55266877e1df8f48f9abbfe0c8ebdf499d72563da36a94fcd959c8d01f563c9bd3e0948e9f578888f8e1bdceb086a3b884aba23cb7cf5549165f5a627ea60b2695ab7a83adbbcac7803f28cdc5bd4ca3a7f71ec71e7380b29f5c01ece69c586180e8f4f5ec0c8b2425307bc8c2150ecef7e73814546bae3a02ca286e53ece88144dab3bc891ed6c5b44be3d39023b75daf76f669d835070a66c0dd17dd901b3c6a536566317729ec7e3e517cf4d65d75d4c4bea740f8f8dd45f52c1aab45d19d68c02b549989e8d6888302e320adfe4915ad9b60e4ea11f9180e977e485d2fbbf660a790d819b12b005ca8339a545474a166607cb1addb64eacbce41b0046444fc5011ecd349a62f308d2cb90c424f26c787a7de258dcae006ebd2ae8bf7bb17f82675208df70dd9928d29c59fa76452b6d841d37feead25149f54bbf8119c8912943f18c09b287ef5bdecfd3de1bc18e63fbae85886081dc05344b4be8d8898ce1b8d379dff1e8f462e271da9f890e6048d9f8262dcecda2646b226efefd276159bb05f4eefd522f8683e8febe71920ed307fff46f4ce4616c66b6862e308c9d6de1f937d2ac57ae921f17d411a79247e5b5b29cc396184947647e310132038d880660249609cfb4d3028c8974d8a22e873b913912b14f9c28aa515b30e80973e08316465dff41aa4b059622835856ce738cbc4569da2b202de999068a3e99b379cbc22dd5c4bee396a3e4de1cff4e4a2e7ba8015aaa882659939431ce88a9dc6b905b4ce98e1ee8f97be0b5dc40d80461a1cf03e4cb3b54f8f2c32797dad0acd3ddfb12b9e24a4588abf901c9ce7586ea5032b8c738552cf0f225eb44230013f4ea7acc7e7cef1b970440da09dd7261b145930a232ebf7d91f0e3673d68464c6990c3ed9eb65e5cbe41562bd93a86711c7d8781e9438fb7242daad25e70dbecc67b42dbb11bc4e854f942115af86b0c0f5953e070ddd64c6fb1ed809a98bfa1d73514726575d86b5104f0a082ee228101094ba6de7aaafc5759e8ca58fcedefd9c30423277f0c935a65e35497a6c201e347209996cda5aeb81d827023371efc04caefd4b707a20e0544b8e66b629be6fe643fd1bd63981d35574d993b36d6da4ce3c4419fe712115688c69f11b31a04b6229ea9ed08209ed170606588d8ff3f0edaaf509ef77b411f7b2b696cde25e612daa915ef6f31f6016cc6f9470e1e3b88081d6752292c5dffbc82e9103790788d72cdd2a82c7d5ed9c2ec0055bb5df4c9044e727b00c8e74f2d4adedd8294b4d186c7c1d77107a8510900d744a2cbafb50d0990347032ea96f40088ed1fff3fe87401ca3b32f8ca1ca0452aeae4844dc4e3d332d159d2392ee18b8c0aa8f8077ad05b424133183dd77372ee9daa4f7c3d07fe3aa430a9317f4058a63cea0bc0f7d9b7736f0be178f911ec128523442fe2dc7ff246ed7c38cdcff19417b67f03b2b766b36bd051ea728476b9196ff024ec5f88d6db8d186c20c1e1c172dd655d16de1dd7f2ee833bbba8e3f7871b27fb88cc68fba92fb36ba46893e4bedfa672cbca1f192bca17a82ab881b6a706919eb1d5087fdaae53c79ae64be3f996584cb6300a7711da4f85f194ee5172ba14fc08e9beb661c61477d9b978c9402ebfbe969807333db655c0da1354e1b8ad2f6792cc9881a421b690544a0bcaa6b928b600e7c5d0c9899d22ddbce045aced33f32a62407f472b4e8fce5d7a4e075c46369357edf66090d6632a1248c9f551f562983dbdfaf8a08fd67e2d9f4c28241b6bf9c488e77d33e8ce5e2912b71717d7d13c39b4688f34f335723b23470af12f548935bcf0cf1c3aebeaba4f8c2dd7575739c72acc28443ca2ee6325f8a73bf0f12e3806665085896fc6088c39be5fcd3e201a014457ff81dda19ffd7b9e4a1c0a43a866ffc84fde6b8927d9b71bdcdbab3cbb9fd721cdd81dede39fed1843ec9002f1a7c5e272cb881fe87f861acf70a5307a71a95e24eca60db833ff048dbfcb1ea693abbf8265e6e83a1f00a23f6dcd9845e8a52ab8f7743b057cc1bfdd9442423be288f1d518b7fd1a4453d8c4f4b0bf1d4f18faf5e79ddf5fa5f07c3c66c066f735e9acc48a2752ba5dd00a64510f3ae2c968f62978269174f1264c8a05c6e860fe956b0048e1e07f05e3eef4d3d0790255bc58b01e7fc25eb2ffd71656bf463e04f09b87fe0fd6b7650d2c8f3ef3375d688e49a25669cc7647593526dfd12794096cff418113166152c2a3f7b72ef92c72aa97fab608af1eaec823c920c518d88e714f38777bef8db1829ee37affe7c29aaced4587ab3a7bbcf06d9ae08d63a36e0aa873b84ba2639db85c0867d8f08ac88352fadfeb4a00a9f2647f2d86834d526498e15fa74ff1b0bb1a2b89479887a23cdb72ee0a4f7b1edde048b23998b85f14704261222cbdbc24c7517c46174abbbc36449cb39e48fe3de93110abe1c99561f34a7bd831cdb018ab91386faa24ae97afc13b63e1cb849dfec923e7a84115061f4be95339e655a9d37bf1989381e1a2b721919c2cec4aab9d16abd3b83fd31e46f6d3fb3ba2a45eed0a0a812187bd4b1cea17cc6d50056d6a72c5d24b2553c91f2005807c153f3daa2b88770fe58f020c8f180041b5ad7be7be63b1f38113f0dd80c81532c2d5c6dffa9b5cfecd411ea5436ee9b612d5bb73ce370435a4b26ac9273072668a07eac8c5f119548d6f974ee415a6afc75c45f34cfa9511f6f11908dc6aa5f4d639685132be4da18591a9631abf01464c6c4e053736ccf0fe866a8bb9dd7731283339babbf4eff5379080e249604e06ccaad467b4e27f37be109d2f02cdbb9b1dcf190c59d640265373f385dff1889164cdb5a66b5c57153dd06d1915a7249e01cc26dd6c97bb2d91e740bf17bf2558b6a7148768bd33d47509d377d0d98eb7703f226f92c76af10858ce142d93b25ae193219b54cb70785770690fa6126a87ca2010d2bb8200b4148e49f2984697f46d3b8bc7b0f171d80d7afa025570f87f47989c70ba8fddb4483e6ca0fbff8b73e4c2addc36bae19a03bedda5a45344a01c20014bb2c26f619d32fc0c2091fde8ade33d10a79719ae5efa6fd8cff82c08018aff3dab7bf3c184a08913bfe41ac4a39e5d3272f7d6262ff6e0e2db95ae8ef8cf0b327f361d8f8bab73b0136518f2ed19a1d49b485792634238f49a9402b1a38406ddcf8cd20aff4262970eee17bc4510349839e05a8d78b80bd5e586407a4120e7e02fb2f4deb77aabe0071ff7a0bcdfac6f90a52f738da557832139ece214da6f6603aed57e8f324017148377d7b6ad2854803da93486694b188f06c47f0bfa3eb2d3c3759426ee1f2a4b0af4350b681fd9f5a32a41ca1bad95dceb807d4a170f07b84985f2b9b0321c94f19ce5c9f336b31b8e481c8867846274f73b2d1843b0b7e6b7dc68584edac7bd70c095a68a8a7410840d94b466511c12a00d1227ea8e68991fa6fe3d6006fef0cf3ae1b67d71bea05c6e75d5757e09dcd417dc9a697e58cdcef6a3674d9c2350c54bc164b443da69836bc142f5759be085cba2f9d8e266c6b49de502fb901c094144c90de87853d7659ec8fb184a3f02b3e2eef5ad6166568782df1e211b2595e6cd8de690261e17fba2f264220665bd7e501fd3f69967637f9b67030d87a0e36f3fb88de942234883e6948e2d6142e4d01e95a6cfba822ac063fda77aef2a091897294cc0a0a90e2ad9b364940735d270a8f50131458b71b1d0bb290adac455024337255e9e77c5ec1dfafc8d2702f622a90d24ec62c87a86805074567bb2f526511cc039de0482573033d9c25e80da28f78ab5b65d46f711392222fe59e963a9957a4db3b13f590af7b47838635b6ee94f817a52ed2c4d7d10b6b341157a086748fb9e4745b513af69f96144f34076946668e166fff59cd9e508f43e02952cde6d798637e889fedf63fbdf71d36015364945540d2623cecb272268852c0a231c78858d53dfd35e2daeb1d6ff03f6bb4475c65df2c2a655348b2d9ed8d21acad6713e3974ca34b0bb12ffa93c022135e621e33d93c612b01a8de5d6f1c56f30fc8c63a5db68f463854edcb5b24fd5b14a92d84934a1cf5c0209912e10740f54c91065d4ada1d631a0255d60818dfcfe42e4581294c4a2259a6bac2c3ca43c866ef95fbb4d40e30624ba06bac06f0bb8b9a65d16ffebb2c7f8eb5721f8edaa8ace5d03f3d59053e92252033ed09336d5e326df915cba6a88dffdb164aa54f74d"}}) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r8 = fsmount(r3, 0x1, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 6.145335478s ago: executing program 0 (id=364): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r3, &(0x7f0000000680)=""/4096, 0x1000) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0xfffffed5) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) r4 = socket$inet(0x2, 0x800, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0), 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 5.893725609s ago: executing program 4 (id=365): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) futex(0x0, 0xd, 0x4, 0x0, 0x0, 0xfffffffe) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 4.562235707s ago: executing program 5 (id=366): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000003}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x1004) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.434398933s ago: executing program 4 (id=367): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r6}]}, 0x24}}, 0xea5bc50b6199d77e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.53322341s ago: executing program 4 (id=368): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1a}, 0xa) dup2(r1, r1) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f0000000ac0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaa", 0x90}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4", 0xbf}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0x76be, 0xc000, 0x3, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc260}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.195961ms ago: executing program 5 (id=369): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000001740)={[0x800]}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)}], 0x1}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000000009}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={0x1c, r5, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88c0}, 0x8021) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4084) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) 0s ago: executing program 4 (id=370): socket$nl_route(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)="0000000000aa303e97380e90231bdbdaf6a4bd846226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116070537a30d757aacdaa3af0ffea4174a9de3350c0a498396b28c7d1784d04aa3898875aadf41693ca322721cb781e094cb82950fd012efd26dea163449bb61e81413ea0a00"/121, 0x79}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c4", 0x3c3}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045", 0x33}], 0x3, 0x0, 0x0, 0x2000c801}, 0x0) recvmmsg(r1, &(0x7f0000003300)=[{{&(0x7f0000001d00)=@rc={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/131, 0x83}, 0x81}, {{&(0x7f0000000200)=@ax25={{0x3, @default}, [@remote, @bcast, @remote, @rose, @default, @remote, @rose, @rose]}, 0x80, 0x0, 0x0, &(0x7f0000002fc0)=""/234, 0xea}, 0xd6}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f00000030c0)=""/249, 0xf9}], 0x1, &(0x7f0000003200)=""/244, 0xf4}, 0x8}], 0x3, 0x0, 0x0) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="8a", 0x1}], 0x1, 0x80000001, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 88.479882][ T5784] cgroup: Unknown subsys name 'net' [ 88.721071][ T5784] cgroup: Unknown subsys name 'cpuset' [ 88.776726][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.763062][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.999840][ T824] cfg80211: failed to load regulatory.db [ 