last executing test programs: 2m39.405425888s ago: executing program 2 (id=3): sched_setscheduler(0x0, 0x2, 0x0) getpid() r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x4) sched_setscheduler(0x0, 0x1, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001480)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x3f}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd935}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x40}}, 0x0) 2m38.158716305s ago: executing program 2 (id=11): getgroups(0x1, &(0x7f0000000080)=[0xee00]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0xa, 0x103d, 0x6, 0x0, 0x32a, 0xffffffffffffffff, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m35.936905318s ago: executing program 2 (id=16): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000180)={0x0, 0x8404, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x21, 0x13, r1, 0x0, 0x0, 0x0, 0x40002063, 0x0, {0x21}}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x93500, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x10}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000010000000000000000000000891212000000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='nilfs2\x00', 0x220021, &(0x7f0000000380)='GPL\x00') r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000000f0ff00bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7e38e52c997b03b72b3d0ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da00000080f24bf901115e17392ac66ad029d1c00000614600d53daeacea799a22812a1b3cab4d785c908c54f7a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b48610e9eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c2815df09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa9a1681989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a62ec45c3af97a8f17da954aff3ec8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde0745db06753a7ac70af2df2c772b0031fe13cab6692402a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cac8b4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf1301800000ff14a99202d9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ec7966130b547dbd8b0000f0a77fbcf2cd1d0000002000000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf90040662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f64293091c989f72dcbbad3fdcd6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d506d7a59a3ad09e8802e8f4f535447cc0fc9d5f89a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd11642d5577fb9030036bce9c764c714c9402c21d181aa0820d89f235a3f1c5fc853e59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa809000008e1d41e1dcf6e6879545b92bd49000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84937e859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af40fffe0000000000749efd3763655500344bae34137f5ab0d534b8d43e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b850580994484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b00cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe44dc87c92332af00f191b66b6a6f7323e8faffc0886f4af7fc100dcb39c77a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a437367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85cff7f000000002c331fca0e541b7ca211c28ed61c5257080f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce4616d42b07199de8b99231ace58c77819ee2b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e604bae6b13df468ad87a6c769f952283a1f4e3842edb3d40c68a2001000006dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa671e934e94d1eb3de6a5f99f301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6e9a84aebe6e6e79900369c17b0ed16acdce1b12b70000000000f4e8cdbadbec962a7edc91c6b80f53e3b19c372e40e2139ff4c1180365eb5b71d834eb0293e252b96e6c90ec4d23cc42e88d262c1fdc317c7c000000acbc1248f2389d7fbcc10a377cc4e28460c0516534bdb3ff372bfd94efa0d32b214b39cea885557d39265a1c5e08c29914db042aa4fe23a92f387ae6d7565d3ca6ceb040f859de2e47f6c04bc55f3b81249faf3a505ac0d29e053b9c1832e8a25a54ae433e43036b032518200e2875736fc139a344bf3bf4d8f6f57e5c4b7f62a23758cb30e43f1974b14d4f3e1a8ce71995ce28564a50f418af2b6f22a7c70c2213ec629288604aa1a9f418487c864af9368a08bd37eecb0a810c5c24d7a82c07a8e68caa7ff2eaf100f6fd4c3af07d7a86b34f2f4d34abf2f92f1a41a330a4e8fbb4876393b38f79573cb53c263090d620a37ea25cde9445ccb74ebc22156465f4871436b44981455eccc221a8251f71c047203ac4d62b0012cab329a5d9003ceff42b007aa61880da20b0ad83ae368a19d2827840b8d00f92745508e63cddaac6d2d3c6cb03d512c5be9e7fd86e461e1e6a228e630029dbeddf37a6990c75ff6dcb6f32f61e59e3bf97f48954fd7908ab05e74815d909548b277bf5c4570eaeb265f4ffeacc3a4ec2edb261d53d09ebb6bdf811e2a4ef0be6392d86a5285a7fd2e4345e14786abafdd4852d3d62c334760c05e1bba37d0f0742c53242596e13bc22682ae15694aaaadef41bbd7185b74feaf59dea096a23a48c9eb3be5c546eda0f4b07916ab14e12839318e953f15fab94c9ba783015ebb6983d514e3b1f246f0a63c5a58cc2be0cb179791ec1b9a3e7e62c165ae39855182266b36ce9d2943c49a7f9a2a89a948b37f2bb830ea790a2b2c2fcd06bc499434dda842cfa91b2df4368f07eb2410aa387d146bccd22698f8f322fbdf4cddf11fd3b85325af8df473c8f156833e5488f31165e6a56d4c1c661bcbefcefd10f47b2e593b836be67bdc15c3b7fb497ecbca1506a577e81947505553dfdfe963c20c12575c4abc45cf9229af181317fde5262a73600f90e7457280ff4229507178c5df9acc273a7be76f6596b2ac36a2d28627e0012f989d7f7a20f2b38eef5efc339b8784ad5fe6fac77926d83a73e3647a6351c23d7e51cf459e5d169d42566b012193338f67612c22eab89fb14a40edd2694696048f9d51d26fa256eede4a9b5dd3508f9308883194ab3b0661d51b18dbdca9b5f70a91db8fc9b19291664eccc8274340eef00c743588b0ae4e7280db3b7bce3041a5bb9fced08059a2518eaf35df7388a518965a9b4c6ee27872be887b37319370a4587e50f28060b963a6e4d73b338f4e8929bc5ada66b6920c633119d17c090e72daa679c6e5bb155710679660004705fd8d4cac660fc32554a20feb5d74cafe562aff12fe126abf5927205867d5fca4a4ff8c7d0933cdfaf5864f4dae435d1ab9e711f48cd03f4cc130b54e18428341e675968ac19509fe7bff5ef0e55d71987e44027e29d02ac36f3c486bcf22f86170cbeeee2a5eb3adadb7d906f25c73df5cd22a8d1ca00b027a1ab966ab4799e631a21042685fc8c05d5e04ab21a66c5f221dabdac52b43a5980b1efb49d9e03d05f4d1a8756085d0305ff3c4cec8500000000000000000000924f7fdfa25a3331d13a50233f70742f16f6e13bd716905299ab21864ec9d3a93b1de03592b73b327348427508a2dcb953dd23e42adfc18fc891a247ba5c7ebd7fa6da7e3ef3d11d4b1bb534b48064aed03c5850c12abf87240b65221a64ec331c31ce394dad6142619893bff5c810f53dbd875837705ad5139a31ff058aacd51eed21216e0bd179cb00bf02af8dc25be8f318bca707c05a0235b86f37606e1cfbc9ee5cd9741c7648713b24107697039cc40aa538c24e8934cd88238237b21f0a901c488c55178984597ef91e7a8d60081cf34081b5df32ef9a89a25203093b8cbb5cd416d189cffcbdb6a336e3adefa39ea04e2c425864c766283829db5c2beb709da87edcee6b682f18abcac4fb9d785beb2f840079b54dfb9a8ab1a6bf4eea20bb51804ec3d3848bfd11ba6a42bc2823559b70eaed4c673e0e834611b6fec4816ee94c62e88b13037d02cffd561f9bb97d6569114d0e6a7170e229ab9e938c18a568184bd6759e5c3526fbcb46da794c5bcb6303f8a4abfe0d37a0d757c686b0b5171892f867020778fcc567a21b04e684e9da29e86c3e392564f93b38d7bec00e82cd32e2a521a715ae603c12ff286ca67757d74553ce8607a1c5c4856e50094904bf08ecde97b7c513bf64252e839439b65ae0125fd8e9c6d142ee7a6af20cd5370396db6f616fb9e5a2824a5cd9c10000000000000000000000000000fd6a689d6779abe81e6aa2c63fce0faf9531a700c8cc02ea5d83f57fbfaee919668e9ba4776f2d5a1d544ea17288de3895fc39713fe150efeb27d43fcc1b53c00a4ade36652ecdb7fab04afa69e2b6611c0233670808a206578c5a7d0266ccf6c80ec69b22c8c71c6d8a057b71d39b18f15311dd7149a75f91ce676516532c0b89e0a2d4323080444686a790eca0390eea32e6fb0bd40b79e2c86d01435be3ba1224970c7e10e4bc54323decb110fb66f25477e309041ce13c8d8b077ead176bc45c5050a88acae7f8aaf962a990e6269de74cb1a915b85c01019066f2858cf322a21ebec7e060da478e31f943e7c31bbdb43c26702a0257e7103b4d532336dc6f0bd5d33a6f7d1134872859afb35a4e0731b38d3a914ed3aa376917b0bc84f5"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e2613c2b346dc3f0a7387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fddbdf250700000008000300", @ANYRES32=r11, @ANYBLOB="140004006970216772657461700725ed0000000008000500060000000800178004000400"], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x0) unshare(0x6a040000) io_uring_enter(r2, 0xe85, 0xf8a1, 0x0, 0x0, 0x0) 2m34.283632137s ago: executing program 2 (id=21): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20802, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005880)=ANY=[@ANYBLOB="440000000001010400000000000000000a00000124000180140001"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m32.637046057s ago: executing program 32 (id=21): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20802, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005880)=ANY=[@ANYBLOB="440000000001010400000000000000000a00000124000180140001"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m25.192393744s ago: executing program 5 (id=146): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff80000000}, {0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x200000000000000) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 1m13.892198422s ago: executing program 5 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBLED(r0, 0x4b65, 0x531) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0x7}, @mss={0x2, 0x1000}, @mss={0x2, 0x80000000}], 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa8eaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000bbfed3"], 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) r8 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000040)={0xa, @sliced={0x1, [0x4, 0x7, 0x7, 0xc, 0x6, 0x1, 0x4, 0x2, 0xc46d, 0x6, 0x200, 0x4, 0xe5, 0x80, 0xa104, 0x400, 0x6e, 0xea, 0x400, 0xd, 0x8, 0x7f, 0x3, 0x7ff, 0x0, 0x3ff, 0x77, 0x3, 0xfe34, 0x9b1a, 0x0, 0x4c4d, 0x7, 0x4000, 0x85, 0x5, 0x1, 0x3ff, 0x0, 0x5da4, 0x4, 0x7f, 0xffff, 0x2, 0x9, 0x8, 0x4, 0x81], 0x2}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000062000002000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 1m10.58714477s ago: executing program 1 (id=157): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r3 = socket(0x2, 0x3, 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00'], 0x54}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r8, r9, r9}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x4e20, @multicast2}, 0x10) 1m9.892019437s ago: executing program 1 (id=159): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000cc0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x5, 0x1, 0x5}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) mknod$loop(&(0x7f0000000180)='.\x00', 0x0, 0x0) creat(0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x40000010) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) 1m8.737480153s ago: executing program 5 (id=160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @common=@inet=@multiport={{0x50}, {0x40, 0x0, [0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x5, 0x15, 0x8, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000540)={r3, 0x1, 0xe3}, &(0x7f0000000580)=0x10) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 1m4.62486406s ago: executing program 1 (id=161): mknod(0x0, 0x8001420, 0x0) open$dir(0x0, 0xbd352b813134d71b, 0x188) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x84be, 0x0, 0xffffffff, 0x121}, 0x0, &(0x7f00000003c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003800c000180080001"], 0x8c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000", 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r7, &(0x7f0000000200)="ffca57bc7a30d801", 0x8, 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 1m4.340329388s ago: executing program 5 (id=162): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000000800000008000000000000b600", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200000002d00010026bd7000fcdbde25040000000c0016800800bf00ffffff7f"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 59.90614997s ago: executing program 5 (id=166): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x208100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000a40)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) socket$inet(0x2, 0x1, 0x100) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) shutdown(r0, 0x1) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 54.051519138s ago: executing program 1 (id=171): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000cc0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x5, 0x1, 0x5}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) mknod$loop(&(0x7f0000000180)='.