last executing test programs: 28.016962957s ago: executing program 4 (id=138): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x10, 0x0, 0x0, 0x920, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xe, 0xbf, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240), 0x0, 0x10, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, &(0x7f00000026c0), 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r5, 0x0, &(0x7f00008e2000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x3fff, 0x2, &(0x7f0000000100)="00b2", 0x4}) 25.699427626s ago: executing program 4 (id=142): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) io_uring_setup(0x56a9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20008080) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_disconnect(r0) 19.130505341s ago: executing program 4 (id=152): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x184}}, 0x4048851) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, 0x0}, 0x94) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x34343452, 0x5, 0x8, [{0x6, 0x10}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x1, 0x7}}) 19.12957304s ago: executing program 0 (id=153): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x20010, 0xffffffffffffffff, 0x200000) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x5) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8926, 0x0) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(0xffffffffffffffff, 0x0) accept4(r0, &(0x7f00000002c0)=@xdp, &(0x7f0000000140)=0x80, 0x80800) 17.998892295s ago: executing program 4 (id=155): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000afa100000000000007010000f8ffffffbffbf7d5c100000007040000f0ffffffb702000008000000182300", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f00000002c0)=@random={'user.', '\'^\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f0000000400), 0x2) write(0xffffffffffffffff, &(0x7f0000000140)="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", 0x148) socket$inet6_udp(0xa, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000002280)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) 16.108669522s ago: executing program 4 (id=156): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x2000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) inotify_init() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x40084) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 13.904164266s ago: executing program 0 (id=160): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x10, 0x0, 0x0, 0x920, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xe, 0xbf, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240), 0x0, 0x10, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, &(0x7f00000026c0), 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000d40)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r6, 0x0, 0x3fff, 0x2, &(0x7f0000000100)="00b2", 0x4}) 12.466163517s ago: executing program 0 (id=162): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fb00fb030320d812010079de01ec020109021b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) io_uring_setup(0x56a9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20008080) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_disconnect(r0) 10.988323344s ago: executing program 3 (id=166): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f00008e2000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x3fff, 0x2, &(0x7f0000000100)="00b2", 0x4}) 10.796590696s ago: executing program 4 (id=167): syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x5a) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4000000000000001, 0x1c0062) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x41fec472531ebcab, 0xde) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000480)={0x1, 0x2, 0x1000, 0x28, &(0x7f0000000280)="51b7c9fbbbac2401b9c7c2db29f558c64d07f629b7142740adb9a7e4acd9481898d940119db4f0c4", 0x6c, 0x0, &(0x7f0000000400)="7bd844e8f704b8d3ca7d767a06c9a647a039070a6e9bec59feddcf105970c620cc3cc5c16fe29a5db94b855c7ddc283e95fa96ae03a32c8e806af5f2d98c3f65c07de70d5663530fe567d0b5ae5a9a5ada99e0566ab0b1e23bcacc852d9d45b5e67d3c80a48af5b0f67c2146"}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) prlimit64(r1, 0xc, &(0x7f0000000180)={0x2, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) rt_sigaction(0x34, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000003c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 10.748160248s ago: executing program 3 (id=168): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6020400) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) read(r7, &(0x7f0000000040)=""/252, 0xfc) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r9 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f00000001c0)=[@release, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000040), 0x0, 0x0, 0x34}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000140)={0x0, 0x28, 0x40}}, 0x400}, @dead_binder_done], 0x11, 0x0, &(0x7f0000000280)="4cbdcf9f5b7b99442dfdbc4c5830fdd52b"}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) 8.568707144s ago: executing program 1 (id=171): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2c020400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f, 0x0, 0x4, @void, @value=r1}, 0x20) 8.528294796s ago: executing program 3 (id=172): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 8.391161106s ago: executing program 0 (id=173): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xb537, 0x9c) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b66, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x8a05f664f2838ea, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) 7.429273425s ago: executing program 1 (id=174): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0xdc, 0x18, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x104}, 0x1, 0x0, 0x0, 0x8040}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000580)=0x6dc1, 0x4) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999", 0x5b}, {&(0x7f0000000a80)="74153c756d", 0x5}, {&(0x7f0000000ac0)="e529dfc436f54338d1ded460ab1dc87ee94ffccb223eea241071d186e6dad7af6eaee9a174899903e8efa954af8644bfd488600a3c4890c503193660dcf799a821644139af49bb15bcc5e2541243878c7c72d83c37caafadec1fb3489f44dce4d26a1b4f630f0b8f3f0dafbad04d96b88dffa493afebf10efd55ffc4a45b473efa365083760dc89ebf96ce47050e6e057a9f71e52104ad90f4b41f9496315d9ed8608f9161611010089d14590ea1657713d0887a45b35fbed0cc35aa1f83ada3c63dfb9f3ad0195adf3321c973", 0xcd}, {&(0x7f0000000bc0)="3f63f26d63818ce5966b1c349f1722f09bc2981c862ee6bad218bd7439c8f2a2e9ccba0cd8adee2130a181c96b89017ce2b27e424a3cc21c105dc3eedb82f0d13bd3f94b122a377b230d16b7a05ae88d4240acd7f04d52a8a2710dd6b718fd1f3460df2ab8443427f69e8045f7133c09", 0x70}, {0x0}], 0x6}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.427385182s ago: executing program 3 (id=175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, 0x0, 0x64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000800)="38c8114f", 0x4}], 0x3) 7.407185465s ago: executing program 2 (id=176): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)=@echo=0xffffffcd) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = io_uring_setup(0x5f4f, &(0x7f00000003c0)={0x0, 0x804, 0x2, 