last executing test programs: 4m29.246138516s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@loopback, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x4d5, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x3}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES64=r1, @ANYBLOB], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x9f, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xfffd, 0x0, @empty}}]}, 0x78}, 0x1, 0x7}, 0x0) 4m25.815137108s ago: executing program 4 (id=23): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1043, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x800000, &(0x7f0000002a00)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') 4m21.77052778s ago: executing program 4 (id=27): mkdir(&(0x7f0000000080)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000040)=0xe21, 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x8c1, 0x0) 4m18.016574483s ago: executing program 4 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$HCIINQUIRY(r4, 0x800448d4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4m14.711744405s ago: executing program 4 (id=34): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m11.956155385s ago: executing program 2 (id=37): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffffc, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x55, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf0, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x10000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m5.266298743s ago: executing program 2 (id=48): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r0}, 0x18) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) getcwd(&(0x7f0000000140)=""/115, 0x73) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) 4m2.386300948s ago: executing program 2 (id=52): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1043, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000001c0)=0x208000b, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) 3m58.552939193s ago: executing program 32 (id=34): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3m58.427105475s ago: executing program 2 (id=56): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) 3m49.274253308s ago: executing program 2 (id=65): socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4fed, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) 3m48.155786702s ago: executing program 2 (id=67): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9, r6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {0x0}], 0x2}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m32.277142697s ago: executing program 33 (id=67): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9, r6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {0x0}], 0x2}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m22.380190373s ago: executing program 1 (id=97): mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) setrlimit(0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000280)=0x8) 3m18.411065116s ago: executing program 1 (id=99): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) 3m9.27929242s ago: executing program 1 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 3m8.307731851s ago: executing program 1 (id=110): connect$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {0x4, 0x6e2f, 0x11f9, 0xfff8}, 0x4c, [0x8, 0x8, 0xfffffff7, 0x7f, 0x5, 0x9, 0x7fffffff, 0x0, 0x46, 0x838, 0xffffff0c, 0x3, 0x101, 0x9, 0x2, 0x4, 0x3, 0x4, 0x3, 0x2, 0x0, 0x800, 0x6, 0x6, 0x5, 0x10001, 0x7, 0x4, 0x77, 0x8000, 0x7, 0xd, 0x401, 0x7, 0x8, 0xc687, 0x200, 0xff, 0x1, 0x0, 0xfffffe01, 0x0, 0x59e6, 0x101, 0x2, 0xdb, 0x1, 0xe, 0x9, 0xf, 0x4, 0x1, 0xffffffff, 0x800, 0x7f, 0x9, 0x6, 0x23c2, 0x0, 0xc10d, 0x7, 0x8, 0x2, 0x3], [0x2, 0xc, 0xff, 0x7, 0xa, 0x9, 0x1000, 0x100, 0x3, 0x6, 0x9, 0x2, 0x4, 0x7, 0x2c85, 0xf77, 0x60, 0xb, 0x1, 0x8, 0x71e4, 0x1, 0x10000, 0x3, 0x9f3, 0x800, 0x0, 0xe842, 0xff6, 0xca, 0x9, 0x7, 0x7, 0x6, 0x9, 0x6, 0xc7, 0x2ff, 0xf, 0x1, 0x550, 0x2, 0x3, 0x8, 0x80000001, 0x0, 0x3d, 0x13d, 0x101, 0x9, 0x10001, 0x9f, 0xe2d9, 0x783, 0x5, 0x0, 0x4, 0x8, 0x3460, 0xffff, 0x8a42, 0x4000, 0x100, 0x1], [0x62e2adfb, 0x9f57, 0x4, 0x3, 0x9e, 0x8, 0x1, 0xfffffff7, 0x1, 0x2, 0x4, 0x4, 0x6, 0x4800000, 0x0, 0x9, 0x7, 0x9, 0x5, 0x5, 0x1, 0x7, 0xffff8000, 0x8, 0x3, 0x6, 0x10001, 0xfff, 0x0, 0x8, 0xffff2f9e, 0x9, 0x6, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0x3, 0x690bd85f, 0x7, 0x3, 0x9, 0x200, 0xb3, 0xcf, 0x2, 0x6, 0x0, 0x7fff, 0xc8, 0x8, 0x2, 0x5, 0x100, 0x7ff, 0x2, 0x5, 0x6, 0x4, 0x5, 0xa0, 0x1, 0x7825], [0x3, 0x0, 0x4, 0x6, 0x2, 0xf, 0x5, 0xfffffffd, 0x10001, 0x2, 0x2, 0x2, 0x2, 0x9, 0x7fffffff, 0x3, 0x2, 0x7, 0x9, 0x5, 0x5, 0x2, 0xffffff7f, 0x0, 0x1, 0x5, 0x8, 0xc6d9, 0x631, 0x200, 0x4, 0x1, 0x4, 0x5, 0xe, 0xffff, 0x5, 0x7ff, 0x6, 0x10, 0x6, 0x1, 0x6, 0x80000000, 0x3, 0x3, 0x10000, 0x9, 0x2, 0x2, 0x4, 0x4, 0x3, 0x2, 0x8001, 0x0, 0x5, 0xb9, 0xfff, 0x400, 0x22, 0x2, 0x75, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 3m3.996013432s ago: executing program 1 (id=114): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) io_uring_setup(0x1e6c, &(0x7f00000000c0)={0x0, 0x3d15, 0x0, 0x2000, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="ed"], 0x20) 3m3.727814125s ago: executing program 1 (id=115): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000240)={0x18, r3}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_VF_PORTS={0x4}, @IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x3c}}, 0x20048000) r6 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001380)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fsopen(&(0x7f0000000040)='ceph\x00', 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25101f08104e264e2203000000060000000f000000c3000000f91c00000e0000000000004007000000", @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f09000000c3000000498d662e50e7e7bace33855f4329a8650d9331c170468859e1da477d31f61223db01340be7dc21e2a07b0b2fbfc02d8d387f33f89d0f6c45e15010f83612f9b3c77b82ac16585c48a5d1eeefd93f5ef5625e4b619810cd915b17821fc917cf41cd15b4a520130cce"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) 2m48.216897746s ago: executing program 34 (id=115): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000051000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000240)={0x18, r3}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_VF_PORTS={0x4}, @IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x3c}}, 0x20048000) r6 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001380)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fsopen(&(0x7f0000000040)='ceph\x00', 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25101f08104e264e2203000000060000000f000000c3000000f91c00000e0000000000004007000000", @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f09000000c3000000498d662e50e7e7bace33855f4329a8650d9331c170468859e1da477d31f61223db01340be7dc21e2a07b0b2fbfc02d8d387f33f89d0f6c45e15010f83612f9b3c77b82ac16585c48a5d1eeefd93f5ef5625e4b619810cd915b17821fc917cf41cd15b4a520130cce"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) 20.369780962s ago: executing program 5 (id=283): syz_io_uring_setup(0x739c, &(0x7f0000000140)={0x0, 0x114df, 0x20000, 0x5, 0x296}, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x29c780}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x12) 20.082586703s ago: executing program 3 (id=284): socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f]}}, 0x0, 0x53}, 0x28) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 19.280525432s ago: executing program 0 (id=285): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) r1 = gettid() fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x8cad86236bd38367, 0x2, 0x7fff, 0x868, r1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r2, 0x0, 0x0, 0x10, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = open(0x0, 0x0, 0x0) fcntl$notify(r6, 0x402, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) creat(0x0, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 17.827737488s ago: executing program 5 (id=287): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = msgget$private(0x0, 0x8) msgrcv(r5, &(0x7f0000001080)={0x0, ""/1}, 0x9, 0x2, 0x3000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1000000000000b, 0x6f76, 0x3, 0x0, 0x1, 0x8, 0x7b, 0x3}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080), 0x0) 17.827499061s ago: executing program 6 (id=288): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) r1 = gettid() fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x8cad86236bd38367, 0x2, 0x7fff, 0x868, r1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r2, 0x0, 0x0, 0x10, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x7) r5 = open(0x0, 0x0, 0x0) fcntl$notify(r5, 0x402, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) creat(0x0, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 17.570127554s ago: executing program 3 (id=289): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x7, 0x401, {{0x22, 0x4, 0x3, 0xa, 0x88, 0x68, 0x0, 0x18, 0x4, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x1b, 0xc6, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x17}, @remote, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0xd9, 0x1, 0xd, [{@remote, 0xf5}, {@empty, 0xfffffff4}, {@multicast1, 0x200}]}, @noop, @ssrr={0x89, 0x2b, 0xa4, [@multicast2, @rand_addr=0x64010100, @broadcast, @loopback, @loopback, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast]}]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000640)=0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) close_range(r3, 0xffffffffffffffff, 0x0) 16.262958476s ago: executing program 0 (id=292): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) shutdown(r4, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)="00000102", 0x4, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000880)=""/4096, &(0x7f0000000180)=0x1000) removexattr(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 16.011215128s ago: executing program 6 (id=293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x582c952b5e63b23f, 0xffffffffffffffff, 0x892c4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) getpeername(r6, 0x0, 0x0) 16.009794408s ago: executing program 5 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9}) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/65], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000580)={0x0, 0xbf, 0x80, 0x20203843, 0x2, [0x2], [0x80ffdc], [], [0x3ffffffffffffff]}) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) 14.991544352s ago: executing program 3 (id=296): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="09000000010000", 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc081, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x5d, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0xffffffff, 