last executing test programs: 54.023783961s ago: executing program 0 (id=2154): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x988a}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080d0f8", 0x4, 0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000003c0)={0x20, 0x24, 0xa7, {0xa7, 0x3, "8f0b4d88983d01e2858aefd614b1e2d92aaf9c3eff7cb4ec9c451be0371b8eaa66aac53bd92824f4ebd4cdfb83a8c87d505cd4a5e6839e863685fce86c48eab37fcbbd9caf5c6a104fe4106ea2470d2bb0474a1fde815c404270c26adda3176f49d7a4ad454b695514a9c4e9124585c3a8c8656b9c8dd18b5bd50d2d235b4791f7b6bdcc470b3f5391ceb2a70257684b2461f06a0209324adc348727a5bf422e0108644442"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x0, 0x0, 0xe8, "395bd7daa89ae0a68f239a20fc00797d7ef704dae79d9e706dbff351b368afee7be8ae2235851babe65f91c649c9f2ddee003136f6d1dc5c865c603860c191cf739d0dc040e17a0089b163fe546a74238eb2e24791018eb4d36e9eaa8b9f62abffb703db55f9af419b58e882ff211fa5aae41d0b99d60f49ffcd8a3a8cd379e1ba8535adfdf4e09a8d1f5da3036efbf1635f72d0943ab38f52cb5183b8addd6759e5dd1b53885289b77bda36a87635fd93fb120c7878ed1e44498f47da6f43a0834b3fb040ade81c4f27f145743548da4fa517e5eec7539fc03b471fd74be7316e8ddf5848e1e670"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0x349, 0x2, 0xfff7, 0x0, 0xa69b, 0xf4d, 0xcef, 0x6, 0xd902, 0x7ff, 0xffff}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0xe1}, &(0x7f0000000680)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x3f}, &(0x7f0000000740)={0x20, 0x89, 0x2, 0x1}}) io_setup(0x800, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0}]) read$FUSE(r1, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) r4 = getegid() write$FUSE_CREATE_OPEN(r1, &(0x7f00000000c0)={0xa0, 0x0, r3, {{0x5, 0x1, 0x6, 0xffffffffffffffff, 0x40, 0x27921e49, {0x3, 0x8, 0x74, 0x200, 0x7, 0x8, 0x7, 0x8001, 0x669, 0x8000, 0xff, 0xee00, r4, 0x90, 0x9}}}}, 0xa0) 49.685833866s ago: executing program 0 (id=2159): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092"], 0x3}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x39e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x4, 0x0, 0x1}) r6 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x541b, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x53, 0x2002) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) read$char_usb(r2, &(0x7f0000000780)=""/192, 0xc0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r8, 0x4b45, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 48.873714704s ago: executing program 0 (id=2161): syz_mount_image$nilfs2(&(0x7f00000002c0), &(0x7f0000000100)='./file1\x00', 0x1010800, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64, @ANYRES8=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES64], 0x1, 0xda6, &(0x7f0000004a40)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000ffffffffffffffff77a259d7b349f4e9173bf18bfafb000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) unshare(0x2c060000) unshare(0x24020400) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x401) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6) syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40012002) socket$kcm(0x10, 0x2, 0x4) 48.735114042s ago: executing program 3 (id=2162): syz_mount_image$nilfs2(&(0x7f00000002c0), &(0x7f0000000100)='./file1\x00', 0x1010800, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64, @ANYRES8=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES64], 0x1, 0xda6, &(0x7f0000004a40)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000ffffffffffffffff77a259d7b349f4e9173bf18bfafb000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x96}, "ebc2c66584601f003d5eceea86c5b4e4c22e7d73f8c4023570f400684f05afa738be36eec766c4520117c4509c8aa8113e9030f33d953fabfa1f8be7a4dcf4eacafd3b2610329733906bb2051dfe326329d8fa7e4921add887812104e226bf9cf3fab770fbf828fc7a98b8ef6fc9997c8fad36af4a47805227c0b05145b51fadabcd55be1fd272b82f6dd32f35208d7aac762d4e6de9"}, 0x9a) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) timer_create(0x0, 0x0, 0x0) unshare(0x2c060000) unshare(0x24020400) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x401) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6) syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40012002) socket$kcm(0x10, 0x0, 0x4) 45.639448994s ago: executing program 0 (id=2164): syz_usb_connect(0x0, 0x24, &(0x7f0000000900)=ANY=[@ANYBLOB="120100000004e308d11204141a4b000003010902120026000000000904700000ffffff00"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000800)=[{0x2, 0x9, 0x1, 0x2}]}) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@dev, @remote}, &(0x7f0000000080)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x1}]}, 0x18}}, 0x0) getsockopt$nfc_llcp(r6, 0x118, 0x0, &(0x7f00000000c0), 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r8, @ANYBLOB="2a003300d0000000ffffffffffff08021100000050505050505000060404e900000076060000000000000000d50ac65617b990a845ae83f500ecbad0f9a046067f24b88d5758685f61b7ab268033a03463f88f1c248966c18ddaad7118f2db47d3c4edad313165327366969d1813a22a72a4c061e455bc67312bb648c8d5cd9a8e01f56602d3e89ba9fa769394d3cd4c40e8f042b42d4eb1d8b9a2ffae9353d4581865226f22659ee615fe3c2a813328c5b4afaf81f93a63bdf8"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x3b94, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r9, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x7]}, &(0x7f0000000080)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) 44.084890636s ago: executing program 1 (id=2169): syz_open_dev$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) syz_emit_ethernet(0x4c, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x16, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1}, {}, {0x1}]}}}}}}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r5, r3, 0x0) 43.005409421s ago: executing program 0 (id=2170): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x300048c1) getdents64(0xffffffffffffffff, &(0x7f000001c0c0)=""/56, 0x38) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0xc0585604, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/102383, 0x18fef}, {0x0}], 0x2, 0x0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x8b, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa3110018c12ef000400aab8c9065c884c6840df0ce7c5b1c2a88521e1e7bf1b6862bc9d3f2f59f7d69bcdb0015f7ee495090c676657bd2273e346b1e7531df39d9131fae3737a5775ed14b0f929dfbd3e562dbfdd6bf12e586b394ccd2da72158555213490f28766560dff0d58b8e2c5773f70a23ea7a0281a49e5bf9c0"], &(0x7f00000000c0)={0x1, 0x4, [0x200, 0xad9, 0x37b, 0xe21]}) pidfd_send_signal(r3, 0x12, 0x0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a004e200000040100000000000000000000ffffac14142a0600000024000100"/305], 0x21c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x34, 0x27, 0x6d, 0x20, 0x2040, 0xc602, 0x18e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x72}}]}}]}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r5, @ANYBLOB="000000000000000020001280080001006772650014000280060010000000000006000e0000400000"], 0x40}}, 0x0) mmap$snddsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x2032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netpci0\x00'}) 42.897438144s ago: executing program 1 (id=2171): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092"], 0x3}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x39e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x4, 0x0, 0x1}) r6 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x541b, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x53, 0x2002) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) read$char_usb(r2, &(0x7f0000000780)=""/192, 0xc0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r8, 0x4b45, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 42.797939473s ago: executing program 3 (id=2172): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000000c0)={0xa, {0x0, 0x3, 0x11}}, 0xa) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)={0x458, 0x3f3, 0x4, 0x0, 0x25dfdbfb, {0x6, 0x1, 0x38, [0x200, 0x1, 0x1, 0x8, 0xfffffff9, 0x1, 0x1, 0x7d0d, 0x3, 0x5, 0x7, 0x7, 0x3, 0xb, 0x0, 0x3, 0x0, 0x8, 0x2, 0x4, 0x8, 0x0, 0x10000, 0x3, 0x800, 0x7fffffff, 0xcac, 0x0, 0x8, 0x1038, 0x1ff, 0xfffffffc, 0x6, 0xdfa0, 0x1, 0x9, 0x80000000, 0x2, 0x5, 0xc, 0x5, 0x101, 0x1, 0x6, 0xc, 0x62, 0x9f2, 0x10, 0x0, 0x5, 0xe, 0x2, 0x0, 0x8, 0x1, 0x2, 0x2, 0x4, 0x8144, 0x9, 0x339, 0x0, 0x0, 0x5], [0x7, 0x5, 0x1, 0x0, 0xde2, 0x7, 0x0, 0x6, 0x3, 0x7, 0x8f, 0xfffffff6, 0x9b8, 0x4, 0x53, 0x2, 0x9, 0x2, 0x80000001, 0x4b4, 0xbdad, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xace4, 0xd594, 0x8, 0x5, 0x0, 0xc, 0x7fff, 0x7, 0x4, 0x2, 0x7, 0x9, 0x6, 0x2, 0x4, 0x7fff, 0x0, 0x7, 0x5, 0x2, 0x6, 0x4, 0x1, 0x787, 0x3, 0x3, 0xfff, 0x5, 0x7, 0x300000, 0x200, 0x7, 0x2, 0xfffe, 0x9, 0xaf72, 0x9, 0xed9], [0x9, 0xfffffeff, 0x3, 0x1, 0x0, 0x4, 0xfffffff7, 0x0, 0x5, 0x0, 0xfffffffa, 0x401, 0x0, 0xd32, 0xcc8, 0x1, 0x9, 0x7, 0x3, 0xb, 0x1b9, 0x3, 0x2, 0x7f, 0x8, 0x0, 0x1, 0x3, 0x1, 0x2c8, 0x4, 0x15fd, 0x5, 0x8, 0x4c7, 0x5, 0xb1, 0x3, 0xca, 0x400, 0x7, 0xcc, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3e6f9426, 0x6, 0x1, 0x40b, 0x954d, 0x9a, 0x401, 0xffffff1a, 0x0, 0x5, 0xe134, 0x5, 0x96fe, 0x101, 0x77, 0x6, 0x3ca], [0xa, 0x0, 0xff1, 0x7fff, 0x2, 0x2, 0x6, 0x4, 0x2, 0x7fffffff, 0x0, 0x40, 0x30b4, 0x7, 0x1, 0x1, 0xfffffffd, 0xf, 0xe2e, 0x63b, 0x6f, 0xd1d, 0x9, 0x5, 0x1, 0x0, 0x9, 0x0, 0x4, 0x3, 0xfffffff9, 0x1, 0x9, 0x4, 0x5117, 0x1, 0x5e74810d, 0x1000, 0xffffff01, 0x5, 0x9, 0x101, 0xffffff80, 0x200, 0x0, 0x6, 0x5, 0x9, 0x9, 0x50, 0x1, 0x5, 0x4, 0x0, 0x5, 0x1, 0x9, 0xf6, 0xfffffffc, 0xdc, 0x0, 0x80, 0xfffffffa, 0x5], 0x38, ['!}\x00', '/dev/uhid\x00', '/dev/uhid\x00', '@],:\x00', '-{/\x00', '[*\\[\x00', '/dev/uhid\x00', '$]}%*[]\x00', '\x00']}, ["", "", "", ""]}, 0x458}}, 0x4000041) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d022a705f9e93"], 0x17) r3 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) read(r2, &(0x7f00000009c0)=""/75, 0x4b) 42.014644225s ago: executing program 1 (id=2173): ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @empty}}}}, &(0x7f0000000340)=0xb0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) r4 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) r5 = creat(&(0x7f0000001180)='./file0\x00', 0x0) pwritev(r5, &(0x7f0000000280)=[{&(0x7f0000000240)="f0", 0x1}], 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f00000002c0)={0x1, [[0x6aa, 0x5, 0x100, 0x0, 0x0, 0x7, 0x48, 0x1000], [0x101, 0xcf020c7, 0x6, 0x961, 0x7e, 0x7f, 0x0, 0x4], [0x4, 0x0, 0x7, 0x3f, 0x0, 0x82, 0x3, 0x10000]], '\x00', [{0x3, 0x9a, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1, 0x1}, {0xff, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x28b, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xe, 0x1, 0x0, 0x0, 0x1}, {0x8, 0xb473, 0x1}, {0x4, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x7, 0xfffffb05, 0x1}, {0x80, 0x81, 0x1}, {0x80, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x4c98, 0x9, 0x1}], '\x00', 0x6}) r6 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_WAIT_FOR_RESUME(r6, 0x80045519) fallocate(r5, 0x0, 0x0, 0x3fffe) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) fallocate(r4, 0x0, 0x0, 0x7000000) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000280)={0x0, r7, 0x8}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) 3.759986794s ago: executing program 1 (id=2179): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r2, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r1, 0x0) r3 = gettid() process_vm_writev(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)={0x34, r5, 0xf1aad47e89fb43b5, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, &(0x7f0000000140)=0xfffffffffffffdb5) 3.586116627s ago: executing program 4 (id=2225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_da_update_reserve_space\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_da_update_reserve_space\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r3, &(0x7f0000000980), 0x1001) 3.35539669s ago: executing program 4 (id=2227): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) futex(0x0, 0x4, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x1, 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x83, "000081f100df000000a7d9de16c708db7200"}) r2 = gettid() r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x401, 0x45833af96e4b39fe, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) r4 = geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) mount$binder(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000200), 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB='max=00000000000000000003,stats=global,stats=global,stats=global,max=00000000000000000002,max=00000000000000000004,stats=global,fowner=', @ANYRESDEC, @ANYBLOB=',dont_measure,uid>', @ANYRESDEC=r4, @ANYBLOB="2c657569643c4842e39f0fcb9cd95b8b37d3c08855895ce8747f2c4f6c10484f786c473413018ee166b2f5e91532", @ANYRESDEC, @ANYBLOB=',measure,fowner<', @ANYRESDEC=r5, @ANYBLOB=',audit,\x00']) statx(r0, &(0x7f0000008000)='./file0\x00', 0x0, 0x8, &(0x7f0000008040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000008140)='./file0\x00', &(0x7f0000008180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r9 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000008200)='./file0\x00', &(0x7f0000008240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getuid() getresgid(&(0x7f0000008900), &(0x7f0000008940), &(0x7f0000008980)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008a00)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000340)="9372c65119a5f527aad77790495b3ef7ca0b9288ece6abfbe4d8b8588c7625fda28a94f8a90c9fdf0546f9bc4bbeec3a763fd555195adf82ccdec877a35e6ffaf9de26b397f021f10b29f2b8baf16d92a2adadb60ffb2d8dc63bcf2a74a0108fe3fbdb72a5cdbdd0b26f158ace68d8edf411a24b55fe629271c3f2525a8f38e6d98f3a52e7cc222a31b615799ee2da7b99efbeffcfffcd845673bd52d77b54cd0a7518fc2c50fa", 0xa7}, {&(0x7f00000004c0)="f21e63a97cae124f099605174616de62e9148b137b2b23c9f473fd5b71f3c3952f88ea161ae5f978c6cc8229bfbdb641f5def87d73c9315dec67780162f6b21e1f542f7ed9703bd217fb410e5a3d6e73f19fccb3a941044a08ed380bf75de759f53e6151ad6ea0ae004049ab1e944449990e0221ef099da97fd45d9f4b8a0e2bf15e534dccf956c7b9c316f8ecb01c2684997c1310210355b9f7c46940347ec9841c1a81ade415ad60c3913d", 0xac}, {&(0x7f0000000240)="7f44ed0d4d60156f4a6ab529aed5792f8de8ef421cbfa0147cdafe8bb5750827d9de90a38550c5a832e3dcdd77cab4dd41dafc4c5f5fcbfc76f6", 0x3a}, {&(0x7f0000000640)="387b8857f3a85f6df922d0719e9172da52c6f74dacecc303588e4a74dedf167933a831d2bb119f7c5d4091e1f5d5cf01c0e1bdfca3c487ae5f35f29e47333f54db1c41c4428d3586b80826803810e9fdc5a9bb220bd46ce057a8fecfd91d0a6145fd51ddd7d2589982a2e3311a5ae33bfd43f647dd46f7f6a69a534b324abb9357f8951601176031c9da16bbe2a9d57f586e540a9210a4face090d116ec8d666b4ee618ca9", 0xa5}, {&(0x7f0000000400)="ea7985672432335f78ddbae81522b583cb94d61ffb11", 0x16}, {&(0x7f0000000700)="9ddb91d5e328294057dcff7a6887656737a3cac8a02c04176ca8f73751612493ad31881a5f1440be4a350c25e79e6ababb01e4259c7cdefc909afd4c3ebc5f44a97d54e5396c47583ef1b00de78972b0616d4011e415f10fa7d0868199beffa08e9621c24dfd53e65369bd1aac9ce62ca2bdbca123ea8c716fe3dc36f437627383d30f5733fd6d88ef70", 0x8a}], 