last executing test programs: 2m50.838623979s ago: executing program 3 (id=4): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x1e8, 0x700001b, 0x148, 0x90, 0x148, 0x1e8, 0x206, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'tunl0\x00', 'sit0\x00'}, 0x1ea, 0xc0, 0x128, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xc8, 0x0, &(0x7f0000000800)=[@acquire_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x1, 0x0, 0x3f}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x2d}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}, 0x400}, @dead_binder_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x2, 0x2d}, @fd={0x66642a85, 0x0, r0}}, 0x0}, 0x40}, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000240)) syz_open_dev$vim2m(&(0x7f00000000c0), 0x9cb5, 0x2) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) 2m49.94021427s ago: executing program 3 (id=6): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = msgget$private(0x0, 0x214) msgsnd(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="0300"], 0x401, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}}], 0x2, 0x0) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={0x0}) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x0, &(0x7f0000001080)) keyctl$chown(0x4, r3, 0xee01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = epoll_create(0x400) r5 = eventfd(0x4) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r5, &(0x7f0000000080)={r4, r5}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, r3) 2m47.480803161s ago: executing program 3 (id=10): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_emit_ethernet(0xae, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x9683f8b45a7101c5}]}}}]}, 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x848000000015, 0x805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_LABELS={0x14, 0x7, "0feee70ca9233ab46fd74f02750a5ede"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_socket_connect_nvme_tcp() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4188aec6, &(0x7f0000000040)) 2m38.176457048s ago: executing program 3 (id=17): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000300)=0x90) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3, 0x0, 0x17, 0x0, "5e3b86774ed89ec669fabcaff49c2eeb8c1c0685564614c85bcf859a08695e2f3f309e196a0c67a7768e058e3008931c0870b2780eb77cbbee013423d43101cb8242bc42b8e0662749302c9ffcd1d119"}, 0xd8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x55, &(0x7f0000000180)={&(0x7f0000001180)={0x20, 0x42, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1}]}, 0x20}}, 0x880) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(0x0, r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x40, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'eth'}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x200080d0}, 0x8) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x18, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x14, 0x3}, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) recvmmsg(r6, 0x0, 0x0, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x6, @random="9f44441dc302"}, 0xffffff5d, {0x2, 0x0, @empty}}) mmap(&(0x7f00001d9000/0x1000)=nil, 0x1000, 0x100000c, 0x4008031, 0xffffffffffffffff, 0x3000) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) 2m36.982461177s ago: executing program 3 (id=20): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000004000000050000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000009400"/128]) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(cast5)\x00'}, 0x5d) socket$nl_route(0x10, 0x3, 0x0) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='9p\x00', 0xfffffffffffffffe) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x8c001, 0x2c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) sendfile(r7, r8, 0x0, 0x7ffff000) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') read$char_usb(r9, &(0x7f00000000c0)=""/41, 0x29) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f00000000c0)=0xc, 0x9, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x7ff) r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r10, 0xc0844123, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) 2m20.049213563s ago: executing program 32 (id=20): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000004000000050000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000009400"/128]) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(cast5)\x00'}, 0x5d) socket$nl_route(0x10, 0x3, 0x0) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='9p\x00', 0xfffffffffffffffe) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x8c001, 0x2c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) sendfile(r7, r8, 0x0, 0x7ffff000) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') read$char_usb(r9, &(0x7f00000000c0)=""/41, 0x29) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f00000000c0)=0xc, 0x9, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x7ff) r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r10, 0xc0844123, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) 2m6.529843764s ago: executing program 2 (id=54): io_setup(0x8, &(0x7f0000000000)) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @in={0x2, 0x0, @broadcast}, @in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x4e21, @dev}], 0x58) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbba}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x6}]}}]}, 0xa4}}, 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}, 0x200, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3501, 0x1, 0x2}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r7, &(0x7f00000016c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x2, 0x2, 0x1, 0x4, {0xa, 0x4e24, 0x1, @empty, 0x8}}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000300)="f225dc26de83e5537f40870818e975b51071c5ed3a428f132571885b4b4e344b11a27ebc703dc8f781d76cb412656ecd52084fab04350e66d026bb8d52fb16f0f68ceb1c1115f8aea83db947ddcc4388d1a09023692792fefd14f77f6419233e418ba475590418f639db5b7091b2c8319b2bc6d772aaad640f9e94d14cecbd2bd16e5b047ca0377ac4a7bf8bac2869bc28aa7496eef6b83d30fbf3127853fd03216fe3bac0f3f80c76bc62670adab0451948610b4c2c6b3954b717abd4fb417a36", 0xc1}, {&(0x7f0000000240)="3b603157cb777f202223dca804aff3190acb53c59751bc1ea16a4fdb97389f07757400c97d6efdb65110cbbb7ff218de4b62f3a639f03515e47f2a624b49258c9208c7d8", 0x44}, {&(0x7f0000000540)="7c98e6dfce5348a7b296d676133ea2d0bdbb888a220e7da57c58f8b364d1d555837f658221573c9c9627efe20b437ea9ea479ea028bdadc9f0bf51afdbd6c48c7e2b8c9e8c2a69220691cc4dee6646e0954d131f815a904e5494c19df32948cbea237b5352a1e60fe3eb137380492ce3826a25c3e02456ecf60bf1722dc74f6243613e1830be48353c6be642eba34105ab72e2fae48b62d3c287860edca75f2f59ba5fee78a4ca6e9a628f179657ac30aa4e81449f040ef37b0b2e4bcacb1a75805bb512553a34000a50e7a47560a790f9733ab79e16b511e392cab2", 0xdc}, {&(0x7f0000000100)="b0bd1f9c6d579adb68e3", 0xa}, {0x0}, {&(0x7f0000000400)='c', 0x1}], 0x6}}], 0x1, 0x40044) r9 = memfd_create(0x0, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ftruncate(r9, 0xfbff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}}, 0x0) 2m2.365973761s ago: executing program 2 (id=59): capset(0x0, &(0x7f00000000c0)={0x800, 0x10000ffd, 0x2, 0x0, 0x8, 0x8001}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffff9b2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='gfs2\x00', 0x0, 0x0) times(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000180)={0x5, 0x0, 0x4, 0x8001, 'syz0\x00', 0x9}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf980000000000005607000000b70000000000000095000000000000"], &(0x7f0000000580)='GPL\x00', 0xc1e, 0x0, 0x0, 0x0, 0xb5222ba0d19ae667, '\x00', 0x0, @fallback=0xf, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) 2m1.030720401s ago: executing program 2 (id=60): ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) ioperm(0x0, 0x82, 0x1f) shutdown(0xffffffffffffffff, 0x1) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) getpgrp(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x87) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7c5f8f2f92ff25d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0xffffffffffff2ea6, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'decodes', ' ', 'io+mem'}, 0xf) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 1m58.213786356s ago: executing program 2 (id=64): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x68d00) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r1, &(0x7f0000000580)={0x208, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) unshare(0x28020480) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40010041) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) setsockopt(r3, 0xfffffff9, 0xc, &(0x7f0000000500), 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="34000000120001000000100000000000ac1e000100000000000000000000000000000000000033000c0015"], 0x34}}, 0x0) r7 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x6, 0x0, 0xfffffffc, 'syz0\x00', 0x8}, 0x2, 0x2, 0x8, r7, 0x0, 0xff, 'syz1\x00', 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x8) socket$xdp(0x2c, 0x3, 0x0) unshare(0x100) 1m55.346629975s ago: executing program 2 (id=67): mkdir(&(0x7f00000001c0)='./file1\x00', 0x117) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000832cd3ac6e00000000008500000072000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000280)='FROZEN\x00', 0x7) sendfile(r6, r6, 0x0, 0x9) socket$packet(0x11, 0x2, 0x300) write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x22a) close(0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2200410, &(0x7f00000003c0)={[{@redirect_dir_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m51.381776833s ago: executing program 2 (id=71): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) socket(0x8, 0x2, 0x5b5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) 1m43.043837647s ago: executing program 0 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000000000000000080000001800028005000500f3000000040004000800038004000180180001801400020073"], 0x44}, 0x1, 0x0, 0x0, 0x88}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, 0x0, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x80041285, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r8 = dup(r7) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000060000000c"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r10, r8, 0x0, 0x89ffc) 1m38.118940212s ago: executing program 0 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40007fffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) waitid(0x1, 0x0, 0x0, 0x40000005, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0x10132) read(r6, &(0x7f0000005680)=""/228, 