94.688102][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.706904][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.715433][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.716618][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.719981][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.720427][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.724528][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.746885][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.749811][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.754566][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.756924][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.758071][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.759491][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.763892][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.769704][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.778693][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.780656][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.782708][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.784878][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.795654][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.795990][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.830727][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.909955][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.911464][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.912429][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.855966][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 95.908615][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 95.970310][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 96.012216][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 96.091743][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 96.314935][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.318488][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.319000][ T5800] bridge_slave_0: entered allmulticast mode [ 96.328595][ T5800] bridge_slave_0: entered promiscuous mode [ 96.389747][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.389878][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.390308][ T5800] bridge_slave_1: entered allmulticast mode [ 96.392089][ T5800] bridge_slave_1: entered promiscuous mode [ 96.394479][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.394593][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.394712][ T5797] bridge_slave_0: entered allmulticast mode [ 96.399773][ T5797] bridge_slave_0: entered promiscuous mode [ 96.493445][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.493560][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.493959][ T5797] bridge_slave_1: entered allmulticast mode [ 96.517384][ T5797] bridge_slave_1: entered promiscuous mode [ 96.537678][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.537868][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.538396][ T5798] bridge_slave_0: entered allmulticast mode [ 96.540481][ T5798] bridge_slave_0: entered promiscuous mode [ 96.613411][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.613536][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.613682][ T5799] bridge_slave_0: entered allmulticast mode [ 96.625729][ T5799] bridge_slave_0: entered promiscuous mode [ 96.651062][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.651190][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.651375][ T5798] bridge_slave_1: entered allmulticast mode [ 96.655280][ T5798] bridge_slave_1: entered promiscuous mode [ 96.698939][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.741135][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.742102][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.742491][ T5799] bridge_slave_1: entered allmulticast mode [ 96.744421][ T5799] bridge_slave_1: entered promiscuous mode [ 96.785315][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.785438][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.800047][ T5801] bridge_slave_0: entered allmulticast mode [ 96.801989][ T5801] bridge_slave_0: entered promiscuous mode [ 96.811318][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.827510][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.863688][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.863882][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.864065][ T5801] bridge_slave_1: entered allmulticast mode [ 96.870470][ T5801] bridge_slave_1: entered promiscuous mode [ 96.877651][ T5115] Bluetooth: hci0: command tx timeout [ 96.909959][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.933757][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.955741][ T5115] Bluetooth: hci3: command tx timeout [ 96.956566][ T5115] Bluetooth: hci2: command tx timeout [ 96.957000][ T5115] Bluetooth: hci4: command tx timeout [ 97.000548][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.003635][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.037276][ T5800] team0: Port device team_slave_0 added [ 97.039841][ T5810] Bluetooth: hci1: command tx timeout [ 97.079827][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.082981][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.085325][ T5800] team0: Port device team_slave_1 added [ 97.112099][ T5797] team0: Port device team_slave_0 added [ 97.164747][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.193818][ T5797] team0: Port device team_slave_1 added [ 97.201986][ T5798] team0: Port device team_slave_0 added [ 97.263278][ T5798] team0: Port device team_slave_1 added [ 97.271483][ T5799] team0: Port device team_slave_0 added [ 97.294785][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.294799][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.294818][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.363623][ T5799] team0: Port device team_slave_1 added [ 97.372078][ T5801] team0: Port device team_slave_0 added [ 97.372929][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.372944][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.372973][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.374127][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.374137][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.374156][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.477851][ T5801] team0: Port device team_slave_1 added [ 97.492807][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.492819][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.492839][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.493895][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.493912][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.493930][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.618354][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.618373][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.618400][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.619596][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.619607][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.619626][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.714365][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.714379][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.714398][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.721247][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.721291][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.721380][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.816019][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.816032][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.816052][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.354005][ T5800] hsr_slave_0: entered promiscuous mode [ 98.355096][ T5800] hsr_slave_1: entered promiscuous mode [ 98.408317][ T5797] hsr_slave_0: entered promiscuous mode [ 98.409264][ T5797] hsr_slave_1: entered promiscuous mode [ 98.410042][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 98.410124][ T5797] Cannot create hsr debugfs directory [ 98.470700][ T5798] hsr_slave_0: entered promiscuous mode [ 98.471707][ T5798] hsr_slave_1: entered promiscuous mode [ 98.472366][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 98.472384][ T5798] Cannot create hsr debugfs directory [ 98.557779][ T5799] hsr_slave_0: entered promiscuous mode [ 98.558715][ T5799] hsr_slave_1: entered promiscuous mode [ 98.559436][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 98.559453][ T5799] Cannot create hsr debugfs directory [ 98.619673][ T5801] hsr_slave_0: entered promiscuous mode [ 98.620937][ T5801] hsr_slave_1: entered promiscuous mode [ 98.621702][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 98.621721][ T5801] Cannot create hsr debugfs directory [ 98.955623][ T5810] Bluetooth: hci0: command tx timeout [ 99.035670][ T5810] Bluetooth: hci4: command tx timeout [ 99.035705][ T5810] Bluetooth: hci3: command tx timeout [ 99.045724][ T5115] Bluetooth: hci2: command tx timeout [ 99.115663][ T5115] Bluetooth: hci1: command tx timeout [ 