last executing test programs: 33.266034042s ago: executing program 4 (id=132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x8040600) bind$rds(r0, &(0x7f0000000100)={0xa, 0x0, @local}, 0x10) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "8fdfbd6f", {0x3, 0x106, 0x0, 0x5, 0xd00, 0x7, 0x7}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, &(0x7f0000000000)={0x0, 0x5, 0xb, {0xb, 0x9, "1a37bec76a766f6d69"}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3c, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xab6, 0x8, &(0x7f0000000300)=0x1) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000000)=""/21) 31.014949336s ago: executing program 3 (id=139): socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e2b, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x38133, 0x4) r3 = syz_open_dev$usbfs(0x0, 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x3, 0x20000000, 0x4) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup(0xffffffffffffffff) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x115}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x6c}}, 0x0) r5 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r5, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x14) syz_usb_connect(0x6, 0xfffffd40, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa9, 0x74, 0x1d, 0x40, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfc}}]}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 29.768447889s ago: executing program 4 (id=141): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x20, r0, 0x801, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x0) 28.663790287s ago: executing program 4 (id=142): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x9, 0x200, 0x300, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1000000}}) 28.389340505s ago: executing program 4 (id=143): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xdff9, 0x800, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b25, 0x0) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000b70900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000200)='GPL\x00', 0xc, 0x100b, &(0x7f0000001e40)=""/4107}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000004c0)={0x11, @multicast2, 0x0, 0x0, 'nq\x00', 0x30, 0x7f, 0x44}, 0x2c) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01000000000000000000010000000900010073797a3000000000a40000001f0a01000000000000000000010000000900010073797a3000030000090002003f20000000000000780003"], 0x11c}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) 27.452251968s ago: executing program 3 (id=146): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0x10001, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0x7c, 0xc, 0x3c, {0x8, 0xffffffff}, 0xd0, 0x9}}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001"], 0x48) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x51) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r6, 0x84, 0x0, &(0x7f0000001200)=""/4110, &(0x7f00000000c0)=0x100e) r7 = openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r7, 0x7b0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010069705f7674693000000000000000000014000000110001"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r4, 0xffffffffffffffff, 0x0) 26.668499304s ago: executing program 1 (id=150): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) unshare(0x22020600) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x6, 0x16d20415, 0x8, 0xfffffffb, 0xa, 0xb2e2, 0x6, 0xffff, 0x0, 0x9, 0x5b7d, 0xd8, 0x6, 0x3ff, 0x7, 0x0, 0x4ad, 0x101, 0x55e2, 0xffff, 0x3ff, 0x5}}) r5 = syz_io_uring_setup(0x7b1d, &(0x7f0000000280)={0x0, 0x0, 0x8000, 0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x7, 0x0, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c95"]) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000680)=ANY=[@ANYBLOB="c90000000000000000003206bcb2"]) socket$inet_udp(0x2, 0x2, 0x0) 26.624651984s ago: executing program 4 (id=151): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf5ff) 23.95120074s ago: executing program 4 (id=156): socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e2b, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x38133, 0x4) r3 = syz_open_dev$usbfs(0x0, 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x3, 0x20000000, 0x4) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup(0xffffffffffffffff) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x115}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x6c}}, 0x0) r5 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r5, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x14) syz_usb_connect(0x6, 0xfffffd40, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa9, 0x74, 0x1d, 0x40, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfc}}]}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 23.488758684s ago: executing program 3 (id=157): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x1f, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) bind$inet(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect(0x1, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x3, 0x28, 0xd, 0x8, 0x421, 0x99, 0xe0aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0xba, 0x8, 0x0, 0x2, 0x2, 0xff, 0x5}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x5e9c41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x499, 0x0, 0x0, &(0x7f0000000280)) setsockopt(0xffffffffffffffff, 0x8, 0x4, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x48001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) 23.4308259s ago: executing program 0 (id=158): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r1, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffcff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c07, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x9, 0x200, 0x300, 0x0, 0x0, 0x0, 0x0, 0x6}}) 23.092361708s ago: executing program 1 (id=159): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/228, 0xe4}, {&(0x7f0000000180)=""/154, 0x9a}, {&(0x7f0000000240)=""/202, 0xca}], 0x4) msgget(0x3, 0x710) msgget(0x2, 0x624) msgget(0x1, 0x248) msgctl$IPC_RMID(0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000001b80)="4476c8a3c3af5369bdfd752ec45c83c8", 0x10) socket(0x8, 0xa, 0x7fffffff) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000003340)="3cce99e332fbe9f77af308688d5ea0e9", 0x10) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x657e, @loopback, 0x60be0441}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r3, 0x11a, 0x1, 0x0, 0x0) unshare(0x20040600) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x40000006) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000080)="9b", 0x1}], 0x1, 0x6) msgget(0x3, 0x31) msgget(0x0, 0x200) 22.970822982s ago: executing program 0 (id=160): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setreuid(0x0, 0x0) readv(r0, 0x0, 0x0) 22.617975458s ago: executing program 1 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000500)={'syz0\x00', {0x8000, 0x7f, 0x3, 0x3}, 0x3a, [0x5, 0x1, 0x7, 0x83e, 0x5, 0xd, 0x6, 0x0, 0x7, 0x9, 0x4, 0x7, 0x1, 0x3ff, 0x3, 0xfffffff9, 0x27e8, 0xf93, 0x6, 0x3, 0x2, 0x1, 0x47dc, 0x10000, 0x4, 0x3, 0xfffffffc, 0x1, 0x0, 0x18, 0x8, 0x9, 0x190a, 0x1000, 0x23, 0x0, 0x4, 0x1, 0x1, 0x5, 0x2, 0xfd84, 0x200, 0x3, 0x6, 0x9, 0xffffffc0, 0x8, 0xe0000000, 0x5, 0x77, 0xb, 0x7, 0x5, 0x7, 0x22, 0x1, 0x7fffffff, 0x4, 0x80000000, 0xdc6, 0xfffffffc, 0x0, 0x7], [0x9, 0x1, 0x0, 0xffffc5b3, 0x2, 0x5, 0x2, 0xdc0, 0x0, 0x3, 0x2, 0x8, 0x6, 0x661b, 0x7, 0x5f, 0x7d, 0x10001, 0x2, 0x2, 0x8, 0x7, 0xbda, 0x80000000, 0x20, 0x4, 0x8, 0xfffffffc, 0x2, 0x9, 0x7fff, 0x4, 0x8, 0x6, 0x60, 0x6, 0x5, 0xfff, 0xfffffff9, 0x8, 0x6, 0xfffffffc, 0x7fffffff, 0x8, 0x8, 0x3, 0x2, 0xe14, 0x200, 0x7, 0x63, 0x8, 0x9, 0x7f, 0x3, 0xcbf, 0x200, 0x2, 0x2, 0x8, 0x3, 0x0, 0x400, 0x7], [0x9, 0x4, 0x0, 0x0, 0x6, 0x8, 0xffffff81, 0x4, 0x401, 0xb, 0x200, 0x9, 0xfe0, 0x5, 0x4, 0x40, 0xfffffff9, 0x956, 0x63, 0xb72, 0xf816, 0x57d, 0x0, 0x7, 0x1, 0x6, 0x1, 0xe9, 0x0, 0x3, 0x1, 0xfffffffb, 0x3, 0x3, 0x81, 0xf, 0x9, 0x3, 0x3cc, 0x9, 0xc, 0x800, 0x9e86, 0x31, 0x2, 0x0, 0x3, 0x7, 0x3, 0x6, 0x9, 0xe0, 0x7, 0x7f, 0x1ff, 0x6d, 0x7, 0xfffffffb, 0x1175, 0x8000, 0x11d, 0x8f9b, 0x3, 0x6], [0x9, 0x5, 0xfffffbff, 0x5, 0x6, 0x5, 0x80000001, 0x7fff, 0xff, 0x0, 0x1, 0x1, 0x6, 0xffffd529, 0x408, 0x0, 0x2f5, 0x1ff, 0x8000, 0x3, 0x7f, 0x7fffffff, 0x40000000, 0x4b1, 0x6, 0xc, 0x5, 0x5, 0x508f, 0xc6, 0x81, 0x9, 0x7ea692d0, 0x2, 0x8, 0x1d59, 0xfff, 0xe10d, 0xc, 0x40, 0x4, 0x3, 0xfff, 0xfe, 0x1, 0x3, 0x366e, 0x7, 0xfffffffc, 0x8001, 0x3, 0x3, 0x4, 0x0, 0x8, 0x0, 0x3ff, 0x6, 0x0, 0x1, 0x9, 0xffffffff, 0x7, 0x5]}, 0x45c) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}, {&(0x7f0000000400)="04", 0xfe44}], 0x2, 0x0) mq_timedreceive(r2, &(0x7f0000000000)=""/27, 0x1b, 0x3, &(0x7f0000000040)={0x77359400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x5) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) landlock_restrict_self(r9, 0x0) readv(r9, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/144, 0x90}], 0x1) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000a80)={0x5, 0x0, 0x7, 0xe19, 0x5}) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r10, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000002dc0)=""/231, 0xe7}, {&(0x7f0000002ec0)=""/185, 0xb9}, {&(0x7f0000002fc0)=""/24, 0x18}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/13, 0xd}, {&(0x7f0000004040)=""/136, 0x88}, {&(0x7f0000004100)=""/246, 0xf6}, {&(0x7f0000004200)=""/217, 0xd9}, {&(0x7f0000004300)=""/200, 0xc8}], 0x9}, 0x2}, {{&(0x7f00000044c0)=@hci, 0x80, &(0x7f00000055c0)}, 0x737ec869}], 0x5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) 22.259040007s ago: executing program 0 (id=163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000080)={0x28, 0x4, 0x0, {0x1, 0xb2c}}, 0x28) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002ac0)=@newlink={0x5c, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xd6eb, 0x7}}]}]}]}, 0x5c}}, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$unix(0x1, 0x2, 0x0) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000640)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x6c, 0x2, [@TCA_BASIC_ACT={0x68, 0x3, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xe42ef}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001e80)=@newtfilter={0x2a8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf, 0x9}, {}, {0xb, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x2a5c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x14}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_ACT={0x2a40, 0x6, [@m_vlan={0x120, 0x1e, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3ea}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x73}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8000, 0x5, 0x0, 0xfffffff8}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0xb5, 0x6, "d0284c0a7c4ef58fed7630d7ae2274532c5cb3a9a3d1217067fdd3d4a7bc54244ebd9599b195d7aeb3f25b53013b9fe56ae17a69bb0fecd2edcebb1732e043b70a0b9cefc05445abc8e0d36429d346ea89dff2f0e5a0ad9ea2ef3b13d982e4b233b677f16728508cc51c0faee5ebe15bf768eadc81b1023d9de5c374cd028223a34b0a54b8af009dd3e2938fef29e87cbbf60967326a14788a988090cc017153e66ebe7faccdf849f8a2557faafd33071c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x104, 0xf, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0xfffeffff, 0x10000000, 0x800, 0x1ff}}]}, {0xb8, 0x6, "47928f04aee3e93e07a51f05523dc296086698d873ac19d82b0b004372c44e1d792715fb6d49b0afd64da7b660956d374c2f414f5908c446e7193cbd59490a22ab6dbf2d9bf39285006cd09eadd0a43d3d9e08d8c93c4f429d9176b22493cce056c5bd9469448f56ccb4144e516f9fb448afd4748e588e73add9a3a308b54b24719b92c02567f6c338bc2eb3b9fd0cd51921f0954f8cc17fb875d911ec0e97b327f29baeda6a713775c3f9a437bc596bbfb27735"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x188, 0xb, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xc3, 0xff, 0x8, 0x40, 0x3ff}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x115, 0x1, 0x9, 0xff}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffe, 0x3, 0x0, 0xddab, 0x1b36}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x10000000, 0x5, 0x7ff}, 0x6d}}]}, {0xe9, 0x6, "9e94c8d4045753813dcc774e9fd404638b7760d20598b273cf07369eaf3f8b911358bda019869bc723befdce6a8e1c11ce1d60dda80f1d3938c6a6bae0fdb7ca072fe4b9e10db7f01676ee03ea7318b1fb6190728645cb469f4dbbc7a9c59346fd2be0f4155d488ceb3774597971eff7df6a28c8fad6d29633516342b7bfff85e800c4f63065cf5988046a9b9c791430f10856660080994c037e91a5755bf8c2f77a0f1ffce68a4626d6bc90b76c62c81561bafd07c0011260f8cee6136366d10d1f0de5c90bab3f45143a7bf24ac61c4dfe9181bacc536369e9e5ca82e4ca0e64c547e9fb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x168, 0xd, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7fffffff, 0xffffffffffffffff, 0x3, 0x101}, 0x1, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x2, 0x1, 0x9}, 0x2, r2}}]}, {0xfc, 0x6, "fb12515f6250093e0cad0b926c98cc006fafe5d74edb4084c316e4406eff91af69ad37ef73e0c22f19e07973cb185aa1e47c06d18c8d2007a8c3aef610078c4a1d44d1f0737ec849296504f62fb89aaa9754702b782bfcef4efca85c517bb2da4b854a4d411360df08b5bbcb2892e817962c4801c3fb052f7c0b2606b614e5b5c505df0b86ff1838e223ff3c6549eeecf7cd889e67fbac38641e446049937372383e80c2351490fd9319adaf1b79bbe91d0ab71e8675503cd1b77a0abf1265d842c69f132bead91e82a08194f6016dc354b9184c3082a0a09fcb4fc884d818796c7f4a4f31bde8cd6aad29fd0db8c7987db012a198480c26"}, {0xfffffffffffffe9b}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x2360, 0x1a, 0x0, 0x0, {{0xb}, {0x2308, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0xd8}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb36}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x6, 0x47, 0x0, {0x0, 0x0, 0x1, 0xeb79, 0xfff6}, {0xd3, 0x0, 0x1, 0x8, 0x1}, 0x2, 0x80000001, 0xb6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x690d, 0x200, 0x8, 0x1, 0x9, 0xa, 0x0, 0xcaf, 0x7, 0x9, 0x3, 0xea, 0x5, 0xffffffff, 0x3, 0x0, 0x8, 0x3, 0xc, 0x12, 0x6693, 0x15f, 0x10000, 0xc0, 0x10, 0x1, 0xa24, 0xfff, 0x9, 0xf, 0x0, 0x1, 0x7, 0x0, 0x0, 0x1ff, 0xa6f3, 0x2, 0xffff, 0x7, 0x8, 0x7f, 0x9, 0x5, 0x0, 0x100, 0xf, 0xc0, 0xb, 0x2, 0xef, 0x4, 0x6, 0xffff, 0x0, 0x3, 0x2, 0xc, 0x7, 0x6, 0x10000, 0xe6, 0x1, 0xffff, 0x8, 0x82fe, 0x3, 0x6736, 0x800, 0x2, 0x5, 0xb, 0x7, 0x8000, 0xf, 0x100, 0x9, 0x3, 0x101, 0x2, 0x81, 0x2, 0x8, 0xb49a, 0xe, 0x7, 0x5, 0x523, 0x2, 0x2, 0xf, 0x401, 0x0, 0x5, 0x2, 0x8, 0x0, 0x7ab4, 0xfffffffc, 0x3, 0x9, 0x100, 0x8, 0x7, 0x1, 0x4, 0x4, 0xffff, 0x7, 0xffff, 0x1000, 0x2, 0xd2, 0xd980, 0xa70d, 0x11a, 0xc0, 0xecec, 0xaa55, 0x38c3, 0x5, 0x4, 0x5, 0x9, 0xf29, 0x0, 0x9, 0xb, 0x6, 0xfff, 0xc, 0x80, 0x22fd, 0x1000, 0x0, 0x4, 0x9, 0x4, 0x1, 0x45, 0x480000, 0x7fffffff, 0x7, 0x7, 0xd, 0x2e, 0x6, 0x7ff, 0x8, 0x4, 0x6935, 0x80000001, 0x80000000, 0xa5, 0x1, 0x10, 0x0, 0x37, 0x2, 0x1c800000, 0xfff, 0xd, 0x2, 0x6, 0x10001, 0x200, 0x8000, 0x2, 0x6, 0x10000000, 0x401, 0x6, 0x7, 0xffff8001, 0x3, 0x9, 0x82ec, 0x6, 0x6, 0x9, 0x5cca, 0x2, 0x4, 0x0, 0xffffffff, 0xaf, 0x7d23, 0x5, 0x7ff, 0x7e5, 0x4, 0xffffff99, 0x6, 0x0, 0x2, 0x3, 0x5, 0xfff, 0x1, 0xdd4c, 0xfffffffd, 0x2, 0x400, 0x4, 0xcbbc, 0xa8, 0x6, 0x2, 0x8, 0xc, 0x7, 0xd8, 0x401, 0x9, 0x4, 0x100, 0x0, 0xc, 0x3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x58, 0x5, 0x3, 0x1, 0x3, 0x7fff, 0x5, 0x200, 0x1, 0xbd7, 0x2221, 0x3ef, 0xffff, 0xf, 0x1, 0xfffffffb, 0x300000, 0x1000, 0x8, 0x7fff, 0x4, 0x1, 0x1000, 0x80, 0x7, 0x0, 0x6, 0x8, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x2, 0x800, 0x2, {0x6, 0x1, 0x4d6a, 0x6, 0xff81, 0x1}, {0x8, 0x2, 0x0, 0x8c, 0x2, 0x8}, 0x1, 0xfffffff3, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3b}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x1f6, 0x0, 0x4, 0x61, 0x5, 0x0, 0xd, 0x800, 0xb, 0xb8, 0x60, 0x6, 0x9, 0x8, 0x2, 0x7263, 0x4, 0x101, 0x80000001, 0xf, 0xffff, 0x80000001, 0x5f5, 0x694, 0xfffffff8, 0x85, 0xcbce, 0x8, 0x7, 0x1, 0x1, 0xa5b, 0x3, 0x8, 0x7fff, 0x4, 0x49b344da, 0x6, 0x7, 0x2, 0x859b, 0x8000, 0x5, 0x8100000, 0x5, 0xe, 0xfffffff9, 0x3, 0x7fffffff, 0xb53b, 0x1, 0x8, 0x80000000, 0x8c5, 0x2, 0x6, 0x6, 0x9, 0x81, 0x6, 0x8000, 0x1, 0x4, 0x9, 0x0, 0x3, 0x6, 0x567, 0x7, 0x6, 0x9, 0xcda4, 0xa, 0x7, 0x3, 0x9, 0x2, 0x3, 0x4, 0x401, 0x0, 0x24, 0xfffffffd, 0x0, 0x5, 0x321, 0x0, 0x6, 0x3ff, 0x8000, 0x7, 0x4, 0x401, 0x20000, 0x0, 0x7, 0x9a, 0x7, 0xfffffe00, 0x9, 0x800, 0x1, 0x6, 0x5, 0x0, 0x1, 0x75, 0xffffffff, 0x2, 0xfffffffe, 0x5, 0x6, 0x1, 0x5, 0x2, 0x2, 0x4, 0x7, 0xe, 0x6, 0xc8, 0x5, 0xfff, 0xadd, 0xa, 0x40, 0x101, 0x7, 0x401, 0x1, 0xc911, 0x3, 0x9, 0x100, 0x5, 0x6, 0x101, 0x9, 0x100, 0x0, 0x401, 0x0, 0x6, 0x7ce, 0xffffffff, 0x2, 0x6, 0x4, 0x4, 0x0, 0x4, 0x8ec, 0x6, 0x7f918297, 0x5, 0x5a48, 0x66d4, 0x6, 0x5, 0x0, 0x42ed, 0x5d, 0x5, 0xffffffff, 0x830b, 0x8000, 0x6, 0x3ff, 0x0, 0x6, 0x80, 0x6, 0x2, 0x1, 0x2, 0x5, 0xd85a, 0x2, 0x8, 0x81, 0x0, 0xfffffffd, 0x0, 0x1, 0xc1b, 0x6, 0x8001, 0x4, 0x7, 0x8, 0xe5, 0x400, 0x8000, 0x9, 0x4, 0x27, 0x5, 0x2, 0x5, 0x9, 0x1ff, 0x0, 0x400, 0xda3, 0x8, 0x7d13, 0x6, 0x5, 0xfffffc00, 0x0, 0x8001, 0x1ff, 0xff, 0x3, 0xb8, 0x139, 0x8, 0xfff, 0xfe3d, 0x8ca, 0x5, 0x5e4a, 0x1d, 0xfffffff7, 0x7fff, 0x8, 0x81, 0x1, 0x101, 0xa6, 0x3868bae4, 0x50, 0x9, 0x2, 0x9, 0x2, 0x5, 0x28, 0x1, 0x1, 0xb032, 0x8, 0x1, 0x7, 0x9, 0xf, 0xffc00, 0x80, 0xae64, 0x1, 0x80000000, 0xfffffffb, 0x4, 0xf, 0xf73, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x10001, 0x7f, 0x2, 0x8, 0xfff, 0x2, 0x400, 0x7, 0x3, 0x1, 0x45, 0x1e, 0x0, 0x6, 0x7fffffff, 0x6, 0x48, 0x4, 0x8, 0xfff, 0x9, 0x8, 0xfffff000, 0x1000, 0x8, 0x400, 0xb, 0x8, 0x22a7, 0x6, 0x6, 0x23, 0x1, 0xa8, 0x4dd, 0x6, 0x17d, 0xfffffff8, 0x1, 0x2, 0x3, 0x4, 0x8, 0x9, 0xfffffff9, 0x400, 0xfffffffd, 0xc, 0x2, 0xb140, 0x5, 0x48, 0x7, 0x0, 0x2, 0x0, 0x0, 0x80000000, 0x7, 0xd, 0x2, 0x401, 0x1, 0x2, 0xd826, 0x8, 0x7f, 0x40000, 0x9, 0x2, 0x3, 0x200, 0x6, 0x0, 0x2b20c000, 0x38b, 0xfffffffa, 0x4, 0x614b, 0xafc, 0x100, 0x8, 0x9, 0x1, 0x4, 0xff, 0x0, 0xffff, 0x7f, 0x8, 0x1ff, 0x4, 0x4e4, 0xffff, 0x770c2ce, 0x1d3e, 0x5d, 0xfffffffe, 0x10, 0x10001, 0x7, 0x6, 0x75, 0x1, 0x81, 0x7, 0xe42, 0x7, 0x8, 0xea4, 0x6, 0xb, 0x7ff, 0xfffffffb, 0x7, 0x8, 0x6a26, 0x2, 0x6, 0x5, 0x0, 0x6, 0x0, 0x8000, 0x6, 0x4, 0x7f, 0x3, 0x8, 0x5, 0x7fff, 0x8, 0x4, 0x80, 0x1, 0x6, 0x9, 0x2900000, 0x7, 0x970, 0xfffeffff, 0x2b6, 0x3, 0x81, 0x8, 0x7f, 0x6b, 0x6, 0x8, 0x1, 0x12, 0x1b7, 0x80000000, 0x6, 0x8, 0x3, 0x3, 0x5, 0x0, 0x80000001, 0xc000000, 0x40, 0x7f, 0x101, 0x8, 0xa, 0x0, 0x4, 0x4, 0x8, 0x459, 0xee91, 0x80000001, 0x420, 0x5, 0x6, 0x60d, 0x8, 0x9, 0x8, 0x10000, 0xffffffff, 0xebd5, 0x4, 0x7, 0x1, 0x1b4c, 0x101, 0x8e, 0x2e1f815, 0x401, 0x5, 0x9, 0x4, 0xd1, 0xffffffff, 0x94, 0x4, 0xfffffff7, 0x41f9, 0x401, 0x5, 0x0, 0x5, 0x4, 0x3, 0x1, 0x9, 0xfffffbff, 0x6, 0x3, 0xe, 0xc, 0x2, 0xa9, 0x2, 0x3, 0x6, 0x8, 0xffffffff, 0x6, 0x2, 0x2, 0x6, 0xffff, 0x0, 0x0, 0x10000, 0x7, 0x3, 0xe21, 0x2a, 0x7, 0xc, 0xf, 0x200, 0x0, 0x3, 0x4, 0x5, 0x7ff, 0x4, 0x0, 0x1685e509, 0x50d6, 0x5, 0x1ff, 0x8, 0x2, 0x80000000, 0x8, 0x7fffffff, 0x7, 