0xfdef) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x882) write$sndseq(r7, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @queue={0x7, {0x4, 0xfffff811}}}], 0x1c) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x16}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x40) 1m35.020820651s ago: executing program 33 (id=71): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) socket(0x8, 0x2, 0x5b5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) 1m34.702227245s ago: executing program 0 (id=87): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r11 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r11, 0x40044160, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) setsockopt$inet6_mtu(r8, 0x29, 0x17, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6, 0x96, 0xa0, 0x10, 0x1943, 0x2257, 0x91ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x76, 0x54, 0xad}}]}}]}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) 1m31.731044054s ago: executing program 0 (id=91): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x144, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8001, 0x0, 0x20, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x100000000, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x8}, {}, 0x30bd29, 0xfffffffe, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x144}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = io_uring_setup(0xfe, &(0x7f0000000140)={0x0, 0xd391, 0x100, 0xffffffff, 0x2b}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1083) bind$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) listxattr(&(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev_mcast\x00') mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f0000000500)={[{@gid}]}) 1m30.28588089s ago: executing program 0 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000400)={{0x80, 0xfc}, 'port0\x00', 0x18, 0x80410, 0x0, 0x3, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0xe6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port1\x00', 0x172, 0x80808, 0x10000, 0x0, 0x0, 0x39b5, 0x0, 0x0, 0x5}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r3, 0x0, 0x0}, 0x20) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) socket(0x10, 0x3, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001240), 0x80000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000000)={0x46, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}, @IFLA_BOND_ARP_INTERVAL={0x8}, @IFLA_BOND_RESEND_IGMP={0x8}, @IFLA_BOND_XMIT_HASH_POLICY={0x5}, @IFLA_BOND_PRIMARY={0x4c}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x6c}, 0x1, 0xba01}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) 1m24.208829398s ago: executing program 0 (id=97): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000280)={0x1, 0x3, 0xa, {0x7, 0x8, 0x2, 0x90000}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x3b, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m8.704322243s ago: executing program 34 (id=97): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000280)={0x1, 0x3, 0xa, {0x7, 0x8, 0x2, 0x90000}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x3b, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 26.508706522s ago: executing program 4 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000000000000081448a2cfbf2362f04000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r6, &(0x7f0000000140)={'#! ', './file0', [{0x20, 'rXatl'}, {0x20, '.\\^]!\'\xa8'}, {0x20, 'rwatl'}, {0x20, '!,'}]}, 0x22) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000200)={0xd0001, 0x0, [0x0, 0x200000, 0x0, 0x0, 0xfffffffffffffffd]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b80a0000000f23c80f21f866350c00a0000f23f866b9800000c00f326635000400000f300fc76a002e0f080f23742e3b5753baf80c66b8f494f78e66efbafc0c66b83ac8000066efda6509", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 22.641817333s ago: executing program 1 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) readv(r4, 0x0, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "e3da62162895237d", "5e1cdd4af3bd2b0da0c5bdb1bd658200", "a98ae4df", "cd5019dfdf2f702b"}, 0x38) 22.504093671s ago: executing program 4 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) readv(r4, 0x0, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macsec0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "e3da62162895237d", "5e1cdd4af3bd2b0da0c5bdb1bd658200", "a98ae4df", "cd5019dfdf2f702b"}, 0x38) 21.326738283s ago: executing program 1 (id=157): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000580)={0x1, 0x10, 0xfa00, {&(0x7f0000000380)}}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1f}, 0x14) socket$netlink(0x10, 0x3, 0x0) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\\proc/sys/fs/binfmt_misc/register\x00', 0x3a, '\x00', 0x3a, './bus/file0', 0x3a, [0x43, 0x43]}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2000002, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x12, 0x1, {0x0, 0x0, 0x3, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) syz_usb_connect(0x0, 0x761, &(0x7f0000000dc0)=ANY=[@ANYBLOB="120100003188c740638bac6f95800102030109024f0701000000000904f2010f0806620009050f03200000040607250102400100f90c7bc128c8b1f72bae34ce996d036b6df02234fdf54c70e9ec22a856f13767bd440a9878c800097df12359a0d6a9b1941a1953aec35dbf5f370a87efeb6d7794d1a25100408bb0e8cb04040649ab6230487daf8663455e295911e0613c2773f49d57e79c524c328eb99b23f9e20211f120e5163e6df3e434e42bf11dcd8c5a4ae175cfb8bb2ee7a4014754540a4762979bbe857216e3a857bd3765a40c97d1559d8f257041126af4fe9697c4e4f886614085b9684eb61054165982034d8eec898c1a0973564cceee1cd72434e0cbcbf348b5ca7ad4609ea6e0763d649e17e2c859822e966f5bb44b11c18f27430447a9f12700813f52b90609050a1000028006099431a7b390d828499e6f8693e55373bfa32301664985ddbc67df9bc5c07abd99e520269c198d84e2a68c17498538fa8a187fb43e3e459ed5376c340d7f19671b6bcea9799b1d6e430736383f138c131682b600183b7b6bafa072aa76b84650606b46d00a0bcba03d2ba232722e7b3c3f3d59a7f9d47548b4c25f61ee28d9424c947eb7c8c8a02bc3f1331635ff210ee691b59b7a072501020d0400090507100002300e71462144177a993084630f958cdb9412c61d4205f2577bd15ca59edaa75268ab1b36e84684624d9c071d4ff05851db77106d65ac43a82e9327b0228cd8cdcf45cd78cc99661b5a131111ebe46f2112bf64815b33cb5d0d0620a90905010008007f01030725010101ffff090500081000086e7f4e15b2263792408e11016f22b92890177104d72abc3bbbb55d9deaaa0caaa2f186e13abe88a0ac523e815c27c06c957695c421e650f1e93cb6e4c0dd8eabb45af53a7b217f078d6c6253fb83dbe9090593021000030f04ed0aa63d2740f84e34a145780e9b7648f22af6ec7674afbc0bdc6ab049e4b35c3219d564cdad6cd37b0cb2255a6956a95bb40bb0c70d61973f052ef23ac36d66346d4f29adf85da454d12bb067c4df5d8f420d168f95acb59f2f23cbef9207efdbbee78c759ff4d88c092067443a027ac212673ba2267586105eb110f2a807c5db19d2e8caa4c41cabdfe80e806a4cfeb4295b8f6321484a173fb97d06808958e85e77a6cca227842623d2630b8320a449d533f30205bd09317a17b5636e92c40dddf1fbcf288f7dbfb5cfba410abe498681483e19c27f02793f9557745585b82caf37b507af7b48e4b01f5509050608200006"], 0x0) 17.475950947s ago: executing program 1 (id=162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x28, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40345410, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02000000", @ANYRES16=r5, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r6, @ANYBLOB="08000600", @ANYRESOCT, @ANYBLOB], 0x24}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="747261883de1b10e2290d1646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',']) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)={0x2, [0x0, 0x0]}, &(0x7f0000000480)=0xc) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) memfd_create(&(0x7f0000000240)='\xfd\x00', 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r9, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) 16.125128063s ago: executing program 1 (id=163): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x2d9b, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @multicast}]}) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x1f, &(0x7f0000000140)={0x0, 0x0, 0x1}) read$FUSE(0xffffffffffffffff, &(0x7f0000001a00)={0x2020}, 0x2020) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) 13.925551421s ago: executing program 1 (id=165): mbind(&(0x7f0000320000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x38080862, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) listen(r2, 0x2) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d1000001", 0x3f}], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30004001) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000808000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000180)=0x2, 0x4) ioctl$KVM_SET_CPUID2(r8, 0xc048aeca, &(0x7f0000000180)=ANY=[]) setsockopt$sock_attach_bpf(r4, 0x6, 0x3, &(0x7f00000000c0), 0x4) 13.889761274s ago: executing program 4 (id=166): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) write$sequencer(r0, &(0x7f0000000080)=[@t={0x81, 0x1, 0x0, 0x0, @generic=0x40005}], 0x8) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000001900)={0xa, 0x1, 0x2, "c8e7747f8c0bea55dddbce33af3078a66cc08c8f229c2d19fca710d1907bd65f"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, 0x0) r6 = syz_open_dev$vim2m(0x0, 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r10}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) 13.461764051s ago: executing program 5 (id=167): socket$inet6(0x10, 0x3, 0x0) ioprio_set$pid(0x1, 0x0, 0x4007) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063118b000000000040000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x0, 0x67b}]}, 0x10) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x8000, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioprio_get$pid(0x1, 0x0) 12.4839366s ago: executing program 4 (id=168): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf1}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) 12.427216092s ago: executing program 1 (id=169): syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd603000bb00642b00fc020000000000000000000000000000fe8000000000000000000000000000aa00000000006490783a000000000000000000000082f63de64f6ce2ee11028289aefd04449391a823213e6336516748a7949bb108402fa83b1d661c18462075368a2341735e265a56bea23d391b8fa99e9816af2d040876a663a86d97f46b9665"], 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000100)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000599000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/140, 0x8c, 0x1, &(0x7f0000000580)=""/240, 0xf0}, &(0x7f0000000280)=0x40) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r6) socket$igmp(0x2, 0x3, 0x2) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) futex_waitv(&(0x7f0000000180)=[{0x3, &(0x7f0000000040)=0x2, 0x2}], 0x1, 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r8}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r7, 