99.559009][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.605150][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.641576][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.695354][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.813888][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.842210][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.883534][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.939332][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.064432][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.104118][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.145146][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.190089][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.323842][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.371650][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.409868][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.455876][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.599040][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.643252][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.687346][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.726802][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.743064][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.853608][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.888807][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.909323][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.910002][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.952230][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.952373][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.008889][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.046540][ T5115] Bluetooth: hci0: command tx timeout [ 101.071691][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.074499][ T1471] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.074645][ T1471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.115898][ T5115] Bluetooth: hci2: command tx timeout [ 101.115930][ T5115] Bluetooth: hci3: command tx timeout [ 101.116546][ T5115] Bluetooth: hci4: command tx timeout [ 101.117314][ T1471] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.117595][ T1471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.196707][ T5115] Bluetooth: hci1: command tx timeout [ 101.224728][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.243244][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.273563][ T1471] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.273725][ T1471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.331714][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.331922][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.401156][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.425000][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.463040][ T1471] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.463278][ T1471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.523989][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.524128][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.607327][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.672711][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.673363][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.721786][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.721910][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.849224][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.022721][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.284746][ T5798] veth0_vlan: entered promiscuous mode [ 102.356495][ T5798] veth1_vlan: entered promiscuous mode [ 102.459248][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.609459][ T5798] veth0_macvtap: entered promiscuous mode [ 102.633722][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.661549][ T5798] veth1_macvtap: entered promiscuous mode [ 102.708715][ T5797] veth0_vlan: entered promiscuous mode [ 102.724239][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.763197][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.764131][ T5800] veth0_vlan: entered promiscuous mode [ 102.782626][ T5797] veth1_vlan: entered promiscuous mode [ 102.807621][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.833433][ T5800] veth1_vlan: entered promiscuous mode [ 102.861565][ T277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.879587][ T277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.884891][ T277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.912426][ T277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.932967][ T5799] veth0_vlan: entered promiscuous mode [ 103.060645][ T5797] veth0_macvtap: entered promiscuous mode [ 103.072977][ T5799] veth1_vlan: entered promiscuous mode [ 103.116559][ T5115] Bluetooth: hci0: command tx timeout [ 103.141842][ T5801] veth0_vlan: entered promiscuous mode [ 103.154182][ T5797] veth1_macvtap: entered promiscuous mode [ 103.186956][ T5800] veth0_macvtap: entered promiscuous mode [ 103.196218][ T5115] Bluetooth: hci4: command tx timeout [ 103.196250][ T5115] Bluetooth: hci3: command tx timeout [ 103.196271][ T5115] Bluetooth: hci2: command tx timeout [ 103.257799][ T5800] veth1_macvtap: entered promiscuous mode [ 103.259413][ T5801] veth1_vlan: entered promiscuous mode [ 103.277803][ T5810] Bluetooth: hci1: command tx timeout [ 103.282560][ T277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.282580][ T277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.336979][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.371384][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.400204][ T5799] veth0_macvtap: entered promiscuous mode [ 103.416904][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.438131][ T1482] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.441241][ T277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.441260][ T277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.443194][ T5799] veth1_macvtap: entered promiscuous mode [ 103.444259][ T1482] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.455206][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.488411][ T1482] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.526662][ T1482] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.627393][ T1482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.648373][ T1471] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.653138][ T1471] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.671887][ T5801] veth0_macvtap: entered promiscuous mode [ 103.680529][ T1471] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.731110][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.768549][ T5801] veth1_macvtap: entered promiscuous mode [ 103.859099][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.864631][ T5914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 103.864665][ T5914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 103.951202][ T5914] syz_tun: entered promiscuous mode [ 103.952395][ T5914] erspan0: entered promiscuous mode [ 104.065327][ T3612] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.090298][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.091478][ T1482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.091497][ T1482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.103618][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.114884][ T5916] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 104.146658][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.288990][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.399037][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.414473][ T5918] TCP: TCP_TX_DELAY enabled [ 104.430268][ T1471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.430289][ T1471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.533586][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.562327][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.564332][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.564847][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.570729][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.570779][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.733178][ T1471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.733221][ T1471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.989244][ T277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.989265][ T277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.319100][ T1471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.319124][ T1471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.495259][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.495283][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.874883][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.874907][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.286848][ T5939] loop5: detected capacity change from 0 to 7 [ 106.733594][ T5945] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.748740][ T824] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.906107][ T824] usb 4-1: Using ep0 maxpacket: 32 [ 106.931754][ T824] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 106.946101][ T5945] usb 5-1: config 0 has no interfaces? [ 106.947729][ T824] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 106.947755][ T824] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 106.947774][ T824] usb 4-1: Product: syz [ 106.947789][ T824] usb 4-1: Manufacturer: syz [ 106.947803][ T824] usb 4-1: SerialNumber: syz [ 106.949670][ T5945] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.949697][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.949718][ T5945] usb 5-1: Product: syz [ 106.949733][ T5945] usb 5-1: Manufacturer: syz [ 106.949748][ T5945] usb 5-1: SerialNumber: syz [ 107.105784][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.170617][ T824] usb 4-1: config 0 descriptor?? [ 107.170644][ T5945] usb 5-1: config 0 descriptor?? [ 107.190143][ T5942] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 