0x6, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff}}}], 0x80, 0x4}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="317f5697bd4c19f71303339ff8f0247515343da9d31abf20f267daecd544bc9a2c3d3358eb791dd6f60e00713154e7f002e3dc27568189232085eab62f93254f841bf0a11ee5ac76c8a26556c823da73d6572440077b66049172366e850efbdc4ac9297dc5e72103c01473", 0x6b}, {&(0x7f0000000c80)="9bf339eabb2a52057f7d077694805f7c1b476119dec6a9f5a850b19e747fd53a0c3518955a024bcb5c8fd43840a7e1aaa2a1f9f17fce834e4727e4ea593696b2411ff5676e38400f49851aef553de02408f8ae62bdb1b45e7a97d1ccdcf92ceb78b75ce7493cb5d7da0e437ac7aa00e9690472fffc4ba507bee07743a651", 0x7e}, {&(0x7f0000000d00)="1a522b28b37ffeb2bdd2d9dff3039be9bfe756fca5ccac60a4d69eedbc16c5fa140f5722e7f96c22121a3b27fe0ac938dcac90be0881267defbd86fc", 0x3c}, {&(0x7f0000001380)}, {&(0x7f0000000d40)="ffcd463e218609eb29c6bc9e8fd8d6e72e4783a386e1fdf2f1bb56ca1ffe6f44aa9215918811b27bb542df387a3d693012c4e7c8cfdd0a3b6a59b557a3db0b425b51a1364eb14a4960c7100a23ce5be250dbe70487f4e429354c0141e4b1ce3b278506e93389eea74658dbf47b3ad49bb9b0653a8cd6e9cb5815a4712d213ff8fd442e7ec13c5e6f1f3afbc4519ac86e400e7234e7b75e01ead8fb9026e469e4a15b466c8a484def873893a35cdcc3fe5aada5f6e54b551f73", 0xb9}, {&(0x7f0000000e00)="d6821b4a46fb4b0e3cef0966f4e1a777796ca648e016ee118f358c4aabba98082050fa85c5b92447e3ab58348b792edc60a17e1fcb223d7815627fefdeae7d6ace76c925028875b11dd434f4964fe4494c3aeaa2a4ed386cc1e9765d6ae229d9b2badfd73ec235c388af6c7723574b6e6c", 0x71}], 0x6, &(0x7f0000004440)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, r6, r11}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r1, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}], 0x120, 0x801}}, {{0x0, 0x0, &(0x7f0000007880)=[{&(0x7f0000004580)="efc7422a6f75ae7c3d8ef2cd0a8aad9ec0fca0a7a7aded", 0x17}, {&(0x7f00000045c0)="2bf767a6a62b66c3ae557b252a8956d2af2c83b19959a59af5b76a18d56060dfca26af1308ed04eaed000f3c5eeb0053eaf08a0d606b02c73edeb829d7de5206433de4738ace5e04a212719d76c34616ef47afeb2fb1a8a46f6706a1ba74152c7eb528d5ad892cf5cd72b535f2e646e3", 0x70}, {&(0x7f0000004640)="a674810915b8952c1c77c2d1c2135043dbf6d0a0b1", 0x15}, {0x0}, {&(0x7f00000056c0)="78afdcb9bbfe04af519a7a1deb05353337c8c4e13fdf340f6b1c85a0e594ef4c4abf3ce7175ebe3eb61044a9ec", 0x2d}, {&(0x7f0000005700)="81ce6fd51bc431d5d62935c39681fd2c0bb328cf731b7ea854ffe624c99c07f7289c0348853bdf805487958a54fcc7ed2726c0687590644dbc4a24ebd06946a0d00e56c9000000", 0x47}, {&(0x7f0000005780)="76d867848fa45665f74719a483303d0872b7913790e1a9bac0578d8ef125048ea483ff639c5f910d34dfdf1f7175b4920be7bcf39cb1307c237032d2342c34004c4eb670bddb1114d7baa1af8a581235334a4de17dc3516aff75d4952b83f5f62e176b02dd969079d53e1b131bb48f2e1d94c748314b4545fa0a2e710799871f033bb9bedba953c5c83fb611620404af5c3eec0ee468c4e00ef529c0e674c373563bd938d9e7c9b75c85f4f620f2715e4ef5900ea9f9f51c39eaaf877be02ab8026e65bb6f799f966319b2f37fc1", 0xce}, {&(0x7f0000005880)="1fbc24562013e397d94acdbf6fd63d692758ecf51349c2fe97ce8c42783c1ba781880f2c6d38daa6752b48d704f4c19d1f676135e14c87399316c984865dde6bf23a913a5e714c9cad158e3528efd4d4d08d1fd798ff37ca1eb24de855ebc2979d361c0d2eb58a3a17edb4f0e8d668cd24b3e50eaf4269ec58b03276870a911cbbbd7b8f42a433adaadef5925676b942e71684855b447e9b08d8e67eedafac01403f9e673289f8748e1c587bac856ee661bf3312bc51014fbf42471120a35024c99da54571e1d8c1191bec67cee9a6933e48addd29fc04c58aa2f1ca545d9d18c17b6d5cbce048c52095432296c5e8ebdc56bb036aa1845a3abcd2453a4fe486529925666ccf613b6786b108e23c6c3c26619f52ced0ef9d53d84f7c100a505b552d8d1f2ddb0ea33e76029bae95c2bb8c16775c772c75c2bed4ea878d14386b8a4a40a8b6afbc5d5458489e5ab093a2017437be46119a1c0fc8933689283542e5b7b2e874a0f6606721fbd323346b171f33c1710af5a3b160d85529804d232518499fb678f6e239fbae79038d55816a843f4d20e6a89b7ac74e6126d05ee971d31ea7652e1604d62997ca0c827c533000a3dcfdf83fbdd753ae8dce303f9056a2555ce543387571829177734620ef9eda395a805786b89363c9a6457a031cf1e01fc6702e94fb799920cd75c04b8cb583c45904ec36b587e134b1f7b2c4e27cb224870648af9c8e88abc46bcc5a53203f1175ceb93298a1f178e9b60c9199aa2935450816afdee5c614bec43f84618b358d0675e9e43893973496f50d0ce3b74c9abf705293655f71454fcab14617a7d045b9ba474d13d60f48d70989e82fb25e26ca58d129a97366dc87030dc7915d9ad1acc532369f8e2ef364730f3edced9f2f5f2ea9e49b19dca9b05a1e42eb438d797f8003002f7650c43200616cc073a4157aab913244498f55848a15a533bafef3f6406466e0228876801ff74413f1671db10bb28379d5c4079e75a4980cb50987630b27ad25cd22b408fe7dd73daa5c56c99d258a346271585bfcbc3346030765a421b5ac300452809ebb246c4cccf5212c8b8de4aa44a33ab05d7d20aa443ce63743574aff5bd1d0bde40e1c7e1cbde457e6af92f4b1bddee0b89fb324d7f3d7126e041b746987b8de1322dd9c2207a3e9c35531a95828db562dbaf5f7bf0e079d2912d6ee9f1b438a8a1a96cc6a41f5ab268aa9887a5dc150b946f5255513fd789829c1c7fc4bb658980d5d22e68a27f0d9a140dadd05318f1309d1fa6803168bd65a1ea65aeec6303d6f57ad758dcd213530c05d83ce99638cb0f40ec2e7dcd4c0bd2b4e5411238c0eb24be71871b0db6be05bc64844844aa354635b3324288ebb015634daae1a311fc3c8be24ffa93ddc010ae6207b9bb89553ff41c1eaa976af46c105fbb1d37e2c5ba5a51922afcbd337b983599c1c8d2137789c4c70d11e25cb4bbcfef33009e09c0e764d9998cb7b7cccbb82ed48430305febb59551865ae6c6826577a63245abcbca405f7b948410300940d89552e9e5eae921fe760a7d6f90ab88b8dd9d308f29d72aae4950de6d9ae65764bdfae56e46db70c7bb6c46558224a7af346775d4adfa04e8b59058f4708a68e100a7b981c6ee95773919ddabdd9d372129b269c1fec894603c287dd6ac07e179f3e91e28486ff7eba4687698343966dcba6a2ec75e0a76de9b235a5ea669fb530992799d544a982ea1e760ea27fe9f53ba9f759e23051fb62845737a09d6f11835e744f62ae0b4b9d7e2940dc318037e5ae9c19021472e6d7645507e28a0a9450355d94d18f60a30d19ef303918dc0cd01c3b84664b6a036921ddd1a84521800692a6ad79a8c380d4fda4f228a199dd37f546c1da43a817af1fb68a39a0ca97afd560e08e02bfac6b9cdafdee3305e68e2810520bab7b874113ec35baa44f5cc63d3650299ce1ae901cd96530d90a364708c4bd73638975f1d29d74f84cd30859d4ff17106fb793269ec80aaabc712e46ef1d9d75b891f1fa5d54f20b6732fc4d68c9e19217ac974da1ec9ab458609a5b29c8ab7950f04074666d12120cbef42e1c5fe9e29a35bb6a614b5e66b163eb6c893235f7f82b33aadbf7174e7c5dee26cabc012bdc995411ed5ab25647f75dd8b49ce3a610239818bfb459003ab44fd0483a4c0d11d65ac2ab25123331df1cb8dc4410e0b9a8d154e984cf8b006021901ac090e8c27f8e2cf7ddde28dc1fcf9b37b1697537cdc22912d9a6fd0fc11579ef8b9ac01c0492c025cefc4b3e9c7b6b2e02bc86331ce25b367012b7718da1031b4a48cba8f7ec596038b78076a3428ccf1ed35e9fea7b475c975531ec5cf77f8a0bcabb2ebcdf8d568109dc1ea44d6b7d2fbbd3b575ae4d6fdfcb0a3fcafb83748d7c4c07d87951a2334efdc4f3bfd62071bb7f04c1902d5b88c64819cfac7a0980ac19305d6cf739cbc6345d86b23aa679aac882e9c11470f192660d3f73f5e7224fa4e1509ec547b5b5f122ee6f8a4d67dcedb4239d1799cbc572d55f969c6996206aa68fdedfa028379d97a780f57335af2cb57ebf0df8510f79d2e70fb6df761955893b92efcbf7264f75f59cca8874a2c139bde112832f7e7b98eea32d1087141881826b405352b6d77d46a6c315088eae3302dcf7152db18756d3ecb1c9c3d44be6d729fb4b66a92b937d5dbe3fa0b09435ac610e3632e0fca1f7a9d4337d977b2220be78eb4ec0f6cbca93edc54be60d64466bff43e1baaaa6b65423cc5dbebd9361e04b276dcefe1026582494c79927c78e1a8d3ed7eef34c21bafd0c719b5861b352ad06c0b9a0535016b43ec7f40fa2a54e3e94adc3120765df8739be89197f160f5fdc7b9b4fd73b86631284970736d24bfc1a3ac11d231f3cd8532ff9f39a4c713e03337f1dd36fbac0641510715be603444db23b445c8bd69c555c174a6270e9215856b8c1ddbd5399e8156d1280bde66de7e346a3ac641c6787899f7f5a8ecfcf6d3686c572f6c658caf42e243c1a9b2af4ac53f18bcd16effe62169f858ec5881c2860e266728bc9f5daa48df3b82c127f1af2aa8cb40d777ecf897214c4d859eb145abd1c7192e1859df2ce49e449d052914cd0b8e0438278600b0212f70690cd402df8472221822688e4f2d975bd17bb3a243f8bb229736edd93411eb3e87bc6f55865968ead891bdfd03b42dcfbae455cf2a5fc4acfa0c0088223cc8233a5c09e89e1b755d15db6f5913f8f2e637f3fa786da19d3bffbf18ed09fe0af24ed3068378611e3f55d4a0faefeb52a7accc7c97c99ec7fe9c440112e40cec7dd3c0f13e699cb0ec67d15ff24993324845a12ebbdc50151b23bbb37b94f621f832d239dd469921bef6ace637654a2f8a5689b32a95b2408922feeea5ed4b31afa3b532c4aeb990bc28924ad8fcb1e459bbdd92ca232c976296b400f2f2ec986a7f70aa66a679f297f95eb2090c32ff5d75c896a8ff2abc09fa3689ab57451b4259c230968c9165ea4598b060e3f05eeee1cbd7ec783cb34d4eb46fad4cac90370087d6466b7bde97068141f72c9ee80c11eada6f2f95c3f63e106b35bf25b0055e6fd0552be6f8f3795eca716e669378177877a4930980b789dba74b225a16f798aec0ea6960071f754c38ab5982efb3c62c41e5c84a7cbe102cee56710b208d8808d8069cfea0234288b3521d1e51d0671ead326eeffaa95003b9f18a4af438461d5ae3a950188b4c5bf533fef21ad1b9d67e4baf888cef44399c85710a01336a89b1a507ccbdec9f644fe5cb9bbb75e47ee8f70a6766fa818e63bf8f23b0866f31491ed7ff01d0f1180ae22afebaff48eda504a16ccbc90061e8b9feb51ffc54493102f02e87118699796bef18eecdf194977fbf4972d4ea2bba1a693cdcb760a451e612ef657fdc9c5ea88c782f615f023700ef26ccb61ef389d91868dc6daad3308640e6bef20e97ef981a5d7a4d1a87849d60b9fb212b0f5f8aa28dd70c84fb7b4739053ba8e9e269e678c9a5e8634c5104e32482ae5663156ccd44b167602581c83f2135555fde19f20a9ecadb71ddc8025661ab9a3f5300e58ed5318c3c61073b5dd43d0084cf5cddea7d312c2c4095b885368c083a55490f2209f469b4b059f6accdc7d2b3e5248c70d3b1be0fe7218b43cfcb4a30907723f2b8198f46e5ad5283bb53dedbd170bd42b16c06279ded257eed0a358ca493afd84ce6edd172caeb9dc32bb265f6995df42e3f76760773c6c530b7aa10754f56b710b88283246946294005ab772504b6dc4d968895037e7512aa41fc33ed9f518524e2aed1f968ed7ae1ceb604d10c860c17c64236317c3fa10cf0a928983346dd259fc41f4b2e113ed6a430b9db60437b016cc8c86ce7e383fc427a5d499fa69318f0a6704992bc80b1cb992fa85a41fba550d3523a94a16e03276365bb03d927baa4294b4232f3e95f5524f909c47f4c224d5904a4159a34de8bc6ec2c1a8f27f174d9daed2b0f189c4601447300a29211bdba85f6a62231198bd7ffa23b9587915139b6d7edce79e3f31dc2e3f28432549870ade4181c428e64a3e295c30b0846e9b223827186758778569181e89291f32ea0c44fbe7a642ab27fec027c0a680551aa0037bc7b83732d471e606b1af26286ad017c1b63ad904a8729dad483da9cc3f5b9ee224674147b33144ecfba4040242b9c770e0a5a46aacf17fd8b0b4b2c041a9b67346c5e382e774291f4125fcbf38168b6badd6ab1ab8e5c73f5d98057b8dd7d1a42fac2f97c2f16bbe21c1eb27a5fa8b74a81e34d67da8cb97172bad812fba682b0e5981d0535fb55532e369207beb0cfef93add4807024488476fd232ec2547feb4e9f707775b946128348cde9e8263be20e33ab3aac6469efcde743791de017cee543666edba619a44634526cc3078eea3420158e3260d3c9815973e0c4d1a51f75e07f8ee9733f63bd88397305f2b93b06bcf19fa2abda810aac865cd3612e465b383bfd6655009eecee29b3618121b2f04b5ebd5de785945dc30bf1dd82beceaf2f016f16689a98273546a2fb83a70391338e5a07e7b7ee9807373df59e5762abdd75f910b5b15b8f297a928a221f2df9ad05e23eec81f8ab33185e76b5c1fce41d605d22a3612ac21716d05dd0eb9f559514f5a00ca60d7730f1615c591194c573b2037cab894f8d9a711a493d22b261e298c63dce2e9c3053c6661709dee12e6a52054a5b948c0f7869ebf72f3c637f4ad1ead4bf48eca59c49746a31b8f872cfff446a44cebbdb634826cb5884c93ce86ac9d496b9f2cc00d88ba8153a82c393853a773c354315a3a6dce568f74f54547c466b158dce9baefd035df32dc853a30302d425bc7d131c5a40e2da07407774b403fd1890a6168e3f537a496ef03ce44e6c8041da19d6a25b7c9fb1aacb012d93b541ac2b95907e2ef8c67e052d7928abd4eb89c04a809b25d7f2455cc1d6c68ff5e51331cbb3848b2492c1de8ab17cda4cf0af479ceb1dc9c56fe2d1359a7457f7770d87e4f55eeb0c9a3c0322037a105819fecc605db7652cfdc3572bef1c2e712b7a36948aa9ae9bb5b0719f00aa010008dfc240fbfc4757decdc4bc4bd015d061be416e1c573147591172373668b6f0f180a1550b6816992d118c4aebb037c9c113c63166b37633dd5e197a6159fd90b529e9d8296e08973c7804de30a814056ecfc0bc4038d27931555435dec4cbe1ffb12811076988e52989e53bfc0eddbf674e057a64669578310aa8ec83dde38fba16bcd6da78eb026af", 0x1000}, {&(0x7f0000006880)="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", 0x1000}], 0x9, &(0x7f0000007980)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}], 0x40, 0x8000}}, {{&(0x7f00000079c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007f00)=[{&(0x7f0000007a40)="f570fe59c8f14bb63fd21f257d49084beb5826fb87c25627261a228d07910efa97e2f6435dd7be5d127b04936934ae602e49300b7c55416eeac2ecf462d056462f718affb7cdf6e17fe577c461b38977a3883fc46d71791cb6253df1870f714e85bdc2276e42f9fa4230b525c78c3d9851", 0x71}, {&(0x7f0000007bc0)="b225a379a1afd731f0dbf6574635a4ad6f23a7b24b56ee0673b9b58fd24843f8e609fae18a2b61c765e88f9e3c858fe55f70d172fce0b13f581c56e5b74f2755d1383ebe31b0", 0x46}, {&(0x7f0000007c40)="f97d664f29c955cdfaceb8c328f0f11b8124fcad86958d967c689353fc6ef91edf145d5eb2f3a35a6abff2b11006b58ee06747447e67d9960a38b64dbfc038978d358814830fdf6c11e3b49f403bc2dca5345223c61ca96d6e3b70f43c9e9cc46c111af4caf5bbc3dec96a7bd414e80c7281c52e56d12c8ca840bc3021a43ea0cc937277d09347026cc11e414ae3d1b9e36bd371aca734fea1c6c09779c451cdc50f5c02f78e1cc9799c95b25b8c0b51b4e18bc56c2f4452e14521602eaf11c6493805e2b109c337fddbe24cc0d4557af826e2b06c312c70c64bcecc6d", 0xdd}, {&(0x7f0000007d40)="cfa5670c5c8ebecbfc1449bde76c910b3aa0dfbb35e9d5130faf638657424edf23c819bda4a874754d6e7021ee8fee37c7471784dd001a78008ccfaaba6fad03cf8f76aac4082235855b786523f390d952322a646b60346a59b5c89cddf2e539567f2d6491906c53bccade5fc100ce7dd09e6ddcb3f21686ac9506599b19906147ec351d040163c1b2001595dd719f7356836c2ce62f95e01fb6632032c5b346", 0xa0}, {&(0x7f0000007e00)="51782515923ed011b2af961ffc97ddda63cee9f90d046176f8c90c6bb65bc8e73791b51f7c7de3ce1aa95167bfd8afd42d27984327a360624db2a42ab262e2", 0x3f}, {&(0x7f0000007e40)="eaad6133ff4c99475476fe54adc6cd559f84b2a89957220ac7d52ba1cbe31704ca0ef034a982dc6e01eee3dede0824123ec49a46d5f6ed54f344ecac746612bcf70b3ada1e21153551890104c641ba6c7bd9655044c5b756933c", 0x5a}], 0x6, &(0x7f00000082c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r1, 0xffffffffffffffff, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, r7}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r2, r10, 0xffffffffffffffff}}}], 0xa8, 0x40040}}], 0x4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/80, 0x50}], 0x1) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xc, 0x5, &(0x7f00000000c0)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x87}, [@map_fd={0x18, 0x0, 0x1, 0x0, r12}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 3.048806142s ago: executing program 0 (id=2176): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfa, 0xcf, 0x1, 0x40, 0x56e, 0x4010, 0x201c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0x55, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000004c0)={0x0, 0xd9, 0xd31, 0x6}, &(0x7f0000000ac0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000b00)={r2, 0x689, 0x10}, 0xc) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c920c10e0e00050015000a0001000300600007008100"], 0x17) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x4c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000001c0)={0x40, 0x0, 0x6, "4ce2856b601d"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x82, 0x1, "a1"}, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2c7, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x10, 0x21, 0xda, 0x20, 0x1b3d, 0x1c8, 0xd8e2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b5, 0x3, 0x7, 0x7, 0x20, 0x81, [{{0x9, 0x4, 0x30, 0xe, 0x6, 0xef, 0x2b, 0xcc, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x55}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xd, 0xff01, 0x2}, {0x6, 0x24, 0x1a, 0x4, 0x17}, [@country_functional={0x6, 0x24, 0x7, 0x8, 0x100}, @mdlm={0x15, 0x24, 0x12, 0x1}]}], [{{0x9, 0x5, 0x3, 0x3, 0x20, 0xf0, 0x2, 0x3}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x1, 0x8, 0x9, [@generic={0x1a, 0xf, "48511cfaf371de2d3bc9e1f273c90a93f18f192bdc2bfa4e"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x8, 0xe, 0xcb}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x5, 0x2, 0x9, [@generic={0x1f, 