0x7, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa4}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x100, 0x2, 0x6, {0x40, 0x0, 0x1, 0x9, 0x401, 0xfffffffa}, {0x7, 0x0, 0x2, 0x10, 0x4, 0x7}, 0x23, 0xe, 0x7fff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0xffffffffffffffff, 0xff800000, 0x7, 0x5, {0x4, 0x2, 0x6, 0x6, 0x7fff, 0x7ff}, {0x6, 0x1, 0x5, 0x9, 0x7, 0x1}, 0x7, 0x9, 0x7}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0x8, 0x3, 0x29, 0x10000, 0xffffffff, 0x4, 0x1, 0x0, 0x9, 0xfffffff7, 0x6, 0x4, 0x4, 0xe4d, 0x0, 0x1, 0x1, 0x9, 0x1, 0x0, 0xffff, 0x7680, 0x80000000, 0x7, 0x5, 0x5, 0x4, 0x80000000, 0x4, 0x0, 0x4, 0x1, 0x1, 0xf3, 0x2, 0x3ff, 0x46, 0x6, 0x8, 0x7, 0x9, 0x2800, 0x1, 0x200, 0x5, 0x282f, 0x2, 0x7f, 0x1, 0x4, 0x10001, 0x2, 0x9, 0x0, 0x5, 0x1, 0x80000000, 0x4, 0x366a, 0x7, 0x364d, 0x6, 0x9, 0x1b2, 0x5a, 0x7, 0x9, 0xc9d, 0x5, 0x5, 0x100, 0xf805, 0x0, 0xe3, 0x54b5d9bd, 0x800, 0x5, 0x7, 0x0, 0xffffffff, 0x9, 0x7fff00, 0x80000000, 0x3, 0x0, 0x9, 0xb, 0x4, 0x8, 0x7fffffff, 0x9, 0x69b8, 0x6, 0xa303f3b7, 0x6, 0x58, 0x8, 0x2, 0xffff, 0xb, 0x3ff, 0x801, 0x1, 0x8, 0xfffffff8, 0x7, 0x7, 0x9, 0x10001, 0x8, 0x6, 0x81, 0x3, 0xfffffff0, 0x200, 0x8, 0x1, 0x3, 0x0, 0xffff, 0x9, 0x6, 0x6, 0x5, 0x5, 0x5, 0x9, 0x77d1, 0x7, 0x2, 0x9, 0x6, 0x4, 0x7, 0xf, 0x1, 0x0, 0x9ad5bae, 0x9, 0x5, 0xd2a, 0x8ed3, 0x2, 0x54fa, 0x2, 0x8, 0xba, 0x9, 0x6, 0x0, 0x4, 0x8, 0x55a, 0xffffc000, 0x45, 0xb936, 0x6, 0x4, 0x7, 0x8, 0x10001, 0x2, 0x0, 0x7ec, 0x3, 0xd, 0x44e, 0x1, 0x4, 0x4, 0x7, 0x400, 0x4, 0xeaa, 0x800, 0x24ea4784, 0x5, 0x9, 0x2, 0xd, 0x7, 0x2, 0x8, 0x9, 0x2, 0x2b, 0x9, 0x7, 0xf, 0x3, 0xa, 0xfffffffa, 0x2, 0x80, 0x12, 0x8, 0x2, 0x3, 0x5, 0x6, 0xf26, 0x5, 0x2, 0x9, 0x4, 0x2e, 0x2, 0x1, 0x4, 0x3, 0x6, 0xbb4, 0x6, 0xfd, 0x1000, 0x9, 0xf, 0x4, 0x80000000, 0x3, 0x961, 0x6, 0x301b, 0x0, 0x5, 0x81, 0x7ff, 0x40000000, 0x7, 0x1, 0xdb201646, 0x4, 0x8, 0x6, 0xf7, 0xff, 0x80, 0x2, 0x4, 0x7f66, 0x9, 0x18000000, 0x0, 0x10001, 0x1, 0x82c5, 0x0, 0xa, 0x2, 0xdd, 0x1a6, 0x186, 0x300000, 0x1074]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0xffffff80, 0x4, 0x5, {0x7, 0x2, 0x4, 0x0, 0x6, 0x1}, {0x7, 0x0, 0x7, 0x7, 0xfff1, 0x80000000}, 0x9, 0x9, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x6, 0xcb66, 0x4, 0x8, {0x3, 0x0, 0xbbd, 0x28, 0xc, 0x4}, {0x7, 0x0, 0x5, 0xa2b3, 0x1, 0x4}, 0xfff, 0x80000000, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x40, 0xb, 0x4, 0x2, 0x9, 0x0, 0xffffffff, 0x9, 0x8, 0x3, 0x8, 0x3, 0x3, 0xf, 0x4, 0xff, 0xbdd3, 0x5, 0x7, 0x5, 0x3, 0x1, 0x8358, 0x7, 0x10, 0x4, 0x2, 0x5, 0x7, 0x81, 0xffff, 0xfffffff8, 0x6, 0xb72369a, 0x3, 0x614c, 0x0, 0x401, 0x7, 0xe4d, 0x2, 0x2, 0xb, 0xf7c, 0x8001, 0x100, 0x7, 0xf8ee, 0x8, 0x3380000, 0x7, 0x2, 0xfffffff9, 0x4, 0x10, 0xe, 0x7ee, 0x3ff, 0x498e, 0x1, 0xfffffe8d, 0xf, 0x100, 0x8, 0x8, 0x0, 0x2, 0x12, 0x2, 0x0, 0x7, 0x6, 0x81, 0x0, 0x5, 0xfffffffb, 0x6, 0x8, 0x7, 0x2c, 0x56, 0x0, 0x0, 0x4, 0x23a3575d, 0x7, 0x0, 0x54f, 0x9, 0x7, 0x800, 0x1, 0x5, 0x3ff, 0x9, 0xb, 0x3b23, 0x5, 0xf11, 0x7f, 0xff, 0x800, 0x6, 0xffff, 0x4, 0x1000, 0xff, 0x4, 0x8000, 0x1, 0x8, 0x2, 0x6, 0x3, 0x10001, 0x2, 0x0, 0xff, 0xffc0, 0xb1f, 0x0, 0x2, 0x6, 0x10, 0x4, 0x2c, 0x5, 0x9, 0x5, 0x8001, 0x4, 0xc8b1, 0x2, 0xffffffff, 0x4, 0x617e, 0x4e4887ce, 0x2, 0xb, 0x0, 0x8, 0x400, 0x200, 0x0, 0x4, 0x4, 0x9, 0x5, 0x3, 0xffffffff, 0x80000000, 0x9c4, 0x4, 0x10001, 0x0, 0x7, 0x98dafe4, 0x1, 0x10001, 0x8, 0x800, 0x401, 0x46ec038e, 0xfff, 0x7ff, 0x7, 0x7, 0x2, 0x4, 0x1, 0xfff, 0xef00, 0x57d5, 0x2, 0x1, 0x7, 0x1, 0x2, 0x6, 0x5, 0xffff7fff, 0x400, 0x3, 0x7, 0x7, 0x2, 0xbd8, 0x0, 0x7fff, 0x7, 0x1, 0xd, 0x7, 0x0, 0x401, 0x1, 0x39, 0x3ff, 0x1, 0x7, 0x6, 0xa000000, 0x5, 0x100, 0x3, 0x7, 0x4, 0xd46, 0x2, 0x9, 0x9, 0x6, 0x9, 0x4, 0x1, 0x10000, 0x6, 0x3ff, 0x100, 0x9, 0x5b, 0x9, 0x3, 0x3, 0x7, 0x9, 0xaf, 0x6, 0x2, 0x4, 0x8, 0x5, 0x2, 0x80000000, 0x4, 0x4, 0x7, 0x2, 0x3, 0x1, 0x6, 0xfffffffe, 0x4, 0x1, 0xb03, 0x0, 0x7, 0xfffff001, 0x9, 0x81, 0x34, 0x316, 0x1998a14a, 0x0, 0x40]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x1, 0x1, 0x1, 0x0, 0x6, 0x5, 0x7d3, 0x5d2ae817, 0x101, 0xa, 0x9, 0x65, 0xb, 0x2, 0x8, 0x800, 0x7, 0x25912229, 0x9, 0xfffffffa, 0xb0, 0x2, 0xfffffffc, 0x4, 0x8000, 0x4183, 0x7f, 0x72, 0x8b, 0x7fffffff, 0x3, 0x7e, 0x0, 0x6, 0x1, 0xe4be, 0xffffffff, 0x7fffffff, 0x4, 0x748d971d, 0x6, 0x8, 0x7, 0x0, 0x8, 0x6, 0x1ff, 0x5, 0x0, 0x7f, 0x81, 0x80000000, 0x2, 0xfffff800, 0xa, 0x5, 0x4, 0xf07, 0x7fff, 0x3, 0x2, 0xa, 0xbe2f, 0x1, 0x4, 0x2, 0xa5, 0xab, 0x7, 0x24, 0x4, 0x3, 0x7d, 0x1, 0x372, 0x7fffffff, 0x3fa4, 0x10000, 0x6, 0x80000001, 0x5, 0x8, 0xc0000000, 0x7f, 0x8, 0x0, 0x7, 0x6b, 0xfffffffb, 0x4, 0x2, 0x7, 0x1, 0x7, 0x0, 0xfffffffc, 0x9, 0xc09, 0x9, 0xb74, 0xfffffffc, 0x1, 0x0, 0xf3, 0x0, 0xfffff000, 0x1, 0x7, 0x5276, 0x3, 0x3, 0x400, 0x5, 0x4, 0x0, 0x7, 0x99, 0x7fffffff, 0x3, 0x9, 0xfffffffd, 0x9, 0x6, 0x2, 0x3, 0x7ff, 0x17ba, 0xd65, 0x1c3e, 0x6, 0x625b, 0x3, 0x3, 0x8001, 0x4, 0x7fffffff, 0x7ff, 0xd, 0x5, 0x0, 0x7, 0x3, 0x0, 0x8, 0x5, 0xc8c, 0x5, 0x9, 0x7, 0x7, 0x8, 0x17, 0x4, 0x6, 0x29, 0x0, 0x8, 0x4, 0x1, 0x0, 0x1, 0x5, 0x3dd, 0x7, 0x0, 0x400, 0x9, 0xff, 0x0, 0x9a67, 0x9, 0x4, 0xfff, 0xc5, 0x4, 0x2, 0xfffffffd, 0x5d, 0x7ff, 0x70bc, 0x7, 0x6749, 0x1, 0x0, 0x7, 0x7fff, 0x8, 0xa000, 0x9, 0x9, 0x3, 0x101, 0x49100, 0x6, 0x6, 0xa957, 0x4, 0x1, 0x3, 0x10, 0x1, 0x9, 0x4, 0x9, 0x4, 0xb, 0x401, 0xb, 0xd1c, 0x7, 0xfffffffc, 0x2, 0x9, 0x7, 0x6a, 0xfffffffb, 0x3, 0x2, 0x8, 0xa, 0x8, 0x9, 0x3, 0xfffff575, 0x6, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xffff, 0x0, 0x1, 0x1, 0x2, 0x9, 0x0, 0x2, 0x1, 0x6, 0x4, 0x0, 0x29f64a7, 0x4, 0x7, 0x7, 0x7fffffff, 0x0, 0x3, 0x5, 0x1, 0x3, 0xb216, 0xa3, 0x200]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x6, 0x4, 0xb37, 0x9bbf, {0x7, 0x1, 0x6, 0xfffc, 0xd0d0, 0x800}, {0xbb, 0x1, 0x4, 0x101, 0x2, 0x8}, 0x6, 0x3bf5, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x1, 0x2, 0x8001, {0x7, 0x2, 0x7, 0xa5cc, 0x9, 0x2}, {0x2, 0x2, 0x7f0, 0x7, 0x101, 0x39}, 0x4, 0x25, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x4, 0x60d, 0x9, 0x1, 0x1, 0xf, 0x4, 0x8f939097, 0x1a78, 0xc, 0x9, 0xa, 0xfffffffe, 0x4, 0x8, 0x3ff, 0x10000, 0xe, 0x4, 0xdd, 0x9, 0xfffffff3, 0x8, 0x81, 0x70, 0x39a4547d, 0xffffffff, 0xfffff000, 0x5d703ac, 0x5, 0x8, 0x7ff, 0x6, 0xe, 0x7fffffff, 0x800, 0x61, 0x0, 0xffff, 0x5, 0x1, 0x1, 0x4, 0x4, 0x9e, 0x5, 0x5, 0x8, 0x3, 0xc37, 0xff, 0x1, 0xff, 0x5, 0xe, 0x8, 0xc0, 0x8, 0x0, 0x5ef181ab, 0x10, 0x5, 0x3, 0x800, 0x7, 0xe6, 0x10, 0xca, 0x5, 0x34, 0x7, 0x80000001, 0x6, 0x9, 0x8000, 0x2, 0x1, 0x0, 0x53dd, 0x6, 0x3, 0x5f281d6d, 0x3, 0x0, 0x7, 0xe85f, 0x4, 0xf201, 0x3, 0x2, 0x2, 0x1, 0x5, 0x6, 0x9, 0x81, 0x2be, 0x5, 0x8, 0x5fc, 0x1, 0x47, 0x4ee29c6b, 0x9, 0x400, 0x8000, 0x5, 0x3, 0x800, 0x3, 0x2, 0x1, 0x3, 0x6, 0x6, 0x2, 0x5, 0x10, 0x2, 0x7, 0x49, 0x4, 0x7, 0x5, 0x6, 0xd3b, 0x5, 0x9, 0x400, 0x95f4, 0x7, 0xd, 0x1, 0x2, 0x1, 0x4, 0x1, 0x9, 0x3, 0x80, 0x816c, 0x5, 0x7fffffff, 0x1000, 0x8, 0xe42, 0x3ab, 0x7ff, 0x0, 0x1, 0x3, 0x4, 0x14b, 0x40, 0x6, 0x0, 0xfff, 0x2, 0x3, 0x9, 0x1, 0xeff5, 0x81, 0xa2, 0xffffffff, 0x5, 0x8, 0x7, 0x2, 0x9, 0x1, 0x8000, 0x401, 0xd, 0x7, 0xffffff81, 0x8, 0x7, 0x4, 0x5, 0x1, 0x6e, 0x5c34, 0x9, 0x4, 0x1, 0x0, 0x8ed, 0x76, 0x6, 0x1a, 0x5, 0x1, 0x4, 0x7e92f4d4, 0x7, 0x6, 0xd, 0x6, 0x400, 0x2, 0x4, 0x10001, 0x4, 0x7, 0x4, 0x7ff, 0x10000, 0x9, 0x1, 0x6, 0x5, 0x1, 0x6, 0x8, 0x1, 0xffff, 0x3, 0xe3e, 0x2, 0x7, 0x8, 0x7ff, 0x4e4c, 0x4, 0x4, 0xad, 0x1000, 0x6, 0x0, 0x812, 0x7, 0x3, 0xd737, 0xde7, 0x7, 0x0, 0xfffffffa, 0x4, 0xa, 0x0, 0x321, 0x6, 0xf0, 0x7, 0x0, 0x9, 0x7, 0x4, 0x3, 0x1, 0x8, 0x7fffffff, 0x4, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0x7, 0x0, 0x4, {0x8, 0x0, 0x0, 0x3, 0x857, 0x1cc4b163}, {0x7, 0x2, 0x3, 0x1, 0x100, 0x81}, 0x9, 0x5, 0xa84}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x180, 0x1, 0x200, 0x7fff, 0xffff2bb3, 0xd1d, 0xfffffffc, 0x4, 0x6b93a33e, 0xa, 0x9, 0x401, 0x2, 0x6, 0x7fff, 0xd79f, 0x8ca, 0x0, 0xfac2, 0x7ff, 0xa628, 0x2, 0x10, 0x100, 0x9, 0x401, 0x7, 0xe6, 0x401, 0x1, 0x2, 0x3, 0x400, 0x5, 0x7, 0x47af, 0x9, 0x1, 0x4, 0x6, 0x0, 0x9, 0x9, 0x0, 0x0, 0x41ef, 0x1ad9, 0x101, 0x1, 0x5, 0x400, 0x6, 0x1000, 0x9, 0x3, 0x9, 0x7, 0x9ad2, 0x3, 0x5, 0x0, 0x4, 0x100, 0x0, 0x1, 0x0, 0x480, 0x9, 0x0, 0x7, 0x3, 0x0, 0x5, 0x5, 0x0, 0x7, 0xaf0e, 0x6, 0x5, 0xa, 0x3, 0x7, 0x2, 0x7f, 0x7ff, 0x4, 0x3, 0x8001, 0xd186, 0x1, 0x0, 0x2, 0x84, 0x2, 0x9, 0x7, 0x0, 0xac3b, 0x7fff, 0x80000001, 0xda0, 0x446c, 0xffffffff, 0x5, 0x70, 0x5, 0x80000000, 0x7, 0x1, 0x1, 0x0, 0x94, 0x1, 0xfffffffb, 0x80, 0x81, 0x3ff, 0x3ff, 0x10001, 0xfffffffe, 0x5, 0x9e, 0xc8, 0x4, 0x8, 0x9, 0x3ff, 0x5, 0x80000001, 0x40, 0x7, 0x2, 0x5, 0xfffffffc, 0x8, 0x9, 0x1, 0x6, 0x7, 0xfffffffe, 0x2690, 0x60ae000, 0x4a9c, 0x17a, 0xe, 0x2, 0x6, 0x8, 0xfffffffd, 0x4, 0x4, 0x5, 0x92b, 0xfff, 0x18b, 0x0, 0x1, 0x9, 0x8, 0x8, 0xc7fc, 0x10000, 0x0, 0x7f, 0x7fffffff, 0x8, 0x1, 0x0, 0x4ca, 0x6f58, 0x27b0000, 0x5e000000, 0x2, 0x800, 0x7, 0xa60, 0x9f9, 0xfffff02f, 0x3, 0x0, 0x2085c4a9, 0x1, 0xd9, 0xff, 0x4, 0x4, 0x3, 0x9, 0x1, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0x10001, 0x7, 0x3, 0x9, 0x2, 0x6, 0x5, 0x9d1, 0x9, 0x3, 0x7, 0x40, 0x4029, 0x5, 0x80000000, 0x1000, 0xfffffffa, 0x6, 0x7, 0x38000, 0x5, 0x80000000, 0x8, 0xfffffffd, 0x9, 0x49f44622, 0x4, 0x5, 0x4, 0x516, 0x7, 0x6, 0xec1, 0x1, 0x4, 0x4, 0x5, 0x9, 0x2, 0x4, 0x10001, 0x9, 0x4, 0x0, 0x0, 0x800, 0x1000, 0x8000, 0x101, 0xc0, 0x5, 0x3, 0x8, 0x1, 0x1000, 0x3, 0x5, 0x51, 0x4, 0x7, 0x9, 0x18]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x0, 0x5, 0x9, 0x8, {0x40, 0x0, 0x6, 0x5, 0x8, 0x4}, {0x4, 0x2, 0x5, 0x1, 0x7, 0x8}, 0x10000, 0xb, 0x101}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x2d, 0x6, "ff06c3497afda11864e366fd0115492214dac3048065116044beb8d75c579b74e2fdcf41b891eaf0e2"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x154, 0x18, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x39e7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0x42da1}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_LABEL={0x8, 0x5, 0x27933}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xd8, 0x6, "376d35d2d6a76c996a9ad9a07e74facfd5bbe10c592288b5ac53c8cd1015a1146f0044c7f0062c3426e10d04f0880b7fbdcbb1def56544d2b960eb59c3c54e80352264843ba20713d934f4b82a5ed69eb4e57b37d969f254abf78369237cf4f84f1fa8ad79461b8a6de9aac9faeb8f7e973aabfe27624c07327669d7e0aaa56b70a3a548067d3c316b9ad358e2e618f1e0689134e49c4e652ee781957e54078f27871d6a494840a9a4b2c6ddcab1cfa44efa1fc081a5f4a69f28e1c1929a5a9f4796508d5209d86361cde4f8e9d467e6b3ba0b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x6}}}}, @m_gact={0x74, 0x12, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x6436, 0x3, 0x1000, 0x7fffffff}}]}, {0x2f, 0x6, "a4c2589ef2cb260d851761119d93dadcb894accd08f8087d4a4b629db14291ab94e189eeeec60077b27f92"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x47}]}}]}, 0x2a8c}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) 21.110098672s ago: executing program 2 (id=164): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 20.772857964s ago: executing program 2 (id=165): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abe00000000ee398d162471f4"}, @NL80211_KEY_IDX={0x5}]}]}, 0x3c}}, 0x0) 20.483932103s ago: executing program 2 (id=166): socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x2000000, 0x8000, 0x8, 0x8, 0xfffffffe, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20040, 0x113) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') r3 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00'}) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x8, @sliced={0x3, [0xc88f, 0xe565, 0x5, 0xedfb, 0x0, 0x6, 0x1, 0x9, 0x1, 0x1ff, 0x9, 0x5, 0x1, 0xc, 0x100, 0xfffe, 0x89f6, 0xffff, 0x2, 0x2, 0x1, 0x81, 0x800, 0x8, 0x9, 0x24, 0x4, 0xa2, 0x6, 0x0, 0x3, 0x9328, 0xffff, 0x5, 0x8, 0x6, 0x4006, 0xd4, 0x3, 0xe0, 0x6, 0x9, 0xfffb, 0x0, 0x2, 0x3, 0x6, 0x7], 0x40}}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000080)={0x800103, 0xfffff7fd, 0x22, 0xce9, 0x1101, 0x5}) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000200000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 19.095539811s ago: executing program 3 (id=167): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, r0, 0x801, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 19.062102382s ago: executing program 0 (id=168): r0 = socket$netlink(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00', &(0x7f0000000440)=""/226, 0xe2) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) timer_create(0x0, 0x0, &(0x7f0000000140)) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000002c0)="53953669aa80c16e5636f3c53e5f0800000000000000d7b6c3945877c203c19b96e32c30555ec4994ef50b4bfc763907", 0x30, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1913f8b22", 0xc2, 0xfffffffffffffffe) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000004d83c0000000000001400000000000000000000000004000000000000000000000000000000c193e90a00000000fffffffff7ffffff0000000000000000000000000000000000000000000000100000000000000000feffffffffffffff04000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00010670000000480003006c7a6a6800"/236], 0x134}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/254, 0xfe}], 0x1}, 0x40012100) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES64=r0], 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 19.045143695s ago: executing program 2 (id=169): r0 = socket$inet(0x2, 0x801, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="1c76fd89e8818b891c6949cbf934c6803013d2d57e19926e95a2b86bed53c346777000591182944e7dd5c56524add4c459c85a72e60fb87d5ddf738c3f36f4fb6ff37752430b3718653ece3d89ecaf1d44225c1bbf0d35996823dd90ab1ee158fae967fd88e5b85dcf31702f1f0703bd5666", 0x72, 0x400c095, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 18.88769435s ago: executing program 2 (id=170): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4d7, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) io_uring_setup(0x3448, &(0x7f00000000c0)={0x0, 0xa0b8, 0x20, 0x1, 0x35b}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000200)={0x2000000b}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018, r0}, 0x14) 18.745335342s ago: executing program 3 (id=171): r0 = socket$rds(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e20, @remote}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x104) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='configfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f0"], 0x0, 0x2}, 0x94) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b24040402090492c2eeaa9842fcdadd30aba2f26cd349e3aca25db6b81a77ced291c33aea4a62a32678f358f5dd8c2359f92c7c6641b70aaf61c580d73d40df81c28e03de8be3c326892f0a215ef5c4df6a2a7e7271b07cb33cfcc4d7e6603c0310c134b60dce7483ab5c7b0d621c657a07358b24eb76e5761f083a9c14464ce7eeb91979a090546e8b39d0b2b3f48c65852b32d026afc98ca045", @ANYRES64=r0], 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000100001000000000000cc0c721e84000a"], 0x28}}, 0x84) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xe2d52000) 18.706049945s ago: executing program 1 (id=172): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a0006"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 18.408574992s ago: executing program 2 (id=173): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e2b, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x38133, 0x4) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x3, 0x20000000, 0x4) dup(0xffffffffffffffff) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x115}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x6c}}, 0x0) r5 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r5, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x14) syz_usb_connect(0x6, 0xfffffd40, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa9, 0x74, 0x1d, 0x40, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfc}}]}}, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 18.311197659s ago: executing program 1 (id=174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x1020000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17.652427323s ago: executing program 1 (id=175): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000100)={0x5, {0x2, 0x3, 0x40, 0xe}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000010100c0"]) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) write$UHID_INPUT(r1, &(0x7f00000029c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000003c0)=0x6, 0x6, 0x1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000400)=0x1, 0x7, 0x3) r7 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xf, 0x2, 0x1, 0x8000, 0x2, 0x6, 0x0, 0x244, 0x34, 0x3d5, 0x0, 0x9, 0x20, 0x1, 0x0, 0x4, 0x40}, [{0x6474e551, 0x7ff, 0x9, 0x3, 0x6, 0x22c2c6bb, 0xe, 0x80000001}], "74ecb0d3bb348f6b858dfdfd2e8dd08560d350598deee138230e1151cec03ed403c2ad7cdc1847db348fec748168480d24a0feeca84b68a4bcfa1e3ba9fff7b96205fa8daa467183ba9429758d646a02c1e28f9350e75aeec3c0fe514b2897b16199d95ecde8ad113b2bc0cd1e5ff73e9bf75a12d7ef846f3e01a8fe278d95a3865e089edf7be8f0f81fabe0f17b80acea75e4618d60de65bfd16a97aac8f8", ['\x00', '\x00', '\x00', '\x00']}, 0x4f3) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0186404, &(0x7f0000000180)={&(0x7f0000001000/0x2000)=nil}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000080)) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f00000004c0)) 17.34161602s ago: executing program 0 (id=176): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abe00000000ee398d162471f4"}, @NL80211_KEY_IDX={0x5}]}]}, 0x3c}}, 0x0) 16.946627006s ago: executing program 0 (id=177): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0xff7ffff7) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r1, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x8, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400008}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x2}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0xffff}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xc}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xa1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r6, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r7, 0x0, 0x300, 0x0, 0x0, 0x2}]) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r4, 0x2, 0x3}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000006d00100029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000200200409001d002400b6cf63ff18475a8743e659fc9ce28881f052bd65439fb41e59000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040091}, 0x8000) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r8, 0x0, 0x0, 0x200c0045, &(0x7f0000000300)={0xa, 0x4e20, 0x55, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 15.363713544s ago: executing program 3 (id=178): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x2b, &(0x7f0000000000)={0x0, 0xffffffffffffff14}, 0x1, 0x0, 0x0, 0x4044811}, 0x4040011) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'veth0_to_bridge\x00', 