0xc01864ba, &(0x7f0000000300)={0x14, r10, r8}) 11.21317863s ago: executing program 5 (id=170): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xa, 0x800) read$usbmon(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80086303, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r4, 0x2, &(0x7f0000000500)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000640)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfb0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8100, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r7, r8, 0x0) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) getrlimit(0x4, &(0x7f0000000080)) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000002c0)="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") r9 = open(&(0x7f00000000c0)='./file1\x00', 0x400, 0x110) fsync(r9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 9.081565975s ago: executing program 4 (id=171): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYRES8], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61965b7e, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x199, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x8000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000580)=0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in=@loopback, 0x4e22, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x6}, 0x2253, 0x6e6bb0}, {{@in6=@local, 0x4d2, 0x6c}, 0x0, @in6=@private2, 0x0, 0x0, 0x2}}, 0xe8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$setsig(r7, 0xa, 0x21) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) 9.058588182s ago: executing program 5 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x4000014) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000880)="ce1f066150978861144e07000000adae2a3e0dab76a2b60ec2e33ac8675deece3b70f2bf9b04daf4d0c288d2a45079aa581382dade9b5d21064a710ce52bc75fef53516d1efe988efeb8053f934e1b1b9ce202f5574100e648e42af1a854efe050ff0253bafa46680c63b29f21aab1199c78c0584cf12b65e54f9c7ae3375f1976b76d6c09dcbff8b8432ed9764b4812e60b97c261ed6199dbae46a9", 0x9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000000080)="e3", 0x1}], 0x1}, 0x24048401) request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='\x00', 0x0) ppoll(&(0x7f0000000940)=[{r8}], 0x1, &(0x7f0000000b40), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 7.946760121s ago: executing program 5 (id=173): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a1", 0xa0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0xfffffffffffffdae) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) 2.096310075s ago: executing program 5 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) readv(r4, 0x0, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macsec0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "e3da62162895237d", "5e1cdd4af3bd2b0da0c5bdb1bd658200", "a98ae4df", "cd5019dfdf2f702b"}, 0x38) 2.011711409s ago: executing program 4 (id=175): socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x1b, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x8dff, 0x0, [0x0, 0x0]}, {}, {}, {0xa888, 0x88be, 0x81000000}}}}}}}, 0x0) syz_pidfd_open(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x3, &(0x7f0000000040)={0x8000, 0x800}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x3f0, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x287, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [], @ipv4=@multicast2}, {@ipv4=@private, [], @ipv4=@broadcast}, {@ipv4=@loopback, [], @ipv4=@broadcast}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x1, 0x84}}, @common=@inet=@set2={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002400), 0x2102, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0x40046f41, 0x20000502) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80182) r8 = syz_io_uring_setup(0x4072, &(0x7f0000000200)={0x0, 0xfffffffc, 0x10100, 0x3}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x565, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x7}, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x90002, 0x0) 0s ago: executing program 5 (id=176): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x4, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@local, @broadcast, @void, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "f7b56c830c28a8cf"}}}}, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r6) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="41000300010007", 0x7) fchdir(r0) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x4071, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 75.933387][ T5811] cgroup: Unknown subsys name 'net' [ 76.059354][ T5811] cgroup: Unknown subsys name 'cpuset' [ 76.067599][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.647462][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.873517][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.885896][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.894120][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.925333][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.933128][ T5824] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.940739][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.976544][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.984941][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.995090][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.002775][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.021530][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.030077][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.039070][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.047052][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.054215][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.054725][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.078987][ T5133] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.086386][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.100196][ T5133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.107560][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.119004][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.150753][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.162410][ T5827] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.171110][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.235620][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.257633][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.267983][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.285742][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.293553][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.301126][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.530193][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 82.596052][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 82.767221][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.774514][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.783274][ T5828] bridge_slave_0: entered allmulticast mode [ 82.790534][ T5828] bridge_slave_0: entered promiscuous mode [ 82.802747][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.810364][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.817739][ T5828] bridge_slave_1: entered allmulticast mode [ 82.824510][ T5828] bridge_slave_1: entered promiscuous mode [ 82.837092][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.844247][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.851891][ T5821] bridge_slave_0: entered allmulticast mode [ 82.858723][ T5821] bridge_slave_0: entered promiscuous mode [ 82.868094][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.875251][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.882399][ T5821] bridge_slave_1: entered allmulticast mode [ 82.889476][ T5821] bridge_slave_1: entered promiscuous mode [ 82.896564][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 82.978600][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.990266][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.024829][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.045719][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.110737][ T5828] team0: Port device team_slave_0 added [ 83.129531][ T5828] team0: Port device team_slave_1 added [ 83.143031][ T5821] team0: Port device team_slave_0 added [ 83.197688][ T5821] team0: Port device team_slave_1 added [ 83.212976][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 83.222983][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.232559][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.258968][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.280118][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.287404][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.294595][ T5825] bridge_slave_0: entered allmulticast mode [ 83.302369][ T5825] bridge_slave_0: entered promiscuous mode [ 83.313057][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.320251][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.327854][ T5825] bridge_slave_1: entered allmulticast mode [ 83.334743][ T5825] bridge_slave_1: entered promiscuous mode [ 83.351489][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.358485][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.385107][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.404683][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 83.439392][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.446793][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.473182][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.489481][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.496640][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.522748][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.568277][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.602274][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.651881][ T5828] hsr_slave_0: entered promiscuous mode [ 83.667656][ T5828] hsr_slave_1: entered promiscuous mode [ 83.678040][ T5825] team0: Port device team_slave_0 added [ 83.686968][ T5825] team0: Port device team_slave_1 added [ 83.794728][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.802280][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.828427][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.840528][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.848655][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.856672][ T5832] bridge_slave_0: entered allmulticast mode [ 83.863388][ T5832] bridge_slave_0: entered promiscuous mode [ 83.883829][ T5821] hsr_slave_0: entered promiscuous mode [ 83.890490][ T5821] hsr_slave_1: entered promiscuous mode [ 83.898489][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.906465][ T5821] Cannot