0x30, "abd61f67b267a24ebba35f6d4f3b14d37eb4a996a8360594f3ae948133"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0xc0, 0x5, 0x5}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0xf3, 0x1, 0x8, [@generic={0x42, 0x30, "82d5874be997c1243be3de78855b7b26f8e782941185eb74da7d00aaa2af4dfc77979fc9ef98e19d5c234f6400a0acd36efbd041ee8af74c1a40f30d3121c4aa"}, @generic={0x42, 0xf, "376e88184533f6caf36e7b6e73f5b35ebf46b55792e8e5037175f66c60e9de6536adfe118fd9b517b941d9656b1af4af4d55a7e4948d0cc72b994c24bcacee25"}]}}]}}, {{0x9, 0x4, 0x13, 0x3, 0x1, 0x93, 0x79, 0xe7, 0x4, [], [{{0x9, 0x5, 0x5, 0x0, 0x10, 0x8, 0xab, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa}]}}]}}, {{0x9, 0x4, 0x94, 0x10, 0x5, 0x1a, 0xf3, 0x6e, 0x6, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "3df0cbd89dcb"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5, 0x3c03}, {0x6, 0x24, 0x1a, 0x0, 0x20}, [@obex={0x5, 0x24, 0x15, 0x62cf}, @country_functional={0x12, 0x24, 0x7, 0x80, 0x5ba, [0x9, 0x3, 0x0, 0x9, 0xfff, 0x6]}, @dmm={0x7, 0x24, 0x14, 0x4, 0x7f}, @mbim={0xc, 0x24, 0x1b, 0xffff, 0x1, 0xc, 0x7, 0x7}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x8, [0xfff, 0xe, 0x9af3, 0x6, 0xe3dd, 0x8]}]}], [{{0x9, 0x5, 0x5, 0xc, 0x10, 0x8, 0x7, 0x7}}, {{0x9, 0x5, 0xa, 0x1c, 0x10, 0x50, 0x9, 0xf7}}, {{0x9, 0x5, 0x88, 0x10, 0x20, 0x9, 0x8, 0x5, [@generic={0xbc, 0x22, "170c3f97b6a24a817d6c0a6ed6f4834bca6107b5782ceec265089e791f529a8e253c279f0d6aa244da28f42265765b04286f6fe090c9240f1c3e9a0f6d96bb27e23609d4c11d9cca5c46010cbea6bb8a25fd259ac2978a63a158f89c5757257a84724cfa8b568b3bbf048cf8b2fea7c98cb271a1181193dd9e4231c161ac5bbcfc7d4f6fa633a4bb4fe2ad99a57fb436e87d133b6ef915819ee3401990998614d4908e363911a9a9b04033c34c1537fc2f2b58316ca89340ce00"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x4}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x6, 0xdd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb5, 0x5}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x1, 0x0, 0x2}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x1, 0x9, 0x4, 0x8, 0x81}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x8, [{0x80, &(0x7f00000000c0)=@string={0x80, 0x3, "4615ffd69def7be32db999b74a77db60d9755bd5e15edaf07a5f28a969fa6cee3fdfcd25ac22fffadb4b36c452be70e1d11416b9de3264d08f6e3f283834c21dca3244a54e21db4d2fcd95354ea3410b60c7f11ff85cef50c6e62d51a3d619cf3b1ae749c0699a7be82ba1986e46f63b25e9c22d941cc8d3af36a9a0c967"}}, {0x7b, &(0x7f0000000200)=@string={0x7b, 0x3, "423b51dac832ea13ea57fd45a26e0eef59fe98719b54bfe8abc6a4790cd4783f8c4c0ecf5d8234590b5ac3282312b5b42ebdb66e06168b774963942b865fb9002ab7f4b75a825aeeeafd10c07681afc08308796b14c656efcb01006edd0a24f68a5978a480def750d990d83e75652280774b1f724763c43fe7"}}, {0x6b, &(0x7f0000000380)=@string={0x6b, 0x3, "f0b20ec230afd09e84c907935b82f7b45e213e6d5392c665ab25a326216b5faba3d7628b5a8ac9b3e068c623884d077d641bf5c4b98ca23eb5732ae6b735cbe6fa83869a6ffc89dfabadda38a5cb7d44ac684d7a103f78178c1397410d49fd9685c516babbf379b468"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4ff}}, {0xc4, &(0x7f00000008c0)=@string={0xc4, 0x3, "b19b33cfac2d5cb04d79da622b13af3a07b241b1e1857e8481ccc083fc7cf9d8568c02956d92871cf3a228c4573eff21a908cdc28620780633758dcfa6d9602041e00c5f295f0247e58b14de80c6338d32efcb3333d29001c19663c884d74560d06124897d24af2a58c8215a316edea6a66be97b00b9141599fab12877027d29f55b745683dcf48d79f57f714de04f52ec057e042eb6a8ae171507f26de32838c580fc2d9920c2a85d2aa6c6b99a52721db0320fa54df85df89985f294e1c0643469"}}, {0x62, &(0x7f00000009c0)=@string={0x62, 0x3, "82745b74bcd5a187fe9544dcc82c21b3fdaa853793d0a712924483063df6f46d31b1445e0e1c6d2372f25aa77494ab6ed9dc12a7205aea6c1e17e5395642469b71ed6c81ec010216b21b6a7a66337cbccbf075b20f2448dee17ead01628d2eb5"}}]}) 2.884322107s ago: executing program 2 (id=2229): r0 = inotify_init1(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) 2.725947328s ago: executing program 2 (id=2230): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001000)='numa_maps\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000180)={0x2, 0x0, @ioapic}) 2.724829815s ago: executing program 3 (id=2177): mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',default_permissions,blksize=0x0000000000000400']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_vhci(0x0, 0x6) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="03c8001e794e4cee84d39856f4752833767be125637ee49dc79a52f2f9465718460cd05feda51bbf4206b5e7325945e5f819bbace34f7d33b43908e14fa05a0f06d9dccb7f0580fe9d42d7bf6530f1a2d22cfd5396c3c67afcdc34613911e96affd46ebd4aa6c60ca02f7648783a10deccc27340c4f24ed37dd6563758d14f732e63a853a4c71c356a6309a485ed"], 0x22) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = io_uring_setup(0x15ae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 2.357750029s ago: executing program 4 (id=2231): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x1000000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x5c}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) 2.121343815s ago: executing program 2 (id=2232): socket$netlink(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r1, &(0x7f0000010040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="a2", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) rt_sigreturn() close(r1) socket$packet(0x11, 0x3, 0x300) 1.683614619s ago: executing program 1 (id=2233): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x51}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 1.581055356s ago: executing program 4 (id=2234): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) 1.438665556s ago: executing program 2 (id=2235): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x1c11c2, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 1.234289099s ago: executing program 2 (id=2236): futex(&(0x7f0000004100)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f00000018c0)='./file0\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) clock_nanosleep(0x6, 0x0, &(0x7f0000004040)={0x77359400}, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x5421, 0x0) syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") r2 = eventfd2(0x0, 0x0) r3 = dup2(r2, 0xffffffffffffffff) write$char_usb(r3, &(0x7f0000000180)="e060b2", 0x3) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x8902, 0x20000000) 623.721672ms ago: executing program 3 (id=2237): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)='c', 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 410.856651ms ago: executing program 2 (id=2238): r0 = memfd_create(&(0x7f0000000600)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e\\\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff}, 0x0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="05000000000800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000510e"], 0x80}}, 0x0) ioprio_get$uid(0x0, 0xffffffffffffffff) r9 = open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x5e) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x0, @desc3}) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10"], 0x1, 0x175, &(0x7f0000000240)="$eJzsVb1OMkEUPZddFr6vMNbGxEKiUAjLosZOK8MD+AASWJG4+MOSKIRirXgPG17Dwnew0NhgYUwssDdrZubuOjyAJiRzkt1z75m5c2emOHMaXoU5AF+zURMHkLCwhCci2ADWSGmHOcXvjuIy52+24hLrd8zPzOFgeNYIAr/3i8Ff9DCBCUywaMFPun+bwYf0ssfZqCmCYwBxHMdCa6mP9DkWgAdtzootP7IQp3OE+YlkE0Cl372shIPhVqfbaPtt/9zzarvutuvueJWTTuC76k9ai4zySAguARCe+k8bzwJ4YYP9j3mQtjUeJ73W0cy5uD5fm9FqEybcp7Xs7RBXcIQN5AFcR6SpBbmKDXmkOggWJ1Vb25/qlZcD5eZF0BqDQEnZBHa6RnWKbJp4elLbi5Jtj5kLzHXmCfOUOXmzkrfIliu8claMAAc3jX6/VxWSilLNSzVvOdIvTHT9dOYPt5qDgYGBgYGBgcGC4TsAAP//NFFiLQ==") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000540)="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", 0x74b}], 0x1, &(0x7f0000009bc0)=ANY=[@ANYRES8=r8, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8=r7, @ANYBLOB, @ANYBLOB="d2b21f5a6530f5c178f65a86072858cdf3c3ed7b089c0b575ec6d0966215065d9cb2b4f1112fa8f1038d47158f7ce7ef54f59ae02271309481c6af1549e0f82158bdfd8913fb64ec5cf9b3f6a44715e36500530a7d4696f038f53fa84a8ee9b61b9b062723bb7011650c8587a5f526a8a6777a81973a31c46af1959cde9ec43c7370a43e2a89f1ee6d2ecd449e49ce91cd2a3777a6155e0264f307e833", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r5, @ANYRESHEX=r2, @ANYRES32=0x0], 0x10c, 0x4000000}, 0xc20c0) open_by_handle_at(r10, &(0x7f0000000c80)=ANY=[@ANYBLOB="0c00000001000000"], 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan1\x00'}) 263.317182ms ago: executing program 4 (id=2240): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 252.403955ms ago: executing program 3 (id=2241): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) io_uring_setup(0x2ad5, 0x0) close(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x5425, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2242): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1d, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x90) kernel console output (not intermixed with test programs): tware demuxer [ 939.002997][ T5146] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 939.025860][ T5146] usb 1-1: media controller created [ 939.089248][ T5146] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 939.187361][ T5146] usb 1-1: selecting invalid altsetting 1 [ 939.194764][ T5146] set interface failed [ 939.195343][ T5146] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 939.208714][ T5146] error writing reg: 0xff, val: 0x00 [ 939.272706][ T5147] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 939.350420][ T5146] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 939.484263][ T5147] usb 5-1: Using ep0 maxpacket: 16 [ 939.525072][ T5147] usb 5-1: descriptor type invalid, skip [ 939.537106][ T5147] usb 5-1: descriptor type invalid, skip [ 939.549309][ T5147] usb 5-1: descriptor type invalid, skip [ 939.562458][ T5147] usb 5-1: descriptor type invalid, skip [ 939.578411][ T5147] usb 5-1: descriptor type invalid, skip [ 939.601271][ T5147] usb 5-1: descriptor type invalid, skip [ 939.612694][ T5147] usb 5-1: descriptor type invalid, skip [ 939.618824][ T5147] usb 5-1: descriptor type invalid, skip [ 939.626013][ T5147] usb 5-1: descriptor type invalid, skip [ 939.634378][ T5147] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.649057][ T5147] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 939.663479][ T5147] usb 5-1: string descriptor 0 read error: -22 [ 939.672650][ T5147] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 939.708156][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.758190][ T5147] usb 5-1: 0:2 : does not exist [ 940.665247][T30947] team_slave_1 (unregistering): left promiscuous mode [ 940.699540][T30947] team0 (unregistering): Port device team_slave_1 removed [ 940.783390][T30947] team_slave_0 (unregistering): left promiscuous mode [ 940.809413][T30947] team0 (unregistering): Port device team_slave_0 removed [ 941.848422][T16697] usb 5-1: USB disconnect, device number 104 [ 942.009100][ T29] audit: type=1804 audit(1719564760.900:121): pid=650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2175" name="/root/syzkaller.e5OU1l/53/bus" dev="sda1" ino=2042 res=1 errno=0 [ 942.031285][ C1] vkms_vblank_simulate: vblank timer overrun [ 942.041557][ T29] audit: type=1804 audit(1719564760.930:122): pid=650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2175" name="/root/syzkaller.e5OU1l/53/bus" dev="sda1" ino=2042 res=1 errno=0 [ 942.114978][ T29] audit: type=1804 audit(1719564761.010:123): pid=650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2175" name="/root/syzkaller.e5OU1l/53/bus" dev="sda1" ino=2042 res=1 errno=0 [ 942.392095][ C1] DEBUG: holding rtnl_mutex for 551 jiffies. [ 942.398189][ C1] task:kworker/u8:0 state:D stack:22968 pid:30947 tgid:30947 ppid:2 flags:0x00004000 [ 942.408505][ C1] Workqueue: netns cleanup_net [ 942.413409][ C1] Call Trace: [ 942.416740][ C1] [ 942.419698][ C1] __schedule+0x17e8/0x4a20 [ 942.424340][ C1] ? __pfx___schedule+0x10/0x10 [ 942.429309][ C1] ? __pfx_lock_release+0x10/0x10 [ 942.434450][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 942.440389][ C1] ? kthread_data+0x52/0xd0 [ 942.444982][ C1] ? wq_worker_sleeping+0x66/0x240 [ 942.450106][ C1] ? schedule+0x90/0x320 [ 942.454470][ C1] schedule+0x14b/0x320 [ 942.458653][ C1] synchronize_rcu_expedited+0x684/0x830 [ 942.464387][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 942.470617][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 942.475973][ C1] ? __pfx___might_resched+0x10/0x10 [ 942.481291][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 942.487306][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 942.493421][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 942.499778][ C1] synchronize_rcu+0x11b/0x360 [ 942.504595][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 942.509956][ C1] lockdep_unregister_key+0x556/0x610 [ 942.515362][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 942.521268][ C1] ? rcu_is_watching+0x15/0xb0 [ 942.526076][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 942.530727][ C1] __qdisc_destroy+0x165/0x410 [ 942.535531][ C1] dev_shutdown+0x357/0x440 [ 942.540047][ C1] unregister_netdevice_many_notify+0x977/0x16b0 [ 942.546467][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 942.553284][ C1] ? irqentry_exit+0x63/0x90 [ 942.557905][ C1] default_device_exit_batch+0xa0f/0xa90 [ 942.563610][ C1] ? __pfx___might_resched+0x10/0x10 [ 942.568909][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 942.575099][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 942.580413][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 942.586617][ C1] cleanup_net+0x89d/0xcc0 [ 942.591082][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 942.596076][ C1] ? process_scheduled_works+0x945/0x1830 [ 942.601823][ C1] process_scheduled_works+0xa2c/0x1830 [ 942.607450][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 942.613498][ C1] ? assign_work+0x364/0x3d0 [ 942.618105][ C1] worker_thread+0x86d/0xd40 [ 942.622767][ C1] ? __kthread_parkme+0x169/0x1d0 [ 942.627892][ C1] ? __pfx_worker_thread+0x10/0x10 [ 942.633050][ C1] kthread+0x2f0/0x390 [ 942.637128][ C1] ? __pfx_worker_thread+0x10/0x10 [ 942.642283][ C1] ? __pfx_kthread+0x10/0x10 [ 942.646908][ C1] ret_from_fork+0x4b/0x80 [ 942.651352][ C1] ? __pfx_kthread+0x10/0x10 [ 942.655978][ C1] ret_from_fork_asm+0x1a/0x30 [ 942.660789][ C1] [ 942.663861][ C1] DEBUG: waiting rtnl_mutex for 576 jiffies. [ 942.669857][ C1] task:syz-executor state:D stack:21024 pid:32261 tgid:32261 ppid:32221 flags:0x00004002 [ 942.680070][ C1] Call Trace: [ 942.683380][ C1] [ 942.686318][ C1] __schedule+0x17e8/0x4a20 [ 942.690854][ C1] ? __pfx___schedule+0x10/0x10 [ 942.695758][ C1] ? __pfx_lock_release+0x10/0x10 [ 942.700793][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 942.706298][ C1] ? schedule+0x90/0x320 [ 942.710609][ C1] schedule+0x14b/0x320 [ 942.714814][ C1] schedule_preempt_disabled+0x13/0x30 [ 942.720300][ C1] __mutex_lock+0x6a4/0xd70 [ 942.724883][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 942.730125][ C1] ? __mutex_lock+0x527/0xd70 [ 942.734849][ C1] ? nsim_destroy+0x71/0x5c0 [ 942.739460][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 