107.273373][ T824] hub 4-1:0.0: bad descriptor, ignoring hub [ 107.273414][ T824] hub 4-1:0.0: probe with driver hub failed with error -5 [ 107.286081][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 107.303269][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.303304][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.303327][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.303363][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 107.303444][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.565288][ T9] usb 1-1: config 0 descriptor?? [ 108.316438][ T5956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.317006][ T5956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.398556][ T5884] usb 5-1: USB disconnect, device number 2 [ 108.434284][ T824] usb 4-1: USB disconnect, device number 2 [ 108.526091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 108.902616][ T9] nzxt-smart2 0003:1E71:2009.0001: ignoring exceeding usage max [ 108.905514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 108.984798][ T9] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 109.168368][ T5926] Dev loop5: unable to read RDB block 7 [ 109.168421][ T5926] loop5: unable to read partition table [ 109.168675][ T5926] loop5: partition table beyond EOD, truncated [ 109.220453][ T9] usb 1-1: USB disconnect, device number 2 [ 109.275826][ T824] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.426734][ T824] usb 4-1: Using ep0 maxpacket: 32 [ 109.434654][ T824] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 109.458243][ T824] usb 4-1: string descriptor 0 read error: -22 [ 109.458398][ T824] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 109.458423][ T824] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 109.496065][ T824] usb 4-1: config 0 descriptor?? [ 109.499488][ T5942] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 109.504261][ T824] hub 4-1:0.0: bad descriptor, ignoring hub [ 109.504310][ T824] hub 4-1:0.0: probe with driver hub failed with error -5 [ 109.690200][ T5959] fido_id[5959]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 109.908529][ T5945] usb 4-1: USB disconnect, device number 3 [ 110.465956][ T5939] Dev loop5: unable to read RDB block 7 [ 110.466013][ T5939] loop5: unable to read partition table [ 110.466259][ T5939] loop5: partition table beyond EOD, truncated [ 110.466298][ T5939] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 111.656303][ T6029] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.750887][ T6030] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.753682][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.585600][ T36] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.745588][ T36] usb 4-1: Using ep0 maxpacket: 8 [ 112.748705][ T36] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 112.748763][ T36] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.748787][ T36] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.748812][ T36] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.748836][ T36] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.748879][ T36] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.748902][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.088895][ T36] usb 4-1: usb_control_msg returned -32 [ 113.088966][ T36] usbtmc 4-1:16.0: can't read capabilities [ 113.429897][ T6046] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 113.440629][ T36] usb 4-1: USB disconnect, device number 4 [ 117.056548][ T5885] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.213172][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.213201][ T5885] usb 1-1: config 0 has no interfaces? [ 117.213779][ T5885] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 117.213807][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.265109][ T5885] usb 1-1: config 0 descriptor?? [ 117.546073][ T36] usb 1-1: USB disconnect, device number 3 [ 118.772499][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 118.917428][ T6138] Zero length message leads to an empty skb [ 119.294584][ T6136] team0: Port device team_slave_0 removed [ 119.705815][ T6147] batadv_slave_1: entered promiscuous mode [ 119.737976][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 119.738124][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.986837][ T6147] batadv_slave_1 (unregistering): left promiscuous mode [ 120.986934][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.375633][ T5884] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 124.543213][ T5884] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 124.543246][ T5884] usb 1-1: config 0 has no interface number 0 [ 124.543295][ T5884] usb 1-1: config 0 interface 41 has no altsetting 0 [ 124.620115][ T5884] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 124.620138][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.620152][ T5884] usb 1-1: Product: syz [ 124.620162][ T5884] usb 1-1: Manufacturer: syz [ 124.620192][ T5884] usb 1-1: SerialNumber: syz [ 124.662239][ T5884] usb 1-1: config 0 descriptor?? [ 125.439692][ T6192] netlink: 'syz.3.83': attribute type 11 has an invalid length. [ 125.479873][ T5884] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 126.359157][ T6212] netlink: 'syz.4.90': attribute type 1 has an invalid length. [ 126.720534][ T5884] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 126.721127][ T5884] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 126.721787][ T5884] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 126.804352][ T5884] usb 1-1: USB disconnect, device number 4 [ 127.735518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.270308][ T6243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.100'. [ 129.530550][ T6245] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 129.532742][ T6252] tipc: Failed to remove unknown binding: 66,2,2/0:2593506800/2593506804 [ 132.897829][ T6279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.109'. [ 132.898643][ T6286] netlink: 'syz.2.112': attribute type 1 has an invalid length. [ 132.899552][ T6286] netlink: 260 bytes leftover after parsing attributes in process `syz.2.112'. [ 132.952315][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 132.993922][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.994020][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.048321][ T6286] geneve0: entered promiscuous mode [ 133.048348][ T6286] geneve0: entered allmulticast mode [ 133.114545][ T6289] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 133.114574][ T6289] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.169053][ T6289] vhci_hcd vhci_hcd.0: Device attached [ 133.725612][ T5945] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 133.725763][ T808] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 134.587788][ T5945] usb 1-1: config 0 has no interfaces? [ 134.592710][ T5945] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 134.592742][ T5945] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 134.592763][ T5945] usb 1-1: Manufacturer: syz [ 134.649431][ T5945] usb 1-1: config 0 descriptor?? [ 134.861394][ T6290] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 134.903361][ T6004] vhci_hcd vhci_hcd.0: stop threads [ 134.904793][ T6004] vhci_hcd vhci_hcd.0: release socket [ 134.905104][ T6004] vhci_hcd vhci_hcd.0: disconnect device [ 134.957266][ T5884] usb 1-1: USB disconnect, device number 5 [ 135.605023][ T6315] netlink: 48 bytes leftover after parsing attributes in process `syz.2.118'. [ 138.895738][ T808] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 140.115659][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.510135][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 141.510166][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.510186][ T9] usb 1-1: Product: syz [ 141.510201][ T9] usb 1-1: Manufacturer: syz [ 141.510215][ T9] usb 1-1: SerialNumber: syz [ 141.851346][ T6371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.414019][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 142.414084][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 143.002219][ T5884] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.085082][ T6383] netlink: 'syz.4.143': attribute type 11 has an invalid length. [ 143.175598][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 143.181021][ T5884] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.181047][ T5884] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.183832][ T5884] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.183914][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.183929][ T5884] usb 4-1: Product: syz [ 143.183940][ T5884] usb 4-1: Manufacturer: syz [ 143.183951][ T5884] usb 4-1: SerialNumber: syz [ 143.512157][ T5884] usb 4-1: 0:2 : does not exist [ 143.558756][ T5884] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 143.788256][ T6385] bridge: RTM_NEWNEIGH with invalid ether address [ 143.803830][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 143.850308][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 143.956749][ T5884] usb 4-1: USB disconnect, device number 5 [ 144.063023][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 144.063527][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 144.063565][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 144.064485][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 144.163265][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 144.194913][ T9] usb 1-1: USB disconnect, device number 6 [ 144.249486][ T6272] udevd[6272]: setting