\x00', 0x0, 0x0) creat(0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x40000010) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) 53.397978936s ago: executing program 5 (id=172): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket(0x11, 0x5, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000100)={&(0x7f0000000300), 0x0}) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), &(0x7f0000002940)=""/4112, 0x1010}) 51.497263123s ago: executing program 1 (id=173): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x72) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000240)='qnx4\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000280)='./bus\x00', 0x2) chdir(&(0x7f0000000340)='./bus\x00') setpgid(0x0, r3) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x8001}, &(0x7f0000000640)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x22e}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000001c0)="a8f6cac1ec36fa43af044abc9c9b777a090d3b90264ba01f091bc4146547dec0011f53ef79fb674201bb9e0f018dd6eecbc127445168aef978db223e0123db69fe11191a2dff47cac9bbdf606f6bb2f9f8a3", 0x52}, {&(0x7f0000000340)="d79b78f6d92340b0dd3bcb35b1d93861daacc8e5cf1a1b519122b1c9f63fc3944d765bd372c273232e48b4ffe921f9e5548a46052b71629f8554f6854a15e79fe30d12d34f002a8fa2c896d52dcfaf5cae33af21e5edd041864bccd7535df3e69a92be8f8c469fd88fe9769b65364e18b8ab2225e3cd8525f886cf136e111f7810e43dd930cda3392bca8b74f2a584", 0x8f}, {0x0}], 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="2000000000000000c4e9b01402760000090009801000000000000000", @ANYRES32, @ANYBLOB="2000000000000000840000000200000006000a420200000000000080", @ANYRES32, @ANYBLOB="30000000000000008400000001000000d18bf7ff0c0000000080fffffbffffff020000000010000003000000", @ANYRES32=r6], 0x70, 0x4000}, 0x40) 43.217475123s ago: executing program 1 (id=176): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f0000000080)={0x1e, 0x1}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=@newtaction={0x56c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x558, 0x1, [@m_police={0x4c8, 0x1, 0x0, 0x0, {{0xb}, {0x49c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6}}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xdf}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff80000001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x9, 0x9898, 0x5, 0x6, 0x6, 0x3a, 0x4, 0x2, 0x9, 0x6, 0x7, 0x2d0, 0x2, 0xa531, 0x2, 0xfff, 0x3, 0xf, 0x6, 0xd, 0x800, 0x9, 0x53, 0xc, 0x1, 0x3, 0x2, 0x9a7d, 0x57, 0x7, 0x40, 0x253, 0xffff, 0xffff4f76, 0x3, 0x40, 0x8, 0xa, 0x5, 0x9, 0x1, 0x9, 0x6, 0x2, 0x0, 0x4, 0xfff, 0x3, 0x0, 0xb41, 0x80000000, 0x200, 0xf, 0xffff7fff, 0x0, 0xcbb80000, 0x7, 0xff, 0xa6e7, 0x8, 0x3, 0x6, 0x58, 0x2, 0xab, 0x9, 0x5, 0x400000, 0x47fcbcc5, 0x10, 0x3, 0x8, 0x7, 0x1, 0x0, 0x6, 0xad3, 0x737, 0x9, 0x2, 0x6, 0x3, 0x7, 0x80000000, 0x6, 0x200, 0x1, 0xfff, 0xffffffff, 0x3ff, 0x0, 0xfff, 0x9, 0xa1a1, 0x7, 0x1, 0x5, 0x4, 0x400, 0x391, 0x3, 0x7, 0xeac1, 0x8001, 0x7f, 0xfffffff9, 0x6, 0x7fff, 0x400, 0x2, 0xfffffffd, 0xfffff4e3, 0x8ce, 0x2, 0x6, 0x1, 0x7f, 0x8000, 0x9, 0x2, 0x9, 0x4, 0x6, 0xefd0, 0x6, 0x3, 0x8, 0x5, 0x8, 0xc, 0x8001, 0x7fffffff, 0x1, 0x2b3, 0x6, 0x8b, 0xfff, 0xd, 0x1, 0x2, 0x74, 0x3b, 0x5, 0x5, 0x3, 0x942, 0x6, 0x400, 0x4, 0x0, 0x8, 0x40, 0x0, 0x8e63, 0x6, 0xfffffffe, 0x9, 0xb, 0x6, 0x90a, 0x400, 0x2, 0x2, 0x5, 0xa720, 0x8001, 0x6, 0x7, 0x7, 0x4, 0xfffffff7, 0xf9d4, 0x76cd, 0x5, 0x4, 0x1000, 0xffffffff, 0x381, 0x12, 0x500, 0x1, 0x0, 0x2, 0x4, 0x8, 0x2, 0x3, 0x1b7a10f3, 0x256, 0x38000000, 0x2, 0xac, 0x9bcc, 0x9, 0x62, 0xffff899e, 0x4, 0x6, 0x40, 0x9, 0x7, 0x3, 0xd, 0x0, 0x9, 0x2, 0x100, 0x0, 0x9, 0x7f, 0x6, 0x80000001, 0x4, 0x400, 0x3, 0x2, 0x0, 0x0, 0x1, 0x3, 0xffff8001, 0x9, 0xfffffe00, 0x8, 0x6, 0x7, 0x1, 0xa0000000, 0x80, 0x2, 0x80000000, 0xc5be, 0x2, 0x1, 0x16, 0x0, 0x7, 0xfff, 0x5, 0x400, 0x10001, 0x6, 0x9, 0x7, 0xffffff79, 0x10001, 0x8001, 0x8, 0x7, 0x0, 0x0, 0x2, 0x3, 0x2, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xaf, 0x1, 0x20000000, 0x2d2f45bb, 0xaad1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x56c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 36.612322706s ago: executing program 33 (id=172): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket(0x11, 0x5, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000100)={&(0x7f0000000300), 0x0}) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), &(0x7f0000002940)=""/4112, 0x1010}) 35.389343018s ago: executing program 4 (id=180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0xb, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) gettid() read$msr(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r4, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES16], 0x150}, 0x1, 0x0, 0x0, 0x2000c894}, 0x4040084) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x11, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24080041}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x5, 0x1, 0x0, 0xfffffffffffffff8, 0x10}]}, &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f0000001b00)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 35.352640514s ago: executing program 0 (id=181): openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x8a042, 0x0) write$nbd(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01"], 0x40) creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x10000000008b}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@any, 0xffffffff}, @any, 0x7, 0x4, 0x40000, 0x7ffffffffffffffe, 0x7ffffffffffffffc, 0x0, 0x9}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) io_setup(0x83a9, &(0x7f0000000140)) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x32, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x800001}, {}, {0x1ff, 0x2}, {0x0, 0x5}, {}, {}, {}, {}, {0x0, 0xe68b}], 0xc, 0x0, 0x0, 0x0, 0x0, 0x500}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x2}}, 0x2e) 34.917072752s ago: executing program 3 (id=182): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000000440)=""/201, &(0x7f0000000200)=0xc9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0x8}, @void, @eth={@empty, @remote, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x147, 0x65, 0x0, 0x6, 0x6, 0x0, @multicast2, @private=0xa010101, {[@cipso={0x86, 0x10, 0xffffffffffffffff, [{0x6, 0xa, "6c742e16e8dbb2b8"}]}]}}, {{0x4e20, 0x4e24, r5, 0x41424344, 0x0, 0x0, 0x13, 0xc2, 0x1, 0x0, 0x3, {[@nop, @mss={0x2, 0x4, 0x6}, @window={0x3, 0x3, 0xc}, @window={0x3, 0x3}, @mptcp=@generic={0x48, 0x6, "4280edd4"}, @sack={0x5, 0x1a, [0x4, 0x8, 0x200, 0x71a, 0x6, 0x7fffffff]}, @timestamp={0x8, 0xa, 0xa, 0x6}]}}, {"92a6e458592eeeec1f91023ddc677c393994fadef86f7d47e7b8fd88c35d2a1539f05a9a44dda3833dab4bdfb615038a89bfd74fe6a228b8a91473eb9bed9db139391dc0670fd6a1fafd0a0bf1db0171a26846bb9d0b3d4388596ce8940b39ce055bc05d05c94e4a01659deea9f3900276471e42301a7dc6dfd88ceed1f52abef03ab816cf7bd31373ba8e7d9d54e950da84fb192fe0002037c1e17ea49f9d1143044eae53f021094e8f9986149243fd77fe0d7e0f1474ab139ba57472b6da70d36b6ec0bb505d1e6d3e2ed76ae3ae52adb0ab06dbb5b3"}}}}}}}, 0x15d) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @remote, 0x3}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40805) 29.550858706s ago: executing program 0 (id=183): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x16) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000400)={{}, 0x16, 0x1, 0x5}, 0x18) 29.547178606s ago: executing program 4 (id=184): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) syz_io_uring_setup(0x499, &(0x7f00000004c0)={0x0, 0x3355, 0x8, 0xffffffff, 0x288}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) io_setup(0x8, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x286}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) read$FUSE(r4, &(0x7f0000002200)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r6, 0x2594, 0x0, 0x8, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) clock_gettime(0x0, &(0x7f0000000280)) 24.74249379s ago: executing program 34 (id=176): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f0000000080)={0x1e, 0x1}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=@newtaction={0x56c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x558, 0x1, [@m_police={0x4c8, 0x1, 0x0, 0x0, {{0xb}, {0x49c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6}}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xdf}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff80000001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x9, 0x9898, 0x5, 0x6, 0x6, 0x3a, 0x4, 0x2, 0x9, 0x6, 0x7, 0x2d0, 0x2, 0xa531, 0x2, 0xfff, 0x3, 0xf, 0x6, 0xd, 0x800, 0x9, 0x53, 0xc, 0x1, 0x3, 0x2, 0x9a7d, 0x57, 0x7, 0x40, 0x253, 0xffff, 0xffff4f76, 0x3, 0x40, 0x8, 0xa, 0x5, 0x9, 0x1, 0x9, 0x6, 0x2, 0x0, 0x4, 0xfff, 0x3, 0x0, 0xb41, 0x80000000, 0x200, 0xf, 0xffff7fff, 0x0, 0xcbb80000, 0x7, 0xff, 0xa6e7, 0x8, 0x3, 0x6, 0x58, 0x2, 0xab, 0x9, 0x5, 0x400000, 0x47fcbcc5, 0x10, 0x3, 0x8, 0x7, 0x1, 0x0, 0x6, 0xad3, 0x737, 0x9, 0x2, 0x6, 0x3, 0x7, 0x80000000, 0x6, 0x200, 0x1, 0xfff, 0xffffffff, 0x3ff, 0x0, 0xfff, 0x9, 0xa1a1, 0x7, 0x1, 0x5, 0x4, 0x400, 0x391, 0x3, 0x7, 0xeac1, 0x8001, 0x7f, 0xfffffff9, 0x6, 0x7fff, 0x400, 0x2, 0xfffffffd, 0xfffff4e3, 0x8ce, 0x2, 0x6, 0x1, 0x7f, 0x8000, 0x9, 0x2, 0x9, 0x4, 0x6, 0xefd0, 0x6, 0x3, 0x8, 0x5, 0x8, 0xc, 0x8001, 0x7fffffff, 0x1, 0x2b3, 0x6, 0x8b, 0xfff, 0xd, 0x1, 0x2, 0x74, 0x3b, 0x5, 0x5, 0x3, 0x942, 0x6, 0x400, 0x4, 0x0, 0x8, 0x40, 0x0, 0x8e63, 0x6, 0xfffffffe, 0x9, 0xb, 0x6, 0x90a, 0x400, 0x2, 0x2, 0x5, 0xa720, 0x8001, 0x6, 0x7, 0x7, 0x4, 0xfffffff7, 0xf9d4, 0x76cd, 0x5, 0x4, 0x1000, 0xffffffff, 0x381, 0x12, 0x500, 0x1, 0x0, 0x2, 0x4, 0x8, 0x2, 0x3, 0x1b7a10f3, 0x256, 0x38000000, 0x2, 0xac, 0x9bcc, 0x9, 0x62, 0xffff899e, 0x4, 0x6, 0x40, 0x9, 0x7, 0x3, 0xd, 0x0, 0x9, 0x2, 0x100, 0x0, 0x9, 0x7f, 0x6, 0x80000001, 0x4, 0x400, 0x3, 0x2, 0x0, 0x0, 0x1, 0x3, 0xffff8001, 0x9, 0xfffffe00, 0x8, 0x6, 0x7, 0x1, 0xa0000000, 0x80, 0x2, 0x80000000, 0xc5be, 0x2, 0x1, 0x16, 0x0, 0x7, 0xfff, 0x5, 0x400, 0x10001, 0x6, 0x9, 0x7, 0xffffff79, 0x10001, 0x8001, 0x8, 0x7, 0x0, 0x0, 0x2, 0x3, 0x2, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xaf, 0x1, 0x20000000, 0x2d2f45bb, 0xaad1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x56c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 24.665772008s ago: executing program 0 (id=186): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x72) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000240)='qnx4\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000280)='./bus\x00', 0x2) chdir(&(0x7f0000000340)='./bus\x00') setpgid(0x0, r3) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x8001}, &(0x7f0000000640)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x22e}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000001c0)="a8f6cac1ec36fa43af044abc9c9b777a090d3b90264ba01f091bc4146547dec0011f53ef79fb674201bb9e0f018dd6eecbc127445168aef978db223e0123db69fe11191a2dff47cac9bbdf606f6bb2f9f8a3", 0x52}, {&(0x7f0000000340)="d79b78f6d92340b0dd3bcb35b1d93861daacc8e5cf1a1b519122b1c9f63fc3944d765bd372c273232e48b4ffe921f9e5548a46052b71629f8554f6854a15e79fe30d12d34f002a8fa2c896d52dcfaf5cae33af21e5edd041864bccd7535df3e69a92be8f8c469fd88fe9769b65364e18b8ab2225e3cd8525f886cf136e111f7810e43dd930cda3392bca8b74f2a584", 0x8f}, {0x0}], 