942.744543][ C1] ? __pfx_mntput_no_expire+0x10/0x10 [ 942.749954][ C1] ? rtnl_lock+0xe7/0x130 [ 942.754343][ C1] nsim_destroy+0x71/0x5c0 [ 942.758786][ C1] __nsim_dev_port_del+0x14b/0x1b0 [ 942.763975][ C1] nsim_dev_reload_destroy+0x28a/0x490 [ 942.769471][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 942.774906][ C1] nsim_drv_remove+0x58/0x160 [ 942.779614][ C1] device_release_driver_internal+0x4a9/0x7c0 [ 942.785757][ C1] bus_remove_device+0x34f/0x420 [ 942.790725][ C1] device_del+0x57a/0x9b0 [ 942.795118][ C1] ? __pfx_device_del+0x10/0x10 [ 942.800003][ C1] device_unregister+0x20/0xc0 [ 942.804819][ C1] del_device_store+0x363/0x480 [ 942.809707][ C1] ? __pfx_del_device_store+0x10/0x10 [ 942.815132][ C1] ? sysfs_kf_write+0x182/0x2a0 [ 942.820008][ C1] ? bus_attr_store+0x4f/0xa0 [ 942.824727][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 942.829983][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 942.835313][ C1] vfs_write+0xa72/0xc90 [ 942.839572][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 942.845426][ C1] ? __pfx_vfs_write+0x10/0x10 [ 942.850226][ C1] ksys_write+0x1a0/0x2c0 [ 942.854664][ C1] ? __pfx_ksys_write+0x10/0x10 [ 942.859545][ C1] ? do_syscall_64+0x100/0x230 [ 942.864352][ C1] ? do_syscall_64+0xb6/0x230 [ 942.869033][ C1] do_syscall_64+0xf3/0x230 [ 942.873565][ C1] ? clear_bhb_loop+0x35/0x90 [ 942.878275][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.884200][ C1] RIP: 0033:0x7fd50fd746df [ 942.888615][ C1] RSP: 002b:00007ffdd99f7b10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 942.897080][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd50fd746df [ 942.905081][ C1] RDX: 0000000000000001 RSI: 00007ffdd99f7b60 RDI: 0000000000000005 [ 942.913088][ C1] RBP: 00007fd50fde44d1 R08: 0000000000000000 R09: 00007ffdd99f7967 [ 942.921085][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 942.929136][ C1] R13: 00007ffdd99f7b60 R14: 00007fd510a34620 R15: 0000000000000003 [ 942.937154][ C1] [ 942.940178][ C1] [ 942.940178][ C1] Showing all locks held in the system: [ 942.947935][ C1] 3 locks held by kworker/0:1/9: [ 942.952895][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 942.963933][ C1] #1: ffffc900000e7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 942.974978][ C1] #2: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 942.984083][ C1] 2 locks held by getty/4847: [ 942.988756][ C1] #0: ffff88802a7b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 942.998582][ C1] #1: ffffc900034c32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 943.008736][ C1] 3 locks held by kworker/0:7/5146: [ 943.014015][ C1] 5 locks held by kworker/u8:0/30947: [ 943.019382][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 943.030320][ C1] #1: ffffc9000b89fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 943.040892][ C1] #2: ffffffff8f5eee50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 943.050351][ C1] #3: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 943.060410][ C1] #4: ffffffff8e33abb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 943.071352][ C1] 7 locks held by syz-executor/32261: [ 943.076752][ C1] #0: ffff88802f294420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 943.085692][ C1] #1: ffff88807b887c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 943.095495][ C1] #2: ffff888022fdac38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 943.105580][ C1] #3: ffffffff8ef028c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 943.115914][ C1] #4: ffff88805f6260e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 943.126509][ C1] #5: ffff888065bc9250 (&devlink->lock_key#22){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 943.136661][ C1] #6: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 943.145619][ C1] 1 lock held by syz.0.2170/591: [ 943.150557][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 943.160114][ C1] 1 lock held by syz.3.2172/602: [ 943.165070][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 943.174600][ C1] 1 lock held by syz.3.2172/603: [ 943.179550][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 943.189075][ C1] 1 lock held by syz.3.2172/605: [ 943.194037][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 943.203561][ C1] 1 lock held by syz.3.2172/606: [ 943.208493][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 943.218030][ C1] 2 locks held by syz.3.2172/607: [ 943.223074][ C1] #0: ffffffff8f6650f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 943.231301][ C1] #1: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 943.240576][ C1] 2 locks held by syz.1.2173/611: [ 943.245636][ C1] #0: ffffffff8f6650f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 943.253872][ C1] #1: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 943.263167][ C1] 1 lock held by syz.4.2175/649: [ 943.268098][ C1] 1 lock held by syz.4.2175/650: [ 943.273051][ C1] [ 943.275369][ C1] ============================================= [ 943.275369][ C1] [ 944.115183][T30947] team_slave_1 (unregistering): left promiscuous mode [ 944.138247][T30947] team0 (unregistering): Port device team_slave_1 removed [ 944.241239][T30947] team_slave_0 (unregistering): left promiscuous mode [ 944.253099][T30947] team0 (unregistering): Port device team_slave_0 removed [ 944.312360][ C1] DEBUG: holding rtnl_mutex for 743 jiffies. [ 944.318373][ C1] task:kworker/u8:0 state:R running task stack:22968 pid:30947 tgid:30947 ppid:2 flags:0x00004000 [ 944.330187][ C1] Workqueue: netns cleanup_net [ 944.335101][ C1] Call Trace: [ 944.338460][ C1] [ 944.341481][ C1] ? __schedule+0x17f0/0x4a20 [ 944.346272][ C1] ? validate_chain+0x11e/0x5920 [ 944.351299][ C1] ? mark_lock+0x9a/0x360 [ 944.355699][ C1] ? __lock_acquire+0x1359/0x2000 [ 944.360739][ C1] ? mark_lock+0x9a/0x360 [ 944.365100][ C1] ? __lock_acquire+0x1359/0x2000 [ 944.370171][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 944.375290][ C1] ? psi_task_switch+0x441/0x770 [ 944.380264][ C1] ? __pfx_lock_release+0x10/0x10 [ 944.385342][ C1] ? __schedule+0x17a4/0x4a20 [ 944.390061][ C1] ? __pfx_lock_release+0x10/0x10 [ 944.395203][ C1] ? __schedule+0x17e8/0x4a20 [ 944.399934][ C1] ? __pfx___schedule+0x10/0x10 [ 944.404868][ C1] ? __pfx_lock_release+0x10/0x10 [ 944.409926][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 944.415939][ C1] ? kthread_data+0x52/0xd0 [ 944.420499][ C1] ? wq_worker_sleeping+0x66/0x240 [ 944.425690][ C1] ? schedule+0x90/0x320 [ 944.429949][ C1] ? schedule+0x14b/0x320 [ 944.434366][ C1] ? synchronize_rcu_expedited+0x684/0x830 [ 944.440242][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 944.446481][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 944.451805][ C1] ? __pfx___might_resched+0x10/0x10 [ 944.457169][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 944.463232][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 944.469321][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 944.475704][ C1] ? synchronize_rcu+0x11b/0x360 [ 944.480659][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 944.485997][ C1] ? lockdep_unregister_key+0x556/0x610 [ 944.491557][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 944.497479][ C1] ? rcu_is_watching+0x15/0xb0 [ 944.502384][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 944.507034][ C1] ? __qdisc_destroy+0x165/0x410 [ 944.512089][ C1] ? dev_shutdown+0x9b/0x440 [ 944.516768][ C1] ? unregister_netdevice_many_notify+0x977/0x16b0 [ 944.523365][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 944.530164][ C1] ? irqentry_exit+0x63/0x90 [ 944.534813][ C1] ? default_device_exit_batch+0xa0f/0xa90 [ 944.540637][ C1] ? __pfx___might_resched+0x10/0x10 [ 944.545963][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 944.552183][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 944.557516][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 944.563726][ C1] ? cleanup_net+0x89d/0xcc0 [ 944.568327][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 944.573298][ C1] ? process_scheduled_works+0x945/0x1830 [ 944.579055][ C1] ? process_scheduled_works+0xa2c/0x1830 [ 944.584917][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 944.590922][ C1] ? assign_work+0x364/0x3d0 [ 944.595576][ C1] ? worker_thread+0x86d/0xd40 [ 944.600362][ C1] ? __kthread_parkme+0x169/0x1d0 [ 944.605443][ C1] ? __pfx_worker_thread+0x10/0x10 [ 944.610567][ C1] ? kthread+0x2f0/0x390 [ 944.614848][ C1] ? __pfx_worker_thread+0x10/0x10 [ 944.619969][ C1] ? __pfx_kthread+0x10/0x10 [ 944.624597][ C1] ? ret_from_fork+0x4b/0x80 [ 944.629191][ C1] ? __pfx_kthread+0x10/0x10 [ 944.633822][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 944.638797][ C1] [ 944.641896][ C1] DEBUG: waiting rtnl_mutex for 773 jiffies. [ 944.647960][ C1] task:syz-executor state:D stack:21024 pid:32261 tgid:32261 ppid:32221 flags:0x00004002 [ 944.658168][ C1] Call Trace: [ 944.661477][ C1] [ 944.664440][ C1] __schedule+0x17e8/0x4a20 [ 944.669005][ C1] ? __pfx___schedule+0x10/0x10 [ 944.673917][ C1] ? __pfx_lock_release+0x10/0x10 [ 944.678960][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 944.684505][ C1] ? schedule+0x90/0x320 [ 944.688757][ C1] schedule+0x14b/0x320 [ 944.692945][ C1] schedule_preempt_disabled+0x13/0x30 [ 944.698408][ C1] __mutex_lock+0x6a4/0xd70 [ 944.702954][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 944.708156][ C1] ? __mutex_lock+0x527/0xd70 [ 944.712876][ C1] ? nsim_destroy+0x71/0x5c0 [ 944.717496][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 944.722571][ C1] ? __pfx_mntput_no_expire+0x10/0x10 [ 944.727966][ C1] ? rtnl_lock+0xe7/0x130 [ 944.732328][ C1] nsim_destroy+0x71/0x5c0 [ 944.736775][ C1] __nsim_dev_port_del+0x14b/0x1b0 [ 944.741888][ C1] nsim_dev_reload_destroy+0x28a/0x490 [ 944.747410][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 944.752740][ C1] nsim_drv_remove+0x58/0x160 [ 944.757433][ C1] device_release_driver_internal+0x4a9/0x7c0 [ 944.763561][ C1] bus_remove_device+0x34f/0x420 [ 944.768531][ C1] device_del+0x57a/0x9b0 [ 944.772919][ C1] ? __pfx_device_del+0x10/0x10 [ 944.777788][ C1] device_unregister+0x20/0xc0 [ 944.782601][ C1] del_device_store+0x363/0x480 [ 944.787465][ C1] ? __pfx_del_device_store+0x10/0x10 [ 944.792881][ C1] ? sysfs_kf_write+0x182/0x2a0 [ 944.797743][ C1] ? bus_attr_store+0x4f/0xa0 [ 944.802487][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 944.807693][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 944.813099][ C1] vfs_write+0xa72/0xc90 [ 944.817359][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 944.823194][ C1] ? __pfx_vfs_write+0x10/0x10 [ 944.828006][ C1] ksys_write+0x1a0/0x2c0 [ 944.832392][ C1] ? __pfx_ksys_write+0x10/0x10 [ 944.837252][ C1] ? do_syscall_64+0x100/0x230 [ 944.842063][ C1] ? do_syscall_64+0xb6/0x230 [ 944.846789][ C1] do_syscall_64+0xf3/0x230 [ 944.851292][ C1] ? clear_bhb_loop+0x35/0x90 [ 944.856062][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.861997][ C1] RIP: 0033:0x7fd50fd746df [ 944.866427][ C1] RSP: 002b:00007ffdd99f7b10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 944.874900][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd50fd746df [ 944.882925][ C1] RDX: 0000000000000001 RSI: 00007ffdd99f7b60 RDI: 0000000000000005 [ 944.890899][ C1] RBP: 00007fd50fde44d1 R08: 0000000000000000 R09: 00007ffdd99f7967 [ 944.898902][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 944.906899][ C1] R13: 00007ffdd99f7b60 R14: 00007fd510a34620 R15: 0000000000000003 [ 944.914915][ C1] [ 944.917934][ C1] DEBUG: waiting rtnl_mutex for 688 jiffies. [ 944.923934][ C1] task:syz.3.2172 state:D stack:27216 pid:602 tgid:598 ppid:16433 flags:0x00004004 [ 944.934140][ C1] Call Trace: [ 944.937421][ C1] [ 944.940390][ C1] __schedule+0x17e8/0x4a20 [ 944.944946][ C1] ? __pfx___schedule+0x10/0x10 [ 944.949820][ C1] ? __pfx_lock_release+0x10/0x10 [ 944.954883][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 944.960360][ C1] ? schedule+0x90/0x320 [ 944.964638][ C1] schedule+0x14b/0x320 [ 944.968802][ C1] schedule_preempt_disabled+0x13/0x30 [ 944.974290][ C1] __mutex_lock+0x6a4/0xd70 [ 944.978804][ C1] ? __mutex_lock+0x527/0xd70 [ 944.983536][ C1] ? rtnetlink_rcv_msg+0x839/0x1170 [ 944.988768][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 944.993871][ C1] ? rtnl_lock+0xe7/0x130 [ 944.998225][ C1] rtnetlink_rcv_msg+0x839/0x1170 [ 945.003285][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 945.008509][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 945.014021][ C1] ? __lock_acquire+0x1359/0x2000 [ 945.019084][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 945.025128][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 945.031478][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 945.037426][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 945.042671][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 945.048597][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 945.054967][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 945.061598][ C1] netlink_rcv_skb+0x1e3/0x430 [ 945.066407][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 945.071895][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 945.077226][ C1] ? __rcu_read_unlock+0xa1/0x110 [ 945.082282][ C1] netlink_unicast+0x7f0/0x990 [ 945.087107][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 945.092457][ C1] ? __virt_addr_valid+0x183/0x530 [ 945.097862][ C1] ? __check_object_size+0x49c/0x900 [ 945.103197][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 945.108335][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 945.113136][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.118449][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 945.123432][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 945.128728][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 945.134227][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.139527][ C1] __sock_sendmsg+0x221/0x270 [ 945.144231][ C1] __sys_sendto+0x3a4/0x4f0 [ 945.148744][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 945.153797][ C1] ? do_futex+0x33b/0x560 [ 945.158149][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 945.164178][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 945.170512][ C1] __x64_sys_sendto+0xde/0x100 [ 945.175400][ C1] do_syscall_64+0xf3/0x230 [ 945.180009][ C1] ? clear_bhb_loop+0x35/0x90 [ 945.184742][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.190647][ C1] RIP: 0033:0x7f5c15f75b29 [ 945.195097][ C1] RSP: 002b:00007f5c16cd7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 945.203557][ C1] RAX: ffffffffffffffda RBX: 00007f5c16103fa0 RCX: 00007f5c15f75b29 [ 945.211536][ C1] RDX: 0000000000000078 RSI: 0000000020000080 RDI: 0000000000000004 [ 945.219724][ C1] RBP: 00007f5c15ff6756 R08: 0000000000000000 R09: 0000000000000000 [ 945.227743][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.235744][ C1] R13: 000000000000000b R14: 00007f5c16103fa0 R15: 00007fffa4ddc9c8 [ 945.243773][ C1] [ 945.246790][ C1] DEBUG: waiting rtnl_mutex for 710 jiffies. [ 945.252788][ C1] task:syz.3.2172 state:D stack:26416 