owner of /dev/bus/usb/001/006 to uid=0, gid=0 failed: No such file or directory [ 144.292175][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.455505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.515508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.619323][ T6394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.147'. [ 147.652986][ T9] IPVS: starting estimator thread 0... [ 147.735695][ T6408] IPVS: using max 11 ests per chain, 26400 per kthread [ 149.695871][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 149.885599][ T5869] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 151.556516][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.556545][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 151.562007][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.562036][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.562058][ T9] usb 2-1: Product: syz [ 151.562073][ T9] usb 2-1: Manufacturer: syz [ 151.562089][ T9] usb 2-1: SerialNumber: syz [ 151.745894][ T5869] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 151.745925][ T5869] usb 3-1: config 0 has no interface number 0 [ 151.745972][ T5869] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 151.745999][ T5869] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 151.746026][ T5869] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 151.748245][ T5869] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 151.748273][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 151.748295][ T5869] usb 3-1: Product: syz [ 151.748311][ T5869] usb 3-1: SerialNumber: syz [ 152.512609][ T5869] usb 3-1: config 0 descriptor?? [ 152.545485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 152.564704][ T5869] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 152.577664][ T5869] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input5 [ 152.628503][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 152.630023][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 152.630265][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 152.630497][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 152.633299][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 152.635816][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 152.636069][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 152.636321][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 152.636566][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 152.640318][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 152.814197][ T5885] usb 2-1: USB disconnect, device number 2 [ 153.062649][ T5869] usb 3-1: USB disconnect, device number 2 [ 153.062745][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 153.095002][ T6446] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 153.095030][ T6446] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.116707][ T6446] vhci_hcd vhci_hcd.0: Device attached [ 153.121172][ T5869] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 153.166138][ T6446] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 153.166167][ T6446] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.166221][ T6446] vhci_hcd vhci_hcd.0: Device attached [ 153.369106][ T31] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 153.746485][ T5869] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 154.685649][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 154.695737][ T5869] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.695762][ T5869] usb 3-1: config 0 has no interface number 0 [ 154.695807][ T5869] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.695851][ T5869] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.695891][ T5869] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 154.695915][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.804586][ T5869] usb 3-1: config 0 descriptor?? [ 155.780883][ T6446] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(10) [ 155.780911][ T6446] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.821373][ T6473] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13) [ 155.822616][ T6446] vhci_hcd vhci_hcd.0: Device attached [ 155.822675][ T6473] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 155.834968][ T6473] vhci_hcd vhci_hcd.0: Device attached [ 155.975954][ T6471] vhci_hcd: connection closed [ 155.978085][ T13] vhci_hcd vhci_hcd.2: stop threads [ 155.978115][ T13] vhci_hcd vhci_hcd.2: release socket [ 155.980198][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 155.985000][ T5869] usbhid 3-1:0.1: can't add hid device: -71 [ 155.985098][ T5869] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 156.015665][ T5945] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 156.061290][ T6449] vhci_hcd: connection closed [ 156.061625][ T6447] vhci_hcd: connection reset by peer [ 156.068959][ T13] vhci_hcd vhci_hcd.2: stop threads [ 156.068986][ T13] vhci_hcd vhci_hcd.2: release socket [ 156.069209][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 156.110179][ T5869] usb 3-1: USB disconnect, device number 3 [ 156.142748][ T13] vhci_hcd vhci_hcd.2: stop threads [ 156.142778][ T13] vhci_hcd vhci_hcd.2: release socket [ 156.142860][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 156.143395][ T6474] vhci_hcd: connection closed [ 156.175588][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 156.183054][ T5945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.183113][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.183139][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.183179][ T5945] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 156.183202][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.185942][ T13] vhci_hcd vhci_hcd.2: stop threads [ 156.185965][ T13] vhci_hcd vhci_hcd.2: release socket [ 156.188119][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 156.294300][ T5945] usb 2-1: config 0 descriptor?? [ 156.712083][ T5945] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 156.712112][ T5945] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 156.712131][ T5945] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 156.712149][ T5945] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 156.774939][ T5945] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf3 found [ 156.774967][ T5945] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf4 found [ 156.910368][ T9] usb 2-1: USB disconnect, device number 3 [ 158.466239][ T31] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 158.783081][ T808] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 159.489151][ T808] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 159.489183][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.489205][ T808] usb 5-1: Product: syz [ 159.489219][ T808] usb 5-1: Manufacturer: syz [ 159.489234][ T808] usb 5-1: SerialNumber: syz [ 160.034137][ T808] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 160.034201][ T808] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 161.322534][ T6516] netlink: 'syz.0.182': attribute type 3 has an invalid length. [ 161.808764][ T808] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 162.011604][ T808] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 162.012177][ T808] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 162.012232][ T808] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 162.100760][ T808] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 163.157943][ T808] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 163.226111][ T808] usb 5-1: USB disconnect, device number 3 [ 163.382152][ T6535] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 163.382184][ T6535] overlayfs: failed to set xattr on upper [ 163.382194][ T6535] overlayfs: ...falling back to redirect_dir=nofollow. [ 163.382202][ T6535] overlayfs: ...falling back to index=off. [ 163.382211][ T6535] overlayfs: ...falling back to uuid=null. [ 163.524035][ T6542] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 163.524057][ T6542] overlayfs: failed to set xattr on upper [ 163.524063][ T6542] overlayfs: ...falling back to redirect_dir=nofollow. [ 163.524068][ T6542] overlayfs: ...falling back to index=off. [ 163.524074][ T6542] overlayfs: ...falling back to uuid=null. [ 163.524328][ T6542] overlayfs: conflicting lowerdir path [ 164.571815][ T6550] comedi comedi0: No channels found! [ 165.015488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 165.395376][ T6558] syz.3.193 uses obsolete (PF_INET,SOCK_PACKET) [ 165.486646][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 165.645814][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 165.673074][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 165.687668][ T31] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 165.687698][ T31] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 165.687719][ T31] usb 1-1: Product: syz [ 165.687734][ T31] usb 1-1: Manufacturer: syz [ 165.687748][ T31] usb 1-1: SerialNumber: syz [ 165.761939][ T31] usb 1-1: config 0 descriptor?? [ 165.771367][ T6556] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 166.008398][ T31] usb 1-1: USB disconnect, device number 7 [ 167.725508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.745496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.755530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 175.069912][ T6613] overlayfs: failed lookup in lower (newroot/45, name='file1', err=-40): overlapping layers [ 175.641559][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'. [ 175.741802][ T6620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.764917][ T6623] ipvlan2: entered allmulticast mode [ 175.764940][ T6623] bond1: entered allmulticast mode [ 175.922320][ T6620] bridge1: entered allmulticast mode [ 175.949067][ T6620] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 175.966898][ T5885] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.153761][ T5885] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 176.153793][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.208458][ T6633] Set syz0 is full, maxelem 0 reached [ 176.224198][ T5885] usb 2-1: config 0 descriptor?? [ 178.091924][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.091955][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.407110][ T6644] syz.1.214: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 178.407447][ T6644] CPU: 1 UID: 0 PID: 6644 Comm: syz.1.214 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.407479][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 178.407501][ T6644] Call Trace: [ 178.407511][ T6644] [ 178.407521][ T6644] dump_stack_lvl+0xe8/0x150 [ 178.407581][ T6644] warn_alloc+0x263/0x3e0 [ 178.407607][ T6644] ? kernel_text_address+0xa5/0xe0 [ 178.407636][ T6644] ? __kernel_text_address+0xd/0x30 [ 178.407663][ T6644] ? unwind_get_return_address+0x4d/0x90 [ 178.407690][ T6644] ? __pfx_warn_alloc+0x10/0x10 [ 178.407723][ T6644] ? stack_trace_save+0xa9/0x100 [ 178.407753][ T6644] ? __pfx_stack_trace_save+0x10/0x10 [ 178.407789][ T6644] __vmalloc_node_range_noprof+0x132/0x1730 [ 178.407825][ T6644] ? check_noncircular+0xda/0x150 [ 178.407856][ T6644] ? add_lock_to_list+0xc7/0x100 [ 178.407884][ T6644] ? lockdep_unlock+0x5d/0xd0 [ 178.407915][ T6644] ? __lock_acquire+0x146e/0x2cf0 [ 178.407958][ T6644] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 178.408009][ T6644] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 178.408043][ T6644] vmalloc_noprof+0xb2/0xe0 [ 178.408088][ T6644] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 178.408122][ T6644] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 178.408153][ T6644] ? dvb_demux_do_ioctl+0x323/0x540 [ 178.408188][ T6644] dvb_demux_do_ioctl+0x460/0x540 [ 178.408223][ T6644] dvb_usercopy+0x199/0x2e0 [ 178.408252][ T6644] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 178.408281][ T6644] ? __pfx_dvb_usercopy+0x10/0x10 [ 178.408322][ T6644] ? __fget_files+0x3a6/0x420 [ 178.408351][ T6644] ? __fget_files+0x2a/0x420 [ 178.408382][ T6644] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 178.408413][ T6644] dvb_demux_ioctl+0x29/0x40 [ 178.408443][ T6644] __se_sys_ioctl+0xff/0x170 [ 178.408486][ T6644] do_syscall_64+0x14d/0xf80 [ 178.408515][ T6644] ? trace_irq_disable+0x3b/0x150 [ 178.408550][ T6644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.408574][ T6644] ? clear_bhb_loop+0x40/0x90 [ 178.408602][ T6644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.408624][ T6644] RIP: 0033:0x7fe4bf95c819 [ 178.408652][ T6644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.408671][ T6644] RSP: 002b:00007fe4bdb95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.408695][ T6644] RAX: ffffffffffffffda RBX: 00007fe4bfbd6090 RCX: 00007fe4bf95c819 [ 178.408711][ T6644] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 178.408725][ T6644] RBP: 00007fe4bf9f2c91 R08: 0000000000000000 R09: 0000000000000000 [ 178.408738][ T6644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.408751][ T6644] R13: 00007fe4bfbd6128 R14: 00007fe4bfbd6090 R15: 00007ffe7800ce18 [ 178.408786][ T6644] [ 178.408800][ T6644] Mem-Info: [ 178.408810][ T6644] active_anon:259 inactive_anon:21882 isolated_anon:750 [ 178.408810][ T6644] active_file:5750 inactive_file:48964 isolated_file:0 [ 178.408810][ T6644] unevictable:768 dirty:363 writeback:0 [ 178.408810][ T6644] slab_reclaimable:11570 slab_unreclaimable:102470 [ 178.408810][ T6644] mapped:44788 shmem:17433 pagetables:1359 [ 178.408810][ T6644] sec_pagetables:0 bounce:0 [ 178.408810][ T6644] kernel_misc_reclaimable:0 [ 178.408810][ T6644] free:1293969 free_pcp:6585 free_cma:0 [ 178.408870][ T6644] Node 0 active_anon:1036kB inactive_anon:87528kB active_file:22796kB inactive_file:195856kB unevictable:1536kB isolated(anon):3000kB isolated(file):0kB mapped:179152kB dirty:1452kB writeback:0kB shmem:68196kB kernel_stack:13584kB pagetables:5280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 178.408921][ T6644] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 178.408970][ T6644] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.409036][ T6644] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 178.409074][ T6644] Node 0 DMA32 free:1229120kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1036kB inactive_anon:87528kB active_file:22796kB inactive_file:195856kB unevictable:1536kB writepending:1452kB zspages:0kB present:3129332kB managed:2566416kB mlocked:0kB bounce:0kB free_pcp:26340kB local_pcp:4664kB free_cma:0kB [ 178.409140][ T6644] lowmem_reserve[]: 0 0 0 0 0 [ 178.409176][ T6644] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:412kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.409235][ T6644] lowmem_reserve[]: 0 0 0 0 0 [ 178.409271][ T6644] Node 1 Normal free:3931396kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.409336][ T6644] lowmem_reserve[]: 0 0 0 0 0 [ 178.409370][ T6644] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 178.409695][ T6644] Node 0 DMA32: 1196*4kB (UME) 1122*8kB (UME) 26*16kB (UM) 210*32kB (UME) 39*64kB (UME) 17*128kB (UME) 31*256kB (UME) 15*512kB (UM) 10*1024kB (ME) 9*2048kB (UM) 283*4096kB (UM) = 1229024kB [ 178.409868][ T6644] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 178.409976][ T6644] Node 1 Normal: 11*4kB (UM) 9*8kB (UM) 17*16kB (UM) 6*32kB (UM) 5*64kB (UM) 5*128kB (UM) 3*256kB (M) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3931396kB [ 178.410148][ T6644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.410167][ T6644] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.410191][ T6644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.410210][ T6644] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.410228][ T6644] 72143 total pagecache pages [ 178.410241][ T6644] 0 pages in swap cache [ 178.410249][ T6644] Free swap = 124996kB [ 178.410258][ T6644] Total swap = 124996kB [ 178.410266][ T6644] 2097051 pages RAM [ 178.410275][ T6644] 0 pages HighMem/MovableOnly [ 178.410283][ T6644] 423729 pages reserved [ 178.410291][ T6644] 0 pages cma reserved [ 179.453200][ T6646] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 180.454192][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.454283][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.565604][ T5810] Bluetooth: hci0: command 0x0401 tx timeout [ 181.948239][ T5885] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 181.948995][ T5885] [drm:udl_init] *ERROR* Selecting channel failed [ 182.273078][ T5885] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 182.273104][ T5885] [drm] Initialized udl on minor 2 [ 182.395758][ T5885] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 182.403846][ T5885] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 182.479924][ T824] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 182.488910][ T824] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 182.652124][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 182.652150][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 182.729346][ T6663] syz.0.225 (6663) used greatest stack depth: 17536 bytes left [ 183.154634][ T5885] usb 2-1: USB disconnect, device number 4 [ 186.108265][ T6694] tipc: Started in network mode [ 186.108292][ T6694] tipc: Node identity ce37cd686978, cluster identity 4711 [ 186.108624][ T6694] tipc: Enabled bearer , priority 0 [ 186.109249][ T6694] syzkaller0: entered promiscuous mode [ 186.109265][ T6694] syzkaller0: entered allmulticast mode [ 188.248780][ T6698] tipc: Resetting bearer [ 188.285972][ T6693] tipc: Resetting bearer [ 190.499089][ T6693] tipc: Disabling bearer [ 194.151693][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 194.365598][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 194.409406][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.410865][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.632934][ T5912] tipc: Node number set to 2807025000 [ 195.675904][ T9] usb 1-1: device descriptor read/all, error -71 [ 196.861746][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.862916][ T6750] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.956815][ T6767] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.976080][ T6768] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 202.011388][ T6750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.074407][ T6750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.055656][ T1175] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.059105][ T6007] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.059157][ T6007] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.059199][ T6007] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.148884][ T6836] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 213.831806][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.844146][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.859224][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.867134][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.895828][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.998391][ T5802] Bluetooth: hci5: command tx timeout [ 217.876502][ T5802] Bluetooth: hci0: command 0x0401 tx timeout [ 