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="2000000000000000c4e9b01402760000090009801000000000000000", @ANYRES32, @ANYBLOB="2000000000000000840000000200000006000a420200000000000080", @ANYRES32, @ANYBLOB="30000000000000008400000001000000d18bf7ff0c0000000080fffffbffffff020000000010000003000000", @ANYRES32=r6], 0x70, 0x4000}, 0x40) 21.921777711s ago: executing program 4 (id=187): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4b, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="11"], 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="11"], 0x11) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xf}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0xfb, &(0x7f0000000300)=""/251, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x25459, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r0, r3], 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000400)={r4, r10}) io_uring_setup(0x773d, 0x0) r11 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r11, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, &(0x7f00000005c0)) listen(r11, 0x4) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x6, 0x0, 0x5, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 20.331507497s ago: executing program 3 (id=188): openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) 18.588077915s ago: executing program 0 (id=189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xfffffffe, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0xfffffffd}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x2000000) lseek(0xffffffffffffffff, 0x6, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000003300010326bd7002fcdbdf2503000040ee1c63da125277f5d75a398f4364e8bd05c24f23a4145b5dbeb9b9b25a276354f0753aea773137b5da61532282371570272c15a8593031aad58b31ff5347b306a247a5482dca"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 17.867927553s ago: executing program 4 (id=190): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) syz_emit_ethernet(0x46, &(0x7f0000000cc0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x5, 0x1, 0x5}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) mknod$loop(&(0x7f0000000180)='.\x00', 0x0, 0x0) creat(0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x40000010) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) 16.172993448s ago: executing program 3 (id=191): r0 = syz_usb_connect(0x5, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xe, 0xde, 0x84, 0x20, 0x85a, 0x9, 0xa347, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xeb, 0x0, 0x0, 0x79, 0x16, 0xfd}}]}}]}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x4040021}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x1d}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x8000, 0x201, 0x1ff, 0x0, r2}, &(0x7f0000000440)=0x10) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x1e0, 0x4, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x7, 0x1, 0x2, 0x44, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xfa, 0xfa, 0x10}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2d, 0x4, 0x71}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0xb3, 0x3, 0x20, 0x3}, 0x61, &(0x7f0000000080)={0x5, 0xf, 0x61, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "9f6d4fdb759620f6306c4ca71dc13b81"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x4, 0xfff}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "7c4d47f8d521eb61c27ccbed25ee6e0d"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x6, 0x7}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x5, 0xf0f, 0x7f, [0xff0000, 0xffff00, 0x3f00, 0xc000, 0xff3fc0]}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41f}}, {0xac, &(0x7f0000000240)=@string={0xac, 0x3, "e44b53e9555bf7837aca31e0136a6f4b3b6a96ef506371344e01ceae74386c13790c6823b3dffe3a49e9bd9acb7b645312b2065ff1623c9f5e7636c1c833bbceeebac3486563acd3b12dc4770d55cd2e1cea88327df7a5097370ddcfb5ebfac7561bbc3e1a8f1825770020a5960dededac6397c22015268826fa0fd1046fc35ef2e024fd1c2f1323c2b67643ab6f1fb5801b3c01c6047e1afe37c755638ef5b50f8df2eafc3d332c8f7a"}}, {0x12, &(0x7f0000000180)=@string={0x12, 0x3, "25d67c96851f49ba11886336629b2f3a"}}]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 10.831776451s ago: executing program 4 (id=192): openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x8a042, 0x0) write$nbd(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01"], 0x40) creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x10000000008b}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@any, 0xffffffff}, @any, 0x7, 0x4, 0x40000, 0x7ffffffffffffffe, 0x7ffffffffffffffc, 0x0, 0x9}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) io_setup(0x83a9, &(0x7f0000000140)) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x32, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x800001}, {}, {0x1ff, 0x2}, {0x0, 0x5}, {}, {}, {}, {}, {0x0, 0xe68b}], 0xc, 0x0, 0x0, 0x0, 0x0, 0x500}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x2}}, 0x2e) 10.781416148s ago: executing program 3 (id=193): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e20, @private=0xa010101}}, 0x1000, 0x66, 0x9, 0x2, 0x41, 0xda9, 0x4}, 0x9c) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r5 = accept4(r1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) sendmmsg(r5, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073", 0x2}], 0x1}}], 0x1, 0x8810) sendmsg$alg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040001}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6c, @remote, 0x4e23, 0x4, 'wrr\x00', 0x14, 0xfffffff9, 0x56}, 0x2c) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0x980903, 0x3, @value=0x140000000000}) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x118, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x808}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x842}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x825}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x94}]}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x5}, 0xc045012) 10.132822779s ago: executing program 0 (id=194): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) syz_emit_ethernet(0x46, &(0x7f0000000cc0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x5, 0x1, 0x5}}}}}}, 0x0) mknod$loop(&(0x7f0000000180)='.\x00', 0x0, 0x0) creat(0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, &(0x7f0000001280), 0x6) 9.445999368s ago: executing program 3 (id=195): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) syz_io_uring_setup(0x499, &(0x7f00000004c0)={0x0, 0x3355, 0x8, 0xffffffff, 0x288}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) io_setup(0x8, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x286}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) read$FUSE(r4, &(0x7f0000002200)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r6, 0x2594, 0x0, 0x8, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) clock_gettime(0x0, &(0x7f0000000280)) 8.101172165s ago: executing program 0 (id=196): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x208100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000a40)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) socket$inet(0x2, 0x1, 0x100) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) shutdown(r0, 0x1) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 8.09960293s ago: executing program 4 (id=197): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x72) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000240)='qnx4\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000280)='./bus\x00', 0x2) chdir(&(0x7f0000000340)='./bus\x00') setpgid(0x0, r3) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x8001}, &(0x7f0000000640)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x22e}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000001c0)="a8f6cac1ec36fa43af044abc9c9b777a090d3b90264ba01f091bc4146547dec0011f53ef79fb674201bb9e0f018dd6eecbc127445168aef978db223e0123db69fe11191a2dff47cac9bbdf606f6bb2f9f8a3", 0x52}, {&(0x7f0000000340)="d79b78f6d92340b0dd3bcb35b1d93861daacc8e5cf1a1b519122b1c9f63fc3944d765bd372c273232e48b4ffe921f9e5548a46052b71629f8554f6854a15e79fe30d12d34f002a8fa2c896d52dcfaf5cae33af21e5edd041864bccd7535df3e69a92be8f8c469fd88fe9769b65364e18b8ab2225e3cd8525f886cf136e111f7810e43dd930cda3392bca8b74f2a584", 0x8f}, {0x0}], 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="2000000000000000c4e9b01402760000090009801000000000000000", @ANYRES32, @ANYBLOB="2000000000000000840000000200000006000a420200000000000080", @ANYRES32, @ANYBLOB="30000000000000008400000001000000d18bf7ff0c0000000080fffffbffffff020000000010000003000000", @ANYRES32=r6], 0x70, 0x4000}, 0x40) 0s ago: executing program 3 (id=198): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a38d", 0x2) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x2c, 0xffffffff, 0x2}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0x7f, "4bcc0be0e03a712586a8e047aafb93e52bd0abd880487a5f8faaf4d75516d38cd1cc4100635c26c7e0e8f3d8104b63a2090b88094f6135ae4822ca5e367d1f14b313009b96cf979c33003a2d609df1dbcf66a360b1086e80978ba458c25881524c800128ba768e8a47a0567ddd42afac2f35391bef465ba31e67f71e4c9ce0"}, &(0x7f00000003c0)=0x87) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e21, 0xffff0001, @private2, 0x12e1}}, 0x2, 0x9}, 0x90) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.52' (ED25519) to the list of known hosts. [ 88.816999][ T5812] cgroup: Unknown subsys name 'net' [ 88.990761][ T5812] cgroup: Unknown subsys name 'cpuset' [ 89.000531][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.693345][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.001012][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.010952][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.021638][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.022402][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.029475][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.044951][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.045213][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.053219][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.067859][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.075664][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.077358][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.083299][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.097293][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.106273][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.106494][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.120999][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.133832][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.141108][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.143581][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.152910][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.164374][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.177419][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.185412][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.192882][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.200785][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.932752][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 95.977504][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 96.023420][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 96.168158][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 96.184936][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 96.259213][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.266822][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.274322][ T5829] bridge_slave_0: entered allmulticast mode [ 96.282416][ T5829] bridge_slave_0: entered promiscuous mode [ 