pid:603 tgid:598 ppid:16433 flags:0x00004004 [ 945.263091][ C1] Call Trace: [ 945.266373][ C1] [ 945.269305][ C1] __schedule+0x17e8/0x4a20 [ 945.273864][ C1] ? __pfx___schedule+0x10/0x10 [ 945.278751][ C1] ? __pfx_lock_release+0x10/0x10 [ 945.283836][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 945.289340][ C1] ? schedule+0x90/0x320 [ 945.293640][ C1] schedule+0x14b/0x320 [ 945.297842][ C1] schedule_preempt_disabled+0x13/0x30 [ 945.303352][ C1] __mutex_lock+0x6a4/0xd70 [ 945.307876][ C1] ? __mutex_lock+0x527/0xd70 [ 945.312618][ C1] ? rtnetlink_rcv_msg+0x839/0x1170 [ 945.317822][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 945.322909][ C1] ? rtnl_lock+0xe7/0x130 [ 945.327244][ C1] rtnetlink_rcv_msg+0x839/0x1170 [ 945.332314][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 945.337535][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 945.343166][ C1] ? __lock_acquire+0x1359/0x2000 [ 945.348219][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 945.354232][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 945.360673][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 945.366614][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 945.371827][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 945.377759][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 945.384135][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 945.390774][ C1] netlink_rcv_skb+0x1e3/0x430 [ 945.395602][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 945.401071][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 945.406437][ C1] ? __rcu_read_unlock+0xa1/0x110 [ 945.411482][ C1] netlink_unicast+0x7f0/0x990 [ 945.416281][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 945.421565][ C1] ? __virt_addr_valid+0x183/0x530 [ 945.426723][ C1] ? __check_object_size+0x49c/0x900 [ 945.432060][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 945.437285][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 945.442096][ C1] ? irqentry_exit+0x63/0x90 [ 945.446726][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.452068][ C1] ? apparmor_socket_sendmsg+0x12/0x30 [ 945.457534][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 945.462509][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 945.467802][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 945.473310][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.478598][ C1] __sock_sendmsg+0x221/0x270 [ 945.483309][ C1] ____sys_sendmsg+0x525/0x7d0 [ 945.488089][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 945.493417][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 945.498023][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 945.503176][ C1] ? vfs_write+0x7cb/0xc90 [ 945.507813][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 945.514197][ C1] ? do_syscall_64+0x100/0x230 [ 945.518981][ C1] ? do_syscall_64+0xb6/0x230 [ 945.523686][ C1] do_syscall_64+0xf3/0x230 [ 945.528191][ C1] ? clear_bhb_loop+0x35/0x90 [ 945.532898][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.538808][ C1] RIP: 0033:0x7f5c15f75b29 [ 945.543244][ C1] RSP: 002b:00007f5c16cb6048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.551752][ C1] RAX: ffffffffffffffda RBX: 00007f5c16104070 RCX: 00007f5c15f75b29 [ 945.559761][ C1] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 945.567790][ C1] RBP: 00007f5c15ff6756 R08: 0000000000000000 R09: 0000000000000000 [ 945.575806][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.583825][ C1] R13: 000000000000006e R14: 00007f5c16104070 R15: 00007fffa4ddc9c8 [ 945.591832][ C1] [ 945.594880][ C1] DEBUG: waiting rtnl_mutex for 714 jiffies. [ 945.600861][ C1] task:syz.3.2172 state:D stack:26128 pid:605 tgid:598 ppid:16433 flags:0x00000004 [ 945.611165][ C1] Call Trace: [ 945.614463][ C1] [ 945.617395][ C1] __schedule+0x17e8/0x4a20 [ 945.621918][ C1] ? __pfx___schedule+0x10/0x10 [ 945.626792][ C1] ? __pfx_lock_release+0x10/0x10 [ 945.631819][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 945.637332][ C1] ? schedule+0x90/0x320 [ 945.641602][ C1] schedule+0x14b/0x320 [ 945.645789][ C1] schedule_preempt_disabled+0x13/0x30 [ 945.651255][ C1] __mutex_lock+0x6a4/0xd70 [ 945.655811][ C1] ? __mutex_lock+0x527/0xd70 [ 945.660498][ C1] ? rtnetlink_rcv_msg+0x839/0x1170 [ 945.665741][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 945.670805][ C1] ? rtnl_lock+0xe7/0x130 [ 945.675163][ C1] rtnetlink_rcv_msg+0x839/0x1170 [ 945.680191][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 945.685411][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 945.690892][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 945.696287][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 945.701513][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 945.706923][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 945.712237][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 945.717358][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 945.723142][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 945.728261][ C1] ? __dev_queue_xmit+0x1763/0x3e90 [ 945.733509][ C1] ? kasan_save_track+0x51/0x80 [ 945.738386][ C1] ? do_syscall_64+0xf3/0x230 [ 945.743138][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 945.748288][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 945.753713][ C1] ? ref_tracker_free+0x643/0x7e0 [ 945.758770][ C1] netlink_rcv_skb+0x1e3/0x430 [ 945.763603][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 945.769067][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 945.774405][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 945.779611][ C1] netlink_unicast+0x7f0/0x990 [ 945.784420][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 945.789721][ C1] ? __virt_addr_valid+0x183/0x530 [ 945.794901][ C1] ? __check_object_size+0x49c/0x900 [ 945.800407][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 945.805615][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 945.810401][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.815724][ C1] ? __import_iovec+0x536/0x820 [ 945.820578][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 945.825588][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 945.830882][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 945.836365][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.841664][ C1] __sock_sendmsg+0x221/0x270 [ 945.846386][ C1] ____sys_sendmsg+0x525/0x7d0 [ 945.851168][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 945.856499][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 945.861105][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 945.866284][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 945.872650][ C1] ? do_syscall_64+0x100/0x230 [ 945.877433][ C1] ? do_syscall_64+0xb6/0x230 [ 945.882144][ C1] do_syscall_64+0xf3/0x230 [ 945.886663][ C1] ? clear_bhb_loop+0x35/0x90 [ 945.891344][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.897282][ C1] RIP: 0033:0x7f5c15f75b29 [ 945.901695][ C1] RSP: 002b:00007f5c16c95048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.910183][ C1] RAX: ffffffffffffffda RBX: 00007f5c16104140 RCX: 00007f5c15f75b29 [ 945.918184][ C1] RDX: 0000000025000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 945.926196][ C1] RBP: 00007f5c15ff6756 R08: 0000000000000000 R09: 0000000000000000 [ 945.934192][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.942187][ C1] R13: 000000000000006e R14: 00007f5c16104140 R15: 00007fffa4ddc9c8 [ 945.950168][ C1] [ 945.953227][ C1] DEBUG: waiting rtnl_mutex for 730 jiffies. [ 945.959200][ C1] task:syz.3.2172 state:D stack:27216 pid:606 tgid:598 ppid:16433 flags:0x00000004 [ 945.969403][ C1] Call Trace: [ 945.972708][ C1] [ 945.975643][ C1] __schedule+0x17e8/0x4a20 [ 945.980172][ C1] ? __pfx___schedule+0x10/0x10 [ 945.985055][ C1] ? __pfx_lock_release+0x10/0x10 [ 945.990105][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 945.995631][ C1] ? schedule+0x90/0x320 [ 945.999879][ C1] schedule+0x14b/0x320 [ 946.004071][ C1] schedule_preempt_disabled+0x13/0x30 [ 946.009546][ C1] __mutex_lock+0x6a4/0xd70 [ 946.014102][ C1] ? __mutex_lock+0x527/0xd70 [ 946.018794][ C1] ? rtnetlink_rcv_msg+0x839/0x1170 [ 946.024028][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 946.029064][ C1] ? rtnl_lock+0xe7/0x130 [ 946.033421][ C1] rtnetlink_rcv_msg+0x839/0x1170 [ 946.038451][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 946.043675][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 946.049155][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 946.054552][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 946.059766][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 946.065186][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 946.070476][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 946.075621][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 946.081365][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 946.086539][ C1] ? __dev_queue_xmit+0x1763/0x3e90 [ 946.091749][ C1] ? kasan_save_track+0x51/0x80 [ 946.096734][ C1] ? do_syscall_64+0xf3/0x230 [ 946.101501][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 946.106647][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 946.112093][ C1] ? ref_tracker_free+0x643/0x7e0 [ 946.117131][ C1] netlink_rcv_skb+0x1e3/0x430 [ 946.121929][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 946.127505][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 946.132852][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 946.138066][ C1] netlink_unicast+0x7f0/0x990 [ 946.142896][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 946.148183][ C1] ? __virt_addr_valid+0x183/0x530 [ 946.153336][ C1] ? __check_object_size+0x49c/0x900 [ 946.158644][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 946.163781][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 946.168558][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 946.173889][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 946.178852][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 946.184172][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 946.189636][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 946.194945][ C1] __sock_sendmsg+0x221/0x270 [ 946.199641][ C1] __sys_sendto+0x3a4/0x4f0 [ 946.204180][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 946.209227][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 946.215268][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 946.221635][ C1] ? exc_page_fault+0x590/0x8c0 [ 946.226540][ C1] __x64_sys_sendto+0xde/0x100 [ 946.231321][ C1] do_syscall_64+0xf3/0x230 [ 946.235853][ C1] ? clear_bhb_loop+0x35/0x90 [ 946.240538][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.246458][ C1] RIP: 0033:0x7f5c15f778bc [ 946.250871][ C1] RSP: 002b:00007f5c16c72ed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 946.259339][ C1] RAX: ffffffffffffffda RBX: 00007f5c16c72fd0 RCX: 00007f5c15f778bc [ 946.267346][ C1] RDX: 0000000000000020 RSI: 00007f5c16c73020 RDI: 0000000000000004 [ 946.275343][ C1] RBP: 0000000000000000 R08: 00007f5c16c72f24 R09: 000000000000000c [ 946.283347][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 946.291318][ C1] R13: 00007f5c16c72f78 R14: 00007f5c16c73020 R15: 0000000000000000 [ 946.299342][ C1] [ 946.302412][ C1] DEBUG: waiting rtnl_mutex for 754 jiffies. [ 946.308386][ C1] task:syz.3.2172 state:D stack:25984 pid:607 tgid:598 ppid:16433 flags:0x00000004 [ 946.318588][ C1] Call Trace: [ 946.321869][ C1] [ 946.324845][ C1] __schedule+0x17e8/0x4a20 [ 946.329377][ C1] ? __pfx___schedule+0x10/0x10 [ 946.334261][ C1] ? __pfx_lock_release+0x10/0x10 [ 946.339318][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 946.344833][ C1] ? schedule+0x90/0x320 [ 946.349080][ C1] schedule+0x14b/0x320 [ 946.353266][ C1] schedule_preempt_disabled+0x13/0x30 [ 946.358733][ C1] __mutex_lock+0x6a4/0xd70 [ 946.363273][ C1] ? __mutex_lock+0x527/0xd70 [ 946.367964][ C1] ? nl80211_pre_doit+0x5f/0x8b0 [ 946.372931][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 946.377971][ C1] ? rtnl_lock+0xe7/0x130 [ 946.382353][ C1] nl80211_pre_doit+0x5f/0x8b0 [ 946.387148][ C1] genl_rcv_msg+0xaaa/0xec0 [ 946.391654][ C1] ? mark_lock+0x9a/0x360 [ 946.396020][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 946.401071][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 946.406119][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 946.411514][ C1] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 946.417425][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 946.422925][ C1] ? __pfx___might_resched+0x10/0x10 [ 946.428252][ C1] netlink_rcv_skb+0x1e3/0x430 [ 946.433053][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 946.438085][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 946.443432][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 946.448955][ C1] genl_rcv+0x28/0x40 [ 946.452983][ C1] netlink_unicast+0x7f0/0x990 [ 946.457784][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 946.463119][ C1] ? __virt_addr_valid+0x183/0x530 [ 946.468249][ C1] ? __check_object_size+0x49c/0x900 [ 946.473566][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 946.478685][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 946.483523][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 946.488845][ C1] ? __import_iovec+0x536/0x820 [ 946.493752][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 946.498703][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 946.504017][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 946.509502][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 946.514837][ C1] __sock_sendmsg+0x221/0x270 [ 946.519533][ C1] ____sys_sendmsg+0x525/0x7d0 [ 946.524349][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 946.529663][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 946.534296][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 946.539470][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 946.545829][ C1] ? do_syscall_64+0x100/0x230 [ 946.550594][ C1] ? do_syscall_64+0xb6/0x230 [ 946.555295][ C1] do_syscall_64+0xf3/0x230 [ 946.559819][ C1] ? clear_bhb_loop+0x35/0x90 [ 946.564649][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.570566][ C1] RIP: 0033:0x7f5c15f75b29 [ 946.575025][ C1] RSP: 002b:00007f5c159ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 946.583649][ C1] RAX: ffffffffffffffda RBX: 00007f5c161042e0 RCX: 00007f5c15f75b29 [ 946.591652][ C1] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000007 [ 946.599770][ C1] RBP: 00007f5c15ff6756 R08: 0000000000000000 R09: 0000000000000000 [ 946.607813][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.615847][ C1] R13: 000000000000006e R14: 00007f5c161042e0 R15: 00007fffa4ddc9c8 [ 946.623871][ C1] [ 946.626922][ C1] DEBUG: waiting rtnl_mutex for 784 jiffies. [ 946.632922][ C1] task:kworker/0:1 state:D stack:20344 pid:9 tgid:9 ppid:2 flags:0x00004000 [ 946.643121][ C1] Workqueue: events linkwatch_event [ 946.648332][ C1] Call Trace: [ 946.651618][ C1] [ 946.654584][ C1] __schedule+0x17e8/0x4a20 [ 946.659113][ C1] ? __pfx___schedule+0x10/0x10 [ 946.663996][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 946.669992][ C1] ? __pfx_lock_release+0x10/0x10 [ 946.675043][ C1] ? kick_pool+0x45c/0x620 [ 946.679489][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 946.684712][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 946.689917][ C1] ? schedule+0x90/0x320 [ 946.694208][ C1] schedule+0x14b/0x320 [ 946.698396][ C1] schedule_preempt_disabled+0x13/0x30 [ 946.703884][ C1] __mutex_lock+0x6a4/0xd70 [ 946.708418][ C1] ? __mutex_lock+0x527/0xd70 [ 946.713132][ C1] ? linkwatch_event+0xe/0x60 [ 946.717853][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 946.722917][ C1] ? process_scheduled_works+0x945/0x1830 [ 946.728649][ C1] ? rtnl_lock+0xe7/0x130 [ 946.733023][ C1] ? process_scheduled_works+0x945/0x1830 [ 946.738768][ C1] linkwatch_event+0xe/0x60 [ 946.743312][ C1] process_scheduled_works+0xa2c/0x1830 [ 946.748882][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 946.754916][ C1] ? assign_work+0x364/0x3d0 [ 946.759544][ C1] worker_thread+0x86d/0xd40 [ 946.764191][ C1] ? __kthread_parkme+0x169/0x1d0 [ 946.769235][ C1] ? __pfx_worker_thread+0x10/0x10 [ 946.774498][ C1] kthread+0x2f0/0x390 [ 946.778579][ C1] ? __pfx_worker_thread+0x10/0x10 [ 946.783734][ C1] ? __pfx_kthread+0x10/0x10 [ 946.788356][ C1] ret_from_fork+0x4b/0x80 [ 946.792816][ C1] ? __pfx_kthread+0x10/0x10 [ 946.797420][ C1] ret_from_fork_asm+0x1a/0x30 [ 946.802261][ C1] [ 946.805306][ C1] DEBUG: waiting rtnl_mutex for 773 jiffies. [ 946.811290][ C1] task:syz.1.2173 state:D stack:22992 pid:611 tgid:610 ppid:31571 flags:0x00000004 [ 946.821490][ C1] Call Trace: [ 946.824794][ C1] [ 946.827743][ C1] __schedule+0x17e8/0x4a20 [ 946.832329][ C1] ? __pfx___schedule+0x10/0x10 [ 946.837186][ C1] ? __pfx_lock_release+0x10/0x10 [ 946.842288][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 946.847774][ C1] ? schedule+0x90/0x320 [ 946.852070][ C1] schedule+0x14b/0x320 [ 946.856249][ C1] schedule_preempt_disabled+0x13/0x30 [ 946.861716][ C1] __mutex_lock+0x6a4/0xd70 [ 946.866260][ C1] ? __mutex_lock+0x527/0xd70 [ 946.870950][ C1] ? nl80211_pre_doit+0x5f/0x8b0 [ 946.875947][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 946.880990][ C1] ? rtnl_lock+0xe7/0x130 [ 946.885381][ C1] nl80211_pre_doit+0x5f/0x8b0 [ 946.890161][ C1] genl_rcv_msg+0xaaa/0xec0 [ 946.894698][ C1] ? mark_lock+0x9a/0x360 [ 946.899071][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 946.904166][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 946.909191][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 946.914587][ C1] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 946.919884][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 946.925370][ C1] ? __pfx___might_resched+0x10/0x10 [ 946.930670][ C1] netlink_rcv_skb+0x1e3/0x430 [ 946.935473][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 946.940506][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 946.945825][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 946.951300][ C1] genl_rcv+0x28/0x40 [ 946.955311][ C1] netlink_unicast+0x7f0/0x990 [ 946.960085][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 946.965386][ C1] ? __virt_addr_valid+0x183/0x530 [ 946.970503][ C1] ? __check_object_size+0x49c/0x900 [ 946.975815][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 946.980934][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 946.985746][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 946.991151][ C1] ? __import_iovec+0x536/0x820 [ 946.996053][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 947.001006][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 947.006327][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 947.011793][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 947.017122][ C1] __sock_sendmsg+0x221/0x270 [ 947.021808][ C1] ____sys_sendmsg+0x525/0x7d0 [ 947.026617][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 947.031950][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 947.036613][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 947.041768][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 947.048138][ C1] ? do_syscall_64+0x100/0x230 [ 947.052935][ C1] ? do_syscall_64+0xb6/0x230 [ 947.057615][ C1] do_syscall_64+0xf3/0x230 [ 947.062147][ C1] ? clear_bhb_loop+0x35/0x90 [ 947.066839][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.072766][ C1] RIP: 0033:0x7f1f35d75b29 [ 947.077181][ C1] RSP: 002b:00007f1f36ada048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 947.085626][ C1] RAX: ffffffffffffffda RBX: 00007f1f35f03fa0 RCX: 00007f1f35d75b29 [ 947.093628][ C1] RDX: 0000000000000000 RSI: 0000000020001380 RDI: 0000000000000009 [ 947.101605][ C1] RBP: 00007f1f35df6756 R08: 0000000000000000 R09: 0000000000000000 [ 947.109638][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.117634][ C1] R13: 000000000000000b R14: 00007f1f35f03fa0 R15: 00007ffe55066808 [ 947.125670][ C1] [ 947.128720][ C1] DEBUG: waiting rtnl_mutex for 800 jiffies. [ 947.134762][ C1] task:syz.0.2170 state:D stack:24480 pid:591 tgid:590 ppid:15683 flags:0x00000004 [ 947.145005][ C1] Call Trace: [ 947.148283][ C1] [ 947.151245][ C1] __schedule+0x17e8/0x4a20 [ 947.155829][ C1] ? __pfx___schedule+0x10/0x10 [ 947.160687][ C1] ? __pfx_lock_release+0x10/0x10 [ 947.165751][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 947.171259][ C1] ? schedule+0x90/0x320 [ 947.175533][ C1] schedule+0x14b/0x320 [ 947.179697][ C1] schedule_preempt_disabled+0x13/0x30 [ 947.185186][ C1] __mutex_lock+0x6a4/0xd70 [ 947.189704][ C1] ? __mutex_lock+0x527/0xd70 [ 947.194416][ C1] ? rtnetlink_rcv_msg+0x839/0x1170 [ 947.199640][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 947.204709][ C1] ? rtnl_lock+0xe7/0x130 [ 947.209060][ C1] rtnetlink_rcv_msg+0x839/0x1170 [ 947.214113][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 947.219341][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 947.224832][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 947.230207][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 947.235441][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 947.240827][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 947.246179][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 947.251306][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 947.257087][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 947.262258][ C1] ? __dev_queue_xmit+0x1763/0x3e90 [ 947.267464][ C1] ? kasan_save_track+0x51/0x80 [ 947.272344][ C1] ? do_syscall_64+0xf3/0x230 [ 947.277063][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 947.282250][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 947.287680][ C1] ? ref_tracker_free+0x643/0x7e0 [ 947.292752][ C1] netlink_rcv_skb+0x1e3/0x430 [ 947.297525][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 947.303018][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 947.308335][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 947.313567][ C1] netlink_unicast+0x7f0/0x990 [ 947.318341][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 947.323651][ C1] ? __virt_addr_valid+0x183/0x530 [ 947.328786][ C1] ? __check_object_size+0x49c/0x900 [ 947.334117][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 947.339265][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 947.344113][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 947.349422][ C1] ? __import_iovec+0x536/0x820 [ 947.354303][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 947.359250][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 947.364585][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 947.370053][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 947.375366][ C1] __sock_sendmsg+0x221/0x270 [ 947.380053][ C1] ____sys_sendmsg+0x525/0x7d0 [ 947.384856][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 947.390175][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 947.394817][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 947.399991][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 947.406356][ C1] ? do_syscall_64+0x100/0x230 [ 947.411129][ C1] ? do_syscall_64+0xb6/0x230 [ 947.415845][ C1] do_syscall_64+0xf3/0x230 [ 947.420348][ C1] ? clear_bhb_loop+0x35/0x90 [ 947.425053][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.430952][ C1] RIP: 0033:0x7fe3b1f75b29 [ 947.435399][ C1] RSP: 002b:00007fe3b19ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 947.443848][ C1] RAX: ffffffffffffffda RBX: 00007fe3b2103fa0 RCX: 00007fe3b1f75b29 [ 947.451823][ C1] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000009 [ 947.459821][ C1] RBP: 00007fe3b1ff6756 R08: 0000000000000000 R09: 0000000000000000 [ 947.467815][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.475811][ C1] R13: 000000000000000b R14: 00007fe3b2103fa0 R15: 00007ffe95e030f8 [ 947.483819][ C1] [ 947.486839][ C1] [ 947.486839][ C1] Showing all locks held in the system: [ 947.494576][ C1] 3 locks held by kworker/0:1/9: [ 947.499537][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 947.510571][ C1] #1: ffffc900000e7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 947.521577][ C1] #2: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 947.530621][ C1] 1 lock held by hwrng/758: [ 947.535145][ C1] #0: ffffffff8eb3bd48 (reading_mutex){+.+.}-{3:3}, at: hwrng_fillfn+0xf0/0x3c0 [ 947.544421][ C1] 2 locks held by getty/4847: [ 947.549112][ C1] #0: ffff88802a7b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 947.558908][ C1] #1: ffffc900034c32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 947.569094][ C1] 6 locks held by kworker/u8:11/12452: [ 947.574565][ C1] #0: ffff88802a808948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 947.585920][ C1] #1: ffffc90014837d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 947.599135][ C1] #2: ffffffff8e3357e0 (rcu_read_lock){....}-{1:2}, at: batadv_nc_worker+0xcb/0x610 [ 947.608720][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 947.618896][ C1] #4: ffffffff8e3357e0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 947.628716][ C1] #5: ffffffff8e3357e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 947.638626][ C1] 3 locks held by kworker/u8:21/12479: [ 947.644102][ C1] #0: ffff888029fb2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 947.655754][ C1] #1: ffffc90013707d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 947.669478][ C1] #2: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 947.679030][ C1] 5 locks held by kworker/u8:0/30947: [ 947.684523][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 947.695475][ C1] #1: ffffc9000b89fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 947.706086][ C1] #2: ffffffff8f5eee50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 947.715577][ C1] #3: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 947.725655][ C1] #4: ffffffff8e33abb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 947.736649][ C1] 5 locks held by kworker/u8:2/30954: [ 947.742070][ C1] 7 locks held by syz-executor/32261: [ 947.747440][ C1] #0: ffff88802f294420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 947.756413][ C1] #1: ffff88807b887c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 947.766242][ C1] #2: ffff888022fdac38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 947.776359][ C1] #3: ffffffff8ef028c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 947.786734][ C1] #4: ffff88805f6260e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 947.797332][ C1] #5: ffff888065bc9250 (&devlink->lock_key#22){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 947.807574][ C1] #6: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 947.816531][ C1] 1 lock held by syz.0.2170/591: [ 947.821465][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 947.830999][ C1] 1 lock held by syz.3.2172/602: [ 947.835987][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 947.845579][ C1] 1 lock held by syz.3.2172/603: [ 947.850518][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 947.860091][ C1] 1 lock held by syz.3.2172/605: [ 947.865072][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 947.874614][ C1] 1 lock held by syz.3.2172/606: [ 947.879554][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 947.889086][ C1] 2 locks held by syz.3.2172/607: [ 947.894153][ C1] #0: ffffffff8f6650f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 947.902416][ C1] #1: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 947.911665][ C1] 2 locks held by syz.1.2173/611: [ 947.916731][ C1] #0: ffffffff8f6650f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 947.924993][ C1] #1: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 947.934273][ C1] 1 lock held by syz.4.2175/649: [ 947.939226][ C1] [ 947.941547][ C1] ============================================= [ 947.941547][ C1] [ 948.360070][ T655] loop4: detected capacity change from 0 to 1024 [ 948.473186][ T655] hfsplus: request for non-existent node 128 in B*Tree [ 948.480117][ T655] hfsplus: request for non-existent node 128 in B*Tree [ 948.607789][ T656] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2178'. [ 948.684443][ T5098] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 948.698855][ T5098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 948.712703][ T5098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 948.725804][ T5098] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 948.750984][ T5098] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 948.758882][ T5098] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 948.837829][ T5098] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 948.865235][ T5098] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 948.874315][ T5098] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 948.909841][ T5098] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 948.922137][ T5098] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 948.942772][ T5098] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 948.952073][ C1] DEBUG: holding rtnl_mutex for 1207 jiffies. [ 948.958191][ C1] task:kworker/u8:0 state:D stack:22968 pid:30947 tgid:30947 ppid:2 flags:0x00004000 [ 948.968990][ C1] Workqueue: netns cleanup_net [ 948.973869][ C1] Call Trace: [ 948.977181][ C1] [ 948.980161][ C1] __schedule+0x17e8/0x4a20 [ 948.984787][ C1] ? __pfx___schedule+0x10/0x10 [ 948.989693][ C1] ? __pfx_lock_release+0x10/0x10 [ 948.994810][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 949.000766][ C1] ? kthread_data+0x52/0xd0 [ 949.005382][ C1] ? wq_worker_sleeping+0x66/0x240 [ 949.010555][ C1] ? schedule+0x90/0x320 [ 949.014910][ C1] schedule+0x14b/0x320 [ 949.019128][ C1] synchronize_rcu_expedited+0x684/0x830 [ 949.024865][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 949.031072][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 949.036431][ C1] ? __pfx___might_resched+0x10/0x10 [ 949.041759][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 949.047826][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 949.053977][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 