0x2, {}, 0x1c000}) 14.9882374s ago: executing program 5 (id=297): r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000080), 0x80080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r5}, 0x18) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) gettid() io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x413, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz0\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYBLOB, @ANYRES64=r6]) close_range(r1, 0xffffffffffffffff, 0x0) syz_pidfd_open(r0, 0x0) 12.615915162s ago: executing program 6 (id=301): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) writev(0xffffffffffffffff, 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = getpid() syz_clone3(&(0x7f0000000380)={0x82040480, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r8], 0x1}, 0x58) ioctl$FBIOPUT_CON2FBMAP(r7, 0x4606, 0x0) 10.432684625s ago: executing program 3 (id=302): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) r1 = gettid() fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x8cad86236bd38367, 0x2, 0x7fff, 0x868, r1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r2, 0x0, 0x0, 0x10, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = open(0x0, 0x0, 0x0) fcntl$notify(r6, 0x402, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) creat(0x0, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 10.364685904s ago: executing program 5 (id=303): socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0xffffffffffffffbd) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) 9.774208721s ago: executing program 0 (id=305): r0 = socket(0x2, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$alg(0x26, 0x5, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x2, 0x1) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f000001b700)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x60, '\x00', r4}, 0x94) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x5, 0x201, 0x40, 0x8}, &(0x7f00000000c0)=0x10) 8.33483042s ago: executing program 3 (id=307): unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mq_notify(0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 8.164996574s ago: executing program 5 (id=308): mkdir(&(0x7f0000000080)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000040)=0xe21, 0x4) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x8c1, 0x0) 8.140035829s ago: executing program 6 (id=309): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80482, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x7a72}, 0x28) 6.24033589s ago: executing program 0 (id=311): syz_io_uring_setup(0x739c, &(0x7f0000000140)={0x0, 0x114df, 0x20000, 0x5, 0x296}, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x29c780}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x12) 5.598541497s ago: executing program 3 (id=312): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x2, 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getpriority(0x1, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) read$dsp(r4, &(0x7f0000000300)=""/79, 0x4f) 3.626618659s ago: executing program 6 (id=314): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getpgid(r2) r5 = io_uring_setup(0x1b7b, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.483676694s ago: executing program 6 (id=316): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001408000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r2, 0x5) accept4(r2, &(0x7f0000000240)=@x25, 0x0, 0x80800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.256808875s ago: executing program 0 (id=317): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) r1 = gettid() fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x8cad86236bd38367, 0x2, 0x7fff, 0x868, r1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r2, 0x0, 0x0, 0x10, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x7) r5 = open(0x0, 0x0, 0x0) fcntl$notify(r5, 0x402, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) creat(0x0, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.204750037s ago: executing program 7 (id=318): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0xd, [0x7ffe, 0x100c95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x5, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0xffff8be8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0xffff8000, 0x7ff, 0xfffffff9, 0xb8b, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x100009, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0xbd9, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x7, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x8, 0xfffff000, 0xfffd, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x9, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x6, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x7) userfaultfd(0x801) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) getresgid(&(0x7f0000001200), 0x0, 0x0) 984.691599ms ago: executing program 7 (id=319): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x86, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r6, 0x0, 0x800) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x7ff, &(0x7f0000001a00)) r7 = timerfd_create(0x8, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 759.926415ms ago: executing program 7 (id=320): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 468.864575ms ago: executing program 7 (id=321): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r3, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 278.973694ms ago: executing program 7 (id=322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000"], 0x68}, 0x4000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmsg(r7, 0x0, 0x0) 45.865437ms ago: executing program 0 (id=323): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)={0x20, 0x16, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 7 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r7, 0x29, 0xce, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 92.134282][ T44] cfg80211: failed to load regulatory.db [ 92.503779][ T5787] cgroup: Unknown subsys name 'net' [ 92.785876][ T5787] cgroup: Unknown subsys name 'cpuset' [ 92.829944][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.918955][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.104737][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.113425][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.114396][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.115894][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.116859][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.120930][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.123300][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.124130][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.125420][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.126260][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.140617][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.143974][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.146915][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.159809][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.164860][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.171334][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.178510][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.181790][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.182215][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.182887][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.184259][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.186529][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.188196][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.229965][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.233102][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.287904][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 100.301236][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 100.393883][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 100.612123][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 100.768922][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 101.250823][ T5808] Bluetooth: hci2: command tx timeout [ 101.250828][ T61] Bluetooth: hci4: command tx timeout [ 101.329293][ T61] Bluetooth: hci1: command tx timeout [ 101.329301][ T5808] Bluetooth: hci3: command tx timeout [ 101.409561][ T61] Bluetooth: hci0: command tx timeout [ 101.460603][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.460722][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.461228][ T5812] bridge_slave_0: entered allmulticast mode [ 101.463402][ T5812] bridge_slave_0: entered promiscuous mode [ 101.466441][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.466574][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.466764][ T5818] bridge_slave_0: entered allmulticast mode [ 101.479494][ T5818] bridge_slave_0: entered promiscuous mode [ 101.622368][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.622498][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.622662][ T5812] bridge_slave_1: entered allmulticast mode [ 101.624679][ T5812] bridge_slave_1: entered promiscuous mode [ 101.627860][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.627992][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.628147][ T5818] bridge_slave_1: entered allmulticast mode [ 101.632853][ T5818] bridge_slave_1: entered promiscuous mode [ 101.739433][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.739530][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.739674][ T5810] bridge_slave_0: entered allmulticast mode [ 101.741893][ T5810] bridge_slave_0: entered promiscuous mode [ 101.968060][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.968326][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.968591][ T5810] bridge_slave_1: entered allmulticast mode [ 101.973292][ T5810] bridge_slave_1: entered promiscuous mode [ 102.172975][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.173067][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.173240][ T5804] bridge_slave_0: entered allmulticast mode [ 102.175441][ T5804] bridge_slave_0: entered promiscuous mode [ 102.323915][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.327727][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.327988][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.328126][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.328305][ T5804] bridge_slave_1: entered allmulticast mode [ 102.368965][ T5804] bridge_slave_1: entered promiscuous mode [ 102.483290][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.486048][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.560402][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.560502][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.560654][ T5805] bridge_slave_0: entered allmulticast mode [ 102.562566][ T5805] bridge_slave_0: entered promiscuous mode [ 102.663665][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.860280][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.860419][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.860610][ T5805] bridge_slave_1: entered allmulticast mode [ 102.862779][ T5805] bridge_slave_1: entered promiscuous mode [ 102.866718][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.013757][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.172415][ T5812] team0: Port device team_slave_0 added [ 103.174921][ T5818] team0: Port device team_slave_0 added [ 103.178332][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.322250][ T5812] team0: Port device team_slave_1 added [ 103.324354][ T5818] team0: Port device team_slave_1 added [ 103.331026][ T5808] Bluetooth: hci2: command tx timeout [ 103.331136][ T61] Bluetooth: hci4: command tx timeout [ 103.393638][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.395807][ T5810] team0: Port device team_slave_0 added [ 103.409563][ T61] Bluetooth: hci1: command tx timeout [ 103.409602][ T61] Bluetooth: hci3: command tx timeout [ 103.489345][ T5808] Bluetooth: hci0: command tx timeout [ 103.704048][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.705933][ T5810] team0: Port device team_slave_1 added [ 104.072068][ T5804] team0: Port device team_slave_0 added [ 104.231343][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.231357][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.231376][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.234187][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.234203][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.234229][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.236801][ T5804] team0: Port device team_slave_1 added [ 104.392076][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.392094][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.392123][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.393331][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.393345][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.393365][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.454335][ T5805] team0: Port device team_slave_0 added [ 104.457185][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.457204][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.457237][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.562281][ T5805] team0: Port device team_slave_1 added [ 104.563296][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.563310][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.563329][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.567580][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.567594][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.567615][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.702937][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.702950][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.702969][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.908972][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.908987][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.909007][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.191665][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.191683][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.191713][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.221223][ T5812] hsr_slave_0: entered promiscuous mode [ 105.223386][ T5812] hsr_slave_1: entered promiscuous mode [ 105.241757][ T5818] hsr_slave_0: entered promiscuous mode [ 105.243870][ T5818] hsr_slave_1: entered promiscuous mode [ 105.245207][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 105.245365][ T5818] Cannot create hsr debugfs directory [ 105.409340][ T5808] Bluetooth: hci4: command tx timeout [ 105.409376][ T5808] Bluetooth: hci2: command tx timeout [ 105.458002][ T5810] hsr_slave_0: entered promiscuous mode [ 105.458968][ T5810] hsr_slave_1: entered promiscuous mode [ 105.461153][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 105.461184][ T5810] Cannot create hsr debugfs directory [ 105.489553][ T61] Bluetooth: hci3: command tx timeout [ 105.489587][ T61] Bluetooth: hci1: command tx timeout [ 105.569412][ T5808] Bluetooth: hci0: command tx timeout [ 105.676427][ T5804] hsr_slave_0: entered promiscuous mode [ 105.677452][ T5804] hsr_slave_1: entered promiscuous mode [ 105.678116][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 105.678143][ T5804] Cannot create hsr debugfs directory [ 106.057639][ T5805] hsr_slave_0: entered promiscuous mode [ 106.058691][ T5805] hsr_slave_1: entered promiscuous mode [ 106.061006][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 106.061036][ T5805] Cannot create hsr debugfs directory [ 107.388914][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.438317][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.474786][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.489290][ T5808] Bluetooth: hci2: command tx timeout [ 107.489327][ T5808] Bluetooth: hci4: command tx timeout [ 107.528352][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.570291][ T61] Bluetooth: hci1: command tx timeout [ 107.570325][ T61] Bluetooth: hci3: command tx timeout [ 107.646514][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.650627][ T5808] Bluetooth: hci0: command tx timeout [ 107.684384][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.743824][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.785529][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.917648][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.948553][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.974206][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.025073][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.166759][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.197991][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.228679][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.260711][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.395594][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.415516][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.457341][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.477877][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.523477][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.606081][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.643384][ T2125] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.643922][ T2125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.674568][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.696346][ T2125] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.696509][ T2125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.786620][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.812801][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.838691][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.838843][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.877472][ T2125] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.877665][ T2125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.933515][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.971607][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.973619][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.974043][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.052806][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.053085][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.119062][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.170699][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.172737][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.172874][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.246058][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.246309][ T1475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.346099][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.398730][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.407685][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.454132][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.455030][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.523220][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.717721][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.917295][ T5812] veth0_vlan: entered promiscuous mode [ 109.980483][ T5812] veth1_vlan: entered promiscuous mode [ 110.047962][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.128347][ T5810] veth0_vlan: entered promiscuous mode [ 110.194036][ T5810] veth1_vlan: entered promiscuous mode [ 110.197797][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.225043][ T5812] veth0_macvtap: entered promiscuous mode [ 110.276118][ T5812] veth1_macvtap: entered promiscuous mode [ 110.325324][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.345399][ T5804] veth0_vlan: entered promiscuous mode [ 110.382284][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.415118][ T5804] veth1_vlan: entered promiscuous mode [ 110.421550][ T5810] veth0_macvtap: entered promiscuous mode [ 110.427543][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.481787][ T5810] veth1_macvtap: entered promiscuous mode [ 110.512117][ T1475] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.541009][ T1475] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.548471][ T1475] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.572247][ T1475] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.691001][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.796390][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.800370][ T5805] veth0_vlan: entered promiscuous mode [ 110.846535][ T5804] veth0_macvtap: entered promiscuous mode [ 110.868854][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.898289][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.915800][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.916514][ T5804] veth1_macvtap: entered promiscuous mode [ 110.936916][ T5805] veth1_vlan: entered promiscuous mode [ 110.938170][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.951129][ T2125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.951165][ T2125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.119726][ T1475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.119747][ T1475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.148538][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.197762][ T5818] veth0_vlan: entered promiscuous mode [ 