0x1000000}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) 7.178842618s ago: executing program 1 (id=177): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, 0x0, 0x0, &(0x7f00008e2000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000d40)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r1, 0x0, 0x3fff, 0x2, &(0x7f0000000100)="00b2", 0x4}) 5.759120948s ago: executing program 2 (id=178): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f00008e2000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x3fff, 0x2, &(0x7f0000000100)="00b2", 0x4}) 5.598622294s ago: executing program 1 (id=179): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 5.597568648s ago: executing program 3 (id=180): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x1, 0x12) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000034c0)) 5.389828909s ago: executing program 2 (id=181): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x1, 0x12) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000034c0)) 3.306316325s ago: executing program 3 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000a40)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "70eae4", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private2={0xfc, 0x2, '\x00', 0x1}}}}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) fallocate(r4, 0x0, 0x7, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000000000002000002e000000200000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000"], 0x90) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.223026752s ago: executing program 2 (id=183): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x3, 0x0, &(0x7f00000001c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x40020) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) 3.098866353s ago: executing program 1 (id=184): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x3d}, 0x10040007, 0x1}, 0x20) connect$inet(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x24, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14, 0x0, 0x1, [@generic]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 1.595488727s ago: executing program 2 (id=185): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2c020400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f, 0x0, 0x4, @void, @value=r1}, 0x20) 1.29898435s ago: executing program 0 (id=186): socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) unshare(0x2c020400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x0, 0x4, @void, @value=r0}, 0x20) 1.298052197s ago: executing program 1 (id=187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000"], 0x340a) 8.671255ms ago: executing program 2 (id=188): socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x4, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) recvmmsg(r4, &(0x7f0000000e40), 0x0, 0xcb, 0x0) r5 = add_key(&(0x7f0000000580)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, r5, 0xa7c) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 0s ago: executing program 0 (id=189): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14247524860608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = io_uring_setup(0x6373, &(0x7f0000000280)={0x0, 0xa4aa, 0x2, 0x2, 0x92}) syz_io_uring_setup(0xc61, &(0x7f0000000040)={0x0, 0x4acc, 0x8000, 0x0, 0x100003a5, 0x0, r3}, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000800}, 0x4000042) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. [ 81.634569][ T5812] cgroup: Unknown subsys name 'net' [ 81.806198][ T5812] cgroup: Unknown subsys name 'cpuset' [ 81.815481][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.554660][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.946355][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.948520][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.954977][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.963708][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.970448][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.984170][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.985622][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.993177][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.002655][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.006930][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.020499][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.020509][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.020879][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.028398][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.034979][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.043900][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.051652][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.056805][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.063746][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.073437][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.101307][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.108815][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.116385][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.117551][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.124589][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.758352][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 88.786678][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.923769][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 89.135890][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.143308][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.150778][ T5824] bridge_slave_0: entered allmulticast mode [ 89.159025][ T5824] bridge_slave_0: entered promiscuous mode [ 89.201933][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.209187][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.216781][ T5830] bridge_slave_0: entered allmulticast mode [ 89.224276][ T5830] bridge_slave_0: entered promiscuous mode [ 89.232040][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.240362][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.248282][ T5824] bridge_slave_1: entered allmulticast mode [ 89.255800][ T5824] bridge_slave_1: entered promiscuous mode [ 89.263879][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 89.275587][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 89.292860][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.300050][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.307792][ T5830] bridge_slave_1: entered allmulticast mode [ 89.315368][ T5830] bridge_slave_1: entered promiscuous mode [ 89.403620][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.470959][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.493647][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.500918][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.508769][ T5825] bridge_slave_0: entered allmulticast mode [ 89.516347][ T5825] bridge_slave_0: entered promiscuous mode [ 89.527039][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.566572][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.574380][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.581654][ T5825] bridge_slave_1: entered allmulticast mode [ 89.589409][ T5825] bridge_slave_1: entered promiscuous mode [ 89.599054][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.630453][ T5824] team0: Port device team_slave_0 added [ 89.684719][ T5824] team0: Port device team_slave_1 added [ 89.771327][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.778724][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.786163][ T5827] bridge_slave_0: entered allmulticast mode [ 89.793686][ T5827] bridge_slave_0: entered promiscuous mode [ 89.819296][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.831342][ T5830] team0: Port device team_slave_0 added [ 89.853531][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.860520][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.887599][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.899734][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.907143][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.914527][ T5827] bridge_slave_1: entered allmulticast mode [ 89.921967][ T5827] bridge_slave_1: entered promiscuous mode [ 89.931343][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.938879][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.946218][ T5823] bridge_slave_0: entered allmulticast mode [ 89.953819][ T5823] bridge_slave_0: entered promiscuous mode [ 89.964411][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.975760][ T5830] team0: Port device team_slave_1 added [ 89.982701][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.989706][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.015930][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.048988][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.056280][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.063799][ T5823] bridge_slave_1: entered allmulticast mode [ 90.071366][ T5823] bridge_slave_1: entered promiscuous mode [ 90.163893][ T52] Bluetooth: hci2: command tx timeout [ 90.164301][ T5840] Bluetooth: hci4: command tx timeout [ 90.170106][ T5831] Bluetooth: hci0: command tx timeout [ 90.175938][ T5836] Bluetooth: hci1: command tx timeout [ 90.181504][ T5844] Bluetooth: hci3: command tx timeout [ 90.188426][ T5825] team0: Port device team_slave_0 added [ 90.198839][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.206186][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.232364][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.247100][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.284946][ T5825] team0: Port device team_slave_1 added [ 90.306122][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.313301][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.339534][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.359863][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.372556][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.401171][ T5824] hsr_slave_0: entered promiscuous mode [ 90.408310][ T5824] hsr_slave_1: entered promiscuous mode [ 90.448175][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.472110][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.479325][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.505541][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.563999][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.570994][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.597605][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.624124][ T5827] team0: Port device team_slave_0 added [ 90.681283][ T5827] team0: Port device team_slave_1 added [ 90.703749][ T5823] team0: Port device team_slave_0 added [ 90.728129][ T5830] hsr_slave_0: entered promiscuous mode [ 90.734856][ T5830] hsr_slave_1: entered promiscuous mode [ 90.741140][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 90.747065][ T5830] Cannot create hsr debugfs directory [ 90.762917][ T5823] team0: Port device team_slave_1 added [ 90.769464][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.776942][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.802938][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.844915][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.851917][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.878297][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.924694][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.931682][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.958068][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.026767][ T5825] hsr_slave_0: entered promiscuous mode [ 91.033542][ T5825] hsr_slave_1: entered promiscuous mode [ 91.039924][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 91.045803][ T5825] Cannot create hsr debugfs directory [ 91.052402][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.059392][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.086377][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.249220][ T5827] hsr_slave_0: entered promiscuous mode [ 91.257180][ T5827] hsr_slave_1: entered promiscuous mode [ 91.263872][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 91.269632][ T5827] Cannot create hsr debugfs directory [ 91.314165][ T5823] hsr_slave_0: entered promiscuous mode [ 91.320832][ T5823] hsr_slave_1: entered promiscuous mode [ 91.327860][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 91.334129][ T5823] Cannot create hsr debugfs directory [ 91.641437][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.697412][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.738086][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.771308][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.876288][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.888932][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.901300][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.915998][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.044042][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.058770][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.073209][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.084153][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.166580][ T43] cfg80211: failed to load regulatory.db [ 92.221492][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.244138][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.248507][ T52] Bluetooth: hci1: command tx timeout [ 92.257512][ T5844] Bluetooth: hci2: command tx timeout [ 92.263273][ T5831] Bluetooth: hci4: command tx timeout [ 92.263294][ T5836] Bluetooth: hci3: command tx timeout [ 92.268696][ T5831] Bluetooth: hci0: command tx timeout [ 