create hsr debugfs directory [ 83.920088][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.927122][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.953175][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.964397][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.974101][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.982977][ T5832] bridge_slave_1: entered allmulticast mode [ 83.986190][ T5827] Bluetooth: hci0: command tx timeout [ 83.994592][ T5832] bridge_slave_1: entered promiscuous mode [ 84.011129][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.018460][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.026320][ T5837] bridge_slave_0: entered allmulticast mode [ 84.033136][ T5837] bridge_slave_0: entered promiscuous mode [ 84.048214][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.055812][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.063003][ T5837] bridge_slave_1: entered allmulticast mode [ 84.070147][ T5837] bridge_slave_1: entered promiscuous mode [ 84.090527][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.124741][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.135301][ T5827] Bluetooth: hci2: command tx timeout [ 84.196444][ T5825] hsr_slave_0: entered promiscuous mode [ 84.202763][ T5825] hsr_slave_1: entered promiscuous mode [ 84.209481][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.216353][ T5827] Bluetooth: hci1: command tx timeout [ 84.217272][ T54] Bluetooth: hci3: command tx timeout [ 84.228879][ T5825] Cannot create hsr debugfs directory [ 84.237680][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.256994][ T5832] team0: Port device team_slave_0 added [ 84.268596][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.292947][ T5832] team0: Port device team_slave_1 added [ 84.328275][ T5837] team0: Port device team_slave_0 added [ 84.341382][ T5837] team0: Port device team_slave_1 added [ 84.375494][ T54] Bluetooth: hci4: command tx timeout [ 84.399612][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.407454][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.433733][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.446889][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.453861][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.480172][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.507931][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.515172][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.542039][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.585395][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.592413][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.622961][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.652675][ T5832] hsr_slave_0: entered promiscuous mode [ 84.659272][ T5832] hsr_slave_1: entered promiscuous mode [ 84.666009][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.673615][ T5832] Cannot create hsr debugfs directory [ 84.777686][ T5837] hsr_slave_0: entered promiscuous mode [ 84.783997][ T5837] hsr_slave_1: entered promiscuous mode [ 84.790713][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.798400][ T5837] Cannot create hsr debugfs directory [ 84.882428][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.925970][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.940522][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.967932][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.082118][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.095856][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.106459][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.130230][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.173645][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.217928][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.231935][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.255486][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.318576][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.329316][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.350739][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.361181][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.457613][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.474370][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.487730][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.500328][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.538819][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.591923][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.616474][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.623700][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.642170][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.670565][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.686483][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.693618][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.712585][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.761136][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.768365][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.798499][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.805763][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.829268][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.854182][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.868397][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.875584][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.904646][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.911803][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.983305][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.019466][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.055475][ T54] Bluetooth: hci0: command tx timeout [ 86.068457][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.094593][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.101785][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.111025][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.118210][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.145223][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.152386][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.170245][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.177495][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.215432][ T54] Bluetooth: hci2: command tx timeout [ 86.232018][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.247211][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.295568][ T54] Bluetooth: hci1: command tx timeout [ 86.306990][ T54] Bluetooth: hci3: command tx timeout [ 86.433238][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.448751][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.471068][ T54] Bluetooth: hci4: command tx timeout [ 86.610384][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.717302][ T5828] veth0_vlan: entered promiscuous mode [ 86.770437][ T5828] veth1_vlan: entered promiscuous mode [ 86.802657][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.814460][ T5821] veth0_vlan: entered promiscuous mode [ 86.872323][ T5828] veth0_macvtap: entered promiscuous mode [ 86.892125][ T5821] veth1_vlan: entered promiscuous mode [ 86.922927][ T5828] veth1_macvtap: entered promiscuous mode [ 86.990517][ T5821] veth0_macvtap: entered promiscuous mode [ 87.023490][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.049279][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.065516][ T5821] veth1_macvtap: entered promiscuous mode [ 87.075647][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.084095][ T5837] veth0_vlan: entered promiscuous mode [ 87.119237][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.138277][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.152167][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.162414][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.204356][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.225604][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.238080][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.269195][ T5837] veth1_vlan: entered promiscuous mode [ 87.319215][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.331841][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.343095][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.365727][ T5825] veth0_vlan: entered promiscuous mode [ 87.414651][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.443805][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.454313][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.468548][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.499496][ T5832] veth0_vlan: entered promiscuous mode [ 87.512790][ T5837] veth0_macvtap: entered promiscuous mode [ 87.536573][ T5825] veth1_vlan: entered promiscuous mode [ 87.564392][ T5837] veth1_macvtap: entered promiscuous mode [ 87.575614][ T5832] veth1_vlan: entered promiscuous mode [ 87.668333][ T5825] veth0_macvtap: entered promiscuous mode [ 87.725948][ T5825] veth1_macvtap: entered promiscuous mode [ 87.732657][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.765532][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.782035][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.793121][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.812593][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.824299][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.846275][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.860618][ T5832] veth0_macvtap: entered promiscuous mode [ 87.881044][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.898638][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.910234][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.923375][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.936184][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.953839][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.957694][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.970605][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.980918][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.989887][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.998767][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.020767][ T5832] veth1_macvtap: entered promiscuous mode [ 88.049667][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.062481][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.072452][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.082978][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.092996][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.103555][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.114680][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.131210][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.140701][ T54] Bluetooth: hci0: command tx timeout [ 88.146472][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.168515][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.181524][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.199228][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.209910][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.220095][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.230777][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.240721][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.251529][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.262987][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.280608][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.292795][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.303212][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.314230][ T54] Bluetooth: hci2: command tx timeout [ 88.320296][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.330207][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.341053][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.352126][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.375745][ T54] Bluetooth: hci3: command tx timeout [ 88.381216][ T54] Bluetooth: hci1: command tx timeout [ 88.382035][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.397838][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.408411][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.419028][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.429008][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.439845][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.449730][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.460509][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.471590][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.484161][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.492992][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.501988][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.510800][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.535670][ T54] Bluetooth: hci4: command tx timeout [ 88.555068][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.572513][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.583447][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.595248][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.604019][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.613266][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.649667][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.668081][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.687196][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.878298][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.891608][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.911250][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.916706][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.154390][ T5908] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.154640][ T5910] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 89.579242][ T5909] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.630763][ T5907] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.633690][ T5907] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 89.633867][ T5907] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4'. [ 89.886108][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.894030][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.541971][ T54] Bluetooth: hci0: command tx timeout [ 90.548128][ T5827] Bluetooth: hci2: command tx timeout [ 90.554150][ T5827] Bluetooth: hci1: command tx timeout [ 90.559831][ T54] Bluetooth: hci3: command tx timeout [ 90.780878][ T5824] Bluetooth: hci4: command tx timeout [ 90.858309][ T5925] Bluetooth: MGMT ver 1.23 [ 91.377974][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.458804][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.471613][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.555944][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.634373][ T46] cfg80211: failed to load regulatory.db [ 94.507774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.135238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.147087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.255249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.345069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.456098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.754598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.757970][ T6008] libceph: resolve 'c' (ret=-3): failed [ 104.952475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.094552][ T3074] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.422408][ T3074] usb 5-1: config 3 has an invalid interface number: 132 but max is 0 [ 106.432031][ T3074] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 106.442921][ T3074] usb 5-1: config 3 has no interface number 0 [ 106.449397][ T3074] usb 5-1: config 3 interface 132 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.463031][ T3074] usb 5-1: config 3 interface 132 has no altsetting 0 [ 106.663041][ T6016] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 106.672255][ T6016] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 106.855672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.909175][ T3074] usb 5-1: New USB device found, idVendor=08e3, idProduct=0301, bcdDevice=18.2c [ 106.918380][ T3074] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.926650][ T3074] usb 5-1: Product: syz [ 106.930895][ T3074] usb 5-1: Manufacturer: syz [ 106.935699][ T3074] usb 5-1: SerialNumber: syz [ 106.955178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.521020][ T6022] netlink: 277 bytes leftover after parsing attributes in process `syz.0.23'. [ 107.540062][ T6022] mmap: syz.0.23 (6022) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.827681][ T29] audit: type=1326 audit(1737409736.617:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6027 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464cd85d29 code=0x7ffc0000 [ 110.245046][ T29] audit: type=1326 audit(1737409736.617:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6027 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464cd85d29 code=0x7ffc0000 [ 110.352934][ T29] audit: type=1326 audit(1737409736.627:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6027 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f464cd85d29 code=0x7ffc0000 [ 110.402966][ T29] audit: type=1326 audit(1737409736.627:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6027 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464cd85d29 code=0x7ffc0000 [ 110.732780][ T29] audit: type=1326 audit(1737409736.627:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6027 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464cd85d29 code=0x7ffc0000 [ 111.784973][ T29] audit: type=1326 audit(1737409736.637:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6027 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f464cd85d29 code=0x7ffc0000 [ 112.115815][ T29] audit: type=1326 audit(1737409736.637:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6027 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464cd85d29 code=0x7ffc0000 [ 112.303772][ T3074] usb 5-1: can't set config #3, error -110 [ 112.755704][ T29] audit: type=1326 audit(1737409736.637:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6027 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464cd85d29 code=0x7ffc0000 [ 112.830215][ T29] audit: type=1326 audit(1737409736.647:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6027 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f464cd85d29 code=0x7ffc0000 [ 113.438455][ T29] audit: type=1326 audit(1737409736.647:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6027 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464cd85d29 code=0x7ffc0000 [ 113.500717][ T5873] usb 5-1: USB disconnect, device number 2 [ 114.789651][ T6062] ISOFS: Unable to identify CD-ROM format. [ 116.430671][ T6080] openvswitch: netlink: IP tunnel dst address not specified [ 116.690659][ T3074] IPVS: starting estimator thread 0... [ 116.937845][ T6083] IPVS: using max 17 ests per chain, 40800 per kthread [ 117.228510][ T6084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.33'. [ 117.596030][ T6095] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.492862][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 120.647180][ T29] audit: type=1107 audit(1737409747.327:49): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 120.928521][ T6108] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 121.007090][ T6108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.568689][ T6113] netlink: 100 bytes leftover after parsing attributes in process `syz.1.40'. [ 121.942919][ T6110] netlink: 32 bytes leftover after parsing attributes in process `syz.1.40'. [ 125.664133][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.673747][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.685367][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 125.693344][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.025286][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 126.032892][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.882788][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 127.935550][ T6159] Zero length message leads to an empty skb [ 127.996466][ T6142] chnl_net:caif_netlink_parms(): no params data found [ 128.065485][ T54] Bluetooth: hci5: command tx timeout [ 128.653895][ T6164] Cannot find add_set index 0 as target [ 130.345339][ T54] Bluetooth: hci5: command tx timeout [ 130.350903][ T6170] sctp: failed to load transform for md5: -2 [ 132.474613][ T54] Bluetooth: hci5: command tx timeout [ 133.110280][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.119692][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.918838][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.103409][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.141978][ T6142] bridge_slave_0: entered allmulticast mode [ 134.173469][ T6142] bridge_slave_0: entered promiscuous mode [ 134.198328][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.915961][ T54] Bluetooth: hci5: command tx timeout [ 134.984573][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.993502][ T6142] bridge_slave_1: entered allmulticast mode [ 136.516890][ T6142] bridge_slave_1: entered promiscuous mode [ 136.729048][ T6142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.777046][ T6142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.887742][ T6142] team0: Port device team_slave_0 added [ 136.917052][ T6142] team0: Port device team_slave_1 added [ 136.998314][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.017750][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.092514][ T6142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.127472][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.134477][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.245044][ T6142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.267237][ T6215] openvswitch: netlink: IP tunnel dst address not specified [ 137.666542][ T6142] hsr_slave_0: entered promiscuous mode [ 137.695341][ T6142] hsr_slave_1: entered promiscuous mode [ 137.705391][ T6142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.784695][ T6221] gfs2: not a GFS2 filesystem [ 137.805941][ T6221] program syz.2.59 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.858032][ T6142] Cannot create hsr debugfs directory [ 140.180454][ T6229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.57'. [ 140.388088][ T6233] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 143.243231][ T6142] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.366802][ T6248] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.373070][ T6248] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.375415][ T6142] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.396427][ T6248] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 144.199902][ T6248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.200678][ T6142] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.205931][ T6248] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 144.253369][ T6248] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 144.266093][ T6248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.272131][ T6248] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.308597][ T6248] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.339817][ T6248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.345852][ T6248] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.391845][ T6248] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.693157][ T6248] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 144.699586][ T6248] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 144.794316][ T6248] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 144.846647][ T6248] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 144.852968][ T6248] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 144.901755][ T6248] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 145.374946][ T6142] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.424921][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.377152][ T6272] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 146.386593][ T6272] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 146.409475][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.416062][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.423021][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.847806][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 146.934992][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 147.738119][ T6280] xt_NFQUEUE: number of total queues is 0 [ 148.265747][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.293208][ T6142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.525172][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.531294][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.537675][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.255039][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 149.261040][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 149.285056][ T6279] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 149.291994][ T6279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.520396][ T6279] vhci_hcd vhci_hcd.0: Device attached [ 149.781731][ T6142] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.878440][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.885661][ T6187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.133738][ T46] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 150.289961][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.297299][ T6187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.305669][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.680603][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.686862][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.692896][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.701477][ T6284] vhci_hcd: connection reset by peer [ 150.860657][ T52] vhci_hcd: stop threads [ 151.086653][ T52] vhci_hcd: release socket [ 151.351227][ T6296] overlayfs: overlapping lowerdir path [ 151.579382][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 151.584573][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 151.631310][ T52] vhci_hcd: disconnect device [ 151.993844][ T6142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.513259][ T6278] Set syz1 is full, maxelem 65536 reached [ 155.275340][ T46] vhci_hcd: vhci_device speed not set [ 156.737202][ T6142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.097446][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 163.297368][ T6142] veth0_vlan: entered promiscuous mode [ 164.437649][ T6142] veth1_vlan: entered promiscuous mode [ 165.124421][ T6142] veth0_macvtap: entered promiscuous mode [ 165.139927][ T6142] veth1_macvtap: entered promiscuous mode [ 165.581085][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.615108][ T5873] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 165.655710][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.757680][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.805049][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.833322][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.850956][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 165.872012][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.879600][ T5873] usb 1-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 165.901836][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.915260][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.943908][ T5873] usb 1-1: Product: syz [ 165.951711][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.954052][ T5873] usb 1-1: Manufacturer: syz [ 165.985109][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.994911][ T5873] usb 1-1: SerialNumber: syz [ 166.025169][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.025856][ T5873] usb 1-1: config 0 descriptor?? [ 166.070256][ T5873] s2255 1-1:0.0: Could not find bulk-in endpoint [ 166.076253][ T6142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.097930][ T5873] Sensoray 2255 driver load failed: 0xfffffff4 [ 166.104162][ T5873] s2255 1-1:0.0: probe with driver s2255 failed with error -12 [ 166.113963][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.162422][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.204904][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.244904][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.254788][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.535332][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.605933][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.648230][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.657465][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.666167][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.674942][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.685969][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 166.693561][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.761958][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.810292][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.863730][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.918988][ T6142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.327165][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.335241][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.359386][ T5833] usb 1-1: USB disconnect, device number 2 [ 167.439946][ T6142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.461864][ T6142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.492016][ T6142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.501116][ T6142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.748379][ T6307] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.823019][ T5988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.860617][ T5988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.305054][ T54] Bluetooth: hci4: command tx timeout [ 169.880791][ T6307] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.058890][ T6307] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.103115][ T6382] chnl_net:caif_netlink_parms(): no params data found [ 170.335411][ T6308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.345007][ T6308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.371892][ T6307] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.176667][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.183817][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.202444][ T6382] bridge_slave_0: entered allmulticast mode [ 171.274418][ T6382] bridge_slave_0: entered promiscuous mode [ 171.425597][ T54] Bluetooth: hci4: command tx timeout [ 171.521493][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.530046][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.542596][ T6382] bridge_slave_1: entered allmulticast mode [ 171.634349][ T6382] bridge_slave_1: entered promiscuous mode [ 174.012988][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.92'. [ 174.281612][ T54] Bluetooth: hci4: command tx timeout [ 175.357005][ T6429] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 175.541111][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.646969][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.846798][ T54] Bluetooth: hci4: command tx timeout [ 177.127365][ T6382] team0: Port device team_slave_0 added [ 177.133999][ T6307] bridge_slave_1: left allmulticast mode [ 177.197247][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.99'. [ 177.214560][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.99'. [ 177.969726][ T6307] bridge_slave_1: left promiscuous mode [ 179.001063][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.520262][ T6307] bridge_slave_0: left allmulticast mode [ 179.545202][ T6307] bridge_slave_0: left promiscuous mode [ 179.565957][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.641199][ T6474] random: crng reseeded on system resumption [ 181.183612][ T6472] sctp: failed to load transform for md5: -2 [ 188.785324][ T5833] IPVS: starting estimator thread 0... [ 189.245318][ T6516] IPVS: using max 20 ests per chain, 48000 per kthread [ 190.165912][ T6524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.447222][ T6307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.472341][ T6307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.499918][ T6307] bond0 (unregistering): Released all slaves [ 190.546594][ T6382] team0: Port device team_slave_1 added [ 190.622648][ T6521] gre1: entered promiscuous mode [ 190.630771][ T6521] gre1: entered allmulticast mode [ 190.746007][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.752965][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.802581][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.883678][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.024987][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.181934][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.554139][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.563025][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.672969][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.683546][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.691903][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.700458][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.748083][ T5827] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 194.757774][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.744910][ T6382] hsr_slave_0: entered promiscuous mode [ 196.859895][ T6382] hsr_slave_1: entered promiscuous mode [ 196.943205][ T5827] Bluetooth: hci3: command tx timeout [ 196.988601][ T6382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.078236][ T6382] Cannot create hsr debugfs directory [ 200.347986][ T54] Bluetooth: hci3: command tx timeout [ 202.605841][ T54] Bluetooth: hci3: command tx timeout [ 205.025080][ T54] Bluetooth: hci3: command tx timeout [ 205.285133][ T6307] hsr_slave_0: left promiscuous mode [ 205.309269][ T6307] hsr_slave_1: left promiscuous mode [ 206.044723][ T6605] input: syz0 as /devices/virtual/input/input5 [ 206.056254][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.063768][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.083383][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.107479][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.136456][ T6307] veth1_macvtap: left promiscuous mode [ 206.142659][ T6307] veth1_vlan: left promiscuous mode [ 206.209813][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 206.222793][ T6307] veth0_vlan: left promiscuous mode [ 207.317309][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.344540][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 207.404995][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.454971][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.516980][ T6607] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 207.682744][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.118795][ T8] usb 5-1: USB disconnect, device number 3 [ 211.289552][ T6630] udevd[6630]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.687515][ T6307] team0 (unregistering): Port device team_slave_1 removed [ 213.964576][ T6307] team0 (unregistering): Port device team_slave_0 removed [ 218.898414][ T6382] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 218.988009][ T6382] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.039924][ T6382] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.118517][ T6561] chnl_net:caif_netlink_parms(): no params data found [ 219.182225][ T6382] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 220.155715][ T3074] IPVS: starting estimator thread 0... [ 220.345060][ T6695] IPVS: using max 18 ests per chain, 43200 per kthread [ 221.813787][ T6705] syz.5.142 (6705): drop_caches: 2 [ 221.979193][ T6307] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.623485][ T6727] IPVS: length: 46 != 8 [ 224.256607][ T6307] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.534104][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.552773][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.435121][ T6561] bridge_slave_0: entered allmulticast mode [ 225.443191][ T6561] bridge_slave_0: entered promiscuous mode [ 225.504316][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.526039][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.533329][ T6561] bridge_slave_1: entered allmulticast mode [ 225.583162][ T6561] bridge_slave_1: entered promiscuous mode [ 225.676839][ T6307] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.135281][ T6307] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.090862][ T6561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.381479][ T6561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.167766][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 230.177772][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 230.330484][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 230.359001][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 230.529968][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 230.541699][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 232.911089][ T6561] team0: Port device team_slave_0 added [ 234.463111][ T5827] Bluetooth: hci6: command tx timeout [ 234.922044][ T6561] team0: Port device team_slave_1 added [ 235.138646][ T6786] netlink: 'syz.4.153': attribute type 11 has an invalid length. [ 235.738523][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.925642][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.966358][ T6561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.980021][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.987218][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.115355][ T6561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.990596][ T5827] Bluetooth: hci6: command tx timeout [ 237.438710][ T6307] bridge_slave_1: left allmulticast mode [ 237.444433][ T6307] bridge_slave_1: left promiscuous mode [ 237.721290][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.315826][ T6307] bridge_slave_0: left allmulticast mode [ 238.321533][ T6307] bridge_slave_0: left promiscuous mode [ 238.366265][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.015595][ T5827] Bluetooth: hci6: command tx timeout [ 239.124532][ T5900] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 239.551303][ T5900] usb 2-1: config 0 has an invalid interface number: 242 but max is 0 [ 239.569701][ T5900] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.627577][ T5900] usb 2-1: config 0 has no interface number 0 [ 239.662201][ T5900] usb 2-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 239.719806][ T5900] usb 2-1: config 0 interface 242 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 239.770551][ T5900] usb 2-1: config 0 interface 242 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 239.808485][ T5900] usb 2-1: config 0 interface 242 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 239.855291][ T5900] usb 2-1: config 0 interface 242 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 239.888631][ T5900] usb 2-1: config 0 interface 242 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 16 [ 239.942697][ T5900] usb 2-1: config 0 interface 242 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 239.977537][ T5900] usb 2-1: config 0 interface 242 has no altsetting 0 [ 240.162512][ T5900] usb 2-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 240.261646][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.294244][ T5900] usb 2-1: Product: syz [ 240.314076][ T5900] usb 2-1: Manufacturer: syz [ 240.347359][ T5900] usb 2-1: SerialNumber: syz [ 240.685923][ T5900] usb 2-1: config 0 descriptor?? [ 240.706310][ T6809] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.022629][ T6307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.043326][ T6307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.058639][ T6307] bond0 (unregistering): Released all slaves [ 241.095713][ T5827] Bluetooth: hci6: command tx timeout [ 241.151988][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.159'. [ 241.848382][ T6561] hsr_slave_0: entered promiscuous mode [ 241.885495][ T6561] hsr_slave_1: entered promiscuous mode [ 241.954257][ T6561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.049764][ T6561] Cannot create hsr debugfs directory [ 242.075744][ T9] usb 2-1: USB disconnect, device number 2 [ 244.052263][ T6845] binder: 6840:6845 ioctl c0306201 0 returned -14 [ 246.868066][ T6857] sctp: failed to load transform for md5: -2 [ 248.202140][ T6307] hsr_slave_0: left promiscuous mode [ 248.215723][ T6307] hsr_slave_1: left promiscuous mode [ 248.233122][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.257160][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.396776][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.540325][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.795231][ T6307] veth1_macvtap: left promiscuous mode [ 249.803933][ T6307] veth0_macvtap: left promiscuous mode [ 249.810694][ T6307] veth1_vlan: left promiscuous mode [ 249.821198][ T6307] veth0_vlan: left promiscuous mode [ 253.118447][ T5871] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 256.350925][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.365182][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.384458][ T5871] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 257.646162][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.656371][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.664714][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.672924][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.685655][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 257.698104][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 260.036682][ T30] INFO: task kworker/u8:8:3489 blocked for more than 143 seconds. [ 260.044571][ T30] Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 260.052333][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 260.094588][ T30] task:kworker/u8:8 state:D stack:22288 pid:3489 tgid:3489 ppid:2 flags:0x00004000 [ 260.116818][ T54] Bluetooth: hci4: command tx timeout [ 260.165193][ T5811] syz-executor (5811) used greatest stack depth: 18768 bytes left [ 260.234899][ T30] Workqueue: events_unbound netfs_write_collection_worker [ 260.242143][ T30] Call Trace: [ 260.334939][ T30] [ 260.348194][ T30] __schedule+0x17fb/0x4be0 [ 260.352842][ T30] ? __pfx___schedule+0x10/0x10 [ 260.390626][ T30] ? __pfx_lock_release+0x10/0x10 [ 260.396402][ T30] ? schedule+0x90/0x320 [ 260.400758][ T30] ? wq_worker_sleeping+0x66/0x240 [ 260.406044][ T30] ? schedule+0x90/0x320 [ 260.410544][ T30] schedule+0x14b/0x320 [ 