last executing test programs: 2m40.099572687s ago: executing program 3 (id=30): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x2, 0x12, 0x0, 0x0, 0x2, 0x0, 0x70bd2c}, 0x10}}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) listen(0xffffffffffffffff, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$revoke(0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300), 0x8) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000cc0)=[{{&(0x7f00000003c0)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000440)=""/114, 0x72}, {&(0x7f00000004c0)=""/225, 0xe1}], 0x2, &(0x7f0000000600)=""/231, 0xe7}, 0x275a}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/2, 0x2}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000000880)=""/41, 0x29}, {&(0x7f0000000900)=""/232, 0xe8}, {&(0x7f0000000a00)=""/32, 0x20}, {&(0x7f0000000a40)=""/47, 0x2f}], 0x7, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010020, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, '|P3', 0x1}}}, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 2m35.214882355s ago: executing program 3 (id=36): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) lseek(0xffffffffffffffff, 0x851, 0x0) 2m33.014062259s ago: executing program 3 (id=39): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$netlink(0x10, 0x3, 0x8000000004) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x200140, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000010c0)={0x2c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x2c}}, 0x4004) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, 0x0, 0x4000000) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000030c0)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x0, 0x0, 0xf0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7}}}, {{@uncond, 0xffffff99, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @local, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @mangle={0x0, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private=0xa010100, 0xd, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0xff9b) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) 2m29.735754492s ago: executing program 3 (id=42): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_io_uring_setup(0x499, &(0x7f0000000200)={0x0, 0xf7c9, 0x0, 0x1, 0x193}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r2, 0x26c8, 0x0, 0x1, 0x0, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) landlock_restrict_self(r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x208, 0x270, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@remote, @ipv6=@empty, @ipv6=@loopback}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x59d) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001540), 0x1, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x1a) ioctl$TCSBRKP(r7, 0x5425, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r8, 0xc1004110, 0x0) 2m18.390673986s ago: executing program 3 (id=52): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x18, "001bf100eeff0000a2c2000100000000002000"}) syz_open_pts(r0, 0x101) syz_emit_ethernet(0x0, 0x0, 0x0) openat$rtc(0xffffff9c, 0x0, 0xb0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0xffffffffffffff9d, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2020, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @mcast2, 0x20000a}, {0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, r5, 0x173}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)}], 0x1) writev(r2, &(0x7f0000000540), 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149e82, 0x244) setresuid(0x0, 0xee01, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) 2m11.596829302s ago: executing program 3 (id=59): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000440)={0x8, 0x101, "f5b6c71a2cc86722169ec4e378627bcce5dca27dc6108fc04ddac7b7e2455017", 0x1, 0x7, 0x1, 0x83, 0x2}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) mkdirat(r6, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000100)={0x1, 0x0, [{0x40000001, 0x6, 0x4, 0x80, 0x8, 0xdda2}]}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) dup(0xffffffffffffffff) sendmsg$NFT_BATCH(r3, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) 1m56.289716629s ago: executing program 32 (id=59): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000440)={0x8, 0x101, "f5b6c71a2cc86722169ec4e378627bcce5dca27dc6108fc04ddac7b7e2455017", 0x1, 0x7, 0x1, 0x83, 0x2}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) mkdirat(r6, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000100)={0x1, 0x0, [{0x40000001, 0x6, 0x4, 0x80, 0x8, 0xdda2}]}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) dup(0xffffffffffffffff) sendmsg$NFT_BATCH(r3, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) 1m2.71995944s ago: executing program 4 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x8010) 1m0.993313962s ago: executing program 4 (id=104): socket$inet6_sctp(0xa, 0x1, 0x84) ioprio_set$pid(0x1, 0x0, 0x6000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0xa, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a2666343392fda11504800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000500)=r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x23, 0x0, 0x2}, 0x10) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) rseq(0x0, 0x0, 0x400000000, 0x0) shmctl$IPC_RMID(0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00003c8000/0x4000)=nil, 0x4000, &(0x7f0000000040)='[:Q%@\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 56.770339239s ago: executing program 4 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x300, 0x0, 0x0}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) r7 = dup(0xffffffffffffffff) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r7}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) geteuid() 52.874369293s ago: executing program 1 (id=114): r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0xfff5, 0x0}], 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) setrlimit(0x3, &(0x7f0000000000)={0xfffffffffffff829, 0x3}) read(r3, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061119a000000000085000000600000009500001600000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 51.179614397s ago: executing program 1 (id=116): r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x2) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="faffffffffffbbbbbbbbbbbb080045000038005f00000000019078ac1e0001ac1414aa04009078e00000e0450000000000000000110000ac1414aa0000000017c1b7df60c70088a571f78dda8266919b25775dc70cc53dd6c847cf58281e105f9e9d3ff7698eb08eaf9525841f803595719042ce7a9c6e90fe75e3ef0cde97277f9d697a4d6d4dd104f4538666f1503b9210f4ecf6ee4ce96c1ad5705d31f00fa10cb6ce0552388bd02f9bda0572a54c7be314d5dbc643e0fb3b0d35564f5180e19b22682920dc173af8227d4eecaf63ae3c6cb028f0fda7f8d6c63510227da84500953845da718a8b34f013d0ce7359237f779adc4df9ad5acb4be4f16441580286d08784d55d3da4e713bf575d7c033d4c5b43a91486de145f2166da2933d35d04e170802ec0e98c973944199f83c8911f6e82d983b42e539e"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e"], 0xfebe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = signalfd(r2, &(0x7f0000000040)={[0x8]}, 0x8) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000200)=0x4, 0x4) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x0, @tick=0xffffffff, {0x7}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x2}, {}, {}, @connect={{0x5, 0x1}, {0x6, 0xf}}}, {0x13, 0x0, 0x0, 0x3, @time={0x4, 0x7}, {}, {0x4, 0x80}, @raw8={"f81c703db135dc80a185eb39"}}, {0x0, 0x0, 0x0, 0x0, @tick=0x9, {}, {0x0, 0xfd}, @time}], 0x70) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000340)) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000301010200000000000000050000000008"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ftruncate(r2, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x95}, @in6=@private1, 0xfffc, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x10000}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="0800b685f75b2313db000000000000000000000000000800", 0x18) 47.821781498s ago: executing program 1 (id=119): sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) socket(0x2, 0x3, 0x67) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 45.720855965s ago: executing program 1 (id=120): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRKP(r0, 0x5425, 0x4) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00') openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x14) 45.423780609s ago: executing program 4 (id=124): shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r2 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) syz_open_dev$admmidi(0x0, 0x2, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$6lowpan_enable(r3, 0x0, 0x0) capset(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000040)={@multicast2, @empty}, 0xc) timer_create(0x3, 0x0, &(0x7f0000044000)) 40.958357598s ago: executing program 1 (id=125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}}, 0x4000040) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000180)=0x8) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) migrate_pages(0x0, 0x4, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x30000000}) 39.121420718s ago: executing program 4 (id=129): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x100) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) read$alg(r3, &(0x7f0000000080)=""/74, 0x4a) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) sendmsg$nl_generic(r4, 0x0, 0x40080c0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r6, 0x7a6, &(0x7f0000000040)={0x4, 0x1}) 37.899443875s ago: executing program 1 (id=132): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0, 0x0, 0x800d}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x742, 0x40) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000140)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0xfd, 0x1c, 0x5, 0x2, 0x4d, 0x2, 0xf9, 0x1, 0x80, 0xc, 0x8000000000000000}, {0x6, 0x80, 0x8, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0xff, 0x0, 0x7d}, {0xe2a5, 0x401, 0x1, 0x9, 0x2, 0x6, 0x8, 0xb, 0xff, 0x6, 0x56, 0x3, 0x100}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0x0, 0x0, 0x2, 0x7fffffff], 0x80a0000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$key(0xf, 0x3, 0x2) 36.627131375s ago: executing program 4 (id=134): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000009000000000000000000850000002e00000095000000000000000000c83b82d057d503da5d5565e7fca6f2e743e05c4eedc609c37c165de5e74d2abf34431850334aa45f3877cee4784e0942e03e7eaa4974aaf9c5df37803ee740f392169a9538b6c3d422ffa93f39fd8fd820df29b2825c16e9bcf37257b66220f7a79c45971e1ee902033fa5b466a212885282f9e907ea911182fa28235057ec9c52965eec56302fb8db2e74d6d6446c3c8d3fd327e0dea8bbac4b27"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x100039, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffa, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf256, 0x80, 0xb, 0x300000, 0x7, 0x11, 0x4623f, 0x6, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x20de, 0x8, 0x9, 0x1, 0x199f, 0xa, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x2, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x985, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0xffffff, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0xffffffff], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0xff, 0x5, 0x200003, 0x2, 0x5, 0x3, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x95e, 0x0, 0x3ff, 0x3, 0x9, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x5, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f493f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x800, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x8, 0x8, 0x401, 0x1, 0x1ed, 0x5, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0x12, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x100000, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x1}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, 0x0, &(0x7f0000000080)) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000000c0)="ad56b699f75b62641d884d2e43ca00f58cd2488900630c7e", 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x1002, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000836}, 0x0) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000080)) 35.157954517s ago: executing program 0 (id=136): syz_emit_ethernet(0x119, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, 0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x4f) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1}, 0x6e) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x7, {0x0, r2}, 0x2}) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) 31.638064289s ago: executing program 2 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x1, 0xbbdd, 0x1000}, {0x1, 0x3}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000002b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb000008000600000000000800050000"], 0xd0}}, 0x0) 31.509057013s ago: executing program 0 (id=139): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$key(0xf, 0x3, 0x2) r2 = dup(r1) accept$unix(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 30.456888155s ago: executing program 5 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) 20.540628138s ago: executing program 33 (id=132): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0, 0x0, 0x800d}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x742, 0x40) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000140)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0xfd, 0x1c, 0x5, 0x2, 0x4d, 0x2, 0xf9, 0x1, 0x80, 0xc, 0x8000000000000000}, {0x6, 0x80, 0x8, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0xff, 0x0, 0x7d}, {0xe2a5, 0x401, 0x1, 0x9, 0x2, 0x6, 0x8, 0xb, 0xff, 0x6, 0x56, 0x3, 0x100}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0x0, 0x0, 0x2, 0x7fffffff], 0x80a0000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$key(0xf, 0x3, 0x2) 20.50932757s ago: executing program 2 (id=142): syz_emit_ethernet(0x119, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, 0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x4f) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1}, 0x6e) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x7, {0x0, r2}, 0x2}) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) 20.379436546s ago: executing program 34 (id=134): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000009000000000000000000850000002e00000095000000000000000000c83b82d057d503da5d5565e7fca6f2e743e05c4eedc609c37c165de5e74d2abf34431850334aa45f3877cee4784e0942e03e7eaa4974aaf9c5df37803ee740f392169a9538b6c3d422ffa93f39fd8fd820df29b2825c16e9bcf37257b66220f7a79c45971e1ee902033fa5b466a212885282f9e907ea911182fa28235057ec9c52965eec56302fb8db2e74d6d6446c3c8d3fd327e0dea8bbac4b27"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x100039, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffa, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf256, 0x80, 0xb, 0x300000, 0x7, 0x11, 0x4623f, 0x6, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x20de, 0x8, 0x9, 0x1, 0x199f, 0xa, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x2, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x985, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0xffffff, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0xffffffff], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0xff, 0x5, 0x200003, 0x2, 0x5, 0x3, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x95e, 0x0, 0x3ff, 0x3, 0x9, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x5, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f493f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x800, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x8, 0x8, 0x401, 0x1, 0x1ed, 0x5, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0x12, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x100000, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x1}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, 0x0, &(0x7f0000000080)) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000000c0)="ad56b699f75b62641d884d2e43ca00f58cd2488900630c7e", 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x1002, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000836}, 0x0) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000080)) 20.310201554s ago: executing program 5 (id=144): openat$ptmx(0xffffffffffffff9c, 0x0, 0x80222, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) r2 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f00000000c0)={[0x9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) stat(0x0, &(0x7f0000000300)) getpid() r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2829da0a9423debbb86f9dba4a2dba4dbe076c28282900c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681000000140000800d000000cfe7336f91087b"], 0xe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) 19.14048122s ago: executing program 2 (id=145): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001811bf36cd1c40eb8b0200001d01080008", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x858, 0x30, 0x12f, 0x0, 0x0, {}, [{0x844, 0x1, [@m_police={0x840, 0x1, 0x0, 0x0, {{0xb}, {0x814, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x40, 0x40000, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff9}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x6, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffff9, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xffc, 0x401, 0x1, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x3, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x3, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x101, 0x6, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0xffffffff, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x8, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x7, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x5, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x858}}, 0x0) socket(0x8, 0x1, 0xffffffff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x23, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000000)) 19.048311904s ago: executing program 5 (id=146): sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) socket(0x2, 0x3, 0x67) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 17.091097579s ago: executing program 5 (id=147): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0xf, 0x8, 0x0, 0x7, "060045fc8aea4eb75941fa3a60e23307c07c380687b206000000073f687fb2b2"}) syz_io_uring_setup(0x633f, 0x0, &(0x7f0000000340), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000040)=0x60) getsockopt$nfc_llcp(r2, 0x118, 0x4, &(0x7f0000000580)=""/178, 0xb2) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x3, 0x0, 0x0, 0x0, 0x800005}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000000008400000005"], 0x20, 0x2400e044}, 0x4090) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000140)=0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000406d043fc100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) 16.952796884s ago: executing program 0 (id=148): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x9) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r4, 0x15, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000511000/0x4000)=nil, 0x4000, 0x4000004, 0x5d031, 0xffffffffffffffff, 0x0) gettid() r5 = socket(0x9, 0x80000, 0x7) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x40080) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x32) 16.85125685s ago: executing program 2 (id=149): socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, 0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x4f) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1}, 0x6e) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x7, {0x0, r2}, 0x2}) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) 5.182411786s ago: executing program 0 (id=150): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xd, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0xffffffff, 0x8, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x7b, 0x0, 0x0, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0x8000, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x0, 0x48c93690, 0x42, 0x400002], [0x6, 0x6, 0x80000001, 0x5, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x1000, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1ef, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x56, 0x1003, 0x1101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0xffffffff, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0x1ff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x9}, 0x8) 5.181529014s ago: executing program 2 (id=151): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c20000030000000000000800450000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) landlock_create_ruleset(&(0x7f0000000940)={0xe134, 0x0, 0x1}, 