92.307736][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.315403][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.330939][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.347698][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.371943][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.434400][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.441667][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.457838][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.478290][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.485521][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.504026][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.515914][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.529879][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.537099][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.553231][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.560585][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.580507][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.591573][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.707293][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.789673][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.831309][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.838571][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.882962][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.890173][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.080834][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.094886][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.179023][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.212069][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.229242][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.270370][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.277602][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.348676][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.361372][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.368613][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.404931][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.412341][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.478824][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.486109][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.527473][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.561767][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.664407][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.856952][ T5830] veth0_vlan: entered promiscuous mode [ 93.948270][ T5825] veth0_vlan: entered promiscuous mode [ 93.970111][ T5830] veth1_vlan: entered promiscuous mode [ 94.026032][ T5824] veth0_vlan: entered promiscuous mode [ 94.040182][ T5825] veth1_vlan: entered promiscuous mode [ 94.105471][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.118075][ T5824] veth1_vlan: entered promiscuous mode [ 94.165735][ T5830] veth0_macvtap: entered promiscuous mode [ 94.185727][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.198675][ T5830] veth1_macvtap: entered promiscuous mode [ 94.246815][ T5825] veth0_macvtap: entered promiscuous mode [ 94.265408][ T5824] veth0_macvtap: entered promiscuous mode [ 94.282056][ T5825] veth1_macvtap: entered promiscuous mode [ 94.291458][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.305344][ T5824] veth1_macvtap: entered promiscuous mode [ 94.323320][ T5844] Bluetooth: hci4: command tx timeout [ 94.328977][ T52] Bluetooth: hci0: command tx timeout [ 94.329010][ T5840] Bluetooth: hci1: command tx timeout [ 94.335134][ T5831] Bluetooth: hci3: command tx timeout [ 94.341104][ T5836] Bluetooth: hci2: command tx timeout [ 94.368838][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.387834][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.408129][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.434097][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.444862][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.453876][ T5823] veth0_vlan: entered promiscuous mode [ 94.461644][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.475095][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.490422][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.530993][ T1149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.539994][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.553717][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.573096][ T5823] veth1_vlan: entered promiscuous mode [ 94.581264][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.590685][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.603188][ T5827] veth0_vlan: entered promiscuous mode [ 94.626978][ T1149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.655269][ T5827] veth1_vlan: entered promiscuous mode [ 94.665069][ T1149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.674405][ T1149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.703106][ T1149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.792043][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.801511][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.854272][ T5827] veth0_macvtap: entered promiscuous mode [ 94.866618][ T5823] veth0_macvtap: entered promiscuous mode [ 94.887635][ T5827] veth1_macvtap: entered promiscuous mode [ 94.915217][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.925399][ T5823] veth1_macvtap: entered promiscuous mode [ 94.926095][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.978146][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.990262][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.009071][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.028037][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.046018][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.050872][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.056504][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.121142][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.139343][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.159071][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.172801][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.189760][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.209094][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.256503][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.306414][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.315358][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.339548][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.364109][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.391371][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.456274][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.478631][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.275158][ T5950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.283465][ T5950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.380964][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.404402][ T5836] Bluetooth: hci3: command tx timeout [ 96.409897][ T5836] Bluetooth: hci0: command tx timeout [ 96.415495][ T5836] Bluetooth: hci4: command tx timeout [ 96.420925][ T5836] Bluetooth: hci2: command tx timeout [ 96.422363][ T5831] Bluetooth: hci1: command tx timeout [ 96.616461][ T5956] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 96.737309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.839682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.928958][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.942292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 96.996423][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.006367][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.197049][ T5955] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6'. [ 97.352252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 97.523290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.556643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.565766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.659063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.668339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.997514][ T5959] team0 (unregistering): Port device team_slave_0 removed [ 98.011105][ T5959] team0 (unregistering): Port device team_slave_1 removed [ 98.147483][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.159855][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.183841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.287419][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.298872][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.682719][ T5976] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 100.055373][ T1071] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.883050][ T1071] usb 4-1: Using ep0 maxpacket: 8 [ 105.937329][ T1071] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.716044][ T6028] netlink: 'syz.2.16': attribute type 10 has an invalid length. [ 107.023439][ T1071] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 107.031175][ T1071] usb 4-1: chopping to 0 config(s) [ 107.116038][ T1071] usb 4-1: can't read configurations, error -32 [ 107.187107][ T6028] team0: Device ipvlan1 failed to register rx_handler [ 107.353333][ T1071] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.689881][ T1071] usb 4-1: device descriptor read/64, error -32 [ 108.372074][ T1071] usb usb4-port1: attempt power cycle [ 108.515300][ T5930] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.883027][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 113.640670][ T6055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.562249][ T6065] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.23'. [ 114.564398][ T5930] usb 5-1: device descriptor read/all, error -110 [ 115.278009][ T5930] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.442454][ T5930] usb 5-1: device descriptor read/64, error -32 [ 115.683225][ T5930] usb usb5-port1: attempt power cycle [ 116.522330][ T5973] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.782581][ T5973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.835375][ T5973] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.859596][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.889815][ T5973] usb 4-1: Product: syz [ 116.898834][ T5973] usb 4-1: Manufacturer: syz [ 117.052501][ T5973] usb 4-1: SerialNumber: syz [ 117.152641][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.620428][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 117.652248][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.675591][ T10] usb 3-1: config 0 descriptor?? [ 117.731792][ T10] cp210x 3-1:0.0: cp210x converter detected [ 117.888843][ T6091] evm: overlay not supported [ 118.231278][ T5973] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 118.247605][ T10] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 118.271243][ T5973] cdc_ncm 4-1:1.0: bind() failure [ 118.289152][ T5973] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 118.296609][ T5973] cdc_ncm 4-1:1.1: bind() failure [ 118.442921][ T5973] usb 4-1: USB disconnect, device number 5 [ 118.485560][ T10] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -32 [ 118.712504][ T10] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 118.905736][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 118.976556][ T10] usb 3-1: USB disconnect, device number 2 [ 119.017939][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 119.039547][ T10] cp210x 3-1:0.0: device disconnected [ 119.428723][ T6106] tipc: Started in network mode [ 119.498617][ T6106] tipc: Node identity 7298ad03671f, cluster identity 4711 [ 119.707855][ T6106] tipc: Enabled bearer , priority 0 [ 120.222437][ T6108] syzkaller0: entered promiscuous mode [ 120.227998][ T6108] syzkaller0: entered allmulticast mode [ 120.378062][ T6106] tipc: Resetting bearer [ 120.467749][ T6105] tipc: Resetting bearer [ 120.696320][ T6105] tipc: Disabling bearer [ 120.774393][ T5973] tipc: Node number set to 361213187 [ 121.072437][ T6115] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.37'. [ 125.239074][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.420040][ T5973] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 127.078095][ T6147] netlink: 'syz.2.42': attribute type 10 has an invalid length. [ 127.322994][ T6147] team0: Device ipvlan1 failed to register rx_handler [ 127.693199][ T6148] mkiss: ax0: crc mode is auto. [ 128.783669][ T6161] netlink: 'syz.2.47': attribute type 2 has an invalid length. [ 128.940451][ T6161] 9: entered promiscuous mode [ 129.817804][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.50'. [ 129.829307][ T6177] Zero length message leads to an empty skb [ 131.824293][ T6183] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.51'. [ 133.942267][ T5822] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 135.301124][ T5822] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 136.032535][ T5822] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 136.061659][ T5822] usb 2-1: config 220 has no interface number 2 [ 136.241598][ T5822] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 136.431919][ T5822] usb 2-1: config 220 interface 0 has no altsetting 0 [ 137.243873][ T6226] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.65'. [ 137.245553][ T5822] usb 2-1: config 220 interface 76 has no altsetting 0 [ 137.653960][ T5822] usb 2-1: config 220 interface 1 has no altsetting 0 [ 137.685336][ T5822] usb 2-1: string descriptor 0 read error: -71 [ 137.692967][ T5822] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 137.710455][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.730788][ T5822] usb 2-1: can't set config #220, error -71 [ 137.738984][ T5822] usb 2-1: USB disconnect, device number 3 [ 138.427775][ T6238] tipc: Started in network mode [ 138.451990][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.458621][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.462742][ T6238] tipc: Node identity 16444204dcfd, cluster identity 4711 [ 138.477882][ T6238] tipc: Enabled bearer , priority 0 [ 138.709533][ T6246] syzkaller0: entered promiscuous mode [ 138.715795][ T6246] syzkaller0: entered allmulticast mode [ 139.602302][ T5947] tipc: Node number set to 3401138692 [ 139.721582][ T6231] delete_channel: no stack [ 139.891698][ T6256] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 139.911062][ T6238] tipc: Resetting bearer [ 139.968019][ T6234] tipc: Resetting bearer [ 140.029912][ T6234] tipc: Disabling bearer [ 140.042402][ T5947] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.202283][ T5947] usb 2-1: Using ep0 maxpacket: 8 [ 140.526450][ T6262] netlink: 'syz.4.72': attribute type 10 has an invalid length. [ 141.763237][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.75'. [ 142.375451][ T6267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.440760][ T6270] team0: No ports can be present during mode change [ 142.544295][ T6270] netlink: 'syz.3.75': attribute type 10 has an invalid length. [ 142.594811][ T6270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.623245][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 142.625487][ T6270] team0: Port device bond0 added [ 143.284109][ T6276] team0 (unregistering): Port device team_slave_0 removed [ 143.365844][ T6276] team0 (unregistering): Port device team_slave_1 removed [ 