111.245452][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.283692][ T5818] veth1_vlan: entered promiscuous mode [ 111.312947][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.312967][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.318925][ T3566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.359850][ T3566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.362883][ T3566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.374277][ T3566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.388938][ T5805] veth0_macvtap: entered promiscuous mode [ 111.465807][ T5805] veth1_macvtap: entered promiscuous mode [ 111.468573][ T2125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.468593][ T2125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.629198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.379169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.379204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.542396][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.819016][ T5818] veth0_macvtap: entered promiscuous mode [ 113.231536][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.255684][ T5818] veth1_macvtap: entered promiscuous mode [ 113.258743][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.258764][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.389360][ T2152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.464571][ T2152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.481818][ T2152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.482811][ T2152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.568930][ T2125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.568953][ T2125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.908216][ T5931] pimreg: entered allmulticast mode [ 115.987556][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.234545][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.118390][ T3566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.118444][ T3566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.118483][ T3566] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.118522][ T3566] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.209577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.059398][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.059421][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.169485][ T5946] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8'. [ 118.479159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.489155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.499133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.509135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.519130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.529130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.858121][ T991] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.982170][ T1475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.982195][ T1475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.140345][ T5962] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 122.140403][ T5962] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 122.144085][ T5962] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 122.144183][ T5962] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 122.660870][ T5961] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 122.879255][ T991] usb 2-1: Using ep0 maxpacket: 32 [ 122.971279][ T991] usb 2-1: device descriptor read/all, error -71 [ 123.131296][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.131319][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.564767][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.434810][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.576692][ T1293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.576715][ T1293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.622104][ T5979] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.094453][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.600754][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.501325][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.936381][ T6034] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 132.936439][ T6034] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 132.938655][ T6034] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 132.938716][ T6034] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 133.960103][ T6033] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 134.408516][ T6020] syz.1.22 (6020) used greatest stack depth: 18736 bytes left [ 137.975189][ T6064] ======================================================= [ 137.975189][ T6064] WARNING: The mand mount option has been deprecated and [ 137.975189][ T6064] and is ignored by this kernel. Remove the mand [ 137.975189][ T6064] option from the mount to silence this warning. [ 137.975189][ T6064] ======================================================= [ 138.252186][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.252285][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.580019][ T6089] random: crng reseeded on system resumption [ 146.364162][ T6110] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 146.364190][ T6110] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 146.364415][ T6110] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 146.364435][ T6110] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 146.779810][ T6106] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 148.549573][ T6123] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 148.549631][ T6123] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 148.554794][ T6123] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 148.554860][ T6123] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 149.588011][ T6120] mmap: syz.3.43 (6120) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.117902][ T6115] kvm: kvm [6114]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 151.162093][ T6115] kvm: kvm [6114]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 151.162208][ T6115] kvm: kvm [6114]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 151.813930][ T6139] __vm_enough_memory: pid: 6139, comm: syz.0.47, bytes: 21200358486016 not enough memory for the allocation [ 155.507180][ T6156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.237089][ T6175] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 161.678039][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.686677][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.688276][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.692358][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.693554][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 165.045081][ T5808] Bluetooth: hci5: command tx timeout [ 165.109597][ T6195] __vm_enough_memory: pid: 6195, comm: syz.1.60, bytes: 21200442187776 not enough memory for the allocation [ 167.137656][ T5808] Bluetooth: hci5: command tx timeout [ 167.331785][ T6206] kvm: kvm [6199]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x1 [ 167.331914][ T6206] kvm: kvm [6199]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x1 [ 167.336473][ T6206] kvm: kvm [6199]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x710000000001 [ 168.288247][ T6206] kvm: kvm [6199]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x890000000001 [ 168.288370][ T6206] kvm: kvm [6199]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0xf80000000001 [ 168.730950][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.169394][ T5808] Bluetooth: hci5: command tx timeout [ 171.555559][ T5808] Bluetooth: hci5: command tx timeout [ 172.035605][ T6237] __vm_enough_memory: pid: 6237, comm: syz.3.71, bytes: 21199673331712 not enough memory for the allocation [ 172.557428][ T6208] syz.0.63 (6208): drop_caches: 2 [ 172.952483][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.475901][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.934296][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.065286][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.788781][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.169043][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.825132][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.074116][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.397820][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.560598][ T6262] capability: warning: `syz.0.76' uses deprecated v2 capabilities in a way that may be insecure [ 178.306050][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.849315][ T6269] netlink: 68 bytes leftover after parsing attributes in process `syz.0.78'. [ 179.753788][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.088593][ T6179] chnl_net:caif_netlink_parms(): no params data found [ 180.321234][ T38] audit: type=1800 audit(1763809057.144:2): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.79" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 185.658290][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.658452][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.658703][ T6179] bridge_slave_0: entered allmulticast mode [ 185.683038][ T6179] bridge_slave_0: entered promiscuous mode [ 185.758136][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.785531][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.169438][ T6179] bridge_slave_1: entered allmulticast mode [ 186.172352][ T6179] bridge_slave_1: entered promiscuous mode [ 189.252597][ T6322] binder: 6314:6322 ioctl 4018620d 0 returned -22 [ 190.737411][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.747829][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.832594][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.833906][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.834737][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.822415][ T6343] netlink: 68 bytes leftover after parsing attributes in process `syz.1.96'. [ 193.756952][ T61] Bluetooth: hci2: command tx timeout [ 195.818174][ T61] Bluetooth: hci2: command tx timeout [ 197.365540][ T6179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.380418][ T12] bridge_slave_1: left allmulticast mode [ 197.380585][ T12] bridge_slave_1: left promiscuous mode [ 197.383054][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.551600][ T12] bridge_slave_0: left allmulticast mode [ 197.551632][ T12] bridge_slave_0: left promiscuous mode [ 197.556362][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.299270][ T61] Bluetooth: hci2: command tx timeout [ 199.923870][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.923983][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.380600][ T5808] Bluetooth: hci2: command tx timeout [ 202.005083][ T6371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.046157][ T6381] IPv6: Can't replace route, no match found [ 206.121846][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.366994][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.393073][ T12] bond0 (unregistering): Released all slaves [ 208.182520][ T6179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.589328][ T38] audit: type=1326 audit(1763809088.474:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6418 comm="syz.0.112" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1538f749 code=0x0 [ 211.726901][ T6408] syz.1.110 (6408): drop_caches: 2 [ 212.272242][ T6179] team0: Port device team_slave_0 added [ 212.307887][ T6179] team0: Port device team_slave_1 added [ 213.262571][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.262589][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.262614][ T6179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.350893][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.350906][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.350926][ T6179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.446819][ T6423] syz.0.113 (6423) used greatest stack depth: 18488 bytes left [ 214.446429][ T12] hsr_slave_0: left promiscuous mode [ 214.623180][ T12] hsr_slave_1: left promiscuous mode [ 214.624376][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.624501][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.837348][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.837379][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.129642][ T12] veth1_macvtap: left promiscuous mode [ 215.153368][ T12] veth0_macvtap: left promiscuous mode [ 215.250595][ T12] veth1_vlan: left promiscuous mode [ 215.547972][ T12] veth0_vlan: left promiscuous mode [ 215.939267][ T31] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 216.155739][ T31] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 216.155768][ T31] usb 1-1: config 0 has no interface number 0 [ 216.155853][ T31] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 216.155877][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.235049][ T31] usb 1-1: config 0 descriptor?? [ 216.322084][ T31] usb 1-1: selecting invalid altsetting 1 [ 216.322978][ T31] dvb_ttusb_budget: ttusb_init_controller: error [ 216.323137][ T31] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 218.573035][ T31] DVB: Unable to find symbol cx22700_attach() [ 219.245684][ T31] DVB: Unable to find symbol tda10046_attach() [ 219.245700][ T31] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 219.306646][ T38] audit: type=1326 audit(1763809096.214:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6463 comm="syz.3.122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e9ddbf749 code=0x0 [ 219.846946][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.861139][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.862573][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.865147][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.883105][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.101715][ T44] usb 1-1: USB disconnect, device number 2 [ 220.554361][ T6473] delete_channel: no stack [ 221.969323][ T5815] Bluetooth: hci4: command tx timeout [ 222.215638][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 222.215691][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 222.215809][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 223.956176][ T6479] syz.3.124 (6479): drop_caches: 2 [ 224.187021][ T61] Bluetooth: hci4: command tx timeout [ 224.377905][ T38] audit: type=1326 audit(1763809101.284:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6485 comm="syz.3.126" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e9ddbf749 code=0x0 [ 224.890002][ T12] team0 (unregistering): Port device team_slave_1 removed [ 225.149893][ T12] team0 (unregistering): Port device team_slave_0 removed [ 225.364989][ T6492] syz.3.127 uses obsolete (PF_INET,SOCK_PACKET) [ 226.209714][ T61] Bluetooth: hci4: command tx timeout [ 228.372999][ T61] Bluetooth: hci4: command tx timeout [ 229.351215][ T6503] syz.0.129 (6503) used greatest stack depth: 17832 bytes left [ 229.494798][ T6513] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 229.823993][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.009003][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.122528][ T5811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 230.138583][ T5811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 230.140731][ T5811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 230.143606][ T5811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 230.152778][ T5811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 230.695755][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.374372][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.695865][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.029711][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.093467][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.559629][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.614826][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.628579][ T5811] Bluetooth: hci6: command tx timeout [ 232.737075][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.283691][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'. [ 234.689261][ T5811] Bluetooth: hci6: command tx timeout [ 234.990201][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.991430][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.152228][ T6534] vlan2: entered promiscuous mode [ 235.152247][ T6534] batadv0: entered promiscuous mode [ 236.407984][ T6546] Zero length message leads to an empty skb [ 236.863629][ T5811] Bluetooth: hci6: command tx timeout [ 238.032725][ T6559] binder: 6558:6559 ioctl 4018620d 0 returned -22 [ 238.929336][ T5811] Bluetooth: hci6: command tx timeout [ 239.219192][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 239.369404][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 239.371865][ T31] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 239.371884][ T31] usb 1-1: config 0 has no interface number 0 [ 239.371907][ T31] usb 1-1: config 0 interface 69 has no altsetting 0 [ 239.376083][ T31] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=f8.b5 [ 239.376111][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.376131][ T31] usb 1-1: Product: syz [ 239.376145][ T31] usb 1-1: Manufacturer: syz [ 239.376158][ T31] usb 1-1: SerialNumber: syz [ 239.475641][ T31] usb 1-1: config 0 descriptor?? [ 240.076757][ T31] pegasus 1-1:0.69: probe with driver pegasus failed with error -71 [ 240.126105][ T31] usb 1-1: USB disconnect, device number 3 [ 240.218417][ T5860] udevd[5860]: setting mode of /dev/bus/usb/001/003 to 020664 failed: No such file or directory [ 240.218559][ T5860] udevd[5860]: setting owner of /dev/bus/usb/001/003 to uid=0, gid=0 failed: No such file or directory [ 240.318634][ T6326] chnl_net:caif_netlink_parms(): no params data found [ 241.024157][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.306759][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.042824][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.496057][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.437799][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.009338][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.318350][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.049930][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.170743][ T6326] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 246.854103][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.860902][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.877818][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.901263][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.902108][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.094724][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.715734][ T5811] Bluetooth: hci3: command tx timeout [ 251.356456][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.516644][ T6637] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 251.729738][ T5811] Bluetooth: hci3: command tx timeout [ 251.769233][ T5852] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 251.842078][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.924403][ T5852] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.924431][ T5852] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.924470][ T5852] usb 1-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 251.924494][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.978810][ T5852] usb 1-1: config 0 descriptor?? [ 252.055083][ T6468] chnl_net:caif_netlink_parms(): no params data found [ 254.032577][ T5811] Bluetooth: hci3: command tx timeout [ 254.266540][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.324301][ T6514] chnl_net:caif_netlink_parms(): no params data found [ 254.782884][ T6468] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.783076][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.783291][ T6468] bridge_slave_0: entered allmulticast mode [ 254.790940][ T6468] bridge_slave_0: entered promiscuous mode [ 254.831899][ T6468] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.832039][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.832318][ T6468] bridge_slave_1: entered allmulticast mode [ 254.836206][ T6468] bridge_slave_1: entered promiscuous mode [ 255.137684][ T31] usb 1-1: USB disconnect, device number 4 [ 256.665339][ T5811] Bluetooth: hci3: command tx timeout [ 256.778571][ T6468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.961657][ T6468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.961923][ T6514] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.962425][ T6514] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.962633][ T6514] bridge_slave_0: entered allmulticast mode [ 256.965530][ T6514] bridge_slave_0: entered promiscuous mode [ 257.866462][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.866613][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.866874][ T6514] bridge_slave_1: entered allmulticast mode [ 257.895282][ T6514] bridge_slave_1: entered promiscuous mode [ 257.898357][ T6689] binder: 6681:6689 ioctl 4018620d 0 returned -22 [ 259.723935][ T6468] team0: Port device team_slave_0 added [ 259.757156][ T38] audit: type=1326 audit(1763809136.664:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6695 comm="syz.3.166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e9ddbf749 code=0x0 [ 260.001807][ T6468] team0: Port device team_slave_1 added [ 260.035705][ T6514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.177870][ T6514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.814587][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.630282][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.630357][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.281806][ T6717] fuse: Unknown parameter 'fd0x0000000000000007' [ 263.233036][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.233054][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.233084][ T6468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.656797][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.712901][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.853679][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.947137][ T6607] chnl_net:caif_netlink_parms(): no params data found [ 264.320986][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.198169][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.291713][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.291732][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.291761][ T6468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.452986][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.409203][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.434319][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.509223][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 266.617475][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.665505][ T6514] team0: Port device team_slave_0 added [ 266.690522][ T10] usb 4-1: config 0 has no interfaces? [ 266.690563][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.690588][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.796029][ T10] usb 4-1: config 0 descriptor?? [ 267.581800][ T6514] team0: Port device team_slave_1 added [ 267.875486][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.484941][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.634542][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.662879][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.712592][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.838467][ T31] usb 4-1: USB disconnect, device number 2 [ 269.026345][ T6748] netlink: 'syz.3.178': attribute type 6 has an invalid length. [ 269.443405][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.443423][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.443442][ T6514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.807733][ T6758] netlink: 68 bytes leftover after parsing attributes in process `syz.3.179'. [ 271.764340][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.902883][ T6767] netlink: 68 bytes leftover after parsing attributes in process `syz.3.181'. [ 272.568182][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.568201][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.568230][ T6514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.682540][ T6468] hsr_slave_0: entered promiscuous mode [ 272.684058][ T6468] hsr_slave_1: entered promiscuous mode [ 272.709732][ T6468] debugfs: 'hsr0' already exists in 'hsr' [ 272.709762][ T6468] Cannot create hsr debugfs directory [ 273.788379][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.788597][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.788834][ T6607] bridge_slave_0: entered allmulticast mode [ 273.794596][ T6607] bridge_slave_0: entered promiscuous mode [ 274.234893][ T6781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.856281][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.856434][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.856702][ T6607] bridge_slave_1: entered allmulticast mode [ 275.149113][ T6607] bridge_slave_1: entered promiscuous mode [ 277.157866][ T38] audit: type=1326 audit(1763809154.064:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6785 comm="syz.0.186" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1538f749 code=0x0 [ 277.467083][ T6514] hsr_slave_0: entered promiscuous mode [ 277.468189][ T6514] hsr_slave_1: entered promiscuous mode [ 277.468966][ T6514] debugfs: 'hsr0' already exists in 'hsr' [ 277.468985][ T6514] Cannot create hsr debugfs directory [ 277.528673][ T6607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.555518][ T6607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.598166][ T6795] netlink: 68 bytes leftover after parsing attributes in process `syz.0.189'. [ 279.821038][ T6607] team0: Port device team_slave_0 added [ 280.446300][ T6607] team0: Port device team_slave_1 added [ 280.864022][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.868713][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.885116][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.886934][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.887762][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.340238][ T12] bridge_slave_1: left allmulticast mode [ 282.340265][ T12] bridge_slave_1: left promiscuous mode [ 282.341221][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.650546][ T12] bridge_slave_0: left allmulticast mode [ 282.650587][ T12] bridge_slave_0: left promiscuous mode [ 282.650904][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.553111][ T12] bridge_slave_1: left allmulticast mode [ 283.553142][ T12] bridge_slave_1: left promiscuous mode [ 283.553399][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.650700][ T12] bridge_slave_0: left allmulticast mode [ 283.650733][ T12] bridge_slave_0: left promiscuous mode [ 283.650994][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.835356][ T12] bridge_slave_1: left allmulticast mode [ 283.835390][ T12] bridge_slave_1: left promiscuous mode [ 283.835640][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.955577][ T5811] Bluetooth: hci2: command tx timeout [ 284.801698][ T12] bridge_slave_0: left allmulticast mode [ 284.801731][ T12] bridge_slave_0: left promiscuous mode [ 284.802023][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.341259][ T5811] Bluetooth: hci2: command tx timeout [ 286.609730][ T38] audit: type=1326 audit(1763809163.514:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6838 comm="syz.3.201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e9ddbf749 code=0x0 [ 287.767500][ T38] audit: type=1326 audit(1763809164.674:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6846 comm="syz.3.202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e9ddbf749 code=0x0 [ 288.379256][ T5811] Bluetooth: hci2: command tx timeout [ 288.661238][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 289.189992][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.250115][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.274900][ T12] bond0 (unregistering): Released all slaves [ 289.351402][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.354021][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.355169][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 289.358499][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 289.364042][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 289.531056][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.630471][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.692241][ T12] bond0 (unregistering): Released all slaves [ 290.449216][ T5811] Bluetooth: hci2: command tx timeout [ 291.059808][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.119744][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.142041][ T12] bond0 (unregistering): Released all slaves [ 291.409253][ T5811] Bluetooth: hci4: command tx timeout [ 291.727018][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.727035][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.727057][ T6607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.141955][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.141973][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.142001][ T6607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.216933][ T6863] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 293.217169][ T6863] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 293.499071][ T5811] Bluetooth: hci4: command tx timeout [ 294.471355][ T6607] hsr_slave_0: entered promiscuous mode [ 294.472961][ T6607] hsr_slave_1: entered promiscuous mode [ 294.502403][ T6607] debugfs: 'hsr0' already exists in 'hsr' [ 294.502427][ T6607] Cannot create hsr debugfs directory [ 294.774580][ T38] audit: type=1326 audit(1763809171.684:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6872 comm="syz.0.209" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1538f749 code=0x0 [ 295.588621][ T5811] Bluetooth: hci4: command tx timeout [ 296.305719][ T5811] Bluetooth: Wrong link type (-71) [ 297.649300][ T5811] Bluetooth: hci4: command tx timeout [ 298.403408][ T12] hsr_slave_0: left promiscuous mode [ 298.439301][ T12] hsr_slave_1: left promiscuous mode [ 298.442740][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.442769][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.532920][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.532952][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.572976][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.624568][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.980118][ T12] hsr_slave_0: left promiscuous mode [ 299.039268][ T12] hsr_slave_1: left promiscuous mode [ 299.040444][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.040472][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.090326][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.090348][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.453235][ T12] veth1_macvtap: left promiscuous mode [ 299.453352][ T12] veth0_macvtap: left promiscuous mode [ 299.453628][ T12] veth1_vlan: left promiscuous mode [ 299.453807][ T12] veth0_vlan: left promiscuous mode [ 299.611998][ T12] veth1_macvtap: left promiscuous mode [ 299.612075][ T12] veth0_macvtap: left promiscuous mode [ 299.612251][ T12] veth1_vlan: left promiscuous mode [ 299.612376][ T12] veth0_vlan: left promiscuous mode [ 301.929965][ T12] team0 (unregistering): Port device team_slave_1 removed [ 302.151531][ T12] team0 (unregistering): Port device team_slave_0 removed [ 304.533658][ T12] team0 (unregistering): Port device team_slave_1 removed [ 304.680302][ T12] team0 (unregistering): Port device team_slave_0 removed [ 305.220027][ T12] pimreg (unregistering): left allmulticast mode [ 305.835884][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.840737][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.856790][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.858024][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.879706][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.180180][ T12] team0 (unregistering): Port device team_slave_1 removed [ 307.380737][ T12] team0 (unregistering): Port device