96.321611][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.329198][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.336456][ T5829] bridge_slave_1: entered allmulticast mode [ 96.344470][ T5829] bridge_slave_1: entered promiscuous mode [ 96.501576][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.511151][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.519485][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.527759][ T5831] bridge_slave_0: entered allmulticast mode [ 96.535081][ T5831] bridge_slave_0: entered promiscuous mode [ 96.571299][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.581471][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.589372][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.597921][ T5831] bridge_slave_1: entered allmulticast mode [ 96.606185][ T5831] bridge_slave_1: entered promiscuous mode [ 96.629062][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.636259][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.643975][ T5823] bridge_slave_0: entered allmulticast mode [ 96.651918][ T5823] bridge_slave_0: entered promiscuous mode [ 96.661222][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.668524][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.676023][ T5823] bridge_slave_1: entered allmulticast mode [ 96.684943][ T5823] bridge_slave_1: entered promiscuous mode [ 96.811916][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.837311][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.844561][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.852508][ T5832] bridge_slave_0: entered allmulticast mode [ 96.860075][ T5832] bridge_slave_0: entered promiscuous mode [ 96.868965][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.876140][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.883490][ T5832] bridge_slave_1: entered allmulticast mode [ 96.892178][ T5832] bridge_slave_1: entered promiscuous mode [ 96.899100][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.906377][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.914025][ T5826] bridge_slave_0: entered allmulticast mode [ 96.922086][ T5826] bridge_slave_0: entered promiscuous mode [ 96.932463][ T5829] team0: Port device team_slave_0 added [ 96.942186][ T5829] team0: Port device team_slave_1 added [ 96.951837][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.978926][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.003752][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.011401][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.018907][ T5826] bridge_slave_1: entered allmulticast mode [ 97.026235][ T5826] bridge_slave_1: entered promiscuous mode [ 97.078668][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.132642][ T5831] team0: Port device team_slave_0 added [ 97.143069][ T5831] team0: Port device team_slave_1 added [ 97.183118][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.195124][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.209153][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.218800][ T5828] Bluetooth: hci3: command tx timeout [ 97.225885][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.233942][ T5144] Bluetooth: hci0: command tx timeout [ 97.238185][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.240019][ T5828] Bluetooth: hci2: command tx timeout [ 97.271248][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.284215][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.291472][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.317890][ T5144] Bluetooth: hci1: command tx timeout [ 97.318648][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.324243][ T5828] Bluetooth: hci4: command tx timeout [ 97.364097][ T5823] team0: Port device team_slave_0 added [ 97.373885][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.398225][ T43] cfg80211: failed to load regulatory.db [ 97.447389][ T5826] team0: Port device team_slave_0 added [ 97.469154][ T5823] team0: Port device team_slave_1 added [ 97.499600][ T5832] team0: Port device team_slave_0 added [ 97.510069][ T5826] team0: Port device team_slave_1 added [ 97.533209][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.540720][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.569168][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.622867][ T5832] team0: Port device team_slave_1 added [ 97.659752][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.666962][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.693195][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.705125][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.712774][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.739248][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.752190][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.759268][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.785751][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.830011][ T5829] hsr_slave_0: entered promiscuous mode [ 97.836832][ T5829] hsr_slave_1: entered promiscuous mode [ 97.874530][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.882242][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.908614][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.921306][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.928520][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.954869][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.979515][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.986511][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.015685][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.029368][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.036348][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.063036][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.170185][ T5831] hsr_slave_0: entered promiscuous mode [ 98.178253][ T5831] hsr_slave_1: entered promiscuous mode [ 98.184873][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.193190][ T5831] Cannot create hsr debugfs directory [ 98.252534][ T5823] hsr_slave_0: entered promiscuous mode [ 98.260230][ T5823] hsr_slave_1: entered promiscuous mode [ 98.266489][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.275043][ T5823] Cannot create hsr debugfs directory [ 98.321583][ T5826] hsr_slave_0: entered promiscuous mode [ 98.328614][ T5826] hsr_slave_1: entered promiscuous mode [ 98.334908][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.342975][ T5826] Cannot create hsr debugfs directory [ 98.384578][ T5832] hsr_slave_0: entered promiscuous mode [ 98.392032][ T5832] hsr_slave_1: entered promiscuous mode [ 98.398503][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.406101][ T5832] Cannot create hsr debugfs directory [ 98.959743][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.973262][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.995626][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.007789][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.097494][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.112730][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.124421][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.138147][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.239516][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.252814][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.265517][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.296982][ T5828] Bluetooth: hci2: command tx timeout [ 99.298648][ T5144] Bluetooth: hci0: command tx timeout [ 99.302493][ T5843] Bluetooth: hci3: command tx timeout [ 99.313071][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.378080][ T5828] Bluetooth: hci1: command tx timeout [ 99.384137][ T5843] Bluetooth: hci4: command tx timeout [ 99.404954][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.423038][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.435386][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.464171][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.582810][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.614253][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.624011][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.637963][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.663708][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.731317][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.756176][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.808923][ T3868] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.816400][ T3868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.838038][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.862847][ T3868] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.870323][ T3868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.916227][ T3868] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.923626][ T3868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.941646][ T3868] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.948943][ T3868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.989533][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.003107][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.131241][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.150250][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.173173][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.180399][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.219043][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.226649][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.272157][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.299327][ T3868] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.307044][ T3868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.349223][ T3868] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.356644][ T3868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.413548][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.492094][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.499461][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.571462][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.578771][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.722974][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.762079][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.905928][ T5829] veth0_vlan: entered promiscuous mode [ 100.965396][ T5829] veth1_vlan: entered promiscuous mode [ 101.130461][ T5829] veth0_macvtap: entered promiscuous mode [ 101.235427][ T5829] veth1_macvtap: entered promiscuous mode [ 101.319559][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.339943][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.389759][ T5843] Bluetooth: hci0: command tx timeout [ 101.395329][ T5843] Bluetooth: hci3: command tx timeout [ 101.402043][ T5828] Bluetooth: hci2: command tx timeout [ 101.412753][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.427938][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.440988][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.450945][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.460639][ T5843] Bluetooth: hci4: command tx timeout [ 101.466128][ T5843] Bluetooth: hci1: command tx timeout [ 101.472959][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.482062][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.548375][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.655540][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.674185][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.759967][ T5832] veth0_vlan: entered promiscuous mode [ 101.768236][ T5831] veth0_vlan: entered promiscuous mode [ 101.783999][ T5936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.797697][ T5936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.828092][ T5832] veth1_vlan: entered promiscuous mode [ 101.839743][ T5826] veth0_vlan: entered promiscuous mode [ 101.856300][ T5823] veth0_vlan: entered promiscuous mode [ 101.866402][ T5831] veth1_vlan: entered promiscuous mode [ 101.907602][ T5826] veth1_vlan: entered promiscuous mode [ 101.933736][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.944592][ T5823] veth1_vlan: entered promiscuous mode [ 101.976496][ T5832] veth0_macvtap: entered promiscuous mode [ 102.055423][ T5832] veth1_macvtap: entered promiscuous mode [ 102.130242][ T5831] veth0_macvtap: entered promiscuous mode [ 102.141941][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.159574][ T5826] veth0_macvtap: entered promiscuous mode [ 102.175838][ T5831] veth1_macvtap: entered promiscuous mode [ 102.191771][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.207088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.216200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.227401][ T5823] veth0_macvtap: entered promiscuous mode [ 102.251772][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.265530][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.276217][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.285151][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.296209][ T5826] veth1_macvtap: entered promiscuous mode [ 102.309517][ T5823] veth1_macvtap: entered promiscuous mode [ 102.332133][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.361507][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.391880][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.404506][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.413733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.423877][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.433805][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.442990][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.472274][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.504755][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.522538][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.532202][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.543957][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.560175][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.594392][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.637919][ T5936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.655175][ T5936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.685720][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.699850][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.708802][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.717733][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.788741][ T3868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.821798][ T3868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.866435][ T3868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.880037][ T3868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.903824][ T30] audit: type=1326 audit(1749482855.280:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5944 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cb78e929 code=0x7fc00000 [ 103.084152][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.131405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.375538][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.457200][ T5828] Bluetooth: hci3: command tx timeout [ 103.462958][ T5144] Bluetooth: hci2: command tx timeout [ 103.469808][ T5843] Bluetooth: hci0: command tx timeout [ 103.537680][ T5144] Bluetooth: hci4: command tx timeout [ 103.545206][ T5843] Bluetooth: hci1: command tx timeout [ 103.579630][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.643520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.652696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.741478][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.750760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.778501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 103.792419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.005803][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.030256][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.039386][ T5956] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 104.061643][ T5956] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 104.150665][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.182283][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.247992][ T5959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.305894][ T3012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.323474][ T3012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.347046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.002510][ T5981] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.459838][ T5992] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.531187][ T5996] Bluetooth: MGMT ver 1.23 [ 106.557068][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.236858][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 108.263873][ T24] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 109.085185][ T24] usb 1-1: config 0 has no interface number 0 [ 109.116418][ T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 109.128157][ T1211] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.167722][ T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 109.252457][ T24] usb 1-1: string descriptor 0 read error: -71 [ 109.291056][ T24] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 109.354302][ T24] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 109.407128][ T24] usb 1-1: config 0 descriptor?? [ 109.440957][ T24] usb 1-1: can't set config #0, error -71 [ 109.486106][ T24] usb 1-1: USB disconnect, device number 2 [ 109.778342][ T6018] fuse: Unknown parameter '0000000000000000000000300000000000000000000003' [ 109.820001][ T6018] fuse: Bad value for 'user_id' [ 109.837087][ T6018] fuse: Bad value for 'user_id' [ 109.864880][ T6019] netlink: 'syz.4.20': attribute type 11 has an invalid length. [ 110.533602][ T6027] Cannot find map_set index 0 as target [ 110.592885][ T6027] Cannot find set identified by id 0 to match [ 111.088024][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.167415][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.204162][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.316865][ T24] usb 1-1: device descriptor read/64, error -71 [ 112.895788][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.400758][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.557967][ T6050] FAULT_INJECTION: forcing a failure. [ 114.557967][ T6050] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.656314][ T6050] CPU: 1 UID: 0 PID: 6050 Comm: syz.3.28 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 114.656345][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.656363][ T6050] Call Trace: [ 114.656376][ T6050] [ 114.656386][ T6050] dump_stack_lvl+0x189/0x250 [ 114.656431][ T6050] ? irqentry_exit+0x74/0x90 [ 114.656465][ T6050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.656516][ T6050] should_fail_ex+0x414/0x560 [ 114.656551][ T6050] _copy_from_user+0x2d/0xb0 [ 114.656572][ T6050] ___sys_sendmsg+0x158/0x2a0 [ 114.656601][ T6050] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.656663][ T6050] ? __fget_files+0x2a/0x420 [ 114.656691][ T6050] ? __fget_files+0x3a0/0x420 [ 114.656729][ T6050] __x64_sys_sendmsg+0x19b/0x260 [ 114.656757][ T6050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.656794][ T6050] ? rcu_is_watching+0x15/0xb0 [ 114.656830][ T6050] ? do_syscall_64+0xbe/0x3b0 [ 114.656853][ T6050] do_syscall_64+0xfa/0x3b0 [ 114.656870][ T6050] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.656900][ T6050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.656921][ T6050] ? clear_bhb_loop+0x60/0xb0 [ 114.656948][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.656967][ T6050] RIP: 0033:0x7fa4cb78e929 [ 114.656994][ T6050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.657011][ T6050] RSP: 002b:00007fa4cc6c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.657033][ T6050] RAX: ffffffffffffffda RBX: 00007fa4cb9b5fa0 RCX: 00007fa4cb78e929 [ 114.657047][ T6050] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 114.657060][ T6050] RBP: 00007fa4cc6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 114.657072][ T6050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.657084][ T6050] R13: 0000000000000000 R14: 00007fa4cb9b5fa0 R15: 00007ffdf963c1e8 [ 114.657116][ T6050] [ 114.852980][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.139429][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.152503][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.166702][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.240405][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.313447][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.576439][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.724582][ T6064] sctp: [Deprecated]: syz.1.31 (pid 6064) Use of int in max_burst socket option deprecated. [ 115.724582][ T6064] Use struct sctp_assoc_value instead [ 117.506014][ T6078] FAULT_INJECTION: forcing a failure. [ 117.506014][ T6078] name failslab, interval 1, probability 0, space 0, times 0 [ 117.537073][ T5144] Bluetooth: hci1: command tx timeout [ 117.543418][ T6078] CPU: 0 UID: 0 PID: 6078 Comm: syz.1.35 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 117.543447][ T6078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.543460][ T6078] Call Trace: [ 117.543467][ T6078] [ 117.543476][ T6078] dump_stack_lvl+0x189/0x250 [ 117.543510][ T6078] ? __pfx____ratelimit+0x10/0x10 [ 117.543537][ T6078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.543562][ T6078] ? __pfx__printk+0x10/0x10 [ 117.543584][ T6078] ? __pfx___might_resched+0x10/0x10 [ 117.543610][ T6078] ? fs_reclaim_acquire+0x7d/0x100 [ 117.543639][ T6078] should_fail_ex+0x414/0x560 [ 117.543666][ T6078] should_failslab+0xa8/0x100 [ 117.543691][ T6078] __kmalloc_cache_noprof+0x70/0x3d0 [ 117.543712][ T6078] ? cgw_create_job+0x1ee/0xca0 [ 117.543732][ T6078] cgw_create_job+0x1ee/0xca0 [ 117.543748][ T6078] ? __pfx___mutex_lock+0x10/0x10 [ 117.543770][ T6078] ? __pfx_cgw_create_job+0x10/0x10 [ 117.543793][ T6078] ? __pfx_cgw_create_job+0x10/0x10 [ 117.543808][ T6078] rtnetlink_rcv_msg+0x77c/0xb70 [ 117.543831][ T6078] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 117.543847][ T6078] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.543863][ T6078] ? ref_tracker_free+0x63a/0x7d0 [ 117.543885][ T6078] ? __copy_skb_header+0xa7/0x550 [ 117.543910][ T6078] ? __pfx_ref_tracker_free+0x10/0x10 [ 117.543943][ T6078] ? __skb_clone+0x63/0x7a0 [ 117.543972][ T6078] netlink_rcv_skb+0x208/0x470 [ 117.543994][ T6078] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.544013][ T6078] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.544043][ T6078] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.544063][ T6078] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.544087][ T6078] netlink_unicast+0x75b/0x8d0 [ 117.544114][ T6078] netlink_sendmsg+0x805/0xb30 [ 117.544143][ T6078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.544171][ T6078] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.544193][ T6078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.544215][ T6078] __sock_sendmsg+0x219/0x270 [ 117.544245][ T6078] ____sys_sendmsg+0x505/0x830 [ 117.544272][ T6078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.544302][ T6078] ? import_iovec+0x74/0xa0 [ 117.544322][ T6078] ___sys_sendmsg+0x21f/0x2a0 [ 117.544346][ T6078] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.544403][ T6078] ? __fget_files+0x2a/0x420 [ 117.544426][ T6078] ? __fget_files+0x3a0/0x420 [ 117.544458][ T6078] __x64_sys_sendmsg+0x19b/0x260 [ 117.544482][ T6078] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.544512][ T6078] ? __pfx_ksys_write+0x10/0x10 [ 117.544530][ T6078] ? rcu_is_watching+0x15/0xb0 [ 117.544560][ T6078] ? do_syscall_64+0xbe/0x3b0 [ 117.544579][ T6078] do_syscall_64+0xfa/0x3b0 [ 117.544601][ T6078] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.544626][ T6078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.544643][ T6078] ? clear_bhb_loop+0x60/0xb0 [ 117.544664][ T6078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.544682][ T6078] RIP: 0033:0x7f00fe38e929 [ 117.544697][ T6078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.544712][ T6078] RSP: 002b:00007f00ff1fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.544731][ T6078] RAX: ffffffffffffffda RBX: 00007f00fe5b5fa0 RCX: 00007f00fe38e929 [ 117.544744][ T6078] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 117.544754][ T6078] RBP: 00007f00ff1fb090 R08: 0000000000000000 R09: 0000000000000000 [ 117.544765][ T6078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.544775][ T6078] R13: 0000000000000000 R14: 00007f00fe5b5fa0 R15: 00007ffc1d8bbcb8 [ 117.544801][ T6078] [ 118.548759][ T36] bridge_slave_1: left allmulticast mode [ 118.554768][ T36] bridge_slave_1: left promiscuous mode [ 118.568906][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.574448][ T36] bridge_slave_0: left allmulticast mode [ 119.580555][ T36] bridge_slave_0: left promiscuous mode [ 119.586424][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.618904][ T5144] Bluetooth: hci1: command tx timeout [ 121.116080][ T6097] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 121.697517][ T5144] Bluetooth: hci1: command tx timeout [ 121.861950][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.927833][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.961623][ T36] bond0 (unregistering): Released all slaves [ 122.368963][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 122.381029][ T6102] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 122.417062][ T6117] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 122.438621][ T6117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.458460][ T6102] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 122.845977][ T6058] chnl_net:caif_netlink_parms(): no params data found [ 123.396995][ T6136] netlink: 'syz.0.47': attribute type 11 has an invalid length. [ 123.776657][ T5144] Bluetooth: hci1: command tx timeout [ 124.106056][ T6135] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 124.344676][ T6135] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 126.106827][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.148344][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.178309][ T6058] bridge_slave_0: entered allmulticast mode [ 126.185709][ T6058] bridge_slave_0: entered promiscuous mode [ 126.430666][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 126.849713][ T36] hsr_slave_0: left promiscuous mode [ 126.941754][ T36] hsr_slave_1: left promiscuous mode [ 126.948943][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.973628][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.986771][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.007263][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.101597][ T36] veth1_macvtap: left promiscuous mode [ 127.166918][ T36] veth0_macvtap: left promiscuous mode [ 127.173081][ T36] veth1_vlan: left promiscuous mode [ 127.206849][ T1220] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.238285][ T36] veth0_vlan: left promiscuous mode [ 128.345907][ T1220] usb 2-1: config 0 has no interfaces? [ 128.589554][ T1220] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 128.611301][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.646324][ T1220] usb 2-1: Product: syz [ 128.667080][ T1220] usb 2-1: Manufacturer: syz [ 128.671945][ T1220] usb 2-1: SerialNumber: syz [ 128.718514][ T1220] usb 2-1: config 0 descriptor?? [ 128.828696][ T6166] sctp: failed to load transform for md5: -2 [ 129.255746][ T36] team0 (unregistering): Port device team_slave_1 removed [ 129.295601][ T36] team0 (unregistering): Port device team_slave_0 removed [ 129.683088][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.721467][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.748760][ T6058] bridge_slave_1: entered allmulticast mode [ 129.766414][ T6058] bridge_slave_1: entered promiscuous mode [ 129.872645][ T9] usb 2-1: USB disconnect, device number 2 [ 130.122899][ T6058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.190539][ T6058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.286871][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.398251][ T6058] team0: Port device team_slave_0 added [ 130.425167][ T6058] team0: Port device team_slave_1 added [ 130.466997][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 130.476259][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=99.db [ 130.510184][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.546149][ T24] usb 1-1: config 0 descriptor?? [ 130.601198][ T24] pwc: Logitech ViewPort AV 100 webcam detected. [ 130.654616][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.702332][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.796811][ T6058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.839678][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.866604][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.956819][ T6058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.034497][ T24] pwc: send_video_command error -71 [ 131.041010][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 131.057436][ T24] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 131.112719][ T24] usb 1-1: USB disconnect, device number 5 [ 131.656448][ T6058] hsr_slave_0: entered promiscuous mode [ 131.728164][ T6058] hsr_slave_1: entered promiscuous mode [ 131.769858][ T6058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.843036][ T6058] Cannot create hsr debugfs directory [ 131.897020][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.966634][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.158849][ T6215] netlink: 'syz.0.60': attribute type 11 has an invalid length. [ 132.177213][ T24] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 132.188710][ T9] usb 4-1: device descriptor read/64, error -71 [ 132.236463][ T24] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 132.342915][ T24] usb 5-1: Manufacturer: syz [ 132.434016][ T24] usb 5-1: config 0 descriptor?? [ 132.487688][ T24] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 132.559801][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.607348][ T24] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 132.710274][ T24] usb 5-1: USB disconnect, device number 2 [ 132.736913][ T9] usb 4-1: device descriptor read/64, error -71 [ 132.769920][ T24] ftdi_sio 5-1:0.0: device disconnected [ 132.855034][ T9] usb usb4-port1: attempt power cycle [ 133.220479][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.305405][ T6058] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.331585][ T6058] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.391008][ T6058] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.431247][ T6058] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.466837][ T9] usb 4-1: device not accepting address 5, error -71 [ 134.697773][ T6058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.814758][ T6058] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.928019][ T3868] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.935441][ T3868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.333990][ T6260] ALSA: mixer_oss: invalid OSS volume '' [ 135.335843][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.347196][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.417543][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.424535][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.873158][ T6283] netlink: 120 bytes leftover after parsing attributes in process `syz.0.70'. [ 140.475479][ T6058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.396505][ T6058] veth0_vlan: entered promiscuous mode [ 143.441792][ T6058] veth1_vlan: entered promiscuous mode [ 143.603370][ T6058] veth0_macvtap: entered promiscuous mode [ 143.672686][ T6058] veth1_macvtap: entered promiscuous mode [ 143.759662][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.791290][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.808976][ T6058] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.809047][ T6058] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.809078][ T6058] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.809108][ T6058] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.861398][ T1220] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.002239][ T6327] delete_channel: no stack [ 144.006755][ T1220] usb 4-1: Using ep0 maxpacket: 32 [ 144.008969][ T1220] usb 4-1: config 0 interface 0 has no altsetting 0 [ 144.012394][ T1220] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 144.012425][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.012446][ T1220] usb 4-1: Product: syz [ 144.012462][ T1220] usb 4-1: Manufacturer: syz [ 144.012478][ T1220] usb 4-1: SerialNumber: syz [ 144.030451][ T1220] usb 4-1: config 0 descriptor?? [ 144.035445][ T1220] gs_usb 4-1:0.0: Required endpoints not found [ 144.205921][ T3868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.205962][ T3868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.280837][ T6342] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.340146][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.340173][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.378733][ T1220] usb 4-1: USB disconnect, device number 7 [ 144.742433][ T6349] tty tty4: ldisc open failed (-12), clearing slot 3 [ 145.391322][ T6362] IPVS: Scheduler module ip_vs_ not found [ 148.753385][ T6391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.973794][ T6391] bond0: (slave rose0): Enslaving as an active interface with an up link [ 150.201775][ T6401] input: syz0 as /devices/virtual/input/input5 [ 154.676178][ T6428] netlink: 'syz.4.98': attribute type 11 has an invalid length. [ 157.822174][ T6456] netlink: 'syz.3.104': attribute type 11 has an invalid length. [ 160.607644][ T6475] FAULT_INJECTION: forcing a failure. [ 160.607644][ T6475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.677286][ T6475] CPU: 1 UID: 0 PID: 6475 Comm: syz.4.110 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 160.677318][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.677331][ T6475] Call Trace: [ 160.677340][ T6475] [ 160.677349][ T6475] dump_stack_lvl+0x189/0x250 [ 160.677393][ T6475] ? __pfx____ratelimit+0x10/0x10 [ 160.677425][ T6475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.677457][ T6475] ? __pfx__printk+0x10/0x10 [ 160.677479][ T6475] ? __might_fault+0xb0/0x130 [ 160.677516][ T6475] should_fail_ex+0x414/0x560 [ 160.677550][ T6475] _copy_from_user+0x2d/0xb0 [ 160.677572][ T6475] ___sys_sendmsg+0x158/0x2a0 [ 160.677602][ T6475] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.677666][ T6475] ? __fget_files+0x2a/0x420 [ 160.677704][ T6475] ? __fget_files+0x3a0/0x420 [ 160.677744][ T6475] __x64_sys_sendmsg+0x19b/0x260 [ 160.677775][ T6475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.677821][ T6475] ? __pfx_ksys_write+0x10/0x10 [ 160.677847][ T6475] ? rcu_is_watching+0x15/0xb0 [ 160.677899][ T6475] ? do_syscall_64+0xbe/0x3b0 [ 160.677923][ T6475] do_syscall_64+0xfa/0x3b0 [ 160.677940][ T6475] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.677971][ T6475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.677992][ T6475] ? clear_bhb_loop+0x60/0xb0 [ 160.678018][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.678039][ T6475] RIP: 0033:0x7f643df8e929 [ 160.678059][ T6475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.678077][ T6475] RSP: 002b:00007f643edeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.678100][ T6475] RAX: ffffffffffffffda RBX: 00007f643e1b5fa0 RCX: 00007f643df8e929 [ 160.678116][ T6475] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 160.678130][ T6475] RBP: 00007f643edeb090 R08: 0000000000000000 R09: 0000000000000000 [ 160.678143][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.678155][ T6475] R13: 0000000000000000 R14: 00007f643e1b5fa0 R15: 00007ffc97fcb018 [ 160.678186][ T6475] [ 162.457156][ T6493] Illegal XDP return value 3494302195 on prog (id 26) dev N/A, expect packet loss! [ 162.527303][ T6498] rdma_op ffff8880284da9f0 conn xmit_rdma 0000000000000000 [ 164.566770][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 164.799177][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 164.845775][ T9] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 164.886936][ T5943] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 164.945966][ T9] usb 4-1: config 0 has no interface number 0 [ 165.010264][ T9] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.081515][ T5943] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 165.166687][ T5943] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 165.174963][ T9] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 165.254877][ T5943] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 165.295145][ T9] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 165.319551][ T5943] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 165.337373][ T9] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 165.354313][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 165.366060][ T9] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.366465][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 165.366494][ T5943] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 165.417201][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 165.439348][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.439379][ T9] usb 4-1: Product: syz [ 165.439396][ T9] usb 4-1: Manufacturer: syz [ 165.439412][ T9] usb 4-1: SerialNumber: syz [ 165.442718][ T9] usb 4-1: config 0 descriptor?? [ 165.456745][ T5943] usb 5-1: string descriptor 0 read error: -22 [ 165.456949][ T5943] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 165.456975][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.464239][ T5943] usb 5-1: config 0 descriptor?? [ 165.468031][ T6521] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 165.474157][ T5943] hub 5-1:0.0: bad descriptor, ignoring hub [ 165.586689][ T5943] hub 5-1:0.0: probe with driver hub failed with error -5 [ 165.599198][ T5943] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 165.847602][ T6521] misc userio: Can't change port type on an already running userio instance [ 165.869460][ T1211] usb 5-1: USB disconnect, device number 3 [ 165.869574][ C0] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -19 [ 166.500129][ T6538] netlink: 'syz.0.123': attribute type 11 has an invalid length. [ 167.483203][ T9] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 167.618949][ T9] usb 4-1: USB disconnect, device number 8 [ 168.468526][ T6558] loop6: detected capacity change from 0 to 524287999 [ 168.511168][ T6558] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.528011][ T6558] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.879915][ T6558] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.898115][ T6558] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.907446][ T6558] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.924156][ T6558] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.928402][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 168.932386][ T6558] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.963300][ T6558] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.976671][ T6558] ldm_validate_partition_table(): Disk read failed. [ 169.007123][ T6558] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.016688][ T6558] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.058675][ T6558] Dev loop6: unable to read RDB block 0 [ 169.166821][ T6558] loop6: unable to read partition table [ 169.179605][ T6558] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 170.439206][ T30] audit: type=1326 audit(1749482922.810:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6569 comm="syz.0.132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f908298e929 code=0x0 [ 170.570408][ T6575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.131'. [ 170.661525][ T6575] Zero length message leads to an empty skb [ 173.384047][ T6611] vivid-000: disconnect [ 174.561765][ T6007] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 175.265724][ T6606] vivid-000: reconnect [ 186.763250][ T6641] FAULT_INJECTION: forcing a failure. [ 186.763250][ T6641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.776619][ T6641] CPU: 1 UID: 0 PID: 6641 Comm: syz.1.150 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 186.776646][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.776658][ T6641] Call Trace: [ 186.776666][ T6641] [ 186.776676][ T6641] dump_stack_lvl+0x189/0x250 [ 186.776729][ T6641] ? __pfx____ratelimit+0x10/0x10 [ 186.776761][ T6641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.776790][ T6641] ? __pfx__printk+0x10/0x10 [ 186.776808][ T6641] ? do_raw_spin_lock+0x121/0x290 [ 186.776848][ T6641] should_fail_ex+0x414/0x560 [ 186.776881][ T6641] strncpy_from_user+0x36/0x290 [ 186.776911][ T6641] strncpy_from_user_nofault+0x72/0x150 [ 186.776944][ T6641] bpf_bprintf_prepare+0xc59/0x1450 [ 186.776980][ T6641] ? __lock_acquire+0xab9/0xd20 [ 186.777009][ T6641] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 186.777037][ T6641] ? try_charge_memcg+0x22a/0x1290 [ 186.777065][ T6641] ? bpf_trace_printk+0xc1/0x190 [ 186.777103][ T6641] bpf_trace_printk+0xdb/0x190 [ 186.777133][ T6641] ? __lock_acquire+0xab9/0xd20 [ 186.777162][ T6641] ? __pfx_bpf_trace_printk+0x10/0x10 [ 186.777196][ T6641] ? bpf_trace_run2+0x186/0x4b0 [ 186.777238][ T6641] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 186.777265][ T6641] bpf_trace_run2+0x281/0x4b0 [ 186.777290][ T6641] ? bpf_trace_run2+0x186/0x4b0 [ 186.777316][ T6641] ? __pfx_bpf_trace_run2+0x10/0x10 [ 186.777341][ T6641] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 186.777370][ T6641] ? ida_alloc_range+0x7a6/0x840 [ 186.777400][ T6641] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.777433][ T6641] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 186.777462][ T6641] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 186.777492][ T6641] ? ida_alloc_range+0x7a6/0x840 [ 186.777522][ T6641] kfree+0x3a0/0x440 [ 186.777556][ T6641] ida_alloc_range+0x7a6/0x840 [ 186.777603][ T6641] ? __pfx_ida_alloc_range+0x10/0x10 [ 186.777646][ T6641] ? pgd_alloc+0x358/0x570 [ 186.777681][ T6641] mm_init+0x66d/0xf00 [ 186.777722][ T6641] ? __asan_memset+0x22/0x50 [ 186.777748][ T6641] alloc_bprm+0x378/0x5b0 [ 186.777777][ T6641] do_execveat_common+0x1b3/0x6a0 [ 186.777815][ T6641] __x64_sys_execveat+0xc4/0xe0 [ 186.777844][ T6641] do_syscall_64+0xfa/0x3b0 [ 186.777862][ T6641] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.777893][ T6641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.777913][ T6641] ? clear_bhb_loop+0x60/0xb0 [ 186.777940][ T6641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.777961][ T6641] RIP: 0033:0x7f00fe38e929 [ 186.777979][ T6641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.777997][ T6641] RSP: 002b:00007f00ff1fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 186.778026][ T6641] RAX: ffffffffffffffda RBX: 00007f00fe5b5fa0 RCX: 00007f00fe38e929 [ 186.778041][ T6641] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 186.778054][ T6641] RBP: 00007f00ff1fb090 R08: 0000000000001000 R09: 0000000000000000 [ 186.778067][ T6641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.778079][ T6641] R13: 0000000000000000 R14: 00007f00fe5b5fa0 R15: 00007ffc1d8bbcb8 [ 186.778112][ T6641] [ 186.778681][ T6641] process 'syz.1.150' launched '/dev/fd/7' with NULL argv: empty string added [ 199.857326][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.863836][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.539713][ T6692] netlink: 'syz.5.162': attribute type 11 has an invalid length. [ 202.901767][ T6695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.491146][ T6691] netlink: 'syz.0.163': attribute type 11 has an invalid length. [ 209.576525][ C0] sched: DL replenish lagged too much [ 212.399135][ T6724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.170'. [ 214.525819][ T5902] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 217.231180][ T6740] delete_channel: no stack [ 222.499718][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 222.506045][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 222.512619][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 222.518348][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 226.628426][ T6749] netlink: 'syz.0.175': attribute type 11 has an invalid length. [ 232.920818][ T6765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.180'. [ 235.440210][ T6773] syz.3.182 uses obsolete (PF_INET,SOCK_PACKET) [ 238.796778][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 242.054332][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.064414][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.073211][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.082238][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.091648][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.426802][ T5828] Bluetooth: hci5: command tx timeout [ 246.496972][ T5828] Bluetooth: hci5: command tx timeout [ 247.824634][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.911591][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 248.038088][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 248.121328][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 248.165498][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.576824][ T5841] Bluetooth: hci5: command tx timeout [ 250.256702][ T5841] Bluetooth: hci1: command tx timeout [ 250.671930][ T5841] Bluetooth: hci5: command tx timeout [ 252.351305][ T5841] Bluetooth: hci1: command tx timeout [ 253.689367][ T3868] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.417962][ T5841] Bluetooth: hci1: command tx timeout [ 256.496729][ T5841] Bluetooth: hci1: command tx timeout [ 262.097356][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.103914][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.756460][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 395.763669][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6829/1:b..l [ 395.772049][ C0] rcu: (detected by 0, t=10503 jiffies, g=17169, q=397 ncpus=2) [ 395.779845][ C0] task:syz.4.197 state:R running task stack:25352 pid:6829 tgid:6825 ppid:5831 task_flags:0x40054c flags:0x00004006 [ 395.794478][ C0] Call Trace: [ 395.797818][ C0] [ 395.800886][ C0] __schedule+0x16a2/0x4cb0 [ 395.805477][ C0] ? preempt_schedule_common+0x83/0xd0 [ 395.811013][ C0] ? __pfx___schedule+0x10/0x10 [ 395.816020][ C0] ? do_raw_spin_lock+0x121/0x290 [ 395.821207][ C0] ? preempt_schedule+0xae/0xc0 [ 395.826124][ C0] preempt_schedule_common+0x83/0xd0 [ 395.831575][ C0] preempt_schedule+0xae/0xc0 [ 