0x2}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff}, {0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xc, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0xa084d) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x1000000000000, {{0x3, 0x0, 0x7caef2bd5608ec51, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000425bd7000040000000200000008003f003a00000008000a01"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="00030000", @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080029bd7000fedbdf252600000008000300", @ANYRES32=r9, @ANYBLOB="0c0099e00600000067000000cb040000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r10, 0x5, &(0x7f0000000200)={0x1}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010002000eddeffff1edcdf2500d39388", @ANYRES32=0x0, @ANYBLOB="00000000201200001c00128009000100626f6e64000000000c0002"], 0x3c}}, 0x0) sendmsg$nl_route(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r12, 0x400, 0x1) fsetxattr$system_posix_acl(r12, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r12, 0x4068aea3, &(0x7f0000000600)={0xbc, 0x0, 0x1}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.003470738s ago: executing program 32 (id=156): socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e2b, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x38133, 0x4) r3 = syz_open_dev$usbfs(0x0, 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x3, 0x20000000, 0x4) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup(0xffffffffffffffff) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x115}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x6c}}, 0x0) r5 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r5, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x14) syz_usb_connect(0x6, 0xfffffd40, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa9, 0x74, 0x1d, 0x40, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfc}}]}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.491447826s ago: executing program 33 (id=175): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000100)={0x5, {0x2, 0x3, 0x40, 0xe}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000010100c0"]) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) write$UHID_INPUT(r1, &(0x7f00000029c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000003c0)=0x6, 0x6, 0x1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000400)=0x1, 0x7, 0x3) r7 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xf, 0x2, 0x1, 0x8000, 0x2, 0x6, 0x0, 0x244, 0x34, 0x3d5, 0x0, 0x9, 0x20, 0x1, 0x0, 0x4, 0x40}, [{0x6474e551, 0x7ff, 0x9, 0x3, 0x6, 0x22c2c6bb, 0xe, 0x80000001}], "74ecb0d3bb348f6b858dfdfd2e8dd08560d350598deee138230e1151cec03ed403c2ad7cdc1847db348fec748168480d24a0feeca84b68a4bcfa1e3ba9fff7b96205fa8daa467183ba9429758d646a02c1e28f9350e75aeec3c0fe514b2897b16199d95ecde8ad113b2bc0cd1e5ff73e9bf75a12d7ef846f3e01a8fe278d95a3865e089edf7be8f0f81fabe0f17b80acea75e4618d60de65bfd16a97aac8f8", ['\x00', '\x00', '\x00', '\x00']}, 0x4f3) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0186404, &(0x7f0000000180)={&(0x7f0000001000/0x2000)=nil}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000080)) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f00000004c0)) 2.465755035s ago: executing program 34 (id=173): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e2b, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x38133, 0x4) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x3, 0x20000000, 0x4) dup(0xffffffffffffffff) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x115}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x6c}}, 0x0) r5 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r5, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x14) syz_usb_connect(0x6, 0xfffffd40, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa9, 0x74, 0x1d, 0x40, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfc}}]}}, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.001658702s ago: executing program 35 (id=177): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0xff7ffff7) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r1, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x8, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400008}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x2}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0xffff}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xc}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xa1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r6, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r7, 0x0, 0x300, 0x0, 0x0, 0x2}]) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r4, 0x2, 0x3}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000006d00100029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000200200409001d002400b6cf63ff18475a8743e659fc9ce28881f052bd65439fb41e59000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040091}, 0x8000) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r8, 0x0, 0x0, 0x200c0045, &(0x7f0000000300)={0xa, 0x4e20, 0x55, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 0s ago: executing program 36 (id=178): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x2b, &(0x7f0000000000)={0x0, 0xffffffffffffff14}, 0x1, 0x0, 0x0, 0x4044811}, 0x4040011) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'veth0_to_bridge\x00', 0x2}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff}, {0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xc, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0xa084d) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a380)="ee43a8f8855298a8290b47b6eb9ecbe3b5cc7d6c5531c6b9218388565017628705c4c32fd55292c0c3f883dbf2e8034edf548838c491174fa9ac73e1c9cc70bf5a3522661ea6daeb623ad80d7d2c07b34a3c6082104cfcdef7787b6571dfdf4179e6fe0b1d1a55e1804b1c64f153b46f3ea2ddeb087377540bd71dd01663b7fcb827815c7f8a0045e3e851ccf0c6e73fee19fedd3098a97fbef63ff5eb7c1c1f2facda43aba1f2cdf493a3539ab05e525711238ea2b5e70c7bf56091e3fdd7de8cc3ff7b43e649b5c7378c1f9538f8cd9adc78d0893204f65f7d3b0c7d4d5dd1441cf6d19035e5382545c8c91521551b6347bf4d2356b015b77d05a492e1f8a5a356afeec8b308d8f2c838bd0c9b28dde9239783312362e311e727d23d8545f171dfad77a54fc618378a8088c4627b1a85123cff5d5b58ae14284084d327e439fa1901f9bf6c52e9a2b7176cd308b3c0d82f6ac370a95055c37b56478f8f33648164250f2c4ec4ff44ff22fc62308909ac5f6b3ee783169933dd421a77bdc238b6e54ed292d033fc80b2f4f6e9200589ef32be4de445d981ed0df390fa2691cf5a22eb7dd1277eed9f79cc489fcbd424f9e42683b4891d54d93d1d12eb6076af805bd5ab5a6007da7daa9eaa4763c5ff36b4d6547145e90e5b74041e24bd3c4b996412637757dcc343784511f09bce6e91908b1a3d4f2bc8310105bef2474b2a7e3204a475a1aa5b6189ca02892342e4ce48e4e7a34eac5f5a973ad1fdeb2404e8899bfa9e40f411c84f75d76a4c680ca107e8cc134527f942d15a17011ffed9f11947a2054d8875d6a562a10685e73c92b78ed8b8c05ac12bdc7b627f0f00a2048027ef15085179610b3142d95b73e931ffd17a40f207e682cd567213c4b88ece6f8e41917944da92b7b834027b0ca18d3f1d1264a920dda9f494bdc359e060be1298dcf3be313cbbc61a70bc02dadc0bbaa4fcc2ce0575651adf3d277f0d4e0bf7ef449e0a6a9d9ff5a20f659fd0b5515d46dd1ed1b412b19a7ab40eff607d26b71056de718acdf6ac40f5e50bfd2a65984242fc20d69bba826d308e0cbafe1b6bd336bc2f1c205bd454a06e5199a23ca1c0a7595cae2550c21aae006001cfa7cdc428cded037397e6b6d009f6b9bee1615aa52da336538e045bf324c71dad2997d87801f87d4d3e0a9a7038573b6220b0676af9b56240f3db4af583ff2a8b9242a6568bc0994d89639a88fea8ede9c59b04591378ec006088dd6ec82c4de4c9de7776ca070a3e7103551ad58eee1ccc0e4d3a0392285802d23b8b5be7b407bb8e38dd7fb793c295c16167c6761ab88f28d509854314f5b7120eaa00f0665c4131cad14a86cd4a758716426eb189b9ad7736d7c7b4a49e7be11019cd28d8869a9f30d8ae52ce35c5a69163d514884fb0e404f59bb7f378dae93d3b1c77db574c5115136a7a0d751486cb0dfc6231b3e242ef88c0d983f65e78e74001e50019fd124d1a0761362cd0ee6d6212c55f37837e21356db7fb5fe79c05db8e45425222f3c4d1fc09667accd4164b8ef336ae3db5b215c82dc0ae4e44c98db78481b9942555dc0ca311c4cabdddd318c5e4f8d477294aa43820f3e4c334987423acd6736196a2990789b4b2d65f48ba3039eeecb2ab8abbf1004c10cc1b563ad368df3513b152878c08fefe65744210432347bf4a67f09dda78be9f1024e077c7191f39b718eb12d7bc7500e855f40673d9975c12ac0bc3526d5017cbfa2a07263f58293bb8c7500b8e365533161295d9ca65c6b8b29482ce3078295a6454bdb574476249c0f7b4cdf3ae3ef55afa3ef653e712f14de270ef728ff4c4f38d09b03daad2868e922a7723ec00884ddfd19a527744ef6cecbc74e8c74aa37b62734286ef94d400a7f884f20c2891ebe78b70a7ea6535c1f1d2a421fd3a05a45749f1511a10eb6f45e54e1b83a2e437df5127be5b54cdaf39bbc96187e46cde341a948bc6999ff738a8abb8da9b943e8e2de28d37cd07c346d05b18b90dc98310d8de6286c42bad83393f3f57ab3c54ad753588909c7eaa08eaccfbda485af7423bcfb58966a0f2b1362801223a99228865b1dfba3d102b63fe3a1dfedd561d205358a276d3887612ce91de546ce6d0b9f5420b667675bc597964910891bf71f949e186f4fe96324b1690c53a8ac12bcbd86e046f3752453bc8c3abc04ca05aeaa4539419dcc2985eb0ba64faa63733a417c25eb4e0a94d4237c9f305fc1a5575b85835f2a71d9dbebbf13a8f58ae798feac3f36af38970b89a705fdb4964ad62c2e3bcf80078a03bff48b9a7c948010789fcd4930999ab49c8dbac946ae3e51ce06b24d0a96fd51070e79950f4477fa39452180ae8cf0dae34079354e0772283d07f0580fc9e03cdac4b27edcf59587746871b1739daf3db43e78d832039f3d82f2fc9aee5798b4d19ae96b9b81c73bc2633a32d0800452bd22a0cc557d20d46343b244051e0aa33edb3edf35d26114e59424454225e4468131ba1ab70c320a321d5771f18c8fc48617763f77cd3d0b51d90a0d05bef340cc4d52fd65e6b39f2e4f7a7bb8722641df73ec3931541a6cdc43cafa6c5e885ebcc00d230f5d03e59e46feb996da8fa59d16d1e271b0faf2f3f1e1eeda53b9f6bee341b94f4ac6c2f0431253c2beb3d3dac49ae543643a2a4b6aaf5ae46d85a102b71d7ae6cbcd50ab8c6a7a61a972cd6c0ecc8ac1cb7c2b7b732e268c0155b918559afe4f470a9f3e61a41acdee97605332613bce6cb5eadf3786a6ab6bd90d672cd4861f273b1a16998a22c03a81fd8295f6a3068581844ffee8b1e7b95b246167b367b2696508d51b2fa3ccdaae9edd68a04a85a95603b28c273f24715267b8e066cfbbce136ea2cbcc9087fcfe17da753734ce7c47195d9aa65149dc2d0e6155d52ac5173160b84d21906704ea06b34c6f7696f81f39ea3c3b2e5ccb3866357143da1ea3362fa2567b3822f3cfa547cab553f16c589339cefd6620f290273be6375afe68d09f910c6121c84d787b6fbb46ea6561f78459d08a15d8e712606015709fbf5902e46f84ac3d270df370acb8f6c7ee59f61eccd167a885068da639fb3f1c4c7722d7a0fed2489855dd31783bfe807926dff94b6d98535364ea1117592025d20942d2090b0706ae357f98f1e2b7511a9f37b3a9d3d2bacc5aff1e8b3d5f3d5134e75f8af24bf348d50a5222eb0cb2ac2a53ae4e069bce30cda581df56adfe41f7c1831bb2e4370914be2d3c6b5f33c5414597c7248d402e373aa246535d69385da9da1c4a3584b8d280fea95ab160ac8c4303c3f2800ccb7b5797395418b4f3c7dc728dac80404c576e6731644089bc7fc82bc3c6abbd5e174a40e6f1d56c5023669aa08130eee2a0b7263eb215af283b7422689b1966d0bb8e34b8b2b8acd118f125c3d45c4297ff38e1e45c5eb1f3d9b5ef283a7f188baf6ca030b9dbf624e23f8455bb8afe8314bc1acd0beda0cd477a16d982ddbc9c525c8c24b9e53ddb4ff9d03c6db15b121738c4d5a24e638a0c238e3cb865eb7433d672401f6dae1ce7ffe330045e44644f185b2d47c82108dd6052d2a928d7f49e9e22b7cdd94c09a6c9820ff22169acc82e08b430926c5af7d290ca92598fa2d212154a10e17e5af05b5c2141475d7ab034bd384cf663fec9e1f9d8f50c1d3e0406f2665cb273ca0185281ee3a65cd76a1a350fe9aeae6e49cb8f0eb4dba4c19ecf27479833fc47dfee6ae7806723ba5c2f24c62e26a3d8a74cb43546d28acb0fbf287c03dcdac6699c3c7f9a3b806ac2318118395fa4e052eb620f02a90dc0556e6338266d5529f968359372a21c5b54a46ae61dcd528d7569435311abf1133be800f466dc19ade70b233ab4a5fa04ddcc476ba44aafd2c443a0c6738a422477a8da46420dbc8cf09302e8e59ce967a4832b46e74bf81306ccb497bcd35ae1e552566c5414982ba51151a4f1b13dc1d0065ea65e5272d9a004ffa84574ce96d94561d46664659dd9ebabd1a907b5127b140801720c1d92a40530040c03a869debffa977a57a8d6196cfc24e844f2486639ed630f5eae1dafd32ebaa1d71a7cfbe98badd7f0962fdce731e2ebd4b97fbbfb82a6cbf94d9d67a58f74d0856ae50e757823976f018281590e6adb9b6d5c0e58833d747957196d502f0f96f70bc351fb9599dd3d177162d087f25f4ef07c2796d2b3b1d2ed1d45bd3ee150d0b9569c4ba640526df0c91825fa8442045ca8397aaa16a39f179dd04fa63c9195617849868f0018756391089827fd090b898b165c0528f835d7726c18cd81f1613c5607d54d074d0c3e37a76c884f963ff8070cb25e441d215c02328ea43f518e139a5df4c033e429a27ca9ec62b103578c075baee7a047e070892c169401bd1d3b9b94bb3375af9ef41d75e4199e486042c0c50bf7b2b883251938ec16150cdcd3806b1df7c6bf190567afbfc540145e9f4885a02a2e0a32f878c097799b728eb6db95061c741526f9a8f988f6c6c24b459fa236b27e978628e38c6a4e0a88199f645e64a535a13e8aec318c43c55c7e61160851d534383b76e300718553a710ddbf937f2f16bff9a2cb883d4d96151b2ce87b6269dce42b153d8d4d7cdd1f1d041bd0a58e76f169f8a3ca5fe9d1cd0d5023b9caaec86fbd65b67c7a972a9616cbeee989942b965d6fc0eaa1ac40240dbc910a72cb5ac4af89b390eabfa9fb8740028f0db6c52036df330d65b958d54b92e156a560648e83fc662d63f1a2af989c03a035f539ae047d611c3eff899ea684e02eb0021ab1a7a20ada3a7bc671935238232b785bc740aeda2a9a8107d63aaea386b9b4462921f2a57c9f681ac4d2e5688de78480826fd0c2646c6922a337a121efad078e8032b9adae398d02da7ab5144f9cde3cc6306c4250788f365f7a51f59e4bd7b4944f5c3acf6046e5ac66fb5d0f83ffbd24de6b43ca32547138609099bb2615fb1ffd971a7117b21e2b70002b5de395f14bf5bd96869bb858687c69026453e2f2f058736603f95f80d8c8d0a22f4f547bf5873ec896f46ce6699682f375cc3d460e836ab58e19830d10dd6458eca0b31dc8b568a1d99b7f01ae483f8c9e99245a5437d4af82b3925aee36b3dc77d5b588d9e225050ee847bbf1c4d0a26fa55eed6f8586d979e9b0e0fadafc8cb56bb74f16efdf4967627a11f669aa5eea716f957d2352e158dec9d295f9d50ca846fda87fcbaeac91df406b7250da41177587dc7102f8fcd9086e263feec335ed1312b71d74403f81c7c7d5731d4b8a10475f86bfeb59a52e769d8c1322facd03960286cda9b6fbea84b06b443baf710d29a209e01d572beb43ddd6ffef3c35afd79a3b12099680a377ee7469610fa26210522d8764d93a00d4a63061f7d0c777199983d416ae39497fcbebff49eed8f404739cb76c6a3f3a1c5804074756266294e2ed4fb15ef2f2cbbf98183dc5dfcb568da748ddf2e5ff56688e1ea25410321d0015c45ceb9eff7c855f683e6a7da716ae15363f98a17fa602edc2cda3ba3bf3d0f53adf56618b2629d4feb77bf70f80c68beea0a37034270c6599498d995c91468fcc4c6650471227af2e38eb3ba208bb7c3c7c326ef744c58bb10e548a770caf35e0ee64053bd8820cdcb4cee1f5ef3dc45ecf8f2a6a0d8e3978c5456ea5989316d75ec5743faf8e63c6b1d68186c7dc2bb8b04f239b42af853e39a43d5891ba3479c0efc744ba207ab8ff1e755f3f304d286de3a739b2801af5bab3fd7f034ede2dd38da60415393d6b12ea96ee6cf3b1a87b12b034719e9d907497e1114c888ff2ead6cbc00aa4e9db18186913c35147c9ad06748971a7aed0fa87b4c864150ff06e37b2ef984f0d6e2838e099bcfb92939c75082fa5dc9c7c8455b119866939ef78a594d48b1e233ab2530058a7c2ae8f4147528d0ba328aabdd8d61c2270fb9ab790fbf913e97d15d5e20553016791855e617131474ef0b75081a0c43fc5fa1ecb67c7edeeecc97cd7d941845dad2e54b42e18e68ce41f849313143fe0152e104a2a401e42f982145d9bce7ed874705bf7576ce102ebbe11d6187acba2d06e2b3762cdc8c3f67aa66fd1d70e4ee55205edc63a9895969ec6fd13b798d5a0401c2e18a580f10505d5abc79a799088d59481a6c26b94180efda1c5c23e9b884f658d8fb0cd80e8e6b3a20c81676f47e929433c27bacb24257edf3e8630755e17d800d8db4f2be1fda9317ba2ecb53756fb0ca80701e49e209859f006a4324c0de093b3da7c23be79567990c7d887a03ab64b787832dbaf2579e76d343d41d37431475d11e918393296bff7a33feb659948d554405fac79bf7cc7c4f702e0d74a3cc384f44bdcb800cb24ee11c9531418c1c82453c0410514391cf5679e4d0d9949a8ce20ac70c12694ea6ca08a87307a98a05d48c7608783e0acc829c65425d8677f103a92e1c852164f09ab67f9a155f3575b2ec3ccfd7cb9ad431dd875369abb7ea31b994e2e39a59e5bd93bc8852ea3e2efff3707c8e1319e6c16be14e3386ad2bb5affb435c2436762b58dc6ffeec0743ea0dca0384ef1217db3d6219fb2921861b176fa0b714decb2e5bfe305691d92c4c65a427ab02b8cbf11a701fe74c20de74ef56ed85fd9136ca03b15d0d99e553ba4ebc8ac4e6c41506c97a33c9a05ce53d19bf62cf6ff16ede1bdbee982553bcf11ea5d2d4922f4e7ba82c83a6307610e34da0ca81c43193cdd16a8bd73b6b119461dd245e1f033da72e644614743741b34bc7813a3937a6447e499f036440781a43ccef1bcc15c8b58999e60ad807e82529bd8c819194f0e396b0d93168fc800c0fec2b7b260d1b6c18956d66ad2db20acb3117a2bd17ddb5c046559461f5e91c74b89535c49efb89bf78ec20743017eae6e1f7c393d28f5c8f7c0f0914a30eb2626a294a3ed7ada207e51bd7a9520460f2b8586c29fdf88ece2a3a5a068430a571d98c26e51a45bbb50231197363845c76f58506bf31738a23fe792f678c042e30d7dd5f19ed5ab4bb36536671e160925d4af6ff078c2b7dbdf9c55ed31e61eacc01babc62d9d2e671bc6c1932e170e3dcc5ad67a9ea7d46fca2f256fbf781019782d4066331fe10f62a6ae077a8b9569dc4bac6b90fb730a968f1782cbfc5e005bad8d9b00ae9199c81e317d91196abc75f1887cb8ffcb440f37a972d4ced20f158844e0ee36111a4247dfda14cc5cada6d372e75ee370149d7fa822f73ef0edc835a338c6d5699911fea2fedd7f3e381caff836a690331327f96ab7904a461ef5a36ce5f552bc1d1d9968106a7b8e07eef4aae2e716422a2fb7b0c1e05f09c29ca83f3405adb80e237d6f145383ec4885573e50ca2ad014308ed70477257f4d904089eec809c55d85684265a1d3b00718cfb14d644463623ba225aa95bee2a95e13a0817e2c98d96b822e6e4ef36d18a831699889034d116c84e45467f46140b88c765339b04ee65e3ef12356fe6d7ef1c80653d2e34af6e03c4503431f775e161ab7edbbfd9316372084e5e69d98443d529c9488e26c40734a636d3cb2f3b7e9bf248d647382937e623f1a7119a8deb731db5e2dbb5cc9d7b60e80f35ada2ee398d3a6c1d1d9c485d4c31c4e3beb69017bc92d9d1eba03994832aa7081bc0d29d97154c20f29d183c589e939f2e62ee71ebcbbf42ecdc9b0342920112b6a50bfa1558ca9b8af99008a8a9be29d121b4cb879ad0f61a21d57698cbda61acf65abd1912e1956226ee646c1e87315939ec9d98db2e49101964e26b28350c7fa529bbcad3c1794c2c52fa63755f09b6e1e2ee4d63050f7197b8d013296b1594a8aa16aafbb3cd4cead348e1c1a9cbdcbc09908e8696a72528ecdf12579e3a9d16afcc7b995398e3f0e6c169363195c454c0d761b20a073c962b29d0dc6dc053a586fe928ca31a759781744ed81844ae0c002b039c32538d35cc293d1fe828123110c07a81e6e0ecabf7075cd890c88c4b67a900464a234dc7043ad678f189c4c47068f16d9cc2ea87211cac5d3c3db3e220eb2463a548d4329093d486ea81c020bb72bffaaf205490011900e3dec6dc911343298a47019dd4d18a8bd71cad38ada40ffe14072790ab40c0a586a3ce452dc15940847ce5c794a6840ff6222c934893226bf8315a0be2f2fb6371cfeeedfe94736af945259bee27ce07827b4fa6dfab66e28ebde09053cf8ec25861aad91cfd1efcb69e60cf8ff3c1b8283301c0b5c1122f7b0733fcfe7f71066d74da3a0fa3abe052de9acf07aa091c13baf1338494f54aea94d494d34f4e10b5cba392de299c971b1cd8eb8c5fcfba94585f58b995c89136383742f318bb3c738ecf00014d9025b7b01b905aafbb58910a873e6dad1227dc062455b1390d8835e1ca0e0799993239fcc387f2bcc85380286c7931000000000000000019b4847c97840fab93d928a2d664edf10c610110188c69cbcba07e95a7659ee5311dbb4fbbdb63c8c561a1d8e6f3c8c940c4ea4d8ebf8e18ca586f8da46e82dfd1fe22a396518f81b97fed2a3b1d36a7e5348e64838594f9f9aacc3494d01f2bf7cf78c5ab4d715aaa3300b384d80265c9675a9db90ea034d91731dd4c0186bdf370df405a8c3aac525aee5dc5174d61e0ea993b79f47f63ca6d7fa2cb2ac622020e7f7b1c4701a248835de588056c4ca462777cca604c3df4d4984ae969c3bfd440906360341b624a234f28de5e5f2fd22b13daae2ce5afcec92a7950910b771c18f18926cedbfe440ec532e343ba80da0ae9f5f5357094052c26d554715a08670aa16bc4d7787a5d81af654e37133e3557d36ca5a9b6206b0d5a0e82c210e4f9693a91d8a5d7d074cce6c9b9f52ca31f0895add87f9fd430b6cf3e9ad17aeae6ed22278b41a2ae03eebb14d679a11372a5850d2456714bf379799d4b8fae37c0e6176c2b6017a73c2234133632a4f0b582a79573e3fb1669a94708da158443266feefe6cfe3b618d1a9cadc213952c420267016deed5cdcfbd521fb8d0f93f5d445b682a67f214d73467c4c76719eef00990fbcbc327ad082a111bc618593bdb67bad926a47c4a5bf18a37abb8f8b6808d69c36520e9dd74799f565cdb5cdea0d89888b4e83b885aaf1c08131f9bb680392b83aae52911f824865a0678160aceebbfb599871399319c4743ae40fdb9d8219ff9ca1c910e42eeb8e79c902b2bfa71ca623ca5ab04b191c50a2a131dbfa051fa4419161285e39ba8eced0fa666b0a83d7677e786396e63efcb0122c437b2396d4b93047320c136e965f24884bbc7f7211c92330205241b1b50013881ba99c1f630f9942be247bbb8db79d517d60d71d16270d7abc0780b812efba3dec50711bd7cbdfa1606bafca8401c44f3672b64a5fd53fd6f8f4dbde88e3dee77df73eba8deeebe60ebbea469fc95e69210be69cf3c483c1ed1e109dd96f4c87e23a2350574e7c6d856628dced7383