team_slave_0 removed [ 307.991270][ T61] Bluetooth: hci5: command tx timeout [ 310.049180][ T61] Bluetooth: hci5: command tx timeout [ 310.113669][ T6803] chnl_net:caif_netlink_parms(): no params data found [ 310.225663][ T6854] chnl_net:caif_netlink_parms(): no params data found [ 310.945423][ T6803] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.945645][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.945862][ T6803] bridge_slave_0: entered allmulticast mode [ 310.948839][ T6803] bridge_slave_0: entered promiscuous mode [ 311.050338][ T6803] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.050578][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.050800][ T6803] bridge_slave_1: entered allmulticast mode [ 311.054774][ T6803] bridge_slave_1: entered promiscuous mode [ 311.263106][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.263316][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.263575][ T6854] bridge_slave_0: entered allmulticast mode [ 311.265621][ T6854] bridge_slave_0: entered promiscuous mode [ 311.355542][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.355687][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.355973][ T6854] bridge_slave_1: entered allmulticast mode [ 311.358845][ T6854] bridge_slave_1: entered promiscuous mode [ 311.365959][ T6803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.377865][ T6803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.814088][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.834387][ T6803] team0: Port device team_slave_0 added [ 311.862722][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.865675][ T6803] team0: Port device team_slave_1 added [ 312.130958][ T61] Bluetooth: hci5: command tx timeout [ 312.516011][ T6854] team0: Port device team_slave_0 added [ 312.518256][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.518268][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.518286][ T6803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.535710][ T6854] team0: Port device team_slave_1 added [ 312.550822][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.550840][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.550868][ T6803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.771678][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.771693][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.771712][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.773782][ T6914] chnl_net:caif_netlink_parms(): no params data found [ 312.785476][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.785496][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.785529][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.054152][ T6803] hsr_slave_0: entered promiscuous mode [ 313.055204][ T6803] hsr_slave_1: entered promiscuous mode [ 313.664431][ T6854] hsr_slave_0: entered promiscuous mode [ 313.666966][ T6854] hsr_slave_1: entered promiscuous mode [ 313.668054][ T6854] debugfs: 'hsr0' already exists in 'hsr' [ 313.668080][ T6854] Cannot create hsr debugfs directory [ 314.010408][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.010626][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.010876][ T6914] bridge_slave_0: entered allmulticast mode [ 314.012868][ T6914] bridge_slave_0: entered promiscuous mode [ 314.058143][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.058279][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.058432][ T6914] bridge_slave_1: entered allmulticast mode [ 314.062514][ T6914] bridge_slave_1: entered promiscuous mode [ 314.219392][ T61] Bluetooth: hci5: command tx timeout [ 314.450990][ T6914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.477404][ T6914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.935337][ T6914] team0: Port device team_slave_0 added [ 315.091773][ T6914] team0: Port device team_slave_1 added [ 315.204749][ T12] bridge_slave_1: left allmulticast mode [ 315.204773][ T12] bridge_slave_1: left promiscuous mode [ 315.204953][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.260552][ T12] bridge_slave_0: left allmulticast mode [ 315.260576][ T12] bridge_slave_0: left promiscuous mode [ 315.261264][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.334080][ T12] bridge_slave_1: left allmulticast mode [ 315.334113][ T12] bridge_slave_1: left promiscuous mode [ 315.334368][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.390675][ T12] bridge_slave_0: left allmulticast mode [ 315.390699][ T12] bridge_slave_0: left promiscuous mode [ 315.390925][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.455285][ T12] bridge_slave_1: left allmulticast mode [ 315.455310][ T12] bridge_slave_1: left promiscuous mode [ 315.455480][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.520605][ T12] bridge_slave_0: left allmulticast mode [ 315.520630][ T12] bridge_slave_0: left promiscuous mode [ 315.520823][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.820012][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.910937][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.972911][ T12] bond0 (unregistering): Released all slaves [ 316.150821][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.229891][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.291351][ T12] bond0 (unregistering): Released all slaves [ 316.499907][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.600306][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.661743][ T12] bond0 (unregistering): Released all slaves [ 316.797125][ T12] bond0 (unregistering): Released all slaves [ 317.112118][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.112132][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.112152][ T6914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.175177][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.175193][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.175218][ T6914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.456399][ T6914] hsr_slave_0: entered promiscuous mode [ 317.457439][ T6914] hsr_slave_1: entered promiscuous mode [ 317.458133][ T6914] debugfs: 'hsr0' already exists in 'hsr' [ 317.458159][ T6914] Cannot create hsr debugfs directory [ 317.899479][ T12] hsr_slave_0: left promiscuous mode [ 317.950070][ T12] hsr_slave_1: left promiscuous mode [ 317.951169][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.010214][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.129742][ T12] hsr_slave_0: left promiscuous mode [ 318.169675][ T12] hsr_slave_1: left promiscuous mode [ 318.170750][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.192616][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.289789][ T12] hsr_slave_0: left promiscuous mode [ 318.319507][ T12] hsr_slave_1: left promiscuous mode [ 318.320267][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.380812][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.060159][ T12] team0 (unregistering): Port device team_slave_1 removed [ 319.189935][ T12] team0 (unregistering): Port device team_slave_0 removed [ 320.141190][ T12] team0 (unregistering): Port device team_slave_1 removed [ 320.270006][ T12] team0 (unregistering): Port device team_slave_0 removed [ 321.229964][ T12] team0 (unregistering): Port device team_slave_1 removed [ 321.349917][ T12] team0 (unregistering): Port device team_slave_0 removed [ 321.947224][ T6803] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 322.053930][ T6803] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 322.102186][ T6803] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 322.164023][ T6803] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 322.488286][ T6854] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 322.528684][ T6854] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 322.536884][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.536953][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.595985][ T6854] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 322.655541][ T6854] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 322.857244][ T6914] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 322.917767][ T6914] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 322.970275][ T6914] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 323.029102][ T6914] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 323.555604][ T6803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.605856][ T6854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.679563][ T6803] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.710544][ T6854] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.753476][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.753762][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.776616][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.777597][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.802069][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.802278][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.835742][ T1293] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.835896][ T1293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.916796][ T6914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.034448][ T6914] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.075003][ T2152] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.075644][ T2152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.135697][ T2152] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.135867][ T2152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.736344][ T6803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.910414][ T6854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.219626][ T6914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.703026][ T6803] veth0_vlan: entered promiscuous mode [ 325.736094][ T6803] veth1_vlan: entered promiscuous mode [ 325.921488][ T6854] veth0_vlan: entered promiscuous mode [ 325.974212][ T6803] veth0_macvtap: entered promiscuous mode [ 325.978176][ T6854] veth1_vlan: entered promiscuous mode [ 326.012709][ T6803] veth1_macvtap: entered promiscuous mode [ 326.102593][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.145365][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.193390][ T6914] veth0_vlan: entered promiscuous mode [ 326.195356][ T6854] veth0_macvtap: entered promiscuous mode [ 326.206191][ T3566] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.220542][ T3566] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.224487][ T3566] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.225902][ T6854] veth1_macvtap: entered promiscuous mode [ 326.228753][ T3566] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.248937][ T6914] veth1_vlan: entered promiscuous mode [ 