143.422928][ T6276] team0 (unregistering): Port device bond0 removed [ 143.481824][ T5947] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.491887][ T5947] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 143.509136][ T797] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 143.527057][ T5947] usb 2-1: can't read configurations, error -71 [ 143.704137][ T797] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 143.714193][ T797] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 143.732649][ T797] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 143.752369][ T797] usb 5-1: config 220 has no interface number 2 [ 143.763124][ T797] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 143.780064][ T797] usb 5-1: config 220 interface 0 has no altsetting 0 [ 143.820362][ T797] usb 5-1: config 220 interface 76 has no altsetting 0 [ 143.834088][ T797] usb 5-1: config 220 interface 1 has no altsetting 0 [ 143.854018][ T797] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 143.864469][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.890437][ T797] usb 5-1: Product: syz [ 144.196468][ T797] usb 5-1: Manufacturer: syz [ 144.222643][ T797] usb 5-1: SerialNumber: syz [ 144.932989][ T797] usb 5-1: selecting invalid altsetting 0 [ 144.987029][ T797] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 145.062409][ T797] uvcvideo 5-1:220.0: No valid video chain found. [ 146.519082][ T797] usb 5-1: selecting invalid altsetting 0 [ 146.524982][ T797] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 146.548961][ T797] usb 5-1: USB disconnect, device number 5 [ 146.724306][ T6312] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.84'. [ 146.742412][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 147.152280][ T9] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 147.179000][ T9] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 147.338350][ T9] usb 2-1: config 150 has no interface number 0 [ 147.345503][ T9] usb 2-1: config 150 interface 204 has no altsetting 0 [ 147.354803][ T9] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 147.364286][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.372383][ T9] usb 2-1: Product: syz [ 147.376578][ T9] usb 2-1: Manufacturer: syz [ 147.381201][ T9] usb 2-1: SerialNumber: syz [ 149.112752][ T9] xr_serial 2-1:150.204: skipping garbage [ 149.118628][ T9] xr_serial 2-1:150.204: xr_serial converter detected [ 149.164642][ T9] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 149.222293][ T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 149.310125][ T9] usb 2-1: USB disconnect, device number 6 [ 149.368162][ T9] xr_serial 2-1:150.204: device disconnected [ 149.901042][ T6331] netlink: 'syz.3.91': attribute type 2 has an invalid length. [ 150.021970][ T6331] 9: entered promiscuous mode [ 152.733155][ T6339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.951415][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 156.189156][ T6374] netlink: 40 bytes leftover after parsing attributes in process `syz.2.101'. [ 157.201795][ T6379] mkiss: ax0: crc mode is auto. [ 157.748741][ T6365] delete_channel: no stack [ 157.942176][ T5835] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 158.072334][ T5835] usb 1-1: device descriptor read/64, error -71 [ 158.452294][ T5835] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 159.232264][ T5835] usb 1-1: device descriptor read/64, error -71 [ 159.332651][ T6398] netlink: 'syz.3.108': attribute type 1 has an invalid length. [ 159.377943][ T5835] usb usb1-port1: attempt power cycle [ 160.305460][ T6400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.323040][ T6398] bond1: entered promiscuous mode [ 160.329399][ T6398] bond1: entered allmulticast mode [ 160.336792][ T6398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.355610][ T5835] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 160.406399][ T5835] usb 1-1: device descriptor read/8, error -71 [ 160.662268][ T5835] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 160.924695][ T5835] usb 1-1: device not accepting address 5, error -71 [ 160.985457][ T5835] usb usb1-port1: unable to enumerate USB device [ 160.996795][ T6411] netlink: 'syz.0.112': attribute type 10 has an invalid length. [ 161.026977][ T6411] team0: Device ipvlan1 failed to register rx_handler [ 161.952983][ T6419] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.114'. [ 163.040765][ T6422] delete_channel: no stack [ 163.049201][ T5947] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 163.074612][ T6433] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 163.086249][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 163.264797][ T5947] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 163.292236][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.380245][ T5947] usb 1-1: config 0 descriptor?? [ 163.406738][ T6430] delete_channel: no stack [ 163.444229][ T5947] cp210x 1-1:0.0: cp210x converter detected [ 163.772293][ T5835] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.834830][ T5947] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 163.955323][ T5835] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 163.977863][ T5835] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 164.021086][ T5835] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 164.032470][ T5835] usb 2-1: config 220 has no interface number 2 [ 164.039009][ T5835] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 164.059994][ T5835] usb 2-1: config 220 interface 0 has no altsetting 0 [ 164.067559][ T5835] usb 2-1: config 220 interface 76 has no altsetting 0 [ 164.076719][ T5835] usb 2-1: config 220 interface 1 has no altsetting 0 [ 164.077447][ T5947] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 164.107676][ T5947] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 164.121727][ T5835] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 164.141258][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.152296][ T5822] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 164.166300][ T6444] netlink: 'syz.3.121': attribute type 1 has an invalid length. [ 164.230866][ T5835] usb 2-1: Product: syz [ 164.242790][ T5835] usb 2-1: Manufacturer: syz [ 164.247920][ T5835] usb 2-1: SerialNumber: syz [ 164.283749][ T6445] bond2: entered promiscuous mode [ 164.289027][ T6445] bond2: entered allmulticast mode [ 164.296795][ T6445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.318278][ T5947] usb 1-1: cp210x converter now attached to ttyUSB0 [ 164.375559][ T5947] usb 1-1: USB disconnect, device number 6 [ 164.797705][ T5822] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 164.812293][ T5822] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 164.832307][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 164.842602][ T5822] usb 3-1: config 150 has no interface number 0 [ 164.851219][ T5835] usb 2-1: selecting invalid altsetting 0 [ 164.853676][ T5947] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 164.865236][ T5822] usb 3-1: config 150 interface 204 has no altsetting 0 [ 164.872663][ T5835] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 164.880028][ T5835] uvcvideo 2-1:220.0: No valid video chain found. [ 164.896902][ T5822] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 