176ec275fcec450a0cd3c3762d7646ea93c3dc83914127c344c05f6d951e733da419dc5ffb448cbac887194560a0e6072c4bb6c46678a15e6c4086dcae730ac7100d2fa6885002ee67fdb3191179646fcbffd570d4c788e21557acddb0a169e358b3ad891db2013f5155793a8cd8b30a89081709a9d32abe87b8c659439443c5b2a2b4154a531220c7ed0a1719b379d0586ba129b64c6c648546e127e2a9e12121d7a23d453ced5d1659fae2e8472d0a57837dea21faae210abdc7647491cff768dc4b22a3848be5fa919f475117eb9be58660db072ca53c4496308c75a341deb2637c58b58d33e06659d0ef2b89f2e39d7489365ff42204353887b2911b8ab780ca4939033717223286671fe3a91eace5eb8ef8e613cb2256e9cf98a828f3568e89a8124a23f796f49243a5d9e194f4dc832a756fa800cf25a919ca672d027b9aea023261f8d2e923020f9f80292e9a5288160632ceb2017c3f355d1e87371a2db60d6ef950161c9aab029e9e41d3539ec0b73041586063d060e7c1a03d40347b25f6c304f37babf81ad29acd7e7843a15024de14d6f4eb41ac1bf595938c8c831802bddfda06c714c05ffd88954b230d1bdcc1e186ce5e856483b571b7181770c29df1b1997916949194066134a3ec3ad3ffe2075cc4c327f6a50dedb03c63e791f5d2ecc04fe56c96d7e24175c6d9fa6c0f9bbbc51686ae9ad58c7ce31744610e4ba65c86f19cb03cb93fc570d5b8a3e14b5500df16c8929e263193f57d6dd358a1d958bb43a21b5bb59e218bf7eac475c852a0291fdda5a07c8a35a34ffe25d869c769242bc2ac43b9a7a3c6699a5dc51d5289a075406e893adc7cf3bc460914fe02f287c8bed53fb562c36561caee0a49aeb021235aecfa1897bd118f876d7b10b274ce0328eae9b6586296347c8021ea5d3bb651d7fc7ef7810dd8358850c0f6bd2e17b56cd904c52d6f09f3488c6888e78558cc2c1ec1ae10aee278a3d6aa94ea83e2c62fb3fe9f109e34b1911f87cc37d4ec57f0df5aeae79aa4fa669efef94a35298d9cb0221dceb1579094df98bbbc2f5934c52c4dceca9c3296e8a19ca944c8a9222cd0a98dcdc399fd7ed7eee87d90faa80c5a87a13dd195683e94ff03eed98cc5015a31e587497f9152e43423b8f60df798384be82b41736aba5e40ce8ddfd4197637769fa8143886dd72af1ec9bb9b2860fb23f64ac33e8dfa5496fe2099a0d2a7d6c5991e858b909221981dd426bdaa2f98a4d85d8bc6bbe054861c83c2a7c817ed30aff28942165c0a97e0705a759d38c204b41d757501cf5692645c561e9f74e9fc0e77aa2c72880066d7397be02931ac1e51e3a4a624110e89d782479b7566d711504c62724617648ddae642e45696909bc03f4dee792cb7065ad13b4098400bb1f5b85602f8abb6c3cd0e113a04df48cc27b3524de423bcd2468b96262059958c3b576fd755a3f47e6e8adb9707b781545eff74eba17e3165e0aa070a113c9dfe8e02628581a31284d10b4bae5fed080f3fc34785e388e4ea17107945e3542f103e2991084d55165ddc8a42e66ab8011d030c9b2b8ce7dbbe556b40bd37e8adb463cbcb98f721dbafec0effa06975360cf73d1402f973fad361769f7a6fc58b4e4309e973b180662ce8bcbcd2856dc869cad595c9403c34745f59a48648397c8bac67e3df1f5f9463f4ee0cdb6f0e0e14d88b7b56627bad0e79c9b1449efe71517125591671122b482887b36af65250efb90d6de209b38285305fb4460d418046e422c5726b095ea16396878d2884bf0342f3909b9b497cad70fb25d6a6edd41df986bd4586608c45c9dbe452424f1b339cea49d88b2c4e9968e27da1b6bbb62074fd24368cc0f60dadb5965efaf09788d618a76cec20920bcf1634c93b101f15cdf12ad81ab311a0963679be0b1fa1fddada5c37e0fee1cf92952375133b518edac696889a54c6c42bf655f8b982704ee2356133d78c20ef8ec58bc4b1b3b71b8440aca555ddb82e8c6774970298116369847d443e0fc134aab890c658bce45801df1e1ca6b2eb433e0af4ccf7436d700", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x1000000000000, {{0x3, 0x0, 0x7caef2bd5608ec51, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000425bd7000040000000200000008003f003a00000008000a01"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="00030000", @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080029bd7000fedbdf252600000008000300", @ANYRES32=r9, @ANYBLOB="0c0099e00600000067000000cb040000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r10, 0x5, &(0x7f0000000200)={0x1}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010002000eddeffff1edcdf2500d39388", @ANYRES32=0x0, @ANYBLOB="00000000201200001c00128009000100626f6e64000000000c0002"], 0x3c}}, 0x0) sendmsg$nl_route(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r12, 0x400, 0x1) fsetxattr$system_posix_acl(r12, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r12, 0x4068aea3, &(0x7f0000000600)={0xbc, 0x0, 0x1}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 83.807501][ T5816] cgroup: Unknown subsys name 'net' [ 83.933364][ T5816] cgroup: Unknown subsys name 'cpuset' [ 83.942775][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.560109][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.258028][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.266456][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.274387][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.279130][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.282638][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.295948][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.297310][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.307442][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.318368][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.325652][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.332882][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.333607][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.348635][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.356085][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.356198][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.365451][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.377878][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.387540][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.392792][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.395517][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.402243][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.409509][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.418632][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.425026][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.439382][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.956465][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 89.225401][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.274652][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.282857][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.290801][ T5847] bridge_slave_0: entered allmulticast mode [ 89.298145][ T5847] bridge_slave_0: entered promiscuous mode [ 89.360958][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 89.374461][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.381732][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.388967][ T5847] bridge_slave_1: entered allmulticast mode [ 89.400044][ T5847] bridge_slave_1: entered promiscuous mode [ 89.534241][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.554167][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.563660][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 89.604162][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.685127][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.692481][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.700112][ T5846] bridge_slave_0: entered allmulticast mode [ 89.707360][ T5846] bridge_slave_0: entered promiscuous mode [ 89.715473][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.722799][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.730697][ T5846] bridge_slave_1: entered allmulticast mode [ 89.737926][ T5846] bridge_slave_1: entered promiscuous mode [ 89.779978][ T5847] team0: Port device team_slave_0 added [ 89.842613][ T5847] team0: Port device team_slave_1 added [ 89.871671][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.881196][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.888434][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.896258][ T5850] bridge_slave_0: entered allmulticast mode [ 89.903699][ T5850] bridge_slave_0: entered promiscuous mode [ 89.938595][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.961463][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.968815][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.976196][ T5850] bridge_slave_1: entered allmulticast mode [ 89.984215][ T5850] bridge_slave_1: entered promiscuous mode [ 90.021625][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.028665][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.054758][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.083032][ T5846] team0: Port device team_slave_0 added [ 90.131445][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.138419][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.166798][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.181148][ T5846] team0: Port device team_slave_1 added [ 90.212974][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.220208][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.227352][ T5844] bridge_slave_0: entered allmulticast mode [ 90.234776][ T5844] bridge_slave_0: entered promiscuous mode [ 90.264261][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.271492][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.278686][ T5845] bridge_slave_0: entered allmulticast mode [ 90.286435][ T5845] bridge_slave_0: entered promiscuous mode [ 90.308807][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.321996][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.345534][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.352905][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.360598][ T5844] bridge_slave_1: entered allmulticast mode [ 90.368096][ T5844] bridge_slave_1: entered promiscuous mode [ 90.390997][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.398159][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.405501][ T5845] bridge_slave_1: entered allmulticast mode [ 90.413340][ T5845] bridge_slave_1: entered promiscuous mode [ 90.479652][ T5833] Bluetooth: hci1: command tx timeout [ 90.479657][ T5148] Bluetooth: hci3: command tx timeout [ 90.479880][ T5833] Bluetooth: hci4: command tx timeout [ 90.485342][ T5148] Bluetooth: hci2: command tx timeout [ 90.523349][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.530940][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.556992][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.563798][ T5148] Bluetooth: hci0: command tx timeout [ 90.573336][ T5850] team0: Port device team_slave_0 added [ 90.583447][ T5850] team0: Port device team_slave_1 added [ 90.607855][ T5847] hsr_slave_0: entered promiscuous mode [ 90.614444][ T5847] hsr_slave_1: entered promiscuous mode [ 90.625113][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.635154][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.644808][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.671226][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.696807][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.709447][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.722425][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.752248][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.759322][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.785439][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.838399][ T5845] team0: Port device team_slave_0 added [ 90.860909][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.867918][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.897558][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.936803][ T5844] team0: Port device team_slave_0 added [ 90.944928][ T5845] team0: Port device team_slave_1 added [ 90.990352][ T5844] team0: Port device team_slave_1 added [ 91.068899][ T5846] hsr_slave_0: entered promiscuous mode [ 91.076445][ T5846] hsr_slave_1: entered promiscuous mode [ 91.082901][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.091436][ T5846] Cannot create hsr debugfs directory [ 91.137522][ T5850] hsr_slave_0: entered promiscuous mode [ 91.143942][ T5850] hsr_slave_1: entered promiscuous mode [ 91.151837][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.159869][ T5850] Cannot create hsr debugfs directory [ 91.198516][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.205596][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.234425][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.247818][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.255284][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.281617][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.294311][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.301616][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.328145][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.341210][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.348183][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.374365][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.642297][ T5845] hsr_slave_0: entered promiscuous mode [ 91.648722][ T5845] hsr_slave_1: entered promiscuous mode [ 91.656520][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.665210][ T5845] Cannot create hsr debugfs directory [ 91.679858][ T5844] hsr_slave_0: entered promiscuous mode [ 91.686295][ T5844] hsr_slave_1: entered promiscuous mode [ 91.693126][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.700824][ T5844] Cannot create hsr debugfs directory [ 91.926398][ T43] cfg80211: failed to load regulatory.db [ 92.064326][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.103249][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.164822][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.190417][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.257744][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.284198][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.309215][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.322190][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.379387][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.391668][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.427147][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.446948][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.536280][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.559724][ T5148] Bluetooth: hci2: command tx timeout [ 92.568175][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.575047][ T5148] Bluetooth: hci4: command tx timeout [ 92.575088][ T5148] Bluetooth: hci3: command tx timeout [ 92.575127][ T5148] Bluetooth: hci1: command tx timeout [ 92.618804][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.631922][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.639727][ T5833] Bluetooth: hci0: command tx timeout [ 92.687711][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.718483][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.747052][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.761432][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.783567][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.812435][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.841707][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.857057][ T3050] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.864410][ T3050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.917552][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.924767][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.947992][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.988428][ T3050] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.995776][ T3050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.030353][ T3050] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.037574][ T3050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.104603][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.172799][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.190661][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.221377][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.228543][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.265550][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.272744][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.318100][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.335914][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.362945][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.373939][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.381137][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.392310][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.399502][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.526773][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.572068][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.579273][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.590284][ T5847] veth0_vlan: entered promiscuous mode [ 93.610050][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.617217][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.654842][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.676122][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.691897][ T5847] veth1_vlan: entered promiscuous mode [ 93.801602][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.834824][ T5846] veth0_vlan: entered promiscuous mode [ 93.876675][ T5846] veth1_vlan: entered promiscuous mode [ 93.891409][ T5847] veth0_macvtap: entered promiscuous mode [ 93.922754][ T5847] veth1_macvtap: entered promiscuous mode [ 93.934426][ T5850] veth0_vlan: entered promiscuous mode [ 93.977189][ T5850] veth1_vlan: entered promiscuous mode [ 93.993994][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.015025][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.044750][ T5845] veth0_vlan: entered promiscuous mode [ 94.063205][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.078059][ T5846] veth0_macvtap: entered promiscuous mode [ 94.101156][ T5850] veth0_macvtap: entered promiscuous mode [ 94.126195][ T5846] veth1_macvtap: entered promiscuous mode [ 94.134878][ T5845] veth1_vlan: entered promiscuous mode [ 94.150993][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.161017][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.171069][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.180235][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.198127][ T5850] veth1_macvtap: entered promiscuous mode [ 94.240029][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.298949][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.328476][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.354485][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.367321][ T5845] veth0_macvtap: entered promiscuous mode [ 94.378296][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.387367][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.397000][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.407534][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.428131][ T5845] veth1_macvtap: entered promiscuous mode [ 94.435020][ T5844] veth0_vlan: entered promiscuous mode [ 94.453016][ T5850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.462756][ T5850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.472498][ T5850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.482115][ T5850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.505390][ T5844] veth1_vlan: entered promiscuous mode [ 94.532289][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.571942][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.586257][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.616131][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.627589][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.641697][ T5833] Bluetooth: hci1: command tx timeout [ 94.647202][ T5833] Bluetooth: hci3: command tx timeout [ 94.652762][ T5148] Bluetooth: hci4: command tx timeout [ 94.653041][ T5837] Bluetooth: hci2: command tx timeout [ 94.665704][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.674633][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.684641][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.719645][ T5837] Bluetooth: hci0: command tx timeout [ 94.722293][ T5844] veth0_macvtap: entered promiscuous mode [ 94.771816][ T5844] veth1_macvtap: entered promiscuous mode [ 94.811657][ T3050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.828206][ T3050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.845885][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.856320][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.880959][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.927615][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.956379][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.994722][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.005322][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.014472][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.023331][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.045416][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.053946][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.067028][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.075783][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.227128][ T5925] fuse: Unknown parameter '' [ 95.238852][ T4481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.247381][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.265972][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.288519][ T4481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.395164][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.415297][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.419894][ T5929] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 95.441123][ T5925] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.468420][ T5926] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.555817][ T3050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.602097][ T3050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.629842][ T5933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6'. [ 95.704459][ T5933] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.725865][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.729626][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.733902][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.923633][ T24] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 95.950420][ T24] usb 2-1: config 0 has no interface number 0 [ 95.976983][ T24] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.025837][ T24] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.077439][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 96.119322][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.141594][ T24] usb 2-1: config 0 descriptor?? [ 96.409923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.709667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 96.711309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.810107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.830201][ T5837] Bluetooth: hci3: command tx timeout [ 96.831611][ T24] usbhid 2-1:0.28: can't add hid device: -71 [ 96.835732][ T5837] Bluetooth: hci4: command tx timeout [ 96.841943][ T5829] Bluetooth: hci1: command tx timeout [ 96.847294][ T5837] Bluetooth: hci2: command tx timeout [ 96.853274][ T5833] Bluetooth: hci0: command tx timeout [ 96.914978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.937888][ T24] usbhid 2-1:0.28: probe with driver usbhid failed with error -71 [ 96.969485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.069404][ T24] usb 2-1: USB disconnect, device number 2 [ 97.214740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.223895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 97.519746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.591753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.604114][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9'. [ 98.319654][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.629121][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 98.713842][ T43] usb 5-1: config 1 has an invalid descriptor of length 182, skipping remainder of the config [ 98.729157][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.928924][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.956353][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.004594][ T43] usb 5-1: Product: syz [ 99.020361][ T43] usb 5-1: Manufacturer: syz [ 99.076793][ T43] usb 5-1: SerialNumber: syz [ 100.291774][ T5974] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 100.534644][ T5988] batman_adv: batadv0: Adding interface: ip6gretap1 [ 100.541644][ T5988] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.567317][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.717112][ T5988] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 100.815604][ T5982] syz.0.16 (5982) used greatest stack depth: 20072 bytes left [ 100.841639][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.894608][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.384489][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.446528][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.547618][ T5992] batman_adv: batadv0: Removing interface: ip6gretap1 [ 101.835791][ T43] usb 5-1: 0:2 : does not exist [ 101.849257][ T43] usb 5-1: unit 9 not found! [ 102.069971][ T6000] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.138077][ T43] usb 5-1: USB disconnect, device number 2 [ 102.386767][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.483025][ T5979] syz.2.15 (5979) used greatest stack depth: 18952 bytes left [ 103.809761][ T6018] process 'syz.3.21' launched './file2' with NULL argv: empty string added [ 104.909340][ T5903] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.202782][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.287114][ T5903] usb 2-1: config 0 has no interfaces? [ 105.297862][ T5903] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 105.309197][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.319627][ T5903] usb 2-1: Product: syz [ 105.323867][ T5903] usb 2-1: Manufacturer: syz [ 105.328520][ T5903] usb 2-1: SerialNumber: syz [ 105.337909][ T5903] usb 2-1: config 0 descriptor?? [ 105.502134][ T6024] sg_read: process 14 (syz.2.23) changed security contexts after opening file descriptor, this is not allowed. [ 105.567986][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 105.579902][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 105.953384][ T6015] netlink: 104 bytes leftover after parsing attributes in process `syz.1.22'. [ 105.962410][ T6015] netlink: 104 bytes leftover after parsing attributes in process `syz.1.22'. [ 106.996111][ T6041] input: syz0 as /devices/virtual/input/input5 [ 107.234006][ T5162] usb 2-1: USB disconnect, device number 3 [ 107.249589][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.439121][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 107.447561][ T43] usb 1-1: config 1 has an invalid descriptor of length 182, skipping remainder of the config [ 107.467335][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.472584][ T6048] ALSA: seq fatal error: cannot create timer (-16) [ 107.570857][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.587899][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.719384][ T43] usb 1-1: Product: syz [ 107.723834][ T43] usb 1-1: Manufacturer: syz [ 107.728569][ T43] usb 1-1: SerialNumber: syz [ 109.538108][ T6062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.31'. [ 109.903441][ T43] usb 1-1: 0:2 : does not exist [ 109.908628][ T43] usb 1-1: unit 9 not found! [ 109.973539][ T43] usb 1-1: USB disconnect, device number 2 [ 110.717791][ T6086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.38'. [ 110.758941][ T30] audit: type=1326 audit(1751615830.127:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 110.780740][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.893917][ T30] audit: type=1326 audit(1751615830.157:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 110.915729][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.931621][ T6090] netlink: 64 bytes leftover after parsing attributes in process `syz.4.36'. [ 111.071934][ T30] audit: type=1326 audit(1751615830.157:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 111.159915][ T30] audit: type=1326 audit(1751615830.157:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 111.181697][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.304122][ T30] audit: type=1326 audit(1751615830.157:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 111.323910][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.395624][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.414840][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.433058][ T30] audit: type=1326 audit(1751615830.167:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 111.475464][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.489641][ T30] audit: type=1326 audit(1751615830.167:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 111.514628][ T30] audit: type=1326 audit(1751615830.167:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 111.583013][ T30] audit: type=1326 audit(1751615830.167:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 111.618085][ T30] audit: type=1326 audit(1751615830.167:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 112.503792][ T6088] mmap: syz.0.39 (6088) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.706237][ T6118] macvtap0: entered allmulticast mode [ 113.714848][ T6118] veth0_macvtap: entered allmulticast mode [ 113.831761][ T6120] fuse: Bad value for 'fd' [ 114.001636][ T6122] batman_adv: batadv0: Adding interface: ip6gretap1 [ 114.012308][ T6122] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.037989][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.051364][ T6122] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 114.296345][ T6131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.49'. [ 114.381193][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.403019][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.431122][ T6134] fuse: Bad value for 'fd' [ 114.516780][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.533955][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.572550][ T6126] batman_adv: batadv0: Removing interface: ip6gretap1 [ 114.749274][ T6136] Cannot find add_set index 3 as target [ 115.681298][ T6142] fuse: Bad value for 'fd' [ 116.306741][ T6150] input: syz1 as /devices/virtual/input/input6 [ 117.368137][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 117.378640][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 117.390217][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 117.949420][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.60'. [ 118.005743][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 118.005759][ T30] audit: type=1326 audit(1751615837.367:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 118.143253][ T30] audit: type=1326 audit(1751615837.367:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 118.165015][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.176568][ T30] audit: type=1326 audit(1751615837.367:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 118.198389][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.221769][ T30] audit: type=1326 audit(1751615837.367:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 118.329489][ T30] audit: type=1326 audit(1751615837.367:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 118.351810][ T30] audit: type=1326 audit(1751615837.367:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 118.375447][ T30] audit: type=1326 audit(1751615837.417:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 118.397352][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.405712][ T30] audit: type=1326 audit(1751615837.427:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 118.900025][ T5895] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.057135][ T6190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.63'. [ 119.128924][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 119.145604][ T5895] usb 3-1: config 1 has an invalid descriptor of length 182, skipping remainder of the config [ 119.159158][ T5895] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.181050][ T5895] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.194964][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.216036][ T5895] usb 3-1: Product: syz [ 119.228299][ T5895] usb 3-1: Manufacturer: syz [ 119.240048][ T5895] usb 3-1: SerialNumber: syz [ 120.181780][ T5895] usb 3-1: 0:2 : does not exist [ 120.186922][ T5895] usb 3-1: unit 9 not found! [ 120.313970][ T5895] usb 3-1: USB disconnect, device number 2 [ 120.427976][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.612874][ T6199] netlink: 64 bytes leftover after parsing attributes in process `syz.3.67'. [ 121.216010][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 121.226139][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 121.235125][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 121.412200][ T6215] input: syz1 as /devices/virtual/input/input7 [ 122.099143][ T5895] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.329278][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 122.357074][ T5895] usb 4-1: config 1 has an invalid descriptor of length 182, skipping remainder of the config [ 122.371716][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.388276][ T5895] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.419447][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.458801][ T5895] usb 4-1: Product: syz [ 122.477231][ T5895] usb 4-1: Manufacturer: syz [ 122.561697][ T5895] usb 4-1: SerialNumber: syz [ 124.735673][ T6261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.79'. [ 124.861851][ T5895] usb 4-1: 0:2 : does not exist [ 124.866940][ T5895] usb 4-1: unit 9 not found! [ 125.030125][ T6255] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.044841][ T6255] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.076026][ T5895] usb 4-1: USB disconnect, device number 2 [ 125.089220][ T6255] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.099172][ T5910] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.136300][ T6255] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.155756][ T6255] geneve2: entered allmulticast mode [ 125.166845][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.181904][ T6268] fuse: Bad value for 'fd' [ 125.299209][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 125.326506][ T5910] usb 1-1: config 1 has an invalid descriptor of length 182, skipping remainder of the config [ 125.375109][ T5910] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.444777][ T5910] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.463810][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.609090][ T5910] usb 1-1: Product: syz [ 125.654230][ T5910] usb 1-1: Manufacturer: syz [ 125.667158][ T5910] usb 1-1: SerialNumber: syz [ 126.070061][ T5910] usb 1-1: 0:2 : does not exist [ 126.075175][ T5910] usb 1-1: unit 9 not found! [ 126.193847][ T5910] usb 1-1: USB disconnect, device number 3 [ 126.890078][ T6273] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 126.897918][ T6274] netlink: 'syz.0.83': attribute type 3 has an invalid length. [ 126.909242][ T5902] IPVS: starting estimator thread 0... [ 127.029369][ T6284] IPVS: using max 37 ests per chain, 88800 per kthread [ 127.456413][ T6293] input: syz1 as /devices/virtual/input/input8 [ 128.536729][ T5937] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.729203][ T5937] usb 4-1: Using ep0 maxpacket: 8 [ 128.741123][ T5937] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 128.765935][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.827822][ T5937] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.855640][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.950343][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.995446][ T5937] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 129.023913][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 129.055766][ T5937] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.088538][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 129.129113][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.160264][ T5937] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 129.167927][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 129.191475][ T5937] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.228312][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 129.239537][ T5931] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.267549][ T5937] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.302580][ T5937] usb 4-1: string descriptor 0 read error: -22 [ 129.310188][ T5937] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 129.330821][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.390753][ T5937] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 129.401944][ T5931] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.412329][ T5931] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.440594][ T5931] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 129.459129][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.471474][ T5931] usb 1-1: SerialNumber: syz [ 129.772445][ T5931] usb 1-1: 0:2 : does not exist [ 129.877760][ T6317] netlink: 'syz.2.93': attribute type 1 has an invalid length. [ 130.312199][ T5931] usb 1-1: USB disconnect, device number 4 [ 130.894242][ T6311] netlink: 'syz.1.94': attribute type 1 has an invalid length. [ 131.296226][ T5931] usb 4-1: USB disconnect, device number 3 [ 132.209298][ T5931] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.503661][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.105'. [ 132.769512][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 132.820087][ T5931] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 132.882589][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.889995][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.897605][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.970494][ T5931] usb 3-1: Product: syz [ 132.988513][ T5931] usb 3-1: Manufacturer: syz [ 133.275109][ T5931] usb 3-1: SerialNumber: syz [ 133.329755][ T5931] r8152-cfgselector 3-1: Unknown version 0x0000 [ 133.336169][ T5931] r8152-cfgselector 3-1: config 0 descriptor?? [ 133.465056][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 133.495522][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 133.525854][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 134.020394][ T6364] fuse: Bad value for 'fd' [ 134.916879][ T6378] netlink: 72 bytes leftover after parsing attributes in process `syz.1.114'. [ 134.932841][ T6378] Zero length message leads to an empty skb [ 134.992189][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'. [ 135.604824][ T5931] r8152-cfgselector 3-1: Unknown version 0x0000 [ 135.611388][ T5931] r8152-cfgselector 3-1: bad CDC descriptors [ 135.642760][ T5931] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 136.874955][ T5902] IPVS: starting estimator thread 0... [ 136.911039][ T6406] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 136.979194][ T6409] IPVS: using max 33 ests per chain, 79200 per kthread [ 137.060049][ T6402] netlink: 'syz.2.119': attribute type 3 has an invalid length. [ 137.389304][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 137.398326][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.121'. [ 137.437640][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 138.682447][ T30] audit: type=1326 audit(1751615858.057:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.2.125" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc2539 code=0x0 [ 139.811954][ T6439] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 139.819141][ T6439] IPVS: set_ctl: invalid protocol: 25647 47.107.118.109:0 [ 139.832848][ T6439] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 140.089101][ T5931] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.249078][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 140.256411][ T5931] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 140.265043][ T5931] usb 5-1: config 179 has no interface number 0 [ 140.275874][ T5931] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 140.299321][ T5931] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 140.329760][ T5931] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.357821][ T5931] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 140.371480][ T5931] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 140.380903][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.393884][ T6441] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.524204][ T6450] FAULT_INJECTION: forcing a failure. [ 140.524204][ T6450] name failslab, interval 1, probability 0, space 0, times 1 [ 140.569306][ T6450] CPU: 1 UID: 0 PID: 6450 Comm: syz.1.135 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 140.569339][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.569358][ T6450] Call Trace: [ 140.569366][ T6450] [ 140.569374][ T6450] dump_stack_lvl+0x189/0x250 [ 140.569417][ T6450] ? __pfx____ratelimit+0x10/0x10 [ 140.569446][ T6450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.569476][ T6450] ? __pfx__printk+0x10/0x10 [ 140.569512][ T6450] should_fail_ex+0x414/0x560 [ 140.569541][ T6450] should_failslab+0xa8/0x100 [ 140.569564][ T6450] __kmalloc_cache_noprof+0x70/0x3d0 [ 140.569583][ T6450] ? sctp_add_bind_addr+0x8c/0x370 [ 140.569607][ T6450] sctp_add_bind_addr+0x8c/0x370 [ 140.569640][ T6450] sctp_copy_local_addr_list+0x30b/0x4e0 [ 140.569675][ T6450] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 140.569706][ T6450] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 140.569739][ T6450] ? sctp_v6_is_any+0x64/0x80 [ 140.569759][ T6450] ? sctp_copy_one_addr+0x93/0x360 [ 140.569793][ T6450] sctp_bind_addr_copy+0xb3/0x3c0 [ 140.569824][ T6450] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 140.569856][ T6450] sctp_connect_new_asoc+0x2e0/0x690 [ 140.569884][ T6450] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 140.569906][ T6450] ? __local_bh_enable_ip+0x12d/0x1c0 [ 140.569943][ T6450] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 140.569970][ T6450] ? security_sctp_bind_connect+0x7e/0x2e0 [ 140.569992][ T6450] sctp_sendmsg+0x155c/0x2810 [ 140.570028][ T6450] ? __pfx_sctp_sendmsg+0x10/0x10 [ 140.570054][ T6450] ? aa_sk_perm+0x81e/0x950 [ 140.570081][ T6450] ? __pfx_aa_sk_perm+0x10/0x10 [ 140.570117][ T6450] ? sock_rps_record_flow+0x19/0x410 [ 140.570147][ T6450] ? inet_sendmsg+0x2f4/0x370 [ 140.570178][ T6450] __sock_sendmsg+0x19c/0x270 [ 140.570228][ T6450] __sys_sendto+0x3bd/0x520 [ 140.570252][ T6450] ? __pfx___sys_sendto+0x10/0x10 [ 140.570269][ T6450] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 140.570312][ T6450] ? __fget_files+0x3a0/0x420 [ 140.570346][ T6450] ? ksys_write+0x22a/0x250 [ 140.570374][ T6450] __ia32_sys_sendto+0xdd/0x100 [ 140.570399][ T6450] __do_fast_syscall_32+0xb6/0x2b0 [ 140.570429][ T6450] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.570461][ T6450] do_fast_syscall_32+0x34/0x80 [ 140.570491][ T6450] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.570514][ T6450] RIP: 0023:0xf7fb6539 [ 140.570544][ T6450] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 140.570564][ T6450] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 140.570602][ T6450] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080847fff [ 140.570616][ T6450] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 140.570634][ T6450] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 140.570645][ T6450] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 140.570657][ T6450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.570687][ T6450] [ 140.877980][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.955381][ T5931] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9 [ 141.095739][ T6452] FAULT_INJECTION: forcing a failure. [ 141.095739][ T6452] name failslab, interval 1, probability 0, space 0, times 0 [ 141.175204][ T6452] CPU: 1 UID: 0 PID: 6452 Comm: syz.3.136 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 141.175235][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.175247][ T6452] Call Trace: [ 141.175254][ T6452] [ 141.175263][ T6452] dump_stack_lvl+0x189/0x250 [ 141.175299][ T6452] ? __pfx____ratelimit+0x10/0x10 [ 141.175333][ T6452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.175363][ T6452] ? __pfx__printk+0x10/0x10 [ 141.175390][ T6452] ? __pfx___might_resched+0x10/0x10 [ 141.175426][ T6452] should_fail_ex+0x414/0x560 [ 141.175454][ T6452] should_failslab+0xa8/0x100 [ 141.175477][ T6452] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 141.175497][ T6452] ? __alloc_skb+0x112/0x2d0 [ 141.175522][ T6452] __alloc_skb+0x112/0x2d0 [ 141.175547][ T6452] netlink_sendmsg+0x5c6/0xb30 [ 141.175579][ T6452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.175605][ T6452] ? __import_iovec+0x5d4/0x7f0 [ 141.175621][ T6452] ? aa_sock_msg_perm+0x94/0x160 [ 141.175647][ T6452] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.175672][ T6452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.175695][ T6452] __sock_sendmsg+0x219/0x270 [ 141.175727][ T6452] ____sys_sendmsg+0x505/0x830 [ 141.175756][ T6452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.175796][ T6452] ___sys_sendmsg+0x21f/0x2a0 [ 141.175823][ T6452] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.175889][ T6452] ? __fget_files+0x2a/0x420 [ 141.175911][ T6452] ? __fget_files+0x3a0/0x420 [ 141.175943][ T6452] __sys_sendmsg+0x164/0x220 [ 141.175970][ T6452] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.176008][ T6452] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 141.176039][ T6452] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.176069][ T6452] __do_fast_syscall_32+0xb6/0x2b0 [ 141.176100][ T6452] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.176132][ T6452] do_fast_syscall_32+0x34/0x80 [ 141.176162][ T6452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.176186][ T6452] RIP: 0023:0xf7f82539 [ 141.176203][ T6452] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 141.176219][ T6452] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 141.176240][ T6452] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 141.176254][ T6452] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.176265][ T6452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.176276][ T6452] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 141.176287][ T6452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.176315][ T6452] [ 141.438880][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.448082][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.469627][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.437885][ T6470] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[6470] [ 142.993810][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 142.993816][ T5895] usb 5-1: USB disconnect, device number 3 [ 142.993860][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 143.016901][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.354340][ T5895] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 145.193806][ T6496] fuse: Bad value for 'fd' [ 145.670352][ T43] IPVS: starting estimator thread 0... [ 145.683111][ T6491] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 145.712944][ T6492] netlink: 'syz.4.143': attribute type 3 has an invalid length. [ 145.760749][ T6502] IPVS: using max 39 ests per chain, 93600 per kthread [ 146.149588][ T5895] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.349441][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 146.520289][ T5895] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 146.529513][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.537527][ T5895] usb 4-1: Product: syz [ 146.569386][ T5895] usb 4-1: Manufacturer: syz [ 146.596827][ T5895] usb 4-1: SerialNumber: syz [ 146.630753][ T5895] r8152-cfgselector 4-1: Unknown version 0x0000 [ 146.653100][ T5895] r8152-cfgselector 4-1: config 0 descriptor?? [ 147.321888][ T30] audit: type=1326 audit(1751615866.637:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 147.479248][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.495103][ T30] audit: type=1326 audit(1751615866.637:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 147.626839][ T30] audit: type=1326 audit(1751615866.637:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 147.649356][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 147.660602][ T43] usb 3-1: config 1 has an invalid descriptor of length 182, skipping remainder of the config [ 147.672805][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.740729][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.756906][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.795606][ T43] usb 3-1: Product: syz [ 147.818170][ T43] usb 3-1: Manufacturer: syz [ 147.843429][ T43] usb 3-1: SerialNumber: syz [ 147.891832][ T30] audit: type=1326 audit(1751615866.637:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 147.960884][ T6516] fuse: Unknown parameter '•' [ 148.045021][ T30] audit: type=1326 audit(1751615866.637:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 148.269273][ T30] audit: type=1326 audit(1751615866.637:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 148.315291][ T30] audit: type=1326 audit(1751615866.637:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 148.464891][ T30] audit: type=1326 audit(1751615866.947:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 148.605228][ T30] audit: type=1326 audit(1751615866.947:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 149.409358][ T5895] r8152-cfgselector 4-1: Unknown version 0x0000 [ 149.486964][ T5895] r8152-cfgselector 4-1: bad CDC descriptors [ 149.561163][ T5895] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 150.049230][ T5895] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 150.063150][ T43] usb 3-1: 0:2 : does not exist [ 150.075152][ T43] usb 3-1: unit 9 not found! [ 150.161500][ T43] usb 3-1: USB disconnect, device number 4 [ 150.226726][ T5895] usb 4-1: config 7 has an invalid interface number: 186 but max is 0 [ 150.242973][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.295097][ T5895] usb 4-1: config 7 has no interface number 0 [ 150.358329][ T5895] usb 4-1: config 7 interface 186 has no altsetting 0 [ 150.429968][ T5895] usb 4-1: string descriptor 0 read error: -22 [ 150.464713][ T5895] usb 4-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 150.516803][ T6556] input: syz0 as /devices/virtual/input/input10 [ 150.586864][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.713277][ T5895] usb 4-1: bad CDC descriptors [ 150.797147][ T5895] cdc_acm 4-1:7.186: Zero length descriptor references [ 150.959629][ T5895] cdc_acm 4-1:7.186: probe with driver cdc_acm failed with error -22 [ 151.220222][ T6571] fuse: Bad value for 'fd' [ 151.241976][ T6571] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 151.326739][ T6571] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 152.771886][ T6600] overlayfs: missing 'lowerdir' [ 152.799520][ T43] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 152.805993][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.812857][ T43] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 152.841365][ T6600] netlink: 'syz.2.166': attribute type 10 has an invalid length. [ 152.850626][ T6600] netlink: 40 bytes leftover after parsing attributes in process `syz.2.166'. [ 152.915562][ T6600] team0: Port device geneve0 added [ 153.039185][ T6556] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 153.046351][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.053700][ T6556] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 153.504778][ T6556] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.517414][ T6556] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.526730][ T6556] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.553368][ T6556] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.589090][ T6556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.614693][ T6556] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.654576][ T6556] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.681400][ T6556] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.708073][ T6556] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 153.753051][ T6556] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 153.847222][ T5937] usb 4-1: USB disconnect, device number 5 [ 154.349499][ T6628] netlink: 72 bytes leftover after parsing attributes in process `syz.0.168'. [ 154.422128][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 154.591999][ T6637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.172'. [ 155.028934][ T5895] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.129229][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.147199][ T43] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 155.159514][ T43] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 155.233320][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 155.260505][ T5895] usb 4-1: config 1 has an invalid descriptor of length 182, skipping remainder of the config [ 155.323536][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.373358][ T5895] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.397247][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.436434][ T5895] usb 4-1: Product: syz [ 155.479155][ T5895] usb 4-1: Manufacturer: syz [ 155.519689][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.526038][ T5895] usb 4-1: SerialNumber: syz [ 155.526735][ T43] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 155.541816][ T43] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 155.599203][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.606431][ T43] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 155.619124][ T43] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 155.763746][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 155.779191][ T43] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 155.817611][ T43] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 157.554892][ T5895] usb 4-1: 0:2 : does not exist [ 157.563321][ T5895] usb 4-1: unit 9 not found! [ 157.602161][ T5895] usb 4-1: USB disconnect, device number 6 [ 157.636164][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.724150][ T6693] fuse: Bad value for 'fd' [ 157.734844][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 157.745099][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 157.754352][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 194.323491][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.330113][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.762456][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.768813][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 308.879149][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 308.886780][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 308.895899][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 308.904686][ T31] task:kworker/1:1 state:D stack:21656 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 308.916896][ T31] Workqueue: events rfkill_op_handler [ 308.922406][ T31] Call Trace: [ 308.925743][ T31] [ 308.928711][ T31] __schedule+0x16f5/0x4d00 [ 308.933500][ T31] ? __lock_acquire+0xa60/0xd20 [ 308.938433][ T31] ? schedule+0x165/0x360 [ 308.942880][ T31] ? __pfx___schedule+0x10/0x10 [ 308.947795][ T31] ? schedule+0x91/0x360 [ 308.952199][ T31] schedule+0x165/0x360 [ 308.956403][ T31] schedule_preempt_disabled+0x13/0x30 [ 308.961964][ T31] __mutex_lock+0x724/0xe80 [ 308.966517][ T31] ? __lock_acquire+0xab9/0xd20 [ 308.971474][ T31] ? __mutex_lock+0x51b/0xe80 [ 308.976201][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 308.982306][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 308.987423][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.992722][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 308.998661][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 309.005135][ T31] ? kobject_uevent_env+0x36b/0x8c0 [ 309.010405][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 309.016159][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 309.021363][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 309.027132][ T31] rfkill_set_block+0x1cf/0x440 [ 309.032078][ T31] rfkill_epo+0x7e/0x180 [ 309.036391][ T31] rfkill_op_handler+0x84/0x240 [ 309.041404][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 309.047173][ T31] process_scheduled_works+0xade/0x17b0 [ 309.052876][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 309.058928][ T31] worker_thread+0x8a0/0xda0 [ 309.066668][ T31] kthread+0x70e/0x8a0 [ 309.070878][ T31] ? __pfx_worker_thread+0x10/0x10 [ 309.076130][ T31] ? __pfx_kthread+0x10/0x10 [ 