217.876546][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 218.085672][ T5115] Bluetooth: hci5: command tx timeout [ 219.817034][ T37] audit: type=1326 audit(1775519945.817:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6883 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3dad8c819 code=0x7ffc0000 [ 219.817089][ T37] audit: type=1326 audit(1775519945.817:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6883 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3dad8c819 code=0x7ffc0000 [ 219.817131][ T37] audit: type=1326 audit(1775519945.817:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6883 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3dad4d04e code=0x7ffc0000 [ 219.817175][ T37] audit: type=1326 audit(1775519945.817:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6883 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3dad8c819 code=0x7ffc0000 [ 219.817227][ T37] audit: type=1326 audit(1775519945.827:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6883 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fe3dad8c819 code=0x7ffc0000 [ 219.817262][ T37] audit: type=1326 audit(1775519945.827:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6883 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3dad8c819 code=0x7ffc0000 [ 219.817295][ T37] audit: type=1326 audit(1775519945.827:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6883 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3dad8c819 code=0x7ffc0000 [ 219.817338][ T37] audit: type=1326 audit(1775519945.827:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6883 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe3dad8c819 code=0x7ffc0000 [ 219.841745][ T37] audit: type=1326 audit(1775519945.827:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6883 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3dad8c819 code=0x7ffc0000 [ 219.843053][ T37] audit: type=1326 audit(1775519945.847:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6883 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fe3dad8c819 code=0x7ffc0000 [ 220.077676][ T6843] chnl_net:caif_netlink_parms(): no params data found [ 220.165527][ T5806] Bluetooth: hci5: command tx timeout [ 221.036443][ T6896] netlink: 'syz.1.277': attribute type 15 has an invalid length. [ 221.270865][ T6900] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.278'. [ 221.271047][ T6901] warning: `syz.0.278' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 221.489375][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.489587][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.489782][ T6843] bridge_slave_0: entered allmulticast mode [ 221.543543][ T6843] bridge_slave_0: entered promiscuous mode [ 221.574907][ T6843] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.575035][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.575293][ T6843] bridge_slave_1: entered allmulticast mode [ 221.598283][ T6843] bridge_slave_1: entered promiscuous mode [ 222.091667][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 222.097993][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 222.236195][ T5806] Bluetooth: hci5: command tx timeout [ 222.948587][ T6843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.529466][ T6843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.859864][ T6843] team0: Port device team_slave_0 added [ 223.883225][ T6843] team0: Port device team_slave_1 added [ 223.939697][ T6843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.939716][ T6843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.939744][ T6843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.942278][ T6843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.942292][ T6843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.942322][ T6843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.026177][ T824] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 224.229806][ T824] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.229834][ T824] usb 2-1: config 0 has no interface number 0 [ 224.229882][ T824] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.229911][ T824] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.229934][ T824] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.229961][ T824] usb 2-1: config 0 interface 1 has no altsetting 0 [ 224.229996][ T824] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 224.230020][ T824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.345506][ T6933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.345579][ T6933] IPv6: NLM_F_CREATE should be set when creating new route [ 225.212627][ T824] usb 2-1: config 0 descriptor?? [ 227.296843][ T824] usbhid 2-1:0.1: can't add hid device: -71 [ 227.296978][ T824] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 228.177631][ T824] usb 2-1: USB disconnect, device number 5 [ 228.350570][ T6843] hsr_slave_0: entered promiscuous mode [ 228.356538][ T6843] hsr_slave_1: entered promiscuous mode [ 228.357478][ T6843] debugfs: 'hsr0' already exists in 'hsr' [ 228.357510][ T6843] Cannot create hsr debugfs directory [ 228.653867][ T824] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 228.804019][ T6927] syz.3.286 (6927): drop_caches: 2 [ 228.841787][ T824] usb 2-1: config 0 has an invalid interface number: 74 but max is 1 [ 228.841815][ T824] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.841830][ T824] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 228.841847][ T824] usb 2-1: config 0 has no interface number 0 [ 228.841883][ T824] usb 2-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.841901][ T824] usb 2-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 228.841923][ T824] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 228.841943][ T824] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 228.934869][ T824] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 228.934900][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.934921][ T824] usb 2-1: Product: syz [ 228.934936][ T824] usb 2-1: Manufacturer: syz [ 228.934950][ T824] usb 2-1: SerialNumber: syz [ 228.998166][ T824] usb 2-1: config 0 descriptor?? [ 229.102206][ T6930] syz.3.286 (6930): drop_caches: 2 [ 229.257012][ T824] cypress_m8 2-1:0.74: HID->COM RS232 Adapter converter detected [ 229.291596][ T824] usb 2-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 229.322475][ T824] usb 2-1: USB disconnect, device number 6 [ 229.392037][ T6843] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.456018][ T6843] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.491248][ T824] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 229.492132][ T824] cypress_m8 2-1:0.74: device disconnected [ 229.533878][ T6843] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.815793][ T6843] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.242283][ T6978] evm: overlay not supported [ 233.807822][ T6843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.127634][ T6843] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.134996][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.141031][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.204232][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.212687][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.300953][ T6843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.506725][ T6843] veth0_vlan: entered promiscuous mode [ 239.537880][ T6843] veth1_vlan: entered promiscuous mode [ 240.733979][ T6843] veth0_macvtap: entered promiscuous mode [ 240.744878][ T6843] veth1_macvtap: entered promiscuous mode [ 240.829798][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.917042][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.976134][ T999] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.976374][ T999] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.976413][ T999] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.976453][ T999] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.222192][ T1466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.222214][ T1466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.951854][ T5885] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 248.105522][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 248.111933][ T5885] usb 1-1: config 0 has an invalid interface descriptor of length 4, skipping [ 248.111973][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.111994][ T5885] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 248.192661][ T5885] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 248.192695][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=31 [ 248.192716][ T5885] usb 1-1: SerialNumber: syz [ 248.254964][ T5885] usb 1-1: config 0 descriptor?? [ 248.539436][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.539461][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.595583][ T5885] usb 1-1: USB disconnect, device number 10 [ 252.114972][ T7090] capability: warning: `syz.3.321' uses 32-bit capabilities (legacy support in use) [ 256.196455][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.196532][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.067121][ T5945] IPVS: starting estimator thread 0... [ 262.141054][ T7141] mmap: syz.1.331 (7141) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 262.368077][ T7142] IPVS: using max 11 ests per chain, 26400 per kthread [ 262.475059][ T7146] process 'syz.4.332' launched './file0' with NULL argv: empty string added [ 263.113341][ T7150] random: crng reseeded on system resumption [ 265.137527][ T7153] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 275.978486][ T7191] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 276.226370][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.242105][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.245636][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.247178][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.248460][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.259417][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.274070][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.284033][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.302300][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.303077][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.316091][ T5115] Bluetooth: hci0: command tx timeout [ 278.342607][ T7151] syz_tun (unregistering): left promiscuous mode [ 278.565631][ T5945] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 278.669787][ T7208] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 278.671392][ T7202] : renamed from dummy0 (while UP) [ 279.588945][ T5945] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 279.588977][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.588998][ T5945] usb 6-1: Product: syz [ 279.589013][ T5945] usb 6-1: Manufacturer: syz [ 279.589028][ T5945] usb 6-1: SerialNumber: syz [ 279.601715][ T5945] usb 6-1: config 0 descriptor?? [ 281.308354][ T5810] Bluetooth: hci1: command tx timeout [ 281.308611][ T5810] Bluetooth: hci0: command tx timeout [ 281.578092][ T5945] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 281.578208][ T5945] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 281.618562][ T5945] usb 6-1: USB disconnect, device number 2 [ 283.150165][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.151990][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.109497][ T5810] Bluetooth: hci1: command tx timeout [ 284.114698][ T5115] Bluetooth: hci0: command tx timeout [ 286.545632][ T5115] Bluetooth: hci0: command tx timeout [ 286.545668][ T5115] Bluetooth: hci1: command tx timeout [ 286.675767][ T13] bridge_slave_1: left allmulticast mode [ 286.675961][ T13] bridge_slave_1: left promiscuous mode [ 286.700947][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.797937][ T13] bridge_slave_0: left allmulticast mode [ 286.797959][ T13] bridge_slave_0: left promiscuous mode [ 286.798184][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.566182][ T5810] Bluetooth: hci1: command tx timeout [ 289.040482][ T13] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 289.089541][ T13] bridge1 (unregistering): left allmulticast mode [ 290.216392][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.473529][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.518968][ T13] bond0 (unregistering): Released all slaves [ 290.784010][ T13] bond1 (unregistering): Released all slaves [ 292.494432][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 292.867964][ T13] tipc: Left network mode [ 297.603183][ T7310] block device autoloading is deprecated and will be removed. [ 298.886190][ T7311] netlink: 'syz.0.364': attribute type 4 has an invalid length. [ 299.117623][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.367'. [ 299.530139][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.566416][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.770512][ T5115] Bluetooth: hci1: command 0x0405 tx timeout [ 304.818898][ T5872] ------------[ cut here ]------------ [ 304.818908][ T5872] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 304.818925][ T5872] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:5/5872 [ 304.818962][ T5872] Modules linked in: [ 304.818980][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 304.819001][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 304.819012][ T5872] Workqueue: events drm_fb_helper_damage_work [ 304.819034][ T5872] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 304.819057][ T5872] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 3a b4 d3 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 304.819070][ T5872] RSP: 0018:ffffc900051d78c0 EFLAGS: 00010246 [ 304.819083][ T5872] RAX: 1ffff11004b68000 RBX: ffffffff8f755aa0 RCX: 0000000000000000 [ 304.819108][ T5872] RDX: ffffffff8bbf6340 RSI: ffffffff8bc121e0 RDI: ffffffff8f755aa0 [ 304.819119][ T5872] RBP: ffffc900051d79a8 R08: 0000000000000000 R09: 0000000000000000 [ 304.819129][ T5872] R10: dffffc0000000000 R11: fffffbfff1ed4e77 R12: ffffffff8bc121e0 [ 304.819140][ T5872] R13: ffff888025b40000 R14: 0000000000000000 R15: ffffffff8bbf6340 [ 304.819151][ T5872] FS: 0000000000000000(0000) GS:ffff888126432000(0000) knlGS:0000000000000000 [ 304.819163][ T5872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.819173][ T5872] CR2: 0000200000032680 CR3: 00000000348f2000 CR4: 00000000003526f0 [ 304.819187][ T5872] Call Trace: [ 304.819193][ T5872] [ 304.819203][ T5872] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 304.819224][ T5872] ? rt_spin_unlock+0x14f/0x200 [ 304.819248][ T5872] ? __pfx_autoremove_wake_function+0x10/0x10 [ 304.819275][ T5872] ? rt_spin_unlock+0x160/0x200 [ 304.819300][ T5872] ? drm_vblank_get+0x147/0x260 [ 304.819321][ T5872] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 304.819341][ T5872] drm_fb_helper_damage_work+0x131/0x6f0 [ 304.819370][ T5872] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 304.819394][ T5872] ? process_scheduled_works+0xa8d/0x18c0 [ 304.819416][ T5872] ? process_scheduled_works+0xa8d/0x18c0 [ 304.819439][ T5872] process_scheduled_works+0xb6e/0x18c0 [ 304.819484][ T5872] ? __pfx_process_scheduled_works+0x10/0x10 [ 304.819517][ T5872] ? assign_work+0x3d5/0x5e0 [ 304.819577][ T5872] worker_thread+0xa53/0xfc0 [ 304.819659][ T5872] kthread+0x388/0x470 [ 304.819682][ T5872] ? __pfx_worker_thread+0x10/0x10 [ 304.819710][ T5872] ? __pfx_kthread+0x10/0x10 [ 304.819734][ T5872] ret_from_fork+0x51e/0xb90 [ 304.819768][ T5872] ? __pfx_ret_from_fork+0x10/0x10 [ 304.819799][ T5872] ? __switch_to+0xc7d/0x1450 [ 304.819830][ T5872] ? __pfx_kthread+0x10/0x10 [ 304.819855][ T5872] ret_from_fork_asm+0x1a/0x30 [ 304.819894][ T5872] [ 304.819912][ T5872] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 304.819928][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 304.819953][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 304.819967][ T5872] Workqueue: events drm_fb_helper_damage_work [ 304.819999][ T5872] Call Trace: [ 304.820008][ T5872] [ 304.820017][ T5872] vpanic+0x56c/0xa60 [ 304.820052][ T5872] ? __pfx__printk+0x10/0x10 [ 304.820077][ T5872] ? __pfx_vpanic+0x10/0x10 [ 304.820108][ T5872] ? is_bpf_text_address+0x292/0x2b0 [ 304.820141][ T5872] ? is_bpf_text_address+0x26/0x2b0 [ 304.820184][ T5872] panic+0xc5/0xd0 [ 304.820217][ T5872] ? __pfx_panic+0x10/0x10 [ 304.820259][ T5872] ? ret_from_fork_asm+0x1a/0x30 [ 304.820286][ T5872] __warn+0x315/0x4f0 [ 304.820317][ T5872] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 304.820348][ T5872] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 304.820378][ T5872] __report_bug+0x29a/0x540 [ 304.820410][ T5872] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 304.820440][ T5872] ? __pfx___report_bug+0x10/0x10 [ 304.820487][ T5872] report_bug_entry+0x19a/0x290 [ 304.820520][ T5872] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 304.820547][ T5872] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 304.820577][ T5872] handle_bug+0xce/0x200 [ 304.820606][ T5872] exc_invalid_op+0x1a/0x50 [ 304.820636][ T5872] asm_exc_invalid_op+0x1a/0x20 [ 304.820658][ T5872] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 304.820689][ T5872] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 3a b4 d3 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 304.820708][ T5872] RSP: 0018:ffffc900051d78c0 EFLAGS: 00010246 [ 304.820727][ T5872] RAX: 1ffff11004b68000 RBX: ffffffff8f755aa0 RCX: 0000000000000000 [ 304.820743][ T5872] RDX: ffffffff8bbf6340 RSI: ffffffff8bc121e0 RDI: ffffffff8f755aa0 [ 304.820759][ T5872] RBP: ffffc900051d79a8 R08: 0000000000000000 R09: 0000000000000000 [ 304.820772][ T5872] R10: dffffc0000000000 R11: fffffbfff1ed4e77 R12: ffffffff8bc121e0 [ 304.820787][ T5872] R13: ffff888025b40000 R14: 0000000000000000 R15: ffffffff8bbf6340 [ 304.820826][ T5872] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 304.820860][ T5872] ? rt_spin_unlock+0x14f/0x200 [ 304.820891][ T5872] ? __pfx_autoremove_wake_function+0x10/0x10 [ 304.820928][ T5872] ? rt_spin_unlock+0x160/0x200 [ 304.820964][ T5872] ? drm_vblank_get+0x147/0x260 [ 304.820996][ T5872] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 304.821025][ T5872] drm_fb_helper_damage_work+0x131/0x6f0 [ 304.821066][ T5872] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 304.821102][ T5872] ? process_scheduled_works+0xa8d/0x18c0 [ 304.821131][ T5872] ? process_scheduled_works+0xa8d/0x18c0 [ 304.821161][ T5872] process_scheduled_works+0xb6e/0x18c0 [ 304.821229][ T5872] ? __pfx_process_scheduled_works+0x10/0x10 [ 304.821268][ T5872] ? assign_work+0x3d5/0x5e0 [ 304.821305][ T5872] worker_thread+0xa53/0xfc0 [ 304.821370][ T5872] kthread+0x388/0x470 [ 304.821394][ T5872] ? __pfx_worker_thread+0x10/0x10 [ 304.821423][ T5872] ? __pfx_kthread+0x10/0x10 [ 304.821449][ T5872] ret_from_fork+0x51e/0xb90 [ 304.821485][ T5872] ? __pfx_ret_from_fork+0x10/0x10 [ 304.821524][ T5872] ? __switch_to+0xc7d/0x1450 [ 304.821557][ T5872] ? __pfx_kthread+0x10/0x10 [ 304.821583][ T5872] ret_from_fork_asm+0x1a/0x30 [ 304.821624][ T5872] [ 304.821803][ T5872] Kernel Offset: disabled