164.923065][ T5947] cp210x 1-1:0.0: device disconnected [ 164.931201][ T5835] usb 2-1: selecting invalid altsetting 0 [ 164.937772][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.937806][ T5822] usb 3-1: Product: syz [ 164.937828][ T5822] usb 3-1: Manufacturer: syz [ 164.937843][ T5822] usb 3-1: SerialNumber: syz [ 164.981881][ T5835] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 164.990694][ T9] usb 5-1: device descriptor read/64, error -71 [ 165.029000][ T5835] usb 2-1: USB disconnect, device number 7 [ 165.155110][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 165.165773][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 165.166180][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 165.171765][ T5822] xr_serial 3-1:150.204: skipping garbage [ 165.184950][ T6450] overlayfs: failed to resolve './file0': -2 [ 165.193944][ T5822] xr_serial 3-1:150.204: xr_serial converter detected [ 165.213098][ T5822] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 165.213163][ T5822] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 165.218339][ T5822] usb 3-1: USB disconnect, device number 3 [ 165.220211][ T5822] xr_serial 3-1:150.204: device disconnected [ 165.244268][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 165.351376][ T52] Bluetooth: Wrong link type (-22) [ 165.423500][ T9] usb 5-1: device descriptor read/64, error -71 [ 165.532666][ T9] usb usb5-port1: attempt power cycle [ 165.893333][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 165.913627][ T6457] overlayfs: failed to resolve './file1/file0': -2 [ 165.917004][ T9] usb 5-1: device descriptor read/8, error -71 [ 166.673010][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 166.716817][ T9] usb 5-1: device descriptor read/8, error -71 [ 166.918592][ T9] usb usb5-port1: unable to enumerate USB device [ 167.937763][ T6464] syz_tun: entered allmulticast mode [ 168.511793][ T6470] netlink: 'syz.1.129': attribute type 2 has an invalid length. [ 168.600524][ T6470] 9: entered promiscuous mode [ 169.145228][ T6479] netlink: 'syz.4.131': attribute type 1 has an invalid length. [ 169.159344][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 170.526276][ T6488] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 170.697218][ T6490] bond1: entered promiscuous mode [ 170.707322][ T6490] bond1: entered allmulticast mode [ 170.713956][ T6490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.461509][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 175.702444][ T9] usb 5-1: device descriptor read/64, error -71 [ 176.082292][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 177.472254][ T9] usb 5-1: device descriptor read/64, error -71 [ 177.683050][ T9] usb usb5-port1: attempt power cycle [ 178.687724][ T6578] process 'syz.1.147' launched './file0' with NULL argv: empty string added [ 178.702787][ T6578] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.147'. [ 178.743001][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 180.211144][ T9] usb 5-1: device descriptor read/8, error -71 [ 181.291676][ T6598] mkiss: ax0: crc mode is auto. [ 181.303434][ T6592] nvme_fabrics: missing parameter 'transport=%s' [ 181.311545][ T6592] nvme_fabrics: missing parameter 'nqn=%s' [ 187.322306][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 188.239467][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 188.291669][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.327788][ T9] usb 1-1: config 0 has no interfaces? [ 188.384639][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 188.405340][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 188.432253][ T9] usb 1-1: Product: syz [ 188.444800][ T9] usb 1-1: Manufacturer: syz [ 188.452486][ T9] usb 1-1: SerialNumber: syz [ 188.501529][ T9] usb 1-1: config 0 descriptor?? [ 189.308704][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 189.359238][ T6653] debugfs: 'ttyS3' already exists in 'caif_serial' [ 189.582062][ T9] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 189.688810][ T9] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 189.783245][ T5835] usb 1-1: USB disconnect, device number 7 [ 189.963704][ T9] usb 3-1: config 150 has no interface number 0 [ 190.057102][ T9] usb 3-1: config 150 interface 204 has no altsetting 0 [ 190.069087][ T9] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 190.078962][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.097564][ T9] usb 3-1: Product: syz [ 190.101977][ T9] usb 3-1: Manufacturer: syz [ 190.522839][ T9] usb 3-1: SerialNumber: syz [ 190.792709][ T9] xr_serial 3-1:150.204: skipping garbage [ 190.807114][ T9] xr_serial 3-1:150.204: xr_serial converter detected [ 190.829153][ T9] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 190.852335][ T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 190.910483][ T9] usb 3-1: USB disconnect, device number 4 [ 190.944567][ T9] xr_serial 3-1:150.204: device disconnected [ 191.263628][ T6678] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 194.201817][ T6656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.690481][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.697182][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.005607][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 212.012586][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 212.018745][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 304.832107][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 304.838807][ C0] rcu: 0-...!: (1 GPs behind) idle=df5c/1/0x4000000000000000 softirq=17901/17902 fqs=316 [ 304.849486][ C0] rcu: (t=10502 jiffies g=15649 q=241 ncpus=2) [ 304.855745][ C0] rcu: rcu_preempt kthread starved for 9871 jiffies! g15649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 304.867376][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 304.877346][ C0] rcu: RCU grace-period kthread stack dump: [ 304.883241][ C0] task:rcu_preempt state:R running task stack:27816 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 304.896797][ C0] Call Trace: [ 304.900106][ C0] [ 304.903048][ C0] __schedule+0x17c4/0x4d60 [ 304.907739][ C0] ? __lock_acquire+0xab9/0xd20 [ 304.912618][ C0] ? __pfx___schedule+0x10/0x10 [ 304.917495][ C0] ? schedule+0x91/0x360 [ 304.921860][ C0] schedule+0x165/0x360 [ 304.926136][ C0] schedule_timeout+0x12b/0x270 [ 304.931041][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 304.936426][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 304.942349][ C0] ? __pfx_process_timeout+0x10/0x10 [ 304.947745][ C0] ? prepare_to_swait_event+0x341/0x380 [ 304.953314][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 304.958276][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 304.964487][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 304.969794][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 304.975019][ C0] ? finish_swait+0xcd/0x1f0 [ 304.979638][ C0] rcu_gp_kthread+0x99/0x390 [ 304.984310][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 304.989562][ C0] ? __kthread_parkme+0x7b/0x200 [ 304.994534][ C0] ? __kthread_parkme+0x1a1/0x200 [ 304.999585][ C0] kthread+0x711/0x8a0 [ 305.003767][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 305.009065][ C0] ? __pfx_kthread+0x10/0x10 [ 