309.080888][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.086175][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.091525][ T31] ? __pfx_kthread+0x10/0x10 [ 309.096171][ T31] ret_from_fork+0x3fc/0x770 [ 309.100873][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 309.106049][ T31] ? __switch_to_asm+0x39/0x70 [ 309.110898][ T31] ? __switch_to_asm+0x33/0x70 [ 309.115708][ T31] ? __pfx_kthread+0x10/0x10 [ 309.126325][ T31] ret_from_fork_asm+0x1a/0x30 [ 309.131254][ T31] [ 309.134437][ T31] INFO: task syz-executor:5850 blocked for more than 143 seconds. [ 309.142334][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 309.150954][ T31] Blocked by coredump. [ 309.155590][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 309.165315][ T31] task:syz-executor state:D stack:21672 pid:5850 tgid:5850 ppid:1 task_flags:0x40054c flags:0x20004006 [ 309.178048][ T31] Call Trace: [ 309.182281][ T31] [ 309.185299][ T31] __schedule+0x16f5/0x4d00 [ 309.189911][ T31] ? __lock_acquire+0xa61/0xd20 [ 309.194806][ T31] ? schedule+0x165/0x360 [ 309.200347][ T31] ? __pfx___schedule+0x10/0x10 [ 309.205505][ T31] ? schedule+0x91/0x360 [ 309.209931][ T31] schedule+0x165/0x360 [ 309.214189][ T31] schedule_preempt_disabled+0x13/0x30 [ 309.219796][ T31] __mutex_lock+0x724/0xe80 [ 309.224359][ T31] ? kobject_put+0x43f/0x480 [ 309.229020][ T31] ? __mutex_lock+0x51b/0xe80 [ 309.233806][ T31] ? rfkill_unregister+0xc8/0x220 [ 309.238876][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 309.244028][ T31] ? __pfx_device_del+0x10/0x10 [ 309.248912][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 309.255666][ T31] rfkill_unregister+0xc8/0x220 [ 309.261549][ T31] hci_unregister_dev+0x374/0x510 [ 309.266640][ T31] vhci_release+0x80/0xd0 [ 309.272645][ T31] ? __pfx_vhci_release+0x10/0x10 [ 309.277724][ T31] __fput+0x449/0xa70 [ 309.281859][ T31] task_work_run+0x1d1/0x260 [ 309.287028][ T31] ? __pfx_task_work_run+0x10/0x10 [ 309.292273][ T31] ? kmem_cache_free+0x18f/0x400 [ 309.297239][ T31] do_exit+0x6b5/0x22e0 [ 309.301473][ T31] ? do_raw_spin_lock+0x121/0x290 [ 309.306532][ T31] ? __pfx_do_exit+0x10/0x10 [ 309.311244][ T31] do_group_exit+0x21c/0x2d0 [ 309.315872][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.321171][ T31] get_signal+0x1286/0x1340 [ 309.325768][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 309.331564][ T31] ? __pfx___ia32_compat_sys_wait4+0x10/0x10 [ 309.337613][ T31] ? fput_close_sync+0x119/0x200 [ 309.342645][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 309.348848][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 309.354464][ T31] exit_to_user_mode_loop+0x75/0x110 [ 309.359937][ T31] __do_fast_syscall_32+0x1f4/0x2b0 [ 309.365158][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.370635][ T31] do_fast_syscall_32+0x34/0x80 [ 309.375539][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.381943][ T31] RIP: 0023:0xf7f93539 [ 309.386075][ T31] RSP: 002b:00000000f757fce0 EFLAGS: 00000206 ORIG_RAX: 0000000000000072 [ 309.394593][ T31] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000f757fe08 [ 309.402729][ T31] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.410857][ T31] RBP: 00000000f757fe08 R08: 0000000000000000 R09: 0000000000000000 [ 309.418887][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 309.426938][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.434994][ T31] [ 309.438036][ T31] INFO: task kworker/1:4:5931 blocked for more than 143 seconds. [ 309.445949][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 309.453672][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 309.462422][ T31] task:kworker/1:4 state:D stack:22728 pid:5931 tgid:5931 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 309.474543][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 309.481325][ T31] Call Trace: [ 309.484697][ T31] [ 309.487643][ T31] __schedule+0x16f5/0x4d00 [ 309.492269][ T31] ? schedule+0x165/0x360 [ 309.496651][ T31] ? __pfx___schedule+0x10/0x10 [ 309.501630][ T31] ? schedule+0x91/0x360 [ 309.505915][ T31] schedule+0x165/0x360 [ 309.510170][ T31] schedule_preempt_disabled+0x13/0x30 [ 309.515660][ T31] __mutex_lock+0x724/0xe80 [ 309.520272][ T31] ? look_up_lock_class+0x74/0x170 [ 309.525428][ T31] ? __mutex_lock+0x51b/0xe80 [ 309.530182][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 309.536484][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 309.541594][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 309.547368][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 309.553175][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 309.559335][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 309.565090][ T31] process_scheduled_works+0xade/0x17b0 [ 309.570766][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 309.576806][ T31] worker_thread+0x8a0/0xda0 [ 309.581529][ T31] ? __kthread_parkme+0x7b/0x200 [ 309.586540][ T31] kthread+0x70e/0x8a0 [ 309.590725][ T31] ? __pfx_worker_thread+0x10/0x10 [ 309.595893][ T31] ? __pfx_kthread+0x10/0x10 [ 309.600748][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.605994][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.611334][ T31] ? __pfx_kthread+0x10/0x10 [ 309.615960][ T31] ret_from_fork+0x3fc/0x770 [ 309.620804][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 309.625968][ T31] ? __switch_to_asm+0x39/0x70 [ 309.630843][ T31] ? __switch_to_asm+0x33/0x70 [ 309.635665][ T31] ? __pfx_kthread+0x10/0x10 [ 309.640330][ T31] ret_from_fork_asm+0x1a/0x30 [ 309.645141][ T31] [ 309.648176][ T31] INFO: task syz.4.156:6536 blocked for more than 144 seconds. [ 309.655897][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 309.663593][ T31] Blocked by coredump. [ 309.668209][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 309.676998][ T31] task:syz.4.156 state:D stack:24776 pid:6536 tgid:6534 ppid:5850 task_flags:0x40044c flags:0x20004006 [ 309.689031][ T31] Call Trace: [ 309.692368][ T31] [ 309.695342][ T31] __schedule+0x16f5/0x4d00 [ 309.699915][ T31] ? schedule+0x165/0x360 [ 309.704307][ T31] ? __pfx___schedule+0x10/0x10 [ 309.709262][ T31] ? schedule+0x91/0x360 [ 309.713559][ T31] schedule+0x165/0x360 [ 309.717803][ T31] schedule_preempt_disabled+0x13/0x30 [ 309.723419][ T31] __mutex_lock+0x724/0xe80 [ 309.727963][ T31] ? kobject_put+0x43f/0x480 [ 309.732605][ T31] ? __mutex_lock+0x51b/0xe80 [ 309.737345][ T31] ? rfkill_unregister+0xc8/0x220 [ 309.742438][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 309.747504][ T31] ? __pfx_device_del+0x10/0x10 [ 309.752453][ T31] rfkill_unregister+0xc8/0x220 [ 309.757345][ T31] nfc_unregister_device+0x96/0x2a0 [ 309.762676][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 309.768459][ T31] virtual_ncidev_close+0x56/0x90 [ 309.773548][ T31] __fput+0x449/0xa70 [ 309.777568][ T31] task_work_run+0x1d1/0x260 [ 309.782285][ T31] ? __pfx_task_work_run+0x10/0x10 [ 309.787533][ T31] do_exit+0x6b5/0x22e0 [ 309.791754][ T31] ? do_raw_spin_lock+0x121/0x290 [ 309.796812][ T31] ? __pfx_do_exit+0x10/0x10 [ 309.801514][ T31] do_group_exit+0x21c/0x2d0 [ 309.806151][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.811454][ T31] get_signal+0x1286/0x1340 [ 309.816012][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 309.821640][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 309.827832][ T31] ? __sys_recvmmsg+0x19d/0x280 [ 309.832786][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 309.838310][ T31] exit_to_user_mode_loop+0x75/0x110 [ 309.843692][ T31] __do_fast_syscall_32+0x1f4/0x2b0 [ 309.848991][ T31] do_fast_syscall_32+0x34/0x80 [ 309.853916][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.860411][ T31] RIP: 0023:0xf7f93539 [ 309.864516][ T31] RSP: 002b:00000000f509555c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 309.873007][ T31] RAX: 0000000000010106 RBX: 0000000000000004 RCX: 00000000800000c0 [ 309.881033][ T31] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 309.889089][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.897196][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 309.905250][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.913390][ T31] [ 309.916420][ T31] INFO: task syz.2.173:6648 blocked for more than 144 seconds. [ 309.924220][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 309.931948][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 309.940745][ T31] task:syz.2.173 state:D stack:25864 pid:6648 tgid:6640 ppid:5845 task_flags:0x400040 flags:0x20004004 [ 309.952806][ T31] Call Trace: [ 309.956282][ T31] [ 309.959323][ T31] __schedule+0x16f5/0x4d00 [ 309.963885][ T31] ? schedule+0x165/0x360 [ 309.968270][ T31] ? __pfx___schedule+0x10/0x10 [ 309.973216][ T31] ? schedule+0x91/0x360 [ 309.977503][ T31] schedule+0x165/0x360 [ 309.981755][ T31] schedule_preempt_disabled+0x13/0x30 [ 309.987287][ T31] __mutex_lock+0x724/0xe80 [ 309.991927][ T31] ? __mutex_lock+0x51b/0xe80 [ 309.996755][ T31] ? rfkill_register+0x37/0x8e0 [ 310.001751][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 310.006818][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 310.012271][ T31] ? device_initialize+0x24b/0x440 [ 310.017547][ T31] rfkill_register+0x37/0x8e0 [ 310.022297][ T31] nfc_register_device+0x14a/0x320 [ 310.027446][ T31] nci_register_device+0x87f/0x9d0 [ 310.032642][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 310.038336][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 310.043710][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 310.049166][ T31] virtual_ncidev_open+0x129/0x1a0 [ 310.054328][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 310.060033][ T31] misc_open+0x2bc/0x330 [ 310.064360][ T31] chrdev_open+0x4c9/0x5e0 [ 310.068898][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 310.073940][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 310.078910][ T31] do_dentry_open+0xdf0/0x1970 [ 310.083835][ T31] vfs_open+0x3b/0x340 [ 310.087945][ T31] ? path_openat+0x2ecd/0x3830 [ 310.092792][ T31] path_openat+0x2ee5/0x3830 [ 310.097414][ T31] ? arch_stack_walk+0xfc/0x150 [ 310.102373][ T31] ? preempt_schedule+0xae/0xc0 [ 310.107312][ T31] ? __pfx_path_openat+0x10/0x10 [ 310.112353][ T31] ? do_fast_syscall_32+0x34/0x80 [ 310.117458][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.124169][ T31] do_filp_open+0x1fa/0x410 [ 310.128718][ T31] ? __lock_acquire+0xab9/0xd20 [ 310.133675][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 310.138759][ T31] ? _raw_spin_unlock+0x28/0x50 [ 310.143676][ T31] ? alloc_fd+0x64c/0x6c0 [ 310.148078][ T31] do_sys_openat2+0x121/0x1c0 [ 310.152842][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 310.158265][ T31] ? rcu_is_watching+0x15/0xb0 [ 310.163466][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 310.171563][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 310.177256][ T31] do_fast_syscall_32+0x34/0x80 [ 310.182300][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.188661][ T31] RIP: 0023:0xf7fc2539 [ 310.193011][ T31] RSP: 002b:00000000f4c8155c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 310.201586][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 310.209672][ T31] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.217652][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.225701][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 310.233825][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.242232][ T31] [ 310.245290][ T31] INFO: task syz.2.173:6650 blocked for more than 144 seconds. [ 310.253052][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 310.260945][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.269777][ T31] task:syz.2.173 state:D stack:28296 pid:6650 tgid:6640 ppid:5845 task_flags:0x400040 flags:0x20004004 [ 310.282013][ T31] Call Trace: [ 310.285312][ T31] [ 310.288256][ T31] __schedule+0x16f5/0x4d00 [ 310.292863][ T31] ? schedule+0x165/0x360 [ 310.297239][ T31] ? __pfx___schedule+0x10/0x10 [ 310.302184][ T31] ? schedule+0x91/0x360 [ 310.306463][ T31] schedule+0x165/0x360 [ 310.310803][ T31] schedule_preempt_disabled+0x13/0x30 [ 310.316296][ T31] __mutex_lock+0x724/0xe80 [ 310.321053][ T31] ? __mutex_lock+0x51b/0xe80 [ 310.325959][ T31] ? misc_open+0x51/0x330 [ 310.330404][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 310.335483][ T31] misc_open+0x51/0x330 [ 310.339728][ T31] chrdev_open+0x4c9/0x5e0 [ 310.344176][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 310.349241][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 310.354202][ T31] do_dentry_open+0xdf0/0x1970 [ 310.359132][ T31] vfs_open+0x3b/0x340 [ 310.363241][ T31] ? path_openat+0x2ecd/0x3830 [ 310.368057][ T31] path_openat+0x2ee5/0x3830 [ 310.372795][ T31] ? arch_stack_walk+0xfc/0x150 [ 310.377689][ T31] ? __pfx_path_openat+0x10/0x10 [ 310.382704][ T31] ? do_fast_syscall_32+0x34/0x80 [ 310.387766][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.394623][ T31] do_filp_open+0x1fa/0x410 [ 310.400599][ T31] ? __lock_acquire+0xab9/0xd20 [ 310.405531][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 310.410689][ T31] ? _raw_spin_unlock+0x28/0x50 [ 310.415574][ T31] ? alloc_fd+0x64c/0x6c0 [ 310.419987][ T31] do_sys_openat2+0x121/0x1c0 [ 310.424693][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 310.430036][ T31] ? exc_page_fault+0x76/0xf0 [ 310.434748][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 310.440374][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 310.445522][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.450814][ T31] do_fast_syscall_32+0x34/0x80 [ 310.455709][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.462137][ T31] RIP: 0023:0xf7fc2539 [ 310.466235][ T31] RSP: 002b:00000000f485c460 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 310.474785][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72d65ac [ 310.482955][ T31] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f7453ff4 [ 310.491043][ T31] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 310.499335][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 310.507369][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.516407][ T31] [ 310.519543][ T31] INFO: task syz.1.175:6656 blocked for more than 145 seconds. [ 310.527105][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 310.534990][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.543758][ T31] task:syz.1.175 state:D stack:28232 pid:6656 tgid:6655 ppid:5847 task_flags:0x400140 flags:0x20004004 [ 310.555827][ T31] Call Trace: [ 310.559385][ T31] [ 310.562427][ T31] __schedule+0x16f5/0x4d00 [ 310.566949][ T31] ? __kasan_slab_free+0x62/0x70 [ 310.572005][ T31] ? security_file_open+0xb1/0x270 [ 310.577161][ T31] ? __lock_acquire+0xa61/0xd20 [ 310.582099][ T31] ? schedule+0x165/0x360 [ 310.586496][ T31] ? __pfx___schedule+0x10/0x10 [ 310.591505][ T31] ? schedule+0x91/0x360 [ 310.595789][ T31] schedule+0x165/0x360 [ 310.600078][ T31] schedule_preempt_disabled+0x13/0x30 [ 310.605572][ T31] __mutex_lock+0x724/0xe80 [ 310.610376][ T31] ? __mutex_lock+0x51b/0xe80 [ 310.615108][ T31] ? misc_open+0x51/0x330 [ 310.619581][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 310.624737][ T31] misc_open+0x51/0x330 [ 310.628901][ T31] chrdev_open+0x4c9/0x5e0 [ 310.633561][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 310.638551][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 310.643616][ T31] do_dentry_open+0xdf0/0x1970 [ 310.648452][ T31] vfs_open+0x3b/0x340 [ 310.652623][ T31] ? path_openat+0x2ecd/0x3830 [ 310.657424][ T31] path_openat+0x2ee5/0x3830 [ 310.662099][ T31] ? arch_stack_walk+0xfc/0x150 [ 310.666996][ T31] ? __pfx_path_openat+0x10/0x10 [ 310.672066][ T31] ? do_fast_syscall_32+0x34/0x80 [ 310.677123][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.683699][ T31] do_filp_open+0x1fa/0x410 [ 310.688240][ T31] ? __lock_acquire+0xab9/0xd20 [ 310.693248][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 310.698329][ T31] ? _raw_spin_unlock+0x28/0x50 [ 310.703269][ T31] ? alloc_fd+0x64c/0x6c0 [ 310.707639][ T31] do_sys_openat2+0x121/0x1c0 [ 310.712412][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 310.717649][ T31] ? rcu_is_watching+0x15/0xb0 [ 310.722771][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 310.728368][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 310.733568][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.738823][ T31] do_fast_syscall_32+0x34/0x80 [ 310.743780][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.750207][ T31] RIP: 0023:0xf7fb6539 [ 310.754296][ T31] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 310.762810][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 310.770901][ T31] RDX: 0000000000040241 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.778921][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.786992][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 310.795081][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.803210][ T31] [ 310.806275][ T31] INFO: task syz.1.175:6657 blocked for more than 145 seconds. [ 310.813968][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 310.821659][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.830583][ T31] task:syz.1.175 state:D stack:28296 pid:6657 tgid:6655 ppid:5847 task_flags:0x400040 flags:0x20004004 [ 310.842656][ T31] Call Trace: [ 310.846022][ T31] [ 310.849087][ T31] __schedule+0x16f5/0x4d00 [ 310.853640][ T31] ? schedule+0x165/0x360 [ 310.857987][ T31] ? __pfx___schedule+0x10/0x10 [ 310.862905][ T31] ? schedule+0x91/0x360 [ 310.867182][ T31] ? lock_acquire+0x175/0x360 [ 310.872085][ T31] ? schedule+0x91/0x360 [ 310.876362][ T31] schedule+0x165/0x360 [ 310.880601][ T31] schedule_preempt_disabled+0x13/0x30 [ 310.886196][ T31] __mutex_lock+0x724/0xe80 [ 310.890805][ T31] ? __mutex_lock+0x51b/0xe80 [ 310.895524][ T31] ? misc_open+0x51/0x330 [ 310.899944][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 310.905027][ T31] misc_open+0x51/0x330 [ 310.909279][ T31] chrdev_open+0x4c9/0x5e0 [ 310.913743][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 310.918709][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 310.923726][ T31] do_dentry_open+0xdf0/0x1970 [ 310.928537][ T31] vfs_open+0x3b/0x340 [ 310.932690][ T31] ? path_openat+0x2ecd/0x3830 [ 310.937484][ T31] path_openat+0x2ee5/0x3830 [ 310.942335][ T31] ? arch_stack_walk+0xfc/0x150 [ 310.947228][ T31] ? __pfx_path_openat+0x10/0x10 [ 310.952257][ T31] ? do_fast_syscall_32+0x34/0x80 [ 310.957321][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.964066][ T31] do_filp_open+0x1fa/0x410 [ 310.968615][ T31] ? __lock_acquire+0xab9/0xd20 [ 310.973560][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 310.978631][ T31] ? _raw_spin_unlock+0x28/0x50 [ 310.983542][ T31] ? alloc_fd+0x64c/0x6c0 [ 310.987904][ T31] do_sys_openat2+0x121/0x1c0 [ 310.992676][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.997906][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 311.003199][ T31] ? __ia32_compat_sys_rt_sigprocmask+0x2a7/0x310 [ 311.009703][ T31] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 311.016579][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 311.021577][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 311.027162][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 311.032396][ T31] do_fast_syscall_32+0x34/0x80 [ 311.037289][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.043727][ T31] RIP: 0023:0xf7fb6539 [ 311.047851][ T31] RSP: 002b:00000000f50b555c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 311.056603][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 311.064700][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.072754][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.080808][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 311.088787][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.096839][ T31] [ 311.099916][ T31] INFO: task syz.0.177:6669 blocked for more than 145 seconds. [ 311.107459][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 311.115179][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.124052][ T31] task:syz.0.177 state:D stack:28296 pid:6669 tgid:6668 ppid:5844 task_flags:0x400040 flags:0x20004004 [ 311.136106][ T31] Call Trace: [ 311.139451][ T31] [ 311.142390][ T31] __schedule+0x16f5/0x4d00 [ 311.146920][ T31] ? schedule+0x165/0x360 [ 311.151374][ T31] ? __pfx___schedule+0x10/0x10 [ 311.156272][ T31] ? schedule+0x91/0x360 [ 311.160817][ T31] schedule+0x165/0x360 [ 311.165027][ T31] schedule_preempt_disabled+0x13/0x30 [ 311.170587][ T31] __mutex_lock+0x724/0xe80 [ 311.175146][ T31] ? __mutex_lock+0x51b/0xe80 [ 311.179886][ T31] ? misc_open+0x51/0x330 [ 311.184249][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 311.189378][ T31] misc_open+0x51/0x330 [ 311.193556][ T31] chrdev_open+0x4c9/0x5e0 [ 311.197994][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 311.202987][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 311.207962][ T31] do_dentry_open+0xdf0/0x1970 [ 311.212829][ T31] vfs_open+0x3b/0x340 [ 311.216979][ T31] ? path_openat+0x2ecd/0x3830 [ 311.221885][ T31] path_openat+0x2ee5/0x3830 [ 311.226513][ T31] ? arch_stack_walk+0xfc/0x150 [ 311.231504][ T31] ? __pfx_path_openat+0x10/0x10 [ 311.236490][ T31] ? do_fast_syscall_32+0x34/0x80 [ 311.241587][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.248140][ T31] do_filp_open+0x1fa/0x410 [ 311.252754][ T31] ? __lock_acquire+0xab9/0xd20 [ 311.257643][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 311.262868][ T31] ? _raw_spin_unlock+0x28/0x50 [ 311.267755][ T31] ? alloc_fd+0x64c/0x6c0 [ 311.272430][ T31] do_sys_openat2+0x121/0x1c0 [ 311.277148][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 311.282868][ T31] ? rcu_is_watching+0x15/0xb0 [ 311.287701][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 311.293538][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 311.298714][ T31] do_fast_syscall_32+0x34/0x80 [ 311.303846][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.310290][ T31] RIP: 0023:0xf7f43539 [ 311.314377][ T31] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 311.322935][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 311.331004][ T31] RDX: 0000000000101100 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.339072][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.347066][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 311.355128][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.363220][ T31] [ 311.366261][ T31] INFO: task syz.3.178:6692 blocked for more than 145 seconds. [ 311.373880][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 311.381728][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.390504][ T31] task:syz.3.178 state:D stack:28024 pid:6692 tgid:6691 ppid:5846 task_flags:0x400040 flags:0x20004004 [ 311.402530][ T31] Call Trace: [ 311.405820][ T31] [ 311.408761][ T31] __schedule+0x16f5/0x4d00 [ 311.413356][ T31] ? __kasan_slab_free+0x62/0x70 [ 311.418325][ T31] ? security_file_open+0xb1/0x270 [ 311.423542][ T31] ? __lock_acquire+0xa61/0xd20 [ 311.428446][ T31] ? schedule+0x165/0x360 [ 311.432910][ T31] ? __pfx___schedule+0x10/0x10 [ 311.437835][ T31] ? schedule+0x91/0x360 [ 311.442460][ T31] schedule+0x165/0x360 [ 311.446666][ T31] schedule_preempt_disabled+0x13/0x30 [ 311.452211][ T31] __mutex_lock+0x724/0xe80 [ 311.456757][ T31] ? __mutex_lock+0x51b/0xe80 [ 311.461531][ T31] ? misc_open+0x51/0x330 [ 311.465896][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 311.471027][ T31] misc_open+0x51/0x330 [ 311.475307][ T31] chrdev_open+0x4c9/0x5e0 [ 311.479821][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 311.484790][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 311.490051][ T31] do_dentry_open+0xdf0/0x1970 [ 311.494871][ T31] vfs_open+0x3b/0x340 [ 311.499266][ T31] ? path_openat+0x2ecd/0x3830 [ 311.504080][ T31] path_openat+0x2ee5/0x3830 [ 311.508677][ T31] ? arch_stack_walk+0xfc/0x150 [ 311.513632][ T31] ? __pfx_path_openat+0x10/0x10 [ 311.518597][ T31] ? do_fast_syscall_32+0x34/0x80 [ 311.523793][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.530463][ T31] do_filp_open+0x1fa/0x410 [ 311.535036][ T31] ? __lock_acquire+0xab9/0xd20 [ 311.540223][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 311.545338][ T31] ? _raw_spin_unlock+0x28/0x50 [ 311.550365][ T31] ? alloc_fd+0x64c/0x6c0 [ 311.554751][ T31] do_sys_openat2+0x121/0x1c0 [ 311.561346][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 311.566585][ T31] ? rcu_is_watching+0x15/0xb0 [ 311.571460][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 311.577049][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 311.583373][ T31] do_fast_syscall_32+0x34/0x80 [ 311.588281][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.595509][ T31] RIP: 0023:0xf7f82539 [ 311.599754][ T31] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 311.608247][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 311.616256][ T31] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.624370][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.632520][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 311.640613][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.648627][ T31] [ 311.651778][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 311.660929][ T31] INFO: task syz-executor:6695 blocked for more than 146 seconds. [ 311.668887][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 311.677240][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.686094][ T31] task:syz-executor state:D stack:24104 pid:6695 tgid:6695 ppid:5816 task_flags:0x400000 flags:0x20004004 [ 311.698235][ T31] Call Trace: [ 311.701598][ T31] [ 311.704563][ T31] __schedule+0x16f5/0x4d00 [ 311.709402][ T31] ? __kasan_slab_free+0x62/0x70 [ 311.714354][ T31] ? security_file_open+0xb1/0x270 [ 311.719550][ T31] ? __lock_acquire+0xa60/0xd20 [ 311.724439][ T31] ? schedule+0x165/0x360 [ 311.728798][ T31] ? __pfx___schedule+0x10/0x10 [ 311.733748][ T31] ? schedule+0x91/0x360 [ 311.738024][ T31] schedule+0x165/0x360 [ 311.742305][ T31] schedule_preempt_disabled+0x13/0x30 [ 311.747819][ T31] __mutex_lock+0x724/0xe80 [ 311.752471][ T31] ? __mutex_lock+0x51b/0xe80 [ 311.757196][ T31] ? misc_open+0x51/0x330 [ 311.761695][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 311.766827][ T31] misc_open+0x51/0x330 [ 311.771110][ T31] chrdev_open+0x4c9/0x5e0 [ 311.775565][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 311.780709][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 311.785720][ T31] do_dentry_open+0xdf0/0x1970 [ 311.790661][ T31] vfs_open+0x3b/0x340 [ 311.794782][ T31] ? path_openat+0x2ecd/0x3830 [ 311.799657][ T31] path_openat+0x2ee5/0x3830 [ 311.804293][ T31] ? arch_stack_walk+0xfc/0x150 [ 311.809306][ T31] ? __pfx_path_openat+0x10/0x10 [ 311.814295][ T31] ? do_fast_syscall_32+0x34/0x80 [ 311.819637][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.826190][ T31] do_filp_open+0x1fa/0x410 [ 311.830855][ T31] ? __lock_acquire+0xab9/0xd20 [ 311.835756][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 311.840906][ T31] ? _raw_spin_unlock+0x28/0x50 [ 311.845927][ T31] ? alloc_fd+0x64c/0x6c0 [ 311.850394][ T31] do_sys_openat2+0x121/0x1c0 [ 311.855134][ T31] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 311.860372][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 311.865628][ T31] ? __fget_files+0x2a/0x420 [ 311.870390][ T31] ? __fget_files+0x2a/0x420 [ 311.875030][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 311.880710][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 311.885869][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.891165][ T31] do_fast_syscall_32+0x34/0x80 [ 311.896076][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.902469][ T31] RIP: 0023:0xf704e539 [ 311.907090][ T31] RSP: 002b:00000000ffd0bad0 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 311.915697][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f723721e [ 311.924116][ T31] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73b3ff4 [ 311.932453][ T31] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 311.940542][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 311.948536][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.956657][ T31] [ 311.959753][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 311.968796][ T31] [ 311.968796][ T31] Showing all locks held in the system: [ 311.976586][ T31] 1 lock held by khungtaskd/31: [ 311.981521][ T31] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 311.991497][ T31] 4 locks held by kworker/1:1/43: [ 311.996539][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 312.007588][ T31] #1: ffffc90000b37bc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 312.018690][ T31] #2: ffffffff8f7ead68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 312.028289][ T31] #3: ffff888078315100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 312.038091][ T31] 2 locks held by getty/5588: [ 312.043008][ T31] #0: ffff8880350320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 312.053850][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 312.064100][ T31] 1 lock held by syz-executor/5850: [ 312.069372][ T31] #0: ffffffff8f7ead68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 312.081480][ T31] 3 locks held by kworker/1:4/5931: [ 312.086839][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 312.098007][ T31] #1: ffffc900047bfbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 312.111651][ T31] #2: ffffffff8f7ead68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 312.123080][ T31] 2 locks held by syz.4.156/6536: [ 312.128131][ T31] #0: ffff888078315100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 312.138067][ T31] #1: ffffffff8f7ead68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 312.148272][ T31] 3 locks held by syz.2.173/6648: [ 312.153357][ T31] #0: ffffffff8e9c23c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 312.162176][ T31] #1: ffff888034f01100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 312.171921][ T31] #2: ffffffff8f7ead68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 312.182001][ T31] 1 lock held by syz.2.173/6650: [ 312.186966][ T31] #0: ffffffff8e9c23c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 312.196429][ T31] 1 lock held by syz.1.175/6656: [ 312.201445][ T31] #0: ffffffff8e9c23c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 312.210056][ T31] 1 lock held by syz.1.175/6657: [ 312.215012][ T31] #0: ffffffff8e9c23c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 312.223547][ T31] 1 lock held by syz.0.177/6669: [ 312.228509][ T31] #0: ffffffff8e9c23c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 312.237059][ T31] 1 lock held by syz.3.178/6692: [ 312.242272][ T31] #0: ffffffff8e9c23c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 312.250853][ T31] 3 locks held by kworker/1:6/6694: [ 312.256085][ T31] 1 lock held by syz-executor/6695: [ 312.261451][ T31] #0: ffffffff8e9c23c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 312.270173][ T31] 1 lock held by syz-executor/6697: [ 312.275404][ T31] #0: ffffffff8e9c23c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 312.283942][ T31] 1 lock held by syz-executor/6698: [ 312.289243][ T31] #0: ffffffff8e9c23c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 312.297746][ T31] 1 lock held by syz-executor/6699: [ 312.303044][ T31] #0: ffffffff8e9c23c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 312.311583][ T31] 1 lock held by syz-executor/6700: [ 312.316794][ T31] #0: ffffffff8e9c23c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 312.325509][ T31] [ 312.327872][ T31] ============================================= [ 312.327872][ T31] [ 312.336641][ T31] NMI backtrace for cpu 0 [ 312.336661][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 312.336684][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.336696][ T31] Call Trace: [ 312.336704][ T31] [ 312.336712][ T31] dump_stack_lvl+0x189/0x250 [ 312.336745][ T31] ? __wake_up_klogd+0xd9/0x110 [ 312.336770][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.336800][ T31] ? __pfx__printk+0x10/0x10 [ 312.336835][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 312.336862][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 312.336884][ T31] ? _printk+0xcf/0x120 [ 312.336909][ T31] ? __pfx__printk+0x10/0x10 [ 312.336932][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 312.336962][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 312.336989][ T31] watchdog+0xfee/0x1030 [ 312.337017][ T31] ? watchdog+0x1de/0x1030 [ 312.337051][ T31] kthread+0x70e/0x8a0 [ 312.337077][ T31] ? __pfx_watchdog+0x10/0x10 [ 312.337101][ T31] ? __pfx_kthread+0x10/0x10 [ 312.337125][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.337151][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.337178][ T31] ? __pfx_kthread+0x10/0x10 [ 312.337202][ T31] ret_from_fork+0x3fc/0x770 [ 312.337234][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 312.337269][ T31] ? __switch_to_asm+0x39/0x70 [ 312.337288][ T31] ? __switch_to_asm+0x33/0x70 [ 312.337306][ T31] ? __pfx_kthread+0x10/0x10 [ 312.337327][ T31] ret_from_fork_asm+0x1a/0x30 [ 312.337363][ T31] [ 312.337381][ T31] Sending NMI from CPU 0 to CPUs 1: [ 312.494873][ C1] NMI backtrace for cpu 1 [ 312.494889][ C1] CPU: 1 UID: 0 PID: 177 Comm: kworker/u8:5 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 312.494909][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.494920][ C1] Workqueue: events_unbound toggle_allocation_gate [ 312.494942][ C1] RIP: 0010:__text_poke+0x169/0xa10 [ 312.494961][ C1] Code: 00 48 8b 1d 61 ca 52 0c 4c 89 e7 e8 21 24 0d 00 49 89 c7 49 c1 ef 06 49 83 e7 c0 49 01 df 4d 89 fe 49 c1 ee 03 43 80 3c 2e 00 <74> 08 4c 89 ff e8 6d a7 bc 00 49 8b 1f 48 c7 c7 ff ff ff ff 48 89 [ 312.494975][ C1] RSP: 0018:ffffc90002f176e0 EFLAGS: 00000246 [ 312.494987][ C1] RAX: 0000000002190224 RBX: ffffea0000000000 RCX: ffff888020bb0000 [ 312.494999][ C1] RDX: 0000000000000000 RSI: 0000000002190224 RDI: 000000001fffffff [ 312.495010][ C1] RBP: ffffc90002f17830 R08: 0000000000000282 R09: 0000000000000006 [ 312.495020][ C1] R10: dffffc0000000000 R11: fffff520005e2f16 R12: ffffffff82190224 [ 312.495032][ C1] R13: dffffc0000000000 R14: 1ffffd4000010c80 R15: ffffea0000086400 [ 312.495044][ C1] FS: 0000000000000000(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 312.495057][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.495068][ C1] CR2: 000056019fc72660 CR3: 000000000df38000 CR4: 00000000003526f0 [ 312.495082][ C1] Call Trace: [ 312.495088][ C1] [ 312.495099][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 312.495125][ C1] ? __kmalloc_node_track_caller_noprof+0xe7/0x4e0 [ 312.495142][ C1] ? __pfx___text_poke+0x10/0x10 [ 312.495157][ C1] ? rcu_is_watching+0x15/0xb0 [ 312.495182][ C1] ? trace_contention_end+0x39/0x120 [ 312.495205][ C1] smp_text_poke_batch_finish+0x8af/0x1100 [ 312.495227][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 312.495247][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 312.495273][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 312.495294][ C1] static_key_disable_cpuslocked+0xc5/0x1b0 [ 312.495313][ C1] static_key_disable+0x1a/0x20 [ 312.495327][ C1] toggle_allocation_gate+0x1a1/0x240 [ 312.495344][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 312.495361][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 312.495383][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 312.495407][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 312.495431][ C1] process_scheduled_works+0xade/0x17b0 [ 312.495470][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.495502][ C1] worker_thread+0x8a0/0xda0 [ 312.495540][ C1] kthread+0x70e/0x8a0 [ 312.495559][ C1] ? __pfx_worker_thread+0x10/0x10 [ 312.495583][ C1] ? __pfx_kthread+0x10/0x10 [ 312.495602][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.495623][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.495645][ C1] ? __pfx_kthread+0x10/0x10 [ 312.495663][ C1] ret_from_fork+0x3fc/0x770 [ 312.495686][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 312.495711][ C1] ? __switch_to_asm+0x39/0x70 [ 312.495728][ C1] ? __switch_to_asm+0x33/0x70 [ 312.495743][ C1] ? __pfx_kthread+0x10/0x10 [ 312.495761][ C1] ret_from_fork_asm+0x1a/0x30 [ 312.495785][ C1] [ 312.496119][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 312.802875][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 312.814708][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.824780][ T31] Call Trace: [ 312.828070][ T31] [ 312.831009][ T31] dump_stack_lvl+0x99/0x250 [ 312.835623][ T31] ? __asan_memcpy+0x40/0x70 [ 312.840222][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.845432][ T31] ? __pfx__printk+0x10/0x10 [ 312.850035][ T31] panic+0x2db/0x790 [ 312.853946][ T31] ? __pfx_panic+0x10/0x10 [ 312.858456][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 312.864273][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 312.869666][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 312.875830][ T31] watchdog+0x102d/0x1030 [ 312.880166][ T31] ? watchdog+0x1de/0x1030 [ 312.884678][ T31] kthread+0x70e/0x8a0 [ 312.888748][ T31] ? __pfx_watchdog+0x10/0x10 [ 312.893422][ T31] ? __pfx_kthread+0x10/0x10 [ 312.898028][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.903238][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.908528][ T31] ? __pfx_kthread+0x10/0x10 [ 312.913121][ T31] ret_from_fork+0x3fc/0x770 [ 312.917715][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 312.922852][ T31] ? __switch_to_asm+0x39/0x70 [ 312.927623][ T31] ? __switch_to_asm+0x33/0x70 [ 312.932385][ T31] ? __pfx_kthread+0x10/0x10 [ 312.937120][ T31] ret_from_fork_asm+0x1a/0x30 [ 312.941935][ T31] [ 312.945432][ T31] Kernel Offset: disabled [ 312.949785][ T31] Rebooting in 86400 seconds..