326.388825][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.503580][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.568092][ T6346] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.573115][ T6346] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.591706][ T6346] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.598342][ T6346] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.645576][ T6914] veth0_macvtap: entered promiscuous mode [ 326.657392][ T6346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.657415][ T6346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.697261][ T6914] veth1_macvtap: entered promiscuous mode [ 326.828768][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.828790][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.920568][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.943749][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.943771][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.950005][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.064790][ T6346] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.067156][ T6346] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.110994][ T6346] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.143041][ T6346] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.158582][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.158608][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.758283][ T7102] netlink: 68 bytes leftover after parsing attributes in process `syz.5.215'. [ 332.635093][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.635146][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.026392][ T7119] tty tty3: ldisc open failed (-12), clearing slot 2 [ 333.640908][ T7124] overlayfs: overlapping lowerdir path [ 333.972652][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.972674][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.083396][ T7131] netlink: 68 bytes leftover after parsing attributes in process `syz.3.221'. [ 335.861651][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.013860][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.205243][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.427338][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.578382][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.822088][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.368076][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.472514][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.588738][ T7182] nvme_fabrics: missing parameter 'transport=%s' [ 344.588757][ T7182] nvme_fabrics: missing parameter 'nqn=%s' [ 344.654267][ T5867] IPVS: starting estimator thread 0... [ 345.332515][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.387139][ T7189] IPVS: using max 7 ests per chain, 16800 per kthread [ 348.765137][ T5867] IPVS: starting estimator thread 0... [ 348.851626][ T7234] IPVS: using max 7 ests per chain, 16800 per kthread [ 350.986022][ T5852] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 352.577747][ T5852] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 352.577780][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.577801][ T5852] usb 6-1: Product: syz [ 352.577816][ T5852] usb 6-1: Manufacturer: syz [ 352.577832][ T5852] usb 6-1: SerialNumber: syz [ 354.029260][ T5852] usb 6-1: config 0 descriptor?? [ 354.029866][ T5852] usb 6-1: can't set config #0, error -71 [ 354.050256][ T5852] usb 6-1: USB disconnect, device number 2 [ 354.274649][ T38] audit: type=1326 audit(1763809231.184:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz.7.248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5eeb0bf749 code=0x0 [ 360.029764][ T7313] ubi0: attaching mtd0 [ 360.033523][ T7313] ubi0: scanning is finished [ 360.033540][ T7313] ubi0: empty MTD device detected [ 363.178604][ T7313] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 372.117893][ T38] audit: type=1326 audit(1763809249.024:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7354 comm="syz.6.270" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c0cd6f749 code=0x0 [ 376.831209][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.937590][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.070176][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.224410][ T38] audit: type=1326 audit(1763809256.114:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7414 comm="syz.0.285" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1538f749 code=0x0 [ 379.326005][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.431135][ T38] audit: type=1326 audit(1763809256.344:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.6.288" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c0cd6f749 code=0x0 [ 379.793470][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.958551][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.117884][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.168580][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.482654][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.898023][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.140653][ T7453] netlink: 68 bytes leftover after parsing attributes in process `syz.5.294'. [ 382.225022][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.432392][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.464022][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.711577][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.095806][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.293376][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.441670][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.496135][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.497313][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.426928][ T38] audit: type=1326 audit(1763809264.334:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7490 comm="syz.3.302" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e9ddbf749 code=0x0 [ 387.632281][ T7498] random: crng reseeded on system resumption [ 388.683351][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.284984][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.608702][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.909796][ T38] audit: type=1326 audit(1763809272.824:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7547 comm="syz.0.317" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1538f749 code=0x0 [ 397.109284][ T991] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 397.109305][ T991] #PF: supervisor read access in kernel mode [ 397.109318][ T991] #PF: error_code(0x0000) - not-present page [ 397.109330][ T991] PGD 800000002e6ed067 P4D 800000002e6ed067 PUD 0 [ 397.109371][ T991] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 397.109402][ T991] CPU: 1 UID: 0 PID: 991 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 397.109438][ T991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.109451][ T991] Workqueue: usb_hub_wq hub_event [ 397.109481][ T991] RIP: 0010:kcov_remote_start+0x2a2/0x6f0 [ 397.109510][ T991] Code: f9 8c 4c 8b b8 b0 2b a3 91 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 db 5f 8d 4d 8b 3f 49 81 ff 00 db 5f 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 e0 0b c4 02 84 c0 74 0e 49 8b 07 49 [ 397.109527][ T991] RSP: 0018:ffffc900048cf748 EFLAGS: 00010207 [ 397.109543][ T991] RAX: 0000000000000000 RBX: ffff888025470000 RCX: 0000000000000000 [ 397.109556][ T991] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8b3ddf80 [ 397.109568][ T991] RBP: 0000000000100000 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 397.109581][ T991] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 0000000000000002 [ 397.109595][ T991] R13: 0000000000000001 R14: ffff88814d9d2600 R15: 0000000000000000 [ 397.109608][ T991] FS: 0000000000000000(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 397.109623][ T991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.109637][ T991] CR2: 0000000000000010 CR3: 000000003d7a4000 CR4: 00000000003526f0 [ 397.109653][ T991] Call Trace: [ 397.109660][ T991] [ 397.109671][ T991] hub_event+0x158/0x4a20 [ 397.109695][ T991] ? __lock_acquire+0xab9/0xd20 [ 397.109734][ T991] ? do_raw_spin_lock+0x121/0x290 [ 397.109756][ T991] ? look_up_lock_class+0x74/0x170 [ 397.109787][ T991] ? register_lock_class+0x51/0x320 [ 397.109817][ T991] ? __lock_acquire+0xab9/0xd20 [ 397.109848][ T991] ? __pfx_hub_event+0x10/0x10 [ 397.109879][ T991] ? process_scheduled_works+0x9ef/0x17b0 [ 397.109906][ T991] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.109936][ T991] ? process_scheduled_works+0x9ef/0x17b0 [ 397.109960][ T991] ? process_scheduled_works+0x9ef/0x17b0 [ 397.109985][ T991] process_scheduled_works+0xae1/0x17b0 [ 397.110023][ T991] ? __pfx_process_scheduled_works+0x10/0x10 [ 397.110054][ T991] worker_thread+0x8a0/0xda0 [ 397.110092][ T991] kthread+0x711/0x8a0 [ 397.110123][ T991] ? __pfx_worker_thread+0x10/0x10 [ 397.110148][ T991] ? __pfx_kthread+0x10/0x10 [ 397.110176][ T991] ? rt_spin_unlock+0x150/0x200 [ 397.110202][ T991] ? rt_spin_unlock+0x161/0x200 [ 397.110224][ T991] ? __pfx_kthread+0x10/0x10 [ 397.110254][ T991] ret_from_fork+0x4bc/0x870 [ 397.110279][ T991] ? __pfx_ret_from_fork+0x10/0x10 [ 397.110306][ T991] ? __switch_to_asm+0x39/0x70 [ 397.110326][ T991] ? __switch_to_asm+0x33/0x70 [ 397.110346][ T991] ? __pfx_kthread+0x10/0x10 [ 397.110375][ T991] ret_from_fork_asm+0x1a/0x30 [ 397.110404][ T991] [ 397.110411][ T991] Modules linked in: [ 397.110431][ T991] CR2: 0000000000000010 [ 397.110444][ T991] ---[ end trace 0000000000000000 ]--- [ 397.110453][ T991] RIP: 0010:kcov_remote_start+0x2a2/0x6f0 [ 397.110499][ T991] Code: f9 8c 4c 8b b8 b0 2b a3 91 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 db 5f 8d 4d 8b 3f 49 81 ff 00 db 5f 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 e0 0b c4 02 84 c0 74 0e 49 8b 07 49 [ 397.110516][ T991] RSP: 0018:ffffc900048cf748 EFLAGS: 00010207 [ 397.110533][ T991] RAX: 0000000000000000 RBX: ffff888025470000 RCX: 0000000000000000 [ 397.110546][ T991] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8b3ddf80 [ 397.110559][ T991] RBP: 0000000000100000 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 397.110574][ T991] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 0000000000000002 [ 397.110588][ T991] R13: 0000000000000001 R14: ffff88814d9d2600 R15: 0000000000000000 [ 397.110601][ T991] FS: 0000000000000000(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 397.110618][ T991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.110632][ T991] CR2: 0000000000000010 CR3: 000000003d7a4000 CR4: 00000000003526f0 [ 397.110650][ T991] Kernel panic - not syncing: Fatal exception [ 397.111052][ T991] Kernel Offset: disabled