395.836343][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 395.841973][ C0] preempt_schedule_thunk+0x16/0x30 [ 395.847252][ C0] _raw_spin_unlock+0x3f/0x50 [ 395.852175][ C0] unmap_page_range+0x3842/0x41c0 [ 395.857352][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 395.863004][ C0] ? unmap_vmas+0x144/0x580 [ 395.867601][ C0] unmap_vmas+0x399/0x580 [ 395.872542][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 395.877484][ C0] exit_mmap+0x248/0xb50 [ 395.881887][ C0] ? uprobe_clear_state+0x20f/0x290 [ 395.887162][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 395.891984][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 395.897705][ C0] ? __pfx_exit_aio+0x10/0x10 [ 395.902451][ C0] ? uprobe_clear_state+0x274/0x290 [ 395.907711][ C0] ? mm_update_next_owner+0xa7/0x870 [ 395.913066][ C0] __mmput+0x118/0x420 [ 395.917209][ C0] exit_mm+0x1da/0x2c0 [ 395.921337][ C0] ? __pfx_exit_mm+0x10/0x10 [ 395.925996][ C0] ? rcu_is_watching+0x15/0xb0 [ 395.930833][ C0] do_exit+0x640/0x22e0 [ 395.935172][ C0] ? do_raw_spin_lock+0x121/0x290 [ 395.940281][ C0] ? __pfx_do_exit+0x10/0x10 [ 395.944957][ C0] do_group_exit+0x21c/0x2d0 [ 395.949713][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.955015][ C0] get_signal+0x125e/0x1310 [ 395.959710][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 395.965421][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 395.970949][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 395.977185][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 395.982710][ C0] exit_to_user_mode_loop+0x75/0x110 [ 395.988146][ C0] do_syscall_64+0x2bd/0x3b0 [ 395.992892][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.999009][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 396.004793][ C0] ? clear_bhb_loop+0x60/0xb0 [ 396.009640][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.015599][ C0] RIP: 0033:0x7f643df8e929 [ 396.020071][ C0] RSP: 002b:00007f643edc9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 396.028599][ C0] RAX: fffffffffffffff4 RBX: 00007f643e1b6080 RCX: 00007f643df8e929 [ 396.036640][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 396.044675][ C0] RBP: 00007f643e010b39 R08: 0000000000000000 R09: 0000000000000000 [ 396.052712][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.060915][ C0] R13: 0000000000000000 R14: 00007f643e1b6080 R15: 00007ffc97fcb018 [ 396.069058][ C0] [ 396.072217][ C0] rcu: rcu_preempt kthread starved for 7742 jiffies! g17169 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 396.083580][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 396.093693][ C0] rcu: RCU grace-period kthread stack dump: [ 396.099653][ C0] task:rcu_preempt state:I stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 396.111797][ C0] Call Trace: [ 396.115145][ C0] [ 396.118149][ C0] __schedule+0x16a2/0x4cb0 [ 396.122772][ C0] ? preempt_schedule_common+0x83/0xd0 [ 396.128510][ C0] ? __pfx___schedule+0x10/0x10 [ 396.133447][ C0] ? __lock_acquire+0xab9/0xd20 [ 396.138370][ C0] ? preempt_schedule+0xae/0xc0 [ 396.143579][ C0] preempt_schedule_common+0x83/0xd0 [ 396.148976][ C0] preempt_schedule+0xae/0xc0 [ 396.153913][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 396.159397][ C0] preempt_schedule_thunk+0x16/0x30 [ 396.164751][ C0] _raw_spin_unlock_irqrestore+0xfd/0x110 [ 396.170829][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 396.177235][ C0] debug_object_assert_init+0x20e/0x380 [ 396.182961][ C0] __mod_timer+0x4a/0xf30 [ 396.187488][ C0] schedule_timeout+0x126/0x270 [ 396.192581][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 396.198030][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 396.204173][ C0] ? __pfx_process_timeout+0x10/0x10 [ 396.209667][ C0] ? prepare_to_swait_event+0x341/0x380 [ 396.215636][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 396.220767][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 396.227093][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 396.232441][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 396.237727][ C0] ? finish_swait+0xcd/0x1f0 [ 396.242475][ C0] rcu_gp_kthread+0x99/0x390 [ 396.247163][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 396.252450][ C0] ? __kthread_parkme+0x7b/0x200 [ 396.257563][ C0] ? __kthread_parkme+0x1a1/0x200 [ 396.262683][ C0] kthread+0x70e/0x8a0 [ 396.266818][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 396.272091][ C0] ? __pfx_kthread+0x10/0x10 [ 396.276841][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.282259][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.287551][ C0] ? __pfx_kthread+0x10/0x10 [ 396.292226][ C0] ret_from_fork+0x3fc/0x770 [ 396.296901][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 396.302177][ C0] ? __switch_to_asm+0x39/0x70 [ 396.307009][ C0] ? __switch_to_asm+0x33/0x70 [ 396.311828][ C0] ? __pfx_kthread+0x10/0x10 [ 396.316473][ C0] ret_from_fork_asm+0x1a/0x30 [ 396.321302][ C0] [ 396.324359][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 396.330743][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 396.340767][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 396.350886][ C0] RIP: 0010:kernel_text_address+0x4/0xe0 [ 396.356592][ C0] Code: 0f b6 c2 5b c3 cc cc cc cc cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 <55> 41 56 53 48 81 ff 00 00 00 81 0f 93 c0 48 81 ff 5c 91 62 8b 0f [ 396.376629][ C0] RSP: 0018:ffffc90000006d90 EFLAGS: 00000246 [ 396.382752][ C0] RAX: 0000000000000000 RBX: ffffffff822161de RCX: 3e97e9512a41c500 [ 396.390779][ C0] RDX: 0000000000000003 RSI: ffffffff8db594b7 RDI: ffffffff822161de [ 396.398897][ C0] RBP: ffffc90000006e50 R08: ffffc90000006f00 R09: 0000000000000000 [ 396.407363][ C0] R10: ffffc90000006e18 R11: fffff52000000dc5 R12: ffffffff8de95280 [ 396.415399][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000000dc2 [ 396.423614][ C0] FS: 0000000000000000(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 396.432688][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.439323][ C0] CR2: 00007f9e92c00218 CR3: 000000003050c000 CR4: 00000000003526f0 [ 396.447347][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 396.455386][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 396.463415][ C0] Call Trace: [ 396.466746][ C0] [ 396.469667][ C0] __kernel_text_address+0xd/0x40 [ 396.474871][ C0] unwind_get_return_address+0x4d/0x90 [ 396.480406][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 396.486629][ C0] arch_stack_walk+0xfc/0x150 [ 396.491418][ C0] ? kasan_save_track+0x3e/0x80 [ 396.496431][ C0] stack_trace_save+0x9c/0xe0 [ 396.501254][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 396.506723][ C0] ? kasan_save_free_info+0x46/0x50 [ 396.512189][ C0] ? consume_skb+0x9e/0xf0 [ 396.516687][ C0] ? nft_synproxy_eval_v6+0x376/0x560 [ 396.522396][ C0] ? nft_synproxy_do_eval+0x3d7/0x570 [ 396.527844][ C0] ? __lock_acquire+0xab9/0xd20 [ 396.532763][ C0] kasan_save_track+0x3e/0x80 [ 396.537924][ C0] ? nft_synproxy_eval_v6+0x376/0x560 [ 396.543455][ C0] kasan_save_free_info+0x46/0x50 [ 396.548863][ C0] __kasan_slab_free+0x62/0x70 [ 396.554302][ C0] kmem_cache_free+0x18f/0x400 [ 396.559405][ C0] nft_synproxy_eval_v6+0x376/0x560 [ 396.565041][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 396.570903][ C0] ? nf_ip_checksum+0x13c/0x510 [ 396.575874][ C0] nft_synproxy_do_eval+0x3d7/0x570 [ 396.581163][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 396.586963][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 396.592444][ C0] nft_do_chain+0x40c/0x1920 [ 396.597214][ C0] ? ip6t_do_table+0x1376/0x1550 [ 396.602229][ C0] ? nf_nat_inet_fn+0x924/0xba0 [ 396.607199][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 396.612341][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 396.617285][ C0] ? nf_nat_ipv6_fn+0x21d/0x2d0 [ 396.622253][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 396.627638][ C0] nft_do_chain_inet+0x25d/0x340 [ 396.632691][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 396.638240][ C0] ? nf_nat_ipv6_local_in+0x14f/0x650 [ 396.643733][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 396.649552][ C0] ? NF_HOOK+0x9a/0x3a0 [ 396.653796][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 396.659396][ C0] nf_hook_slow+0xc2/0x220 [ 396.664290][ C0] NF_HOOK+0x206/0x3a0 [ 396.668972][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 396.674971][ C0] ? NF_HOOK+0x9a/0x3a0 [ 396.679373][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 396.684221][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 396.689690][ C0] ip6_input+0x16a/0x270 [ 396.694003][ C0] ? ip6_input+0x23/0x270 [ 396.698577][ C0] NF_HOOK+0x30c/0x3a0 [ 396.702801][ C0] ? skb_orphan+0xaf/0xd0 [ 396.707212][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 396.712559][ C0] ? NF_HOOK+0x9a/0x3a0 [ 396.716871][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 396.721521][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 396.726809][ C0] __netif_receive_skb+0xd3/0x380 [ 396.731921][ C0] ? process_backlog+0x2d5/0x14f0 [ 396.737015][ C0] process_backlog+0x60e/0x14f0 [ 396.742021][ C0] ? __lock_acquire+0xab9/0xd20 [ 396.746960][ C0] ? __pfx_process_backlog+0x10/0x10 [ 396.752328][ C0] __napi_poll+0xc4/0x480 [ 396.756823][ C0] ? net_rx_action+0x46d/0xe30 [ 396.761662][ C0] net_rx_action+0x707/0xe30 [ 396.766312][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.771722][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 396.776956][ C0] handle_softirqs+0x286/0x870 [ 396.781813][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 396.786676][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 396.792136][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 396.797410][ C0] __irq_exit_rcu+0xca/0x1f0 [ 396.802066][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 396.807434][ C0] irq_exit_rcu+0x9/0x30 [ 396.811832][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 396.817529][ C0] [ 396.820584][ C0] [ 396.823587][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.829640][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 396.835446][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 55 29 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 396.855737][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 396.862040][ C0] RAX: 3e97e9512a41c500 RBX: ffffffff81974f68 RCX: 3e97e9512a41c500 [ 396.870322][ C0] RDX: 0000000000000001 RSI: ffffffff8d96d7bc RDI: ffffffff8be1af40 [ 396.878706][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 396.887005][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8f9fdef0 [ 396.895225][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 396.903275][ C0] ? do_idle+0x1e8/0x510 [ 396.908080][ C0] default_idle+0x13/0x20 [ 396.912461][ C0] default_idle_call+0x74/0xb0 [ 396.917300][ C0] do_idle+0x1e8/0x510 [ 396.921519][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.926976][ C0] ? __pfx_do_idle+0x10/0x10 [ 396.931916][ C0] ? do_idle+0x4ec/0x510 [ 396.936240][ C0] cpu_startup_entry+0x44/0x60 [ 396.941159][ C0] rest_init+0x2de/0x300 [ 396.945464][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 396.951336][ C0] start_kernel+0x47d/0x500 [ 396.956196][ C0] x86_64_start_reservations+0x24/0x30 [ 396.962151][ C0] x86_64_start_kernel+0x143/0x1c0 [ 396.967626][ C0] common_startup_64+0x13e/0x147 [ 396.972703][ C0] [ 397.543533][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.400896][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.235348][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 401.389736][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 402.630596][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 402.868277][ T1304] ieee802154 phy1 wpan1: encryption failed: -22