260.414746][ T30] bit_wait+0x12/0xd0 [ 260.418855][ T30] __wait_on_bit+0xb0/0x2f0 [ 260.423404][ T30] ? __pfx_bit_wait+0x10/0x10 [ 260.428218][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 260.433731][ T30] ? __pfx_bit_wait+0x10/0x10 [ 260.438528][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 260.444702][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 260.450335][ T30] netfs_retry_writes+0x16e/0x19b0 [ 260.475017][ T30] ? __pfx_validate_chain+0x10/0x10 [ 260.480303][ T30] ? stack_trace_save+0x118/0x1d0 [ 260.515099][ T30] ? __pfx_netfs_retry_writes+0x10/0x10 [ 260.520749][ T30] ? lockdep_unlock+0x16a/0x300 [ 260.532321][ T30] netfs_write_collection_worker+0x2f90/0x3bb0 [ 260.539075][ T30] ? process_scheduled_works+0x976/0x1840 [ 260.552227][ T30] process_scheduled_works+0xa66/0x1840 [ 260.559563][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 260.572901][ T30] ? assign_work+0x364/0x3d0 [ 260.579263][ T30] worker_thread+0x870/0xd30 [ 260.583907][ T30] ? __kthread_parkme+0x169/0x1d0 [ 260.589602][ T30] ? __pfx_worker_thread+0x10/0x10 [ 260.594775][ T30] kthread+0x2f0/0x390 [ 260.599264][ T30] ? __pfx_worker_thread+0x10/0x10 [ 260.607642][ T30] ? __pfx_kthread+0x10/0x10 [ 260.612361][ T30] ret_from_fork+0x4b/0x80 [ 260.617213][ T30] ? __pfx_kthread+0x10/0x10 [ 260.621855][ T30] ret_from_fork_asm+0x1a/0x30 [ 260.628180][ T30] [ 260.631322][ T30] [ 260.631322][ T30] Showing all locks held in the system: [ 260.639813][ T30] 1 lock held by khungtaskd/30: [ 260.644712][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 260.655414][ T30] 1 lock held by kworker/u8:4/61: [ 260.660475][ T30] #0: ffffffff8e7f5660 (sched_map-wait-type-override){+.+.}-{3:3}, at: schedule+0x90/0x320 [ 260.671075][ T30] 2 locks held by kworker/u8:8/3489: [ 260.676797][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 260.688651][ T30] #1: ffffc9000cfd7d00 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 260.703477][ T30] 1 lock held by dhcpcd/5489: [ 260.716292][ T30] #0: ffffffff8fca7ec8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 260.727100][ T30] 2 locks held by getty/5581: [ 260.731807][ T30] #0: ffff8880364720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 260.741944][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 260.752240][ T30] 1 lock held by syz-executor/5825: [ 260.758166][ T30] #0: ffffffff8e93d2b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 260.769286][ T30] 3 locks held by kworker/u8:10/5988: [ 260.774703][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 260.786474][ T30] #1: ffffc9000471fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 260.797654][ T30] #2: ffffffff8fca7ec8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 260.807844][ T30] 2 locks held by syz.3.20/5998: [ 260.812813][ T30] #0: ffff88807b6a8420 (sb_writers#14){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x220 [ 260.822768][ T30] #1: ffff88805f670148 (&sb->s_type->i_mutex_key#21){++++}-{4:4}, at: netfs_start_io_direct+0x1d4/0x210 [ 260.834172][ T30] 5 locks held by kworker/u8:12/6307: [ 260.839686][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 260.850770][ T30] #1: ffffc900057dfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 260.861387][ T30] #2: ffffffff8fc9ba10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 260.870950][ T30] #3: ffffffff8fca7ec8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe9/0xaa0 [ 260.881112][ T30] #4: ffffffff8e93d2b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 260.892227][ T30] 2 locks held by kworker/u8:13/6308: [ 260.898008][ T30] #0: ffff88814768e148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 260.909732][ T30] #1: ffffc900057cfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 260.922310][ T30] 2 locks held by syz-executor/6561: [ 260.927778][ T30] #0: ffffffff8f427c20 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 260.937524][ T30] #1: ffffffff8fca7ec8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 260.946962][ T30] 1 lock held by syz-executor/6753: [ 260.952194][ T30] #0: ffffffff8fca7ec8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 260.961499][ T30] 1 lock held by syz.1.169/6879: [ 260.966503][ T30] #0: ffffffff8fca7ec8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ifconf+0x266/0x420 [ 260.975534][ T30] 1 lock held by syz-executor/6904: [ 260.980759][ T30] #0: ffffffff8fca7ec8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 261.015065][ T30] [ 261.017450][ T30] ============================================= [ 261.017450][ T30] [ 261.038541][ T30] NMI backtrace for cpu 0 [ 261.042945][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 261.053137][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 261.063228][ T30] Call Trace: [ 261.066546][ T30] [ 261.069510][ T30] dump_stack_lvl+0x241/0x360 [ 261.074227][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.079551][ T30] ? __pfx__printk+0x10/0x10 [ 261.084241][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 261.089230][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 261.094729][ T30] ? _printk+0xd5/0x120 [ 261.099004][ T30] ? __pfx__printk+0x10/0x10 [ 261.103623][ T30] ? __wake_up_klogd+0xcc/0x110 [ 261.108520][ T30] ? __pfx__printk+0x10/0x10 [ 261.113149][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 261.118210][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 261.124243][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 261.130271][ T30] watchdog+0xff6/0x1040 [ 261.134546][ T30] ? watchdog+0x1ea/0x1040 [ 261.139002][ T30] ? __pfx_watchdog+0x10/0x10 [ 261.143981][ T30] kthread+0x2f0/0x390 [ 261.148089][ T30] ? __pfx_watchdog+0x10/0x10 [ 261.152800][ T30] ? __pfx_kthread+0x10/0x10 [ 261.157444][ T30] ret_from_fork+0x4b/0x80 [ 261.161986][ T30] ? __pfx_kthread+0x10/0x10 [ 261.166625][ T30] ret_from_fork_asm+0x1a/0x30 [ 261.171446][ T30] [ 261.175887][ T30] Sending NMI from CPU 0 to CPUs 1: [ 261.181543][ C1] NMI backtrace for cpu 1 [ 261.181564][ C1] CPU: 1 UID: 0 PID: 1147 Comm: kworker/u8:6 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 261.181583][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 261.181595][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 261.181622][ C1] RIP: 0010:__asan_memset+0x5/0x50 [ 261.181645][ C1] Code: 01 00 00 00 e9 3c e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 56 53 48 89 d3 41 89 f6 48 89 fd 48 8b 4c 24 18 48 89 d6 ba 01 [ 261.181659][ C1] RSP: 0018:ffffc900043bf7b0 EFLAGS: 00000046 [ 261.181673][ C1] RAX: ffffc900043bf9d0 RBX: dffffc0000000000 RCX: ffffffff854ce408 [ 261.181687][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900043bf9f0 [ 261.181698][ C1] RBP: ffffc900043bf970 R08: befaa9e8d02b6f41 R09: ed20538d6d702d2e [ 261.181710][ C1] R10: 566fbcf3e73a5fe2 R11: 041b453bc85c6408 R12: 000000000000000f [ 261.181722][ C1] R13: 1ffff110170e7576 R14: ffffc900043bf9c0 R15: ffff8880b873ab90 [ 261.181736][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 261.181749][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.181761][ C1] CR2: 0000000000000000 CR3: 000000000e736000 CR4: 00000000003526f0 [ 261.181775][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.181784][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 261.181795][ C1] Call Trace: [ 261.181801][ C1] [ 261.181808][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 261.181836][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 261.181857][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 261.181883][ C1] ? nmi_handle+0x2a/0x5a0 [ 261.181910][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 261.181936][ C1] ? nmi_handle+0x14f/0x5a0 [ 261.181954][ C1] ? nmi_handle+0x2a/0x5a0 [ 261.181974][ C1] ? __asan_memset+0x5/0x50 [ 261.181994][ C1] ? default_do_nmi+0x63/0x160 [ 261.182019][ C1] ? exc_nmi+0x123/0x1f0 [ 261.182044][ C1] ? end_repeat_nmi+0xf/0x53 [ 261.182070][ C1] ? crng_make_state+0x368/0xa80 [ 261.182106][ C1] ? __asan_memset+0x5/0x50 [ 261.182126][ C1] ? __asan_memset+0x5/0x50 [ 261.182146][ C1] ? __asan_memset+0x5/0x50 [ 261.182166][ C1] [ 261.182171][ C1] [ 261.182177][ C1] crng_make_state+0x378/0xa80 [ 261.182202][ C1] ? crng_make_state+0x196/0xa80 [ 261.182225][ C1] ? __pfx_crng_make_state+0x10/0x10 [ 261.182264][ C1] _get_random_bytes+0xd7/0x2c0 [ 261.182287][ C1] ? __pfx__get_random_bytes+0x10/0x10 [ 261.182327][ C1] ? kmem_cache_free+0x195/0x410 [ 261.182344][ C1] ? skb_put+0x114/0x1f0 [ 261.182369][ C1] nsim_dev_trap_report_work+0x328/0xb50 [ 261.182395][ C1] ? process_scheduled_works+0x976/0x1840 [ 261.182421][ C1] process_scheduled_works+0xa66/0x1840 [ 261.182460][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 261.182490][ C1] ? assign_work+0x364/0x3d0 [ 261.182517][ C1] worker_thread+0x870/0xd30 [ 261.182539][ C1] ? __kthread_parkme+0x169/0x1d0 [ 261.182558][ C1] ? __pfx_worker_thread+0x10/0x10 [ 261.182574][ C1] kthread+0x2f0/0x390 [ 261.182592][ C1] ? __pfx_worker_thread+0x10/0x10 [ 261.182607][ C1] ? __pfx_kthread+0x10/0x10 [ 261.182626][ C1] ret_from_fork+0x4b/0x80 [ 261.182641][ C1] ? __pfx_kthread+0x10/0x10 [ 261.182660][ C1] ret_from_fork_asm+0x1a/0x30 [ 261.182691][ C1] [ 261.533384][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 261.540297][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 261.550488][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 261.560579][ T30] Call Trace: [ 261.563888][ T30] [ 261.566845][ T30] dump_stack_lvl+0x241/0x360 [ 261.571567][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.576811][ T30] ? __pfx__printk+0x10/0x10 [ 261.581429][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 261.587449][ T30] ? vscnprintf+0x5d/0x90 [ 261.591816][ T30] panic+0x349/0x880 [ 261.595781][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 261.601969][ T30] ? __pfx_panic+0x10/0x10 [ 261.606394][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 261.611781][ T30] ? __irq_work_queue_local+0x137/0x410 [ 261.617339][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 261.622717][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 261.628918][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 261.635101][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 261.641271][ T30] watchdog+0x1035/0x1040 [ 261.645636][ T30] ? watchdog+0x1ea/0x1040 [ 261.650063][ T30] ? __pfx_watchdog+0x10/0x10 [ 261.654747][ T30] kthread+0x2f0/0x390 [ 261.658827][ T30] ? __pfx_watchdog+0x10/0x10 [ 261.663514][ T30] ? __pfx_kthread+0x10/0x10 [ 261.668114][ T30] ret_from_fork+0x4b/0x80 [ 261.672539][ T30] ? __pfx_kthread+0x10/0x10 [ 261.677141][ T30] ret_from_fork_asm+0x1a/0x30 [ 261.681927][ T30] [ 261.685281][ T30] Kernel Offset: disabled [ 261.689618][ T30] Rebooting in 86400 seconds..