0xfffffffffffffff0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x8, 0x4000040d}) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x24000484) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) 4.894947635s ago: executing program 5 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2}, 0x94) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = fsopen(0x0, 0x1) r6 = fcntl$dupfd(r5, 0x406, r5) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000080), 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000040)={0x6, 0x34324258, 0x3, @discrete={0x3b79f0fc, 0xffffffff}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) sched_getattr(r0, &(0x7f0000000340)={0x38}, 0x38, 0x0) fanotify_init(0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) timerfd_gettime(0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40841}, 0x4000004) 2.034089808s ago: executing program 0 (id=153): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x80000000}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0x7fffffff, 0xc52, {{0x5, 0x4, 0x1, 0x7, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @broadcast, @local}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) gettid() mount(&(0x7f0000000080)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1004050, 0x0) 1.985901018s ago: executing program 5 (id=154): syz_emit_ethernet(0x119, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, 0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x4f) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1}, 0x6e) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x7, {0x0, r2}, 0x2}) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) 125.257963ms ago: executing program 0 (id=155): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRES32], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) r5 = socket$netlink(0x10, 0x3, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r5) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4006001}, 0x8880) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0xfffffffa, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x0, 0xf}, {0x14, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008090}, 0x40004) 0s ago: executing program 2 (id=156): sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) socket(0x2, 0x3, 0x67) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. [ 92.075316][ T31] cfg80211: failed to load regulatory.db [ 92.443353][ T5822] cgroup: Unknown subsys name 'net' [ 92.696848][ T5822] cgroup: Unknown subsys name 'cpuset' [ 92.751799][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.730720][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.760376][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.772964][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.790107][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.790490][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.822893][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.835203][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.836021][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.841998][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.843279][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.844659][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.845320][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.846354][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.848660][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.849490][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.849875][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.851713][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.853539][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.854488][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.855771][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.857248][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.857535][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.860570][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.891523][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.912796][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.937475][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.096122][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 99.149341][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 99.303424][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 99.442836][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 99.453392][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 99.992744][ T59] Bluetooth: hci3: command tx timeout [ 99.992749][ T5844] Bluetooth: hci2: command tx timeout [ 100.071428][ T5844] Bluetooth: hci1: command tx timeout [ 100.071686][ T59] Bluetooth: hci0: command tx timeout [ 100.112822][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.113720][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.114371][ T5840] bridge_slave_0: entered allmulticast mode [ 100.117548][ T5840] bridge_slave_0: entered promiscuous mode [ 100.151223][ T59] Bluetooth: hci4: command tx timeout [ 100.251602][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.251735][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.251955][ T5840] bridge_slave_1: entered allmulticast mode [ 100.254972][ T5840] bridge_slave_1: entered promiscuous mode [ 100.342843][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.343017][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.343213][ T5835] bridge_slave_0: entered allmulticast mode [ 100.346486][ T5835] bridge_slave_0: entered promiscuous mode [ 100.563624][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.563773][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.564348][ T5835] bridge_slave_1: entered allmulticast mode [ 100.566957][ T5835] bridge_slave_1: entered promiscuous mode [ 100.825561][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.825726][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.825982][ T5833] bridge_slave_0: entered allmulticast mode [ 100.828097][ T5833] bridge_slave_0: entered promiscuous mode [ 101.070670][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.070976][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.073111][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.073326][ T5833] bridge_slave_1: entered allmulticast mode [ 101.076339][ T5833] bridge_slave_1: entered promiscuous mode [ 101.157308][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.157449][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.157641][ T5834] bridge_slave_0: entered allmulticast mode [ 101.159815][ T5834] bridge_slave_0: entered promiscuous mode [ 101.170232][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.170395][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.181093][ T5847] bridge_slave_0: entered allmulticast mode [ 101.185126][ T5847] bridge_slave_0: entered promiscuous mode [ 101.198077][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.366840][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.367160][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.367299][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.367480][ T5834] bridge_slave_1: entered allmulticast mode [ 101.370921][ T5834] bridge_slave_1: entered promiscuous mode [ 101.387455][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.387614][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.387867][ T5847] bridge_slave_1: entered allmulticast mode [ 101.392247][ T5847] bridge_slave_1: entered promiscuous mode [ 101.577361][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.837313][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.047957][ T5840] team0: Port device team_slave_0 added [ 102.052273][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.072712][ T5844] Bluetooth: hci3: command tx timeout [ 102.072809][ T59] Bluetooth: hci2: command tx timeout [ 102.148536][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.151254][ T5844] Bluetooth: hci1: command tx timeout [ 102.151347][ T59] Bluetooth: hci0: command tx timeout [ 102.174941][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.178711][ T5840] team0: Port device team_slave_1 added [ 102.231407][ T59] Bluetooth: hci4: command tx timeout [ 102.255256][ T5835] team0: Port device team_slave_0 added [ 102.258977][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.276815][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.435592][ T5835] team0: Port device team_slave_1 added [ 102.863905][ T5833] team0: Port device team_slave_0 added [ 103.070051][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.070067][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.070086][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.077736][ T5833] team0: Port device team_slave_1 added [ 103.167465][ T5834] team0: Port device team_slave_0 added [ 103.169792][ T5847] team0: Port device team_slave_0 added [ 103.180486][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.180507][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.180539][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.276081][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.276095][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.276113][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.278693][ T5834] team0: Port device team_slave_1 added [ 103.296264][ T5847] team0: Port device team_slave_1 added [ 103.378024][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.378046][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.378074][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.583584][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.583598][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.583617][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.744394][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.744412][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.744441][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.907267][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.907285][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.907305][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.908640][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.908656][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.908683][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.026360][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.026379][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.026408][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.028170][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.028185][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.028213][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.159102][ T5844] Bluetooth: hci3: command tx timeout [ 104.159199][ T59] Bluetooth: hci2: command tx timeout [ 104.165163][ T5840] hsr_slave_0: entered promiscuous mode [ 104.167690][ T5840] hsr_slave_1: entered promiscuous mode [ 104.231440][ T5844] Bluetooth: hci1: command tx timeout [ 104.231561][ T59] Bluetooth: hci0: command tx timeout [ 104.294530][ T5835] hsr_slave_0: entered promiscuous mode [ 104.295515][ T5835] hsr_slave_1: entered promiscuous mode [ 104.296374][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 104.296466][ T5835] Cannot create hsr debugfs directory [ 104.311354][ T59] Bluetooth: hci4: command tx timeout [ 104.700854][ T5833] hsr_slave_0: entered promiscuous mode [ 104.703050][ T5833] hsr_slave_1: entered promiscuous mode [ 104.704155][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 104.704185][ T5833] Cannot create hsr debugfs directory [ 105.022990][ T5834] hsr_slave_0: entered promiscuous mode [ 105.024422][ T5834] hsr_slave_1: entered promiscuous mode [ 105.025087][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 105.025112][ T5834] Cannot create hsr debugfs directory [ 105.033133][ T5847] hsr_slave_0: entered promiscuous mode [ 105.034633][ T5847] hsr_slave_1: entered promiscuous mode [ 105.035712][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 105.035742][ T5847] Cannot create hsr debugfs directory [ 106.232694][ T5844] Bluetooth: hci3: command tx timeout [ 106.232741][ T59] Bluetooth: hci2: command tx timeout [ 106.311294][ T5844] Bluetooth: hci1: command tx timeout [ 106.311360][ T59] Bluetooth: hci0: command tx timeout [ 106.391824][ T59] Bluetooth: hci4: command tx timeout [ 106.833731][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.885951][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.918865][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.975062][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.106099][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.141236][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.196804][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.255130][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.412852][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.457605][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.506226][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.562396][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.738038][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.797835][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.840253][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.900392][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.081643][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.107011][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.167795][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.215352][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.256407][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.359458][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.417246][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.444041][ T4885] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.444569][ T4885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.496316][ T4885] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.496464][ T4885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.578451][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.648212][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.648380][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.682757][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.704072][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.704304][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.842397][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.866322][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.940013][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.940255][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.022784][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.022939][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.076981][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.143280][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.155324][ T4885] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.156285][ T4885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.220197][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.221258][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.339255][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.425389][ T3199] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.431289][ T3199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.508633][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.508866][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.561847][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.818782][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.085505][ T5840] veth0_vlan: entered promiscuous mode [ 110.166687][ T5840] veth1_vlan: entered promiscuous mode [ 110.207698][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.282057][ T5835] veth0_vlan: entered promiscuous mode [ 110.398338][ T5835] veth1_vlan: entered promiscuous mode [ 110.412601][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.545704][ T5840] veth0_macvtap: entered promiscuous mode [ 110.593327][ T5840] veth1_macvtap: entered promiscuous mode [ 110.699956][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.738815][ T5833] veth0_vlan: entered promiscuous mode [ 110.773267][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.777908][ T5835] veth0_macvtap: entered promiscuous mode [ 110.835147][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.849287][ T5835] veth1_macvtap: entered promiscuous mode [ 110.894852][ T5833] veth1_vlan: entered promiscuous mode [ 110.918980][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.931271][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.955056][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.983833][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.069286][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.137475][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.283479][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.288175][ T5847] veth0_vlan: entered promiscuous mode [ 111.297227][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.354085][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.387285][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.412947][ T5833] veth0_macvtap: entered promiscuous mode [ 111.482612][ T3199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.482639][ T3199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.504846][ T5847] veth1_vlan: entered promiscuous mode [ 111.510101][ T5833] veth1_macvtap: entered promiscuous mode [ 111.537068][ T5834] veth0_vlan: entered promiscuous mode [ 111.699376][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.699399][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.734965][ T5834] veth1_vlan: entered promiscuous mode [ 111.797189][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.877480][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.888548][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.888575][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.984925][ T3199] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.019851][ T3199] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.059903][ T3565] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.070398][ T5847] veth0_macvtap: entered promiscuous mode [ 112.119597][ T3565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.127653][ T4885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.127678][ T4885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.180309][ T5847] veth1_macvtap: entered promiscuous mode [ 112.291053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.332144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.332328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.391841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.421035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.421084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.421126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.421165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.421209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.421248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.960224][ T5834] veth0_macvtap: entered promiscuous mode [ 113.047911][ T5834] veth1_macvtap: entered promiscuous mode [ 113.094026][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.235421][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.359254][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.378628][ T5962] input: syz0 as /devices/virtual/input/input5 [ 113.403078][ T4885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.403099][ T4885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.430907][ T3199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.451669][ T3199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.722206][ T3199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.749695][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.111060][ T4885] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.933123][ T1179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.993916][ T1179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.998511][ T5958] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.003427][ T5958] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.742152][ T5985] netlink: 'syz.1.8': attribute type 21 has an invalid length. [ 116.744866][ T5985] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8'. [ 116.744899][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 117.911363][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 117.911392][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 118.189812][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.268394][ T6001] Zero length message leads to an empty skb [ 120.631453][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.633319][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 