305.013703][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.018938][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.024191][ C0] ? __pfx_kthread+0x10/0x10 [ 305.028827][ C0] ret_from_fork+0x4bc/0x870 [ 305.033516][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 305.038640][ C0] ? __switch_to_asm+0x39/0x70 [ 305.043423][ C0] ? __switch_to_asm+0x33/0x70 [ 305.048207][ C0] ? __pfx_kthread+0x10/0x10 [ 305.052819][ C0] ret_from_fork_asm+0x1a/0x30 [ 305.057600][ C0] [ 305.060622][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 305.066951][ C0] Sending NMI from CPU 0 to CPUs 1: [ 305.072172][ C1] NMI backtrace for cpu 1 [ 305.072211][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 305.072238][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 305.072252][ C1] RIP: 0010:__kasan_check_read+0xa/0x20 [ 305.072280][ C1] Code: 31 ed eb cf cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 ef e4 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 305.072294][ C1] RSP: 0018:ffffc90000a08bb8 EFLAGS: 00000046 [ 305.072310][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81a6e2e1 [ 305.072322][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f7d6670 [ 305.072332][ C1] RBP: ffffc90000a08ca8 R08: ffffffff8f7d6677 R09: 1ffffffff1efacce [ 305.072344][ C1] R10: dffffc0000000000 R11: fffffbfff1efaccf R12: dffffc0000000000 [ 305.072356][ C1] R13: dffffc0000000000 R14: ffff8880b8724880 R15: 000000010000012b [ 305.072369][ C1] FS: 0000000000000000(0000) GS:ffff888125fe9000(0000) knlGS:0000000000000000 [ 305.072382][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.072393][ C1] CR2: 00007f413a2a2ee9 CR3: 0000000033676000 CR4: 00000000003526f0 [ 305.072408][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 305.072419][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 305.072430][ C1] Call Trace: [ 305.072438][ C1] [ 305.072444][ C1] trace_rcu_utilization+0x31/0x1d0 [ 305.072471][ C1] rcu_sched_clock_irq+0xd3/0x11b0 [ 305.072493][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 305.072518][ C1] ? kvm_steal_clock+0x130/0x160 [ 305.072544][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 305.072571][ C1] update_process_times+0x23c/0x2f0 [ 305.072590][ C1] tick_nohz_handler+0x39a/0x520 [ 305.072618][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 305.072643][ C1] __hrtimer_run_queues+0x4e0/0xc60 [ 305.072663][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 305.072690][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 305.072710][ C1] ? read_tsc+0x9/0x20 [ 305.072730][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 305.072765][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 305.072789][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 305.072812][ C1] [ 305.072817][ C1] [ 305.072823][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 305.072841][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 305.072863][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 fa 13 00 f3 0f 1e fa fb f4 c8 ea 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 305.072876][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 305.072891][ C1] RAX: d712df85cdd44900 RBX: ffffffff8196e347 RCX: d712df85cdd44900 [ 305.072903][ C1] RDX: 0000000000000001 RSI: ffffffff8d77a730 RDI: ffffffff8bbf2140 [ 305.072915][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 305.072927][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f7d6670 [ 305.072940][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003b50b58 [ 305.072953][ C1] ? do_idle+0x1e7/0x510 [ 305.072978][ C1] default_idle+0x13/0x20 [ 305.072992][ C1] default_idle_call+0x73/0xb0 [ 305.073008][ C1] do_idle+0x1e7/0x510 [ 305.073027][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 305.073045][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.073068][ C1] ? __pfx_do_idle+0x10/0x10 [ 305.073093][ C1] ? do_idle+0xc/0x510 [ 305.073114][ C1] cpu_startup_entry+0x44/0x60 [ 305.073141][ C1] start_secondary+0x101/0x110 [ 305.073158][ C1] common_startup_64+0x13e/0x147 [ 305.073191][ C1] [ 305.074245][ C0] CPU: 0 UID: 0 PID: 1299 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 305.074271][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 305.074285][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 305.074315][ C0] Code: 74 05 e8 0b 66 71 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 77 39 f6 65 8b 05 ec 94 1c 07 85 c0 74 40 48 c7 04 24 0e 36 [ 305.074332][ C0] RSP: 0018:ffffc90003e77640 EFLAGS: 00000206 [ 305.074350][ C0] RAX: 5ff83e4a186b4100 RBX: 0000000000000a02 RCX: 5ff83e4a186b4100 [ 305.074366][ C0] RDX: 0000000000000002 RSI: ffffffff8d77a730 RDI: 0000000000000001 [ 305.074379][ C0] RBP: ffffc90003e776c8 R08: ffffffff8f7d6677 R09: 1ffffffff1efacce [ 305.074396][ C0] R10: dffffc0000000000 R11: fffffbfff1efaccf R12: dffffc0000000000 [ 305.074412][ C0] R13: dffffc0000000000 R14: ffffffff99b3fb20 R15: 1ffff920007ceec8 [ 305.074429][ C0] FS: 0000000000000000(0000) GS:ffff888125ee9000(0000) knlGS:0000000000000000 [ 305.074446][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.074460][ C0] CR2: 000000110c38f844 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 305.074479][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 305.074493][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 305.074509][ C0] Call Trace: [ 305.074517][ C0] [ 305.074527][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 305.074569][ C0] uart_port_unlock_deref+0x111/0x2f0 [ 305.074608][ C0] uart_write+0xc9/0x130 [ 305.074642][ C0] ? __pfx_uart_write+0x10/0x10 [ 305.074676][ C0] handle_tx+0x23f/0x610 [ 305.074717][ C0] dev_hard_start_xmit+0x2d7/0x830 [ 305.074763][ C0] __dev_queue_xmit+0x172a/0x3740 [ 305.074804][ C0] ? __dev_queue_xmit+0x284/0x3740 [ 305.074829][ C0] ? stack_trace_save+0x9c/0xe0 [ 305.074861][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 305.074898][ C0] ? __schedule+0x17da/0x4d60 [ 305.074931][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 305.074952][ C0] ? __lock_acquire+0xab9/0xd20 [ 305.074987][ C0] ? do_raw_spin_lock+0x121/0x290 [ 305.075032][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 305.075062][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 305.075102][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.075127][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.075161][ C0] tx+0x6b/0x190 [ 305.075181][ C0] ? __pfx_tx+0x10/0x10 [ 305.075198][ C0] kthread+0x1d0/0x3e0 [ 305.075242][ C0] ? __pfx_kthread+0x10/0x10 [ 305.075272][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 305.075299][ C0] ? __kthread_parkme+0x7b/0x200 [ 305.075328][ C0] ? __kthread_parkme+0x1a1/0x200 [ 305.075362][ C0] kthread+0x711/0x8a0 [ 305.075403][ C0] ? __pfx_kthread+0x10/0x10 [ 305.075442][ C0] ? __pfx_kthread+0x10/0x10 [ 305.075476][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.075503][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.075530][ C0] ? __pfx_kthread+0x10/0x10 [ 305.075562][ C0] ret_from_fork+0x4bc/0x870 [ 305.075591][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 305.075625][ C0] ? __switch_to_asm+0x39/0x70 [ 305.075644][ C0] ? __switch_to_asm+0x33/0x70 [ 305.075662][ C0] ? __pfx_kthread+0x10/0x10 [ 305.075694][ C0] ret_from_fork_asm+0x1a/0x30 [ 305.075743][ C0]