120.633344][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 122.951629][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.953898][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 122.953922][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 125.111508][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 125.111537][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 125.112020][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.351290][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.351578][ T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 127.351599][ T9] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 128.323048][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.323071][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.329421][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.329442][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.241235][ T1691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.241256][ T1691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.434078][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.434102][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.715932][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.715954][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.757204][ T6086] Invalid ELF header magic: != ELF [ 132.174751][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 132.175258][ T6087] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 132.175294][ T6087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.373595][ T6097] random: crng reseeded on system resumption [ 133.544733][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 137.197759][ T6132] atomic_op ffff88803d1a0a18 conn xmit_atomic 0000000000000000 [ 138.561561][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.561631][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.567652][ T6127] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 139.701690][ T6131] syz.4.5 (6131) used greatest stack depth: 17088 bytes left [ 140.073527][ T6138] Bluetooth: MGMT ver 1.23 [ 140.816944][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805e0c3800: rx timeout, send abort [ 141.316899][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805e0c9c00: rx timeout, send abort [ 141.317602][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805e0c3800: abort rx timeout. Force session deactivation [ 141.901806][ T5923] IPVS: starting estimator thread 0... [ 142.624323][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805e0c9c00: abort rx timeout. Force session deactivation [ 142.801300][ T6153] IPVS: using max 7 ests per chain, 16800 per kthread [ 144.169098][ T6157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.106961][ T6201] Bluetooth: MGMT ver 1.23 [ 156.653149][ T6226] process 'syz.4.43' launched './file0' with NULL argv: empty string added [ 159.417601][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.436476][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.437756][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.439743][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.440756][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.617727][ T59] Bluetooth: hci5: command tx timeout [ 163.671250][ T59] Bluetooth: hci5: command tx timeout [ 163.983389][ T5923] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 164.161330][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 164.168372][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short [ 164.224655][ T5923] usb 2-1: config 2 has an invalid interface number: 189 but max is 0 [ 164.224687][ T5923] usb 2-1: config 2 has an invalid descriptor of length 10, skipping remainder of the config [ 164.224707][ T5923] usb 2-1: config 2 has no interface number 0 [ 164.225243][ T5923] usb 2-1: config 2 interface 189 has no altsetting 0 [ 164.268352][ T5923] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 164.268385][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.268403][ T5923] usb 2-1: Product: syz [ 164.268413][ T5923] usb 2-1: Manufacturer: syz [ 164.268424][ T5923] usb 2-1: SerialNumber: syz [ 164.542362][ T5923] usb 2-1: can't set config #2, error -71 [ 164.638387][ T5923] usb 2-1: USB disconnect, device number 2 [ 164.981332][ T6254] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 165.749469][ T6254] block nbd0: shutting down sockets [ 165.751346][ T59] Bluetooth: hci5: command tx timeout [ 167.181757][ T6262] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 167.857550][ T59] Bluetooth: hci5: command tx timeout [ 168.700675][ T6276] ======================================================= [ 168.700675][ T6276] WARNING: The mand mount option has been deprecated and [ 168.700675][ T6276] and is ignored by this kernel. Remove the mand [ 168.700675][ T6276] option from the mount to silence this warning. [ 168.700675][ T6276] ======================================================= [ 171.255451][ T6285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.896516][ T6299] block nbd4: Attempted send on invalid socket [ 173.896578][ T6299] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.896985][ T6299] block nbd4: Attempted send on invalid socket [ 173.896997][ T6299] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.897070][ T6299] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 173.897354][ T6299] block nbd4: Attempted send on invalid socket [ 173.897364][ T6299] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.897427][ T6299] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 173.898578][ T6299] block nbd4: Attempted send on invalid socket [ 173.898591][ T6299] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.898819][ T6299] block nbd4: Attempted send on invalid socket [ 173.898829][ T6299] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.898891][ T6299] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 173.899326][ T6299] block nbd4: Attempted send on invalid socket [ 173.899337][ T6299] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.899401][ T6299] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 173.899914][ T6299] block nbd4: Attempted send on invalid socket [ 173.899925][ T6299] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.138912][ T6301] overlay: Unknown parameter '/' [ 175.200497][ T6299] block nbd4: Attempted send on invalid socket [ 175.200517][ T6299] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.200594][ T6299] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 175.200752][ T6299] block nbd4: Attempted send on invalid socket [ 175.200763][ T6299] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.200827][ T6299] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 175.259099][ T6299] block nbd4: Attempted send on invalid socket [ 175.259124][ T6299] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.259503][ T6299] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 175.452265][ T6299] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 175.452294][ T6299] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 175.719014][ T1508] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.318728][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880340a6c00: rx timeout, send abort [ 177.118394][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805d5f7800: rx timeout, send abort [ 177.118449][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880340a6c00: abort rx timeout. Force session deactivation [ 177.620196][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805d5f7800: abort rx timeout. Force session deactivation [ 178.726698][ T6324] syz.4.63 uses obsolete (PF_INET,SOCK_PACKET) [ 182.135288][ T1508] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.469592][ T6341] sd 0:0:1:0: device reset [ 186.001281][ T38] audit: type=1326 audit(1755979675.282:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6337 comm="syz.2.68" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cc6d9ebe9 code=0x0 [ 186.786848][ T1508] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.217425][ T6362] sctp: [Deprecated]: syz.1.73 (pid 6362) Use of int in max_burst socket option deprecated. [ 188.217425][ T6362] Use struct sctp_assoc_value instead [ 189.138855][ T6372] random: crng reseeded on system resumption [ 189.513946][ T6375] nbd_handle_cmd: 2 callbacks suppressed [ 189.513964][ T6375] block nbd2: Attempted send on invalid socket [ 189.513976][ T6375] blk_print_req_error: 2 callbacks suppressed [ 189.513985][ T6375] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 189.514350][ T6375] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 190.626188][ T6368] random: crng reseeded on system resumption [ 191.867304][ T5924] IPVS: starting estimator thread 0... [ 191.894001][ T1508] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.983107][ T6386] IPVS: using max 10 ests per chain, 24000 per kthread [ 192.858194][ T6395] syz.4.81 uses old SIOCAX25GETINFO [ 197.156261][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.168505][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.180529][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.194672][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.195404][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.629282][ T6238] chnl_net:caif_netlink_parms(): no params data found [ 197.857149][ T1508] bridge_slave_1: left allmulticast mode [ 197.857466][ T1508] bridge_slave_1: left promiscuous mode [ 197.859191][ T1508] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.944652][ T1508] bridge_slave_0: left allmulticast mode [ 197.944689][ T1508] bridge_slave_0: left promiscuous mode [ 197.944970][ T1508] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.272526][ T59] Bluetooth: hci0: command tx timeout [ 199.598168][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.598260][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.852167][ T1508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.912134][ T1508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.937966][ T1508] bond0 (unregistering): Released all slaves [ 200.610500][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.610654][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.610901][ T6238] bridge_slave_0: entered allmulticast mode [ 200.644412][ T6238] bridge_slave_0: entered promiscuous mode [ 200.665094][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.665317][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.665564][ T6238] bridge_slave_1: entered allmulticast mode [ 200.668467][ T6238] bridge_slave_1: entered promiscuous mode [ 201.040009][ T6238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.201502][ T1508] hsr_slave_0: left promiscuous mode [ 201.222866][ T1508] hsr_slave_1: left promiscuous mode [ 201.224124][ T1508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.224234][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.284486][ T1508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.284520][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.351311][ T59] Bluetooth: hci0: command tx timeout [ 201.369432][ T1508] veth1_macvtap: left promiscuous mode [ 201.369706][ T1508] veth0_macvtap: left promiscuous mode [ 201.370104][ T1508] veth1_vlan: left promiscuous mode [ 201.370484][ T1508] veth0_vlan: left promiscuous mode [ 203.431157][ T59] Bluetooth: hci0: command tx timeout [ 203.651884][ T1508] team0 (unregistering): Port device team_slave_1 removed [ 203.883516][ T1508] team0 (unregistering): Port device team_slave_0 removed [ 205.511147][ T59] Bluetooth: hci0: command tx timeout [ 206.128675][ T6238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.356204][ T6238] team0: Port device team_slave_0 added [ 206.407287][ T6238] team0: Port device team_slave_1 added [ 206.678458][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.678478][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.678507][ T6238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.680097][ T6421] chnl_net:caif_netlink_parms(): no params data found [ 206.697692][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.697713][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.697746][ T6238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.218712][ T6238] hsr_slave_0: entered promiscuous mode [ 207.220183][ T6238] hsr_slave_1: entered promiscuous mode [ 207.221589][ T6238] debugfs: 'hsr0' already exists in 'hsr' [ 207.221615][ T6238] Cannot create hsr debugfs directory [ 207.762130][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.771276][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.771568][ T6421] bridge_slave_0: entered allmulticast mode [ 207.774963][ T6421] bridge_slave_0: entered promiscuous mode [ 207.898312][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.898438][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.898656][ T6421] bridge_slave_1: entered allmulticast mode [ 207.902970][ T6421] bridge_slave_1: entered promiscuous mode [ 208.158117][ T6421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.187934][ T6421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.769302][ T6421] team0: Port device team_slave_0 added [ 208.957043][ T1508] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.987403][ T6421] team0: Port device team_slave_1 added [ 209.305822][ T1508] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.356394][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.356411][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.356437][ T6421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.363747][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.363768][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.363798][ T6421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.718155][ T1508] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.972052][ T6421] hsr_slave_0: entered promiscuous mode [ 209.981820][ T6421] hsr_slave_1: entered promiscuous mode [ 209.983420][ T6421] debugfs: 'hsr0' already exists in 'hsr' [ 209.983450][ T6421] Cannot create hsr debugfs directory [ 210.226149][ T1508] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.333995][ T1508] bridge_slave_1: left allmulticast mode [ 211.334031][ T1508] bridge_slave_1: left promiscuous mode [ 211.336969][ T1508] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.407902][ T1508] bridge_slave_0: left allmulticast mode [ 211.407928][ T1508] bridge_slave_0: left promiscuous mode [ 211.408109][ T1508] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.212169][ T1508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.273084][ T1508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.316257][ T1508] bond0 (unregistering): Released all slaves [ 213.546005][ T6238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.614886][ T6238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.830780][ T6238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.936450][ T6238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.551225][ T1508] hsr_slave_0: left promiscuous mode [ 214.571278][ T1508] hsr_slave_1: left promiscuous mode [ 214.572317][ T1508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.572347][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.612289][ T1508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.612324][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.697137][ T1508] veth1_macvtap: left promiscuous mode [ 214.697225][ T1508] veth0_macvtap: left promiscuous mode [ 214.697469][ T1508] veth1_vlan: left promiscuous mode [ 214.697613][ T1508] veth0_vlan: left promiscuous mode [ 217.054645][ T1508] team0 (unregistering): Port device team_slave_1 removed [ 217.273506][ T1508] team0 (unregistering): Port device team_slave_0 removed [ 217.979364][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.985678][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.994318][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.995738][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.996659][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.642705][ T6421] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 219.678950][ T6421] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 219.791196][ T6421] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 219.842430][ T6421] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.071750][ T59] Bluetooth: hci2: command tx timeout [ 220.983002][ T6421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.045428][ T6421] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.139843][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.140738][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.161605][ T6486] chnl_net:caif_netlink_parms(): no params data found [ 221.300289][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.300467][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.152032][ T5844] Bluetooth: hci2: command tx timeout [ 222.202190][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.202342][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.202636][ T6486] bridge_slave_0: entered allmulticast mode [ 222.211350][ T6486] bridge_slave_0: entered promiscuous mode [ 222.246856][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.247009][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.247255][ T6486] bridge_slave_1: entered allmulticast mode [ 222.257482][ T6486] bridge_slave_1: entered promiscuous mode [ 222.803991][ T6486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.052537][ T6486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.565690][ T6486] team0: Port device team_slave_0 added [ 223.593879][ T6486] team0: Port device team_slave_1 added [ 223.952163][ T6486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.952181][ T6486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.952210][ T6486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.994987][ T6486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.995006][ T6486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.995034][ T6486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.231284][ T5844] Bluetooth: hci2: command tx timeout [ 224.530570][ T6486] hsr_slave_0: entered promiscuous mode [ 224.543086][ T6486] hsr_slave_1: entered promiscuous mode [ 224.544016][ T6486] debugfs: 'hsr0' already exists in 'hsr' [ 224.544039][ T6486] Cannot create hsr debugfs directory [ 225.067360][ T1508] bridge_slave_1: left allmulticast mode [ 225.067394][ T1508] bridge_slave_1: left promiscuous mode [ 225.067666][ T1508] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.157224][ T1508] bridge_slave_0: left allmulticast mode [ 225.157250][ T1508] bridge_slave_0: left promiscuous mode [ 225.157487][ T1508] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.573634][ T1508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.676926][ T1508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.736026][ T1508] bond0 (unregistering): Released all slaves [ 226.094702][ T1508] hsr_slave_0: left promiscuous mode [ 226.132984][ T1508] hsr_slave_1: left promiscuous mode [ 226.134026][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.162111][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.311182][ T5844] Bluetooth: hci2: command tx timeout [ 226.942337][ T1508] team0 (unregistering): Port device team_slave_1 removed [ 227.082168][ T1508] team0 (unregistering): Port device team_slave_0 removed [ 227.647087][ T6421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.510586][ T6421] veth0_vlan: entered promiscuous mode [ 228.530698][ T6421] veth1_vlan: entered promiscuous mode [ 228.724852][ T6421] veth0_macvtap: entered promiscuous mode [ 228.872141][ T6421] veth1_macvtap: entered promiscuous mode [ 229.079285][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.080527][ T6486] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.130268][ T6486] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 229.162964][ T6486] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.201920][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.204695][ T6486] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.279309][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.290653][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.310674][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.325834][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.784088][ T1508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.784111][ T1508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.007280][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.007303][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.068965][ T6486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.155623][ T6486] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.190791][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.191211][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.234149][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.234664][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.893657][ T6645] random: crng reseeded on system resumption [ 235.391543][ T6658] random: crng reseeded on system resumption [ 238.373012][ T6683] overlayfs: failed to resolve './file1': -2 [ 238.850576][ T6687] trusted_key: encrypted_key: insufficient parameters specified [ 239.840331][ T6486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.746828][ T6700] random: crng reseeded on system resumption [ 241.701359][ T6486] veth0_vlan: entered promiscuous mode [ 241.781615][ T6486] veth1_vlan: entered promiscuous mode [ 243.136961][ T6713] bond1: entered promiscuous mode [ 243.136984][ T6713] bond1: entered allmulticast mode [ 243.137422][ T6713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.938529][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.065526][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.211624][ T6486] veth0_macvtap: entered promiscuous mode [ 247.354399][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.450573][ T6486] veth1_macvtap: entered promiscuous mode [ 247.596812][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.770905][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 247.771007][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 247.805916][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.052517][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.123832][ T5958] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.142104][ T5958] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.142159][ T5958] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.142199][ T5958] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.514898][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.637595][ T6744] overlayfs: failed to resolve './file1': -2 [ 248.977863][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.278538][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.536805][ T6758] random: crng reseeded on system resumption [ 250.955761][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.955785][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.286314][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.286338][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.703543][ T6769] trusted_key: syz.1.114 sent an empty control message without MSG_MORE. [ 253.687607][ T6783] sd 0:0:1:0: device reset [ 254.944867][ T6785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.116'. [ 254.945367][ T6785] unsupported nlmsg_type 40 [ 254.964528][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 262.131800][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.143533][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.983815][ T6827] QAT: failed to copy from user cfg_data. [ 264.900151][ T6841] overlayfs: failed to resolve './file0': -2 [ 266.889018][ T6862] Bluetooth: MGMT ver 1.23 [ 271.070544][ T6880] input: syz1 as /devices/virtual/input/input6 [ 273.552171][ T6901] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 274.449606][ T6909] netlink: 100 bytes leftover after parsing attributes in process `syz.2.138'. [ 275.751539][ T59] Bluetooth: hci0: command 0x0401 tx timeout [ 284.549264][ T6929] program syz.5.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.980669][ T5901] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 288.648165][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.648202][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.682487][ T5901] usb 6-1: New USB device found, idVendor=046d, idProduct=c13f, bcdDevice= 0.00 [ 288.703948][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.476263][ T5901] usb 6-1: config 0 descriptor?? [ 299.289845][ T5901] usb 6-1: can't set config #0, error -71 [ 299.305327][ T5901] usb 6-1: USB disconnect, device number 2 [ 299.526112][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.546847][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.548558][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.623496][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.624623][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.321065][ T5844] Bluetooth: hci1: command tx timeout [ 302.434492][ T6957] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 302.442613][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.460415][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.464806][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.488914][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.505400][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.897385][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.153585][ T6979] ufs: You didn't specify the type of your ufs filesystem [ 303.153585][ T6979] [ 303.153585][ T6979] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 303.153585][ T6979] [ 303.153585][ T6979] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 303.153933][ T6979] ufs: ufstype=old is supported read-only [ 303.194444][ T6979] ufs: ufs_fill_super(): bad magic number [ 303.282119][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.884251][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.234626][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.391122][ T5844] Bluetooth: hci1: command tx timeout [ 304.625542][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.654273][ T5844] Bluetooth: hci3: command tx timeout [ 304.802817][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.996588][ T6986] [ 304.996605][ T6986] ====================================================== [ 304.996615][ T6986] WARNING: possible circular locking dependency detected [ 304.996635][ T6986] syzkaller #0 Not tainted [ 304.996647][ T6986] ------------------------------------------------------ [ 304.996655][ T6986] syz.0.155/6986 is trying to acquire lock: [ 304.996667][ T6986] ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 304.996738][ T6986] [ 304.996738][ T6986] but task is already holding lock: [ 304.996744][ T6986] ffff8880240ee3a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 304.996792][ T6986] [ 304.996792][ T6986] which lock already depends on the new lock. [ 304.996792][ T6986] [ 304.996800][ T6986] [ 304.996800][ T6986] the existing dependency chain (in reverse order) is: [ 304.996807][ T6986] [ 304.996807][ T6986] -> #4 (&dev->vblank_time_lock){+.+.}-{3:3}: [ 304.996836][ T6986] lock_acquire+0x120/0x360 [ 304.996862][ T6986] rt_spin_lock+0x88/0x2c0 [ 304.996881][ T6986] drm_crtc_vblank_on_config+0x2cd/0x860 [ 304.996905][ T6986] drm_crtc_vblank_on+0x88/0xc0 [ 304.996926][ T6986] drm_atomic_helper_commit_modeset_enables+0x602/0xe10 [ 304.996951][ T6986] vkms_atomic_commit_tail+0x69/0x210 [ 304.996973][ T6986] commit_tail+0x281/0x3a0 [ 304.996993][ T6986] drm_atomic_helper_commit+0xa6b/0xb10 [ 304.997015][ T6986] drm_atomic_commit+0x262/0x2c0 [ 304.997034][ T6986] drm_client_modeset_commit_atomic+0x620/0x760 [ 304.997064][ T6986] drm_client_modeset_commit_locked+0xce/0x4d0 [ 304.997094][ T6986] drm_client_modeset_commit+0x4a/0x70 [ 304.997124][ T6986] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 304.997146][ T6986] drm_fb_helper_set_par+0xaf/0x100 [ 304.997167][ T6986] fbcon_init+0x1255/0x2370 [ 304.997193][ T6986] visual_init+0x2ef/0x650 [ 304.997216][ T6986] do_bind_con_driver+0x890/0xf70 [ 304.997241][ T6986] do_take_over_console+0x899/0xa10 [ 304.997266][ T6986] do_fbcon_takeover+0x118/0x200 [ 304.997291][ T6986] fbcon_fb_registered+0x35e/0x610 [ 304.997315][ T6986] register_framebuffer+0x70f/0x890 [ 304.997342][ T6986] __drm_fb_helper_initial_config_and_unlock+0x130a/0x18a0 [ 304.997367][ T6986] drm_fbdev_client_hotplug+0x16f/0x230 [ 304.997391][ T6986] drm_client_register+0x16f/0x210 [ 304.997417][ T6986] drm_fbdev_client_setup+0x19f/0x3f0 [ 304.997448][ T6986] drm_client_setup+0x10a/0x230 [ 304.997472][ T6986] vkms_init+0x3e0/0x4b0 [ 304.997497][ T6986] do_one_initcall+0x233/0x820 [ 304.997515][ T6986] do_initcall_level+0x104/0x190 [ 304.997544][ T6986] do_initcalls+0x59/0xa0 [ 304.997572][ T6986] kernel_init_freeable+0x334/0x4b0 [ 304.997602][ T6986] kernel_init+0x1d/0x1d0 [ 304.997638][ T6986] ret_from_fork+0x3fc/0x770 [ 304.997661][ T6986] ret_from_fork_asm+0x1a/0x30 [ 304.997679][ T6986] [ 304.997679][ T6986] -> #3 (&dev->vbl_lock){+.+.}-{3:3}: [ 304.997706][ T6986] lock_acquire+0x120/0x360 [ 304.997729][ T6986] rt_spin_lock+0x88/0x2c0 [ 304.997745][ T6986] vblank_disable_fn+0x72/0x190 [ 304.997763][ T6986] call_timer_fn+0x17e/0x5f0 [ 304.997788][ T6986] __run_timer_base+0x648/0x970 [ 304.997809][ T6986] run_timer_softirq+0xb7/0x180 [ 304.997831][ T6986] handle_softirqs+0x22c/0x710 [ 304.997853][ T6986] run_ktimerd+0xcf/0x190 [ 304.997878][ T6986] smpboot_thread_fn+0x53f/0xa60 [ 304.997920][ T6986] kthread+0x70e/0x8a0 [ 304.997948][ T6986] ret_from_fork+0x3fc/0x770 [ 304.997971][ T6986] ret_from_fork_asm+0x1a/0x30 [ 304.997990][ T6986] [ 304.997990][ T6986] -> #2 ((&vblank->disable_timer)){+...}-{0:0}: [ 304.998017][ T6986] lock_acquire+0x120/0x360 [ 304.998041][ T6986] call_timer_fn+0xdb/0x5f0 [ 304.998066][ T6986] __run_timer_base+0x648/0x970 [ 304.998087][ T6986] run_timer_softirq+0xb7/0x180 [ 304.998110][ T6986] handle_softirqs+0x22c/0x710 [ 304.998133][ T6986] run_ktimerd+0xcf/0x190 [ 304.998159][ T6986] smpboot_thread_fn+0x53f/0xa60 [ 304.998182][ T6986] kthread+0x70e/0x8a0 [ 304.998210][ T6986] ret_from_fork+0x3fc/0x770 [ 304.998233][ T6986] ret_from_fork_asm+0x1a/0x30 [ 304.998251][ T6986] [ 304.998251][ T6986] -> #1 (&base->expiry_lock){+...}-{3:3}: [ 304.998278][ T6986] lock_acquire+0x120/0x360 [ 304.998303][ T6986] rt_spin_lock+0x88/0x2c0 [ 304.998320][ T6986] __run_timer_base+0x114/0x970 [ 304.998341][ T6986] run_timer_softirq+0x67/0x180 [ 304.998364][ T6986] handle_softirqs+0x22c/0x710 [ 304.998387][ T6986] run_ktimerd+0xcf/0x190 [ 304.998413][ T6986] smpboot_thread_fn+0x53f/0xa60 [ 304.998441][ T6986] kthread+0x70e/0x8a0 [ 304.998470][ T6986] ret_from_fork+0x3fc/0x770 [ 304.998494][ T6986] ret_from_fork_asm+0x1a/0x30 [ 304.998512][ T6986] [ 304.998512][ T6986] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 304.998539][ T6986] validate_chain+0xb9b/0x2140 [ 304.998568][ T6986] __lock_acquire+0xab9/0xd20 [ 304.998593][ T6986] reacquire_held_locks+0x127/0x1d0 [ 304.998622][ T6986] lock_release+0x1b4/0x3e0 [ 304.998647][ T6986] __local_bh_enable_ip+0x10c/0x270 [ 304.998670][ T6986] hrtimer_cancel+0x39/0x60 [ 304.998699][ T6986] drm_vblank_disable_and_save+0x1bc/0x380 [ 304.998719][ T6986] drm_crtc_vblank_off+0x22e/0x820 [ 304.998740][ T6986] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 304.998764][ T6986] vkms_atomic_commit_tail+0x51/0x210 [ 304.998785][ T6986] commit_tail+0x281/0x3a0 [ 304.998805][ T6986] drm_atomic_helper_commit+0xa6b/0xb10 [ 304.998827][ T6986] drm_atomic_commit+0x262/0x2c0 [ 304.998845][ T6986] drm_client_modeset_commit_atomic+0x620/0x760 [ 304.998876][ T6986] drm_client_modeset_dpms+0x182/0x8c0 [ 304.998905][ T6986] drm_fb_helper_blank+0xf5/0x140 [ 304.998924][ T6986] fb_blank+0xcd/0x220 [ 304.998949][ T6986] fbcon_blank+0x4e6/0xbf0 [ 304.998974][ T6986] do_blank_screen+0x519/0x790 [ 304.998999][ T6986] tioclinux+0x314/0x530 [ 304.999022][ T6986] vt_ioctl+0x81a/0x1f00 [ 304.999043][ T6986] tty_ioctl+0x92c/0xde0 [ 304.999070][ T6986] __se_sys_ioctl+0xfc/0x170 [ 304.999091][ T6986] do_syscall_64+0xfa/0x3b0 [ 304.999117][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.999136][ T6986] [ 304.999136][ T6986] other info that might help us debug this: [ 304.999136][ T6986] [ 304.999143][ T6986] Chain exists of: [ 304.999143][ T6986] (softirq_ctrl.lock) --> &dev->vbl_lock --> &dev->vblank_time_lock [ 304.999143][ T6986] [ 304.999177][ T6986] Possible unsafe locking scenario: [ 304.999177][ T6986] [ 304.999184][ T6986] CPU0 CPU1 [ 304.999190][ T6986] ---- ---- [ 304.999196][ T6986] lock(&dev->vblank_time_lock); [ 304.999210][ T6986] lock(&dev->vbl_lock); [ 304.999225][ T6986] lock(&dev->vblank_time_lock); [ 304.999240][ T6986] lock((softirq_ctrl.lock)); [ 304.999253][ T6986] [ 304.999253][ T6986] *** DEADLOCK *** [ 304.999253][ T6986] [ 304.999259][ T6986] 12 locks held by syz.0.155/6986: [ 304.999271][ T6986] #0: ffffffff8d99cc80 (console_lock){+.+.}-{0:0}, at: tioclinux+0x304/0x530 [ 304.999324][ T6986] #1: ffff88801e73eaa0 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_blank+0xeb/0x140 [ 304.999374][ T6986] #2: ffff8880240ee1d8 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x20/0x80 [ 304.999459][ T6986] #3: ffff88801e73e888 (&client->modeset_mutex){+.+.}-{4:4}, at: drm_client_modeset_dpms+0xcf/0x8c0 [ 304.999517][ T6986] #4: ffffc900055d76f0 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_client_modeset_commit_atomic+0xda/0x760 [ 304.999576][ T6986] #5: ffffc900055d7718 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_atomic+0xda/0x760 [ 304.999635][ T6986] #6: ffff8880240ee4b8 (&dev->event_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xe4/0x820 [ 304.999685][ T6986] #7: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 304.999730][ T6986] #8: ffff8880240ee420 (&dev->vbl_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xf5/0x820 [ 304.999778][ T6986] #9: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 304.999822][ T6986] #10: ffff8880240ee3a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 304.999871][ T6986] #11: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 304.999915][ T6986] [ 304.999915][ T6986] stack backtrace: [ 304.999946][ T6986] CPU: 1 UID: 0 PID: 6986 Comm: syz.0.155 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 304.999970][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.999991][ T6986] Call Trace: [ 305.000000][ T6986] [ 305.000010][ T6986] dump_stack_lvl+0x189/0x250 [ 305.000061][ T6986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.000093][ T6986] ? __pfx__printk+0x10/0x10 [ 305.000116][ T6986] ? print_lock_name+0xde/0x100 [ 305.000140][ T6986] print_circular_bug+0x2ee/0x310 [ 305.000163][ T6986] check_noncircular+0x134/0x160 [ 305.000199][ T6986] validate_chain+0xb9b/0x2140 [ 305.000233][ T6986] ? preempt_schedule+0xae/0xc0 [ 305.000259][ T6986] ? preempt_schedule_common+0x83/0xd0 [ 305.000284][ T6986] ? preempt_schedule+0xae/0xc0 [ 305.000309][ T6986] ? __pfx_preempt_schedule+0x10/0x10 [ 305.000338][ T6986] __lock_acquire+0xab9/0xd20 [ 305.000369][ T6986] reacquire_held_locks+0x127/0x1d0 [ 305.000401][ T6986] ? __local_bh_disable_ip+0x264/0x400 [ 305.000430][ T6986] lock_release+0x1b4/0x3e0 [ 305.000468][ T6986] ? __local_bh_enable_ip+0x100/0x270 [ 305.000497][ T6986] __local_bh_enable_ip+0x10c/0x270 [ 305.000525][ T6986] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 305.000554][ T6986] ? rt_spin_unlock+0x65/0x80 [ 305.000576][ T6986] ? hrtimer_cancel_wait_running+0xe5/0x180 [ 305.000609][ T6986] ? hrtimer_cancel_wait_running+0x142/0x180 [ 305.000641][ T6986] ? __pfx_vkms_disable_vblank+0x10/0x10 [ 305.000668][ T6986] hrtimer_cancel+0x39/0x60 [ 305.000700][ T6986] drm_vblank_disable_and_save+0x1bc/0x380 [ 305.000725][ T6986] drm_crtc_vblank_off+0x22e/0x820 [ 305.000752][ T6986] ? drm_atomic_bridge_chain_disable+0x157/0x180 [ 305.000784][ T6986] ? __pfx_vkms_crtc_atomic_disable+0x10/0x10 [ 305.000813][ T6986] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 305.000847][ T6986] vkms_atomic_commit_tail+0x51/0x210 [ 305.000871][ T6986] ? read_tsc+0x9/0x20 [ 305.000897][ T6986] ? __pfx_vkms_atomic_commit_tail+0x10/0x10 [ 305.000918][ T6986] commit_tail+0x281/0x3a0 [ 305.000945][ T6986] drm_atomic_helper_commit+0xa6b/0xb10 [ 305.000974][ T6986] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 305.000999][ T6986] drm_atomic_commit+0x262/0x2c0 [ 305.001018][ T6986] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.001045][ T6986] ? __pfx_drm_atomic_commit+0x10/0x10 [ 305.001065][ T6986] ? __pfx___drm_printfn_info+0x10/0x10 [ 305.001101][ T6986] ? drm_client_rotation+0x47c/0x5b0 [ 305.001136][ T6986] drm_client_modeset_commit_atomic+0x620/0x760 [ 305.001177][ T6986] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 305.001224][ T6986] ? mutex_lock_nested+0x154/0x1d0 [ 305.001243][ T6986] ? drm_client_modeset_dpms+0xcf/0x8c0 [ 305.001278][ T6986] drm_client_modeset_dpms+0x182/0x8c0 [ 305.001313][ T6986] ? preempt_schedule_common+0x83/0xd0 [ 305.001338][ T6986] ? preempt_schedule+0xae/0xc0 [ 305.001363][ T6986] ? __pfx_preempt_schedule+0x10/0x10 [ 305.001390][ T6986] ? __pfx_drm_client_modeset_dpms+0x10/0x10 [ 305.001423][ T6986] ? preempt_schedule_thunk+0x16/0x30 [ 305.001460][ T6986] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 305.001487][ T6986] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 305.001516][ T6986] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 305.001553][ T6986] ? mutex_lock_nested+0x154/0x1d0 [ 305.001572][ T6986] ? drm_fb_helper_blank+0xeb/0x140 [ 305.001597][ T6986] drm_fb_helper_blank+0xf5/0x140 [ 305.001621][ T6986] fb_blank+0xcd/0x220 [ 305.001652][ T6986] fbcon_blank+0x4e6/0xbf0 [ 305.001685][ T6986] ? __pfx_fbcon_blank+0x10/0x10 [ 305.001714][ T6986] ? __try_to_del_timer_sync+0x353/0x3a0 [ 305.001741][ T6986] ? __timer_delete_sync+0x2e9/0x3f0 [ 305.001766][ T6986] ? __pfx___timer_delete_sync+0x10/0x10 [ 305.001791][ T6986] ? __pfx_hide_cursor+0x10/0x10 [ 305.001815][ T6986] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 305.001847][ T6986] ? __pfx_fbcon_blank+0x10/0x10 [ 305.001876][ T6986] do_blank_screen+0x519/0x790 [ 305.001905][ T6986] tioclinux+0x314/0x530 [ 305.001934][ T6986] vt_ioctl+0x81a/0x1f00 [ 305.001961][ T6986] ? __pfx_vt_ioctl+0x10/0x10 [ 305.001984][ T6986] ? preempt_schedule_irq+0xde/0x150 [ 305.002009][ T6986] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 305.002033][ T6986] ? smack_file_ioctl+0x24d/0x340 [ 305.002058][ T6986] ? irqentry_exit+0x74/0x90 [ 305.002083][ T6986] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.002113][ T6986] ? __pfx_tty_ioctl+0x10/0x10 [ 305.002143][ T6986] tty_ioctl+0x92c/0xde0 [ 305.002173][ T6986] ? __pfx_tty_ioctl+0x10/0x10 [ 305.002204][ T6986] __se_sys_ioctl+0xfc/0x170 [ 305.002230][ T6986] do_syscall_64+0xfa/0x3b0 [ 305.002259][ T6986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.002280][ T6986] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 305.002302][ T6986] ? clear_bhb_loop+0x60/0xb0 [ 305.002326][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.002348][ T6986] RIP: 0033:0x7f726e70ebe9 [ 305.002368][ T6986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.002386][ T6986] RSP: 002b:00007f726c509038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.002409][ T6986] RAX: ffffffffffffffda RBX: 00007f726e936270 RCX: 00007f726e70ebe9 [ 305.002425][ T6986] RDX: 0000200000000040 RSI: 000000000000541c RDI: 0000000000000006 [ 305.002453][ T6986] RBP: 00007f726e791e19 R08: 0000000000000000 R09: 0000000000000000 [ 305.002467][ T6986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.002481][ T6986] R13: 00007f726e936308 R14: 00007f726e936270 R15: 00007ffca14f6328 [ 305.002505][ T6986] [ 306.481038][ T5844] Bluetooth: hci1: command tx timeout [ 306.720985][ T5844] Bluetooth: hci3: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 308.493139][ T3199] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.693590][ T3199] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.913610][ T3199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.147747][ T3199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.385810][ T3199] bridge_slave_1: left allmulticast mode [ 309.385829][ T3199] bridge_slave_1: left promiscuous mode [ 309.385974][ T3199] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.471816][ T3199] bridge_slave_0: left allmulticast mode [ 309.471843][ T3199] bridge_slave_0: left promiscuous mode [ 309.472012][ T3199] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.871636][ T3199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.972245][ T3199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.015817][ T3199] bond0 (unregistering): Released all slaves [ 311.902819][ T3199] hsr_slave_0: left promiscuous mode [ 311.952619][ T3199] hsr_slave_1: left promiscuous mode [ 311.953275][ T3199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.953298][ T3199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.975277][ T3199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.975307][ T3199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.031652][ T3199] veth1_macvtap: left promiscuous mode [ 312.031704][ T3199] veth0_macvtap: left promiscuous mode [ 312.031836][ T3199] veth1_vlan: left promiscuous mode [ 312.031920][ T3199] veth0_vlan: left promiscuous mode [ 313.723780][ T3199] team0 (unregistering): Port device team_slave_1 removed [ 313.883296][ T3199] team0 (unregistering): Port device team_slave_0 removed