949.060370][ C1] synchronize_rcu+0x11b/0x360 [ 949.065226][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 949.070575][ C1] lockdep_unregister_key+0x556/0x610 [ 949.076033][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 949.082046][ C1] ? rcu_is_watching+0x15/0xb0 [ 949.086860][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 949.091498][ C1] __qdisc_destroy+0x165/0x410 [ 949.096340][ C1] dev_shutdown+0x357/0x440 [ 949.100861][ C1] unregister_netdevice_many_notify+0x977/0x16b0 [ 949.107298][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 949.114170][ C1] ? irqentry_exit+0x63/0x90 [ 949.118834][ C1] default_device_exit_batch+0xa0f/0xa90 [ 949.124565][ C1] ? __pfx___might_resched+0x10/0x10 [ 949.129889][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 949.136139][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 949.141476][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 949.147718][ C1] cleanup_net+0x89d/0xcc0 [ 949.152223][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 949.157219][ C1] ? process_scheduled_works+0x945/0x1830 [ 949.163029][ C1] process_scheduled_works+0xa2c/0x1830 [ 949.168630][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 949.174687][ C1] ? assign_work+0x364/0x3d0 [ 949.179311][ C1] worker_thread+0x86d/0xd40 [ 949.183989][ C1] ? __kthread_parkme+0x169/0x1d0 [ 949.189058][ C1] ? __pfx_worker_thread+0x10/0x10 [ 949.194258][ C1] kthread+0x2f0/0x390 [ 949.198391][ C1] ? __pfx_worker_thread+0x10/0x10 [ 949.203593][ C1] ? __pfx_kthread+0x10/0x10 [ 949.208229][ C1] ret_from_fork+0x4b/0x80 [ 949.212727][ C1] ? __pfx_kthread+0x10/0x10 [ 949.217371][ C1] ret_from_fork_asm+0x1a/0x30 [ 949.222238][ C1] [ 949.225287][ C1] DEBUG: waiting rtnl_mutex for 1232 jiffies. [ 949.231373][ C1] task:syz-executor state:D stack:21024 pid:32261 tgid:32261 ppid:32221 flags:0x00004002 [ 949.241579][ C1] Call Trace: [ 949.244912][ C1] [ 949.247878][ C1] __schedule+0x17e8/0x4a20 [ 949.252500][ C1] ? __pfx___schedule+0x10/0x10 [ 949.257395][ C1] ? __pfx_lock_release+0x10/0x10 [ 949.262505][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 949.268010][ C1] ? schedule+0x90/0x320 [ 949.272322][ C1] schedule+0x14b/0x320 [ 949.276520][ C1] schedule_preempt_disabled+0x13/0x30 [ 949.282065][ C1] __mutex_lock+0x6a4/0xd70 [ 949.286618][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 949.291857][ C1] ? __mutex_lock+0x527/0xd70 [ 949.296633][ C1] ? nsim_destroy+0x71/0x5c0 [ 949.301229][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 949.306325][ C1] ? __pfx_mntput_no_expire+0x10/0x10 [ 949.311734][ C1] ? rtnl_lock+0xe7/0x130 [ 949.316131][ C1] nsim_destroy+0x71/0x5c0 [ 949.320595][ C1] __nsim_dev_port_del+0x14b/0x1b0 [ 949.325796][ C1] nsim_dev_reload_destroy+0x28a/0x490 [ 949.331333][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 949.336676][ C1] nsim_drv_remove+0x58/0x160 [ 949.341390][ C1] device_release_driver_internal+0x4a9/0x7c0 [ 949.347542][ C1] bus_remove_device+0x34f/0x420 [ 949.352608][ C1] device_del+0x57a/0x9b0 [ 949.356995][ C1] ? __pfx_device_del+0x10/0x10 [ 949.361923][ C1] device_unregister+0x20/0xc0 [ 949.366775][ C1] del_device_store+0x363/0x480 [ 949.371657][ C1] ? __pfx_del_device_store+0x10/0x10 [ 949.377106][ C1] ? sysfs_kf_write+0x182/0x2a0 [ 949.382032][ C1] ? bus_attr_store+0x4f/0xa0 [ 949.386752][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 949.392033][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 949.397366][ C1] vfs_write+0xa72/0xc90 [ 949.401644][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 949.407486][ C1] ? __pfx_vfs_write+0x10/0x10 [ 949.412341][ C1] ksys_write+0x1a0/0x2c0 [ 949.416726][ C1] ? __pfx_ksys_write+0x10/0x10 [ 949.421622][ C1] ? do_syscall_64+0x100/0x230 [ 949.426462][ C1] ? do_syscall_64+0xb6/0x230 [ 949.431163][ C1] do_syscall_64+0xf3/0x230 [ 949.435702][ C1] ? clear_bhb_loop+0x35/0x90 [ 949.440411][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.446389][ C1] RIP: 0033:0x7fd50fd746df [ 949.450856][ C1] RSP: 002b:00007ffdd99f7b10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 949.459349][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd50fd746df [ 949.467354][ C1] RDX: 0000000000000001 RSI: 00007ffdd99f7b60 RDI: 0000000000000005 [ 949.475393][ C1] RBP: 00007fd50fde44d1 R08: 0000000000000000 R09: 00007ffdd99f7967 [ 949.483441][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 949.491443][ C1] R13: 00007ffdd99f7b60 R14: 00007fd510a34620 R15: 0000000000000003 [ 949.499499][ C1] [ 949.502607][ C1] DEBUG: waiting rtnl_mutex for 1147 jiffies. [ 949.508717][ C1] task:syz.3.2172 state:D stack:27216 pid:602 tgid:598 ppid:16433 flags:0x00004004 [ 949.518949][ C1] Call Trace: [ 949.522297][ C1] [ 949.525254][ C1] __schedule+0x17e8/0x4a20 [ 949.529780][ C1] ? __pfx___schedule+0x10/0x10 [ 949.534691][ C1] ? __pfx_lock_release+0x10/0x10 [ 949.539757][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 949.545322][ C1] ? schedule+0x90/0x320 [ 949.549621][ C1] schedule+0x14b/0x320 [ 949.553840][ C1] schedule_preempt_disabled+0x13/0x30 [ 949.559347][ C1] __mutex_lock+0x6a4/0xd70 [ 949.563924][ C1] ? __mutex_lock+0x527/0xd70 [ 949.568686][ C1] ? rtnetlink_rcv_msg+0x839/0x1170 [ 949.573986][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 949.579057][ C1] ? rtnl_lock+0xe7/0x130 [ 949.583462][ C1] rtnetlink_rcv_msg+0x839/0x1170 [ 949.588525][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 949.593796][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 949.599298][ C1] ? __lock_acquire+0x1359/0x2000 [ 949.604429][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 949.610445][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 949.616830][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 949.622787][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 949.628037][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 949.634033][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 949.640489][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 949.647130][ C1] netlink_rcv_skb+0x1e3/0x430 [ 949.651904][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 949.657446][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 949.662854][ C1] ? __rcu_read_unlock+0xa1/0x110 [ 949.668008][ C1] netlink_unicast+0x7f0/0x990 [ 949.672863][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 949.678179][ C1] ? __virt_addr_valid+0x183/0x530 [ 949.683353][ C1] ? __check_object_size+0x49c/0x900 [ 949.688672][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 949.693840][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 949.698662][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.704042][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 949.709027][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 949.714396][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 949.719889][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.725238][ C1] __sock_sendmsg+0x221/0x270 [ 949.729962][ C1] __sys_sendto+0x3a4/0x4f0 [ 949.734566][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 949.739625][ C1] ? do_futex+0x33b/0x560 [ 949.744071][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 949.750087][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 949.756491][ C1] __x64_sys_sendto+0xde/0x100 [ 949.761305][ C1] do_syscall_64+0xf3/0x230 [ 949.765914][ C1] ? clear_bhb_loop+0x35/0x90 [ 949.770628][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.776616][ C1] RIP: 0033:0x7f5c15f75b29 [ 949.781151][ C1] RSP: 002b:00007f5c16cd7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 949.789635][ C1] RAX: ffffffffffffffda RBX: 00007f5c16103fa0 RCX: 00007f5c15f75b29 [ 949.797684][ C1] RDX: 0000000000000078 RSI: 0000000020000080 RDI: 0000000000000004 [ 949.805744][ C1] RBP: 00007f5c15ff6756 R08: 0000000000000000 R09: 0000000000000000 [ 949.813790][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.821823][ C1] R13: 000000000000000b R14: 00007f5c16103fa0 R15: 00007fffa4ddc9c8 [ 949.829893][ C1] [ 949.832982][ C1] DEBUG: waiting rtnl_mutex for 1169 jiffies. [ 949.839097][ C1] task:syz.3.2172 state:D stack:26416 pid:603 tgid:598 ppid:16433 flags:0x00004004 [ 949.849340][ C1] Call Trace: [ 949.852705][ C1] [ 949.855665][ C1] __schedule+0x17e8/0x4a20 [ 949.860198][ C1] ? __pfx___schedule+0x10/0x10 [ 949.865124][ C1] ? __pfx_lock_release+0x10/0x10 [ 949.870202][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 949.875765][ C1] ? schedule+0x90/0x320 [ 949.880021][ C1] schedule+0x14b/0x320 [ 949.884250][ C1] schedule_preempt_disabled+0x13/0x30 [ 949.889737][ C1] __mutex_lock+0x6a4/0xd70 [ 949.894307][ C1] ? __mutex_lock+0x527/0xd70 [ 949.899026][ C1] ? rtnetlink_rcv_msg+0x839/0x1170 [ 949.904304][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 949.909375][ C1] ? rtnl_lock+0xe7/0x130 [ 949.913771][ C1] rtnetlink_rcv_msg+0x839/0x1170 [ 949.918848][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 949.924106][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 949.929599][ C1] ? __lock_acquire+0x1359/0x2000 [ 949.934737][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 949.940751][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 949.947145][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 949.953152][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 949.958403][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 949.964365][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 949.970750][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 949.977467][ C1] netlink_rcv_skb+0x1e3/0x430 [ 949.982326][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 949.987828][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 949.993212][ C1] ? __rcu_read_unlock+0xa1/0x110 [ 949.998296][ C1] netlink_unicast+0x7f0/0x990 [ 950.003174][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 950.008489][ C1] ? __virt_addr_valid+0x183/0x530 [ 950.013668][ C1] ? __check_object_size+0x49c/0x900 [ 950.018991][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 950.024170][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 950.028939][ C1] ? irqentry_exit+0x63/0x90 [ 950.033598][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.038910][ C1] ? apparmor_socket_sendmsg+0x12/0x30 [ 950.044434][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 950.049415][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 950.054784][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 950.060269][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.065621][ C1] __sock_sendmsg+0x221/0x270 [ 950.070337][ C1] ____sys_sendmsg+0x525/0x7d0 [ 950.075180][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 950.080528][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 950.085216][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 950.090360][ C1] ? vfs_write+0x7cb/0xc90 [ 950.094930][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 950.101302][ C1] ? do_syscall_64+0x100/0x230 [ 950.106142][ C1] ? do_syscall_64+0xb6/0x230 [ 950.110864][ C1] do_syscall_64+0xf3/0x230 [ 950.115433][ C1] ? clear_bhb_loop+0x35/0x90 [ 950.120146][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.126108][ C1] RIP: 0033:0x7f5c15f75b29 [ 950.130549][ C1] RSP: 002b:00007f5c16cb6048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.138994][ C1] RAX: ffffffffffffffda RBX: 00007f5c16104070 RCX: 00007f5c15f75b29 [ 950.147010][ C1] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 950.155049][ C1] RBP: 00007f5c15ff6756 R08: 0000000000000000 R09: 0000000000000000 [ 950.163094][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 950.171140][ C1] R13: 000000000000006e R14: 00007f5c16104070 R15: 00007fffa4ddc9c8 [ 950.179167][ C1] [ 950.182232][ C1] DEBUG: waiting rtnl_mutex for 1173 jiffies. [ 950.188321][ C1] task:syz.3.2172 state:D stack:26128 pid:605 tgid:598 ppid:16433 flags:0x00000004 [ 950.198568][ C1] Call Trace: [ 950.201856][ C1] [ 950.204831][ C1] __schedule+0x17e8/0x4a20 [ 950.209379][ C1] ? __pfx___schedule+0x10/0x10 [ 950.214314][ C1] ? __pfx_lock_release+0x10/0x10 [ 950.219468][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 950.225028][ C1] ? schedule+0x90/0x320 [ 950.229301][ C1] schedule+0x14b/0x320 [ 950.233531][ C1] schedule_preempt_disabled+0x13/0x30 [ 950.239030][ C1] __mutex_lock+0x6a4/0xd70 [ 950.243604][ C1] ? __mutex_lock+0x527/0xd70 [ 950.248327][ C1] ? rtnetlink_rcv_msg+0x839/0x1170 [ 950.253605][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 950.258686][ C1] ? rtnl_lock+0xe7/0x130 [ 950.263075][ C1] rtnetlink_rcv_msg+0x839/0x1170 [ 950.268111][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 950.273436][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 950.278940][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 950.284391][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 950.289640][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 950.295065][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 950.300361][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 950.305534][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 950.311378][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 950.316565][ C1] ? __dev_queue_xmit+0x1763/0x3e90 [ 950.321797][ C1] ? kasan_save_track+0x51/0x80 [ 950.326687][ C1] ? do_syscall_64+0xf3/0x230 [ 950.331383][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 950.336565][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 950.342040][ C1] ? ref_tracker_free+0x643/0x7e0 [ 950.347117][ C1] netlink_rcv_skb+0x1e3/0x430 [ 950.351926][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 950.357459][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 950.362830][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.368054][ C1] netlink_unicast+0x7f0/0x990 [ 950.372879][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 950.378192][ C1] ? __virt_addr_valid+0x183/0x530 [ 950.383371][ C1] ? __check_object_size+0x49c/0x900 [ 950.388663][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 950.393861][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 950.398684][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.404050][ C1] ? __import_iovec+0x536/0x820 [ 950.408930][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 950.413960][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 950.419284][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 950.424806][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.430128][ C1] __sock_sendmsg+0x221/0x270 [ 950.434871][ C1] ____sys_sendmsg+0x525/0x7d0 [ 950.439693][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 950.445081][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 950.449714][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 950.454928][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 950.461281][ C1] ? do_syscall_64+0x100/0x230 [ 950.466103][ C1] ? do_syscall_64+0xb6/0x230 [ 950.470811][ C1] do_syscall_64+0xf3/0x230 [ 950.475368][ C1] ? clear_bhb_loop+0x35/0x90 [ 950.480071][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.486025][ C1] RIP: 0033:0x7f5c15f75b29 [ 950.490467][ C1] RSP: 002b:00007f5c16c95048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.498967][ C1] RAX: ffffffffffffffda RBX: 00007f5c16104140 RCX: 00007f5c15f75b29 [ 950.507016][ C1] RDX: 0000000025000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 950.515068][ C1] RBP: 00007f5c15ff6756 R08: 0000000000000000 R09: 0000000000000000 [ 950.523124][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 950.531120][ C1] R13: 000000000000006e R14: 00007f5c16104140 R15: 00007fffa4ddc9c8 [ 950.539194][ C1] [ 950.542283][ C1] DEBUG: waiting rtnl_mutex for 1189 jiffies. [ 950.548373][ C1] task:syz.3.2172 state:D stack:27216 pid:606 tgid:598 ppid:16433 flags:0x00000004 [ 950.558600][ C1] Call Trace: [ 950.561906][ C1] [ 950.564869][ C1] __schedule+0x17e8/0x4a20 [ 950.569397][ C1] ? __pfx___schedule+0x10/0x10 [ 950.574314][ C1] ? __pfx_lock_release+0x10/0x10 [ 950.579373][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 950.584918][ C1] ? schedule+0x90/0x320 [ 950.589197][ C1] schedule+0x14b/0x320 [ 950.593451][ C1] schedule_preempt_disabled+0x13/0x30 [ 950.598964][ C1] __mutex_lock+0x6a4/0xd70 [ 950.603564][ C1] ? __mutex_lock+0x527/0xd70 [ 950.608278][ C1] ? rtnetlink_rcv_msg+0x839/0x1170 [ 950.613540][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 950.618632][ C1] ? rtnl_lock+0xe7/0x130 [ 950.623045][ C1] rtnetlink_rcv_msg+0x839/0x1170 [ 950.628135][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 950.633416][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 950.638935][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 950.644364][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 950.649620][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 950.655060][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 950.660383][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 950.665593][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 950.671382][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 950.676563][ C1] ? __dev_queue_xmit+0x1763/0x3e90 [ 950.681783][ C1] ? kasan_save_track+0x51/0x80 [ 950.686733][ C1] ? do_syscall_64+0xf3/0x230 [ 950.691471][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 950.696669][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 950.702157][ C1] ? ref_tracker_free+0x643/0x7e0 [ 950.707234][ C1] netlink_rcv_skb+0x1e3/0x430 [ 950.712086][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 950.717579][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 950.722975][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.728269][ C1] netlink_unicast+0x7f0/0x990 [ 950.733129][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 950.738462][ C1] ? __virt_addr_valid+0x183/0x530 [ 950.743649][ C1] ? __check_object_size+0x49c/0x900 [ 950.748981][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 950.754165][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 950.758982][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.764347][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 950.769352][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 950.774709][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 950.780209][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.785605][ C1] __sock_sendmsg+0x221/0x270 [ 950.790338][ C1] __sys_sendto+0x3a4/0x4f0 [ 950.794947][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 950.800026][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 950.806085][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 950.812601][ C1] ? exc_page_fault+0x590/0x8c0 [ 950.817512][ C1] __x64_sys_sendto+0xde/0x100 [ 950.822373][ C1] do_syscall_64+0xf3/0x230 [ 950.826918][ C1] ? clear_bhb_loop+0x35/0x90 [ 950.831630][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.837607][ C1] RIP: 0033:0x7f5c15f778bc [ 950.842078][ C1] RSP: 002b:00007f5c16c72ed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 950.850541][ C1] RAX: ffffffffffffffda RBX: 00007f5c16c72fd0 RCX: 00007f5c15f778bc [ 950.858605][ C1] RDX: 0000000000000020 RSI: 00007f5c16c73020 RDI: 0000000000000004 [ 950.866660][ C1] RBP: 0000000000000000 R08: 00007f5c16c72f24 R09: 000000000000000c [ 950.874814][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 950.882877][ C1] R13: 00007f5c16c72f78 R14: 00007f5c16c73020 R15: 0000000000000000 [ 950.890894][ C1] [ 950.893970][ C1] DEBUG: waiting rtnl_mutex for 1213 jiffies. [ 950.900049][ C1] task:syz.3.2172 state:D stack:25984 pid:607 tgid:598 ppid:16433 flags:0x00000004 [ 950.910254][ C1] Call Trace: [ 950.913591][ C1] [ 950.916559][ C1] __schedule+0x17e8/0x4a20 [ 950.921141][ C1] ? __pfx___schedule+0x10/0x10 [ 950.926074][ C1] ? __pfx_lock_release+0x10/0x10 [ 950.931145][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 950.936688][ C1] ? schedule+0x90/0x320 [ 950.940941][ C1] schedule+0x14b/0x320 [ 950.945163][ C1] schedule_preempt_disabled+0x13/0x30 [ 950.950670][ C1] __mutex_lock+0x6a4/0xd70 [ 950.955269][ C1] ? __mutex_lock+0x527/0xd70 [ 950.959987][ C1] ? nl80211_pre_doit+0x5f/0x8b0 [ 950.965015][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 950.970063][ C1] ? rtnl_lock+0xe7/0x130 [ 950.974461][ C1] nl80211_pre_doit+0x5f/0x8b0 [ 950.979279][ C1] genl_rcv_msg+0xaaa/0xec0 [ 950.983950][ C1] ? mark_lock+0x9a/0x360 [ 950.988335][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.993480][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 950.998550][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 951.004025][ C1] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 951.009954][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 951.015497][ C1] ? __pfx___might_resched+0x10/0x10 [ 951.020836][ C1] netlink_rcv_skb+0x1e3/0x430 [ 951.025658][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 951.030734][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 951.036122][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 951.041638][ C1] genl_rcv+0x28/0x40 [ 951.042479][ T5095] Bluetooth: hci6: command tx timeout [ 951.045681][ C1] netlink_unicast+0x7f0/0x990 [ 951.056263][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 951.061584][ C1] ? __virt_addr_valid+0x183/0x530 [ 951.066802][ C1] ? __check_object_size+0x49c/0x900 [ 951.072170][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 951.077319][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 951.082156][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.087489][ C1] ? __import_iovec+0x536/0x820 [ 951.092413][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 951.097395][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 951.102766][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 951.108259][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.113599][ C1] __sock_sendmsg+0x221/0x270 [ 951.118318][ C1] ____sys_sendmsg+0x525/0x7d0 [ 951.123180][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 951.128529][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 951.133207][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 951.138411][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 951.144823][ C1] ? do_syscall_64+0x100/0x230 [ 951.149616][ C1] ? do_syscall_64+0xb6/0x230 [ 951.154326][ C1] do_syscall_64+0xf3/0x230 [ 951.158924][ C1] ? clear_bhb_loop+0x35/0x90 [ 951.163659][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.169643][ C1] RIP: 0033:0x7f5c15f75b29 [ 951.174120][ C1] RSP: 002b:00007f5c159ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.182613][ C1] RAX: ffffffffffffffda RBX: 00007f5c161042e0 RCX: 00007f5c15f75b29 [ 951.190608][ C1] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000007 [ 951.198647][ C1] RBP: 00007f5c15ff6756 R08: 0000000000000000 R09: 0000000000000000 [ 951.206704][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 951.214761][ C1] R13: 000000000000006e R14: 00007f5c161042e0 R15: 00007fffa4ddc9c8 [ 951.222841][ C1] [ 951.225880][ C1] DEBUG: waiting rtnl_mutex for 1244 jiffies. [ 951.231946][ C1] task:kworker/0:1 state:D stack:20344 pid:9 tgid:9 ppid:2 flags:0x00004000 [ 951.242238][ C1] Workqueue: events linkwatch_event [ 951.247568][ C1] Call Trace: [ 951.250845][ C1] [ 951.253842][ C1] __schedule+0x17e8/0x4a20 [ 951.258397][ C1] ? __pfx___schedule+0x10/0x10 [ 951.263310][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 951.269328][ C1] ? __pfx_lock_release+0x10/0x10 [ 951.274436][ C1] ? kick_pool+0x45c/0x620 [ 951.278888][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 951.284239][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 951.289559][ C1] ? schedule+0x90/0x320 [ 951.293905][ C1] schedule+0x14b/0x320 [ 951.298102][ C1] schedule_preempt_disabled+0x13/0x30 [ 951.303638][ C1] __mutex_lock+0x6a4/0xd70 [ 951.308215][ C1] ? __mutex_lock+0x527/0xd70 [ 951.312978][ C1] ? linkwatch_event+0xe/0x60 [ 951.317698][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 951.322820][ C1] ? process_scheduled_works+0x945/0x1830 [ 951.328590][ C1] ? rtnl_lock+0xe7/0x130 [ 951.333000][ C1] ? process_scheduled_works+0x945/0x1830 [ 951.338754][ C1] linkwatch_event+0xe/0x60 [ 951.343338][ C1] process_scheduled_works+0xa2c/0x1830 [ 951.348956][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 951.355001][ C1] ? assign_work+0x364/0x3d0 [ 951.359603][ C1] worker_thread+0x86d/0xd40 [ 951.364275][ C1] ? __kthread_parkme+0x169/0x1d0 [ 951.369347][ C1] ? __pfx_worker_thread+0x10/0x10 [ 951.374582][ C1] kthread+0x2f0/0x390 [ 951.378700][ C1] ? __pfx_worker_thread+0x10/0x10 [ 951.383906][ C1] ? __pfx_kthread+0x10/0x10 [ 951.388529][ C1] ret_from_fork+0x4b/0x80 [ 951.393007][ C1] ? __pfx_kthread+0x10/0x10 [ 951.397635][ C1] ret_from_fork_asm+0x1a/0x30 [ 951.402500][ C1] [ 951.405564][ C1] DEBUG: waiting rtnl_mutex for 1233 jiffies. [ 951.412052][ C1] task:syz.1.2173 state:D stack:22992 pid:611 tgid:610 ppid:31571 flags:0x00000004 [ 951.422271][ C1] Call Trace: [ 951.425584][ C1] [ 951.428547][ C1] __schedule+0x17e8/0x4a20 [ 951.433155][ C1] ? __pfx___schedule+0x10/0x10 [ 951.438064][ C1] ? __pfx_lock_release+0x10/0x10 [ 951.443205][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 951.448743][ C1] ? schedule+0x90/0x320 [ 951.453055][ C1] schedule+0x14b/0x320 [ 951.457262][ C1] schedule_preempt_disabled+0x13/0x30 [ 951.462802][ C1] __mutex_lock+0x6a4/0xd70 [ 951.467350][ C1] ? __mutex_lock+0x527/0xd70 [ 951.472103][ C1] ? nl80211_pre_doit+0x5f/0x8b0 [ 951.477093][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 951.482209][ C1] ? rtnl_lock+0xe7/0x130 [ 951.486552][ C1] nl80211_pre_doit+0x5f/0x8b0 [ 951.491347][ C1] genl_rcv_msg+0xaaa/0xec0 [ 951.495910][ C1] ? mark_lock+0x9a/0x360 [ 951.500294][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 951.505429][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 951.510501][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 951.515955][ C1] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 951.521272][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 951.526816][ C1] ? __pfx___might_resched+0x10/0x10 [ 951.532190][ C1] netlink_rcv_skb+0x1e3/0x430 [ 951.536997][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 951.542122][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 951.547456][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 951.553023][ C1] genl_rcv+0x28/0x40 [ 951.557047][ C1] netlink_unicast+0x7f0/0x990 [ 951.561853][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 951.567216][ C1] ? __virt_addr_valid+0x183/0x530 [ 951.572424][ C1] ? __check_object_size+0x49c/0x900 [ 951.577746][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 951.582957][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 951.587787][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.593133][ C1] ? __import_iovec+0x536/0x820 [ 951.598003][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 951.603039][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 951.608453][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 951.613989][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.619346][ C1] __sock_sendmsg+0x221/0x270 [ 951.624086][ C1] ____sys_sendmsg+0x525/0x7d0 [ 951.628892][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 951.634267][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 951.638903][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 951.644155][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 951.650520][ C1] ? do_syscall_64+0x100/0x230 [ 951.655343][ C1] ? do_syscall_64+0xb6/0x230 [ 951.660041][ C1] do_syscall_64+0xf3/0x230 [ 951.664617][ C1] ? clear_bhb_loop+0x35/0x90 [ 951.669324][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.675280][ C1] RIP: 0033:0x7f1f35d75b29 [ 951.679734][ C1] RSP: 002b:00007f1f36ada048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.688228][ C1] RAX: ffffffffffffffda RBX: 00007f1f35f03fa0 RCX: 00007f1f35d75b29 [ 951.696264][ C1] RDX: 0000000000000000 RSI: 0000000020001380 RDI: 0000000000000009 [ 951.704316][ C1] RBP: 00007f1f35df6756 R08: 0000000000000000 R09: 0000000000000000 [ 951.712365][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 951.720359][ C1] R13: 000000000000000b R14: 00007f1f35f03fa0 R15: 00007ffe55066808 [ 951.728378][ C1] [ 951.731399][ C1] DEBUG: waiting rtnl_mutex for 1260 jiffies. [ 951.737508][ C1] task:syz.0.2170 state:D stack:24480 pid:591 tgid:590 ppid:15683 flags:0x00000004 [ 951.747825][ C1] Call Trace: [ 951.751152][ C1] [ 951.754143][ C1] __schedule+0x17e8/0x4a20 [ 951.758698][ C1] ? __pfx___schedule+0x10/0x10 [ 951.763622][ C1] ? __pfx_lock_release+0x10/0x10 [ 951.768688][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 951.774234][ C1] ? schedule+0x90/0x320 [ 951.778514][ C1] schedule+0x14b/0x320 [ 951.782852][ C1] schedule_preempt_disabled+0x13/0x30 [ 951.788358][ C1] __mutex_lock+0x6a4/0xd70 [ 951.792949][ C1] ? __mutex_lock+0x527/0xd70 [ 951.797665][ C1] ? rtnetlink_rcv_msg+0x839/0x1170 [ 951.802930][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 951.808129][ C1] ? rtnl_lock+0xe7/0x130 [ 951.812546][ C1] rtnetlink_rcv_msg+0x839/0x1170 [ 951.817612][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 951.822870][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 951.828354][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 951.833797][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 951.839040][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 951.844489][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 951.849813][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 951.854998][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 951.860788][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 951.865983][ C1] ? __dev_queue_xmit+0x1763/0x3e90 [ 951.871218][ C1] ? kasan_save_track+0x51/0x80 [ 951.876133][ C1] ? do_syscall_64+0xf3/0x230 [ 951.880836][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 951.886028][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 951.891449][ C1] ? ref_tracker_free+0x643/0x7e0 [ 951.896546][ C1] netlink_rcv_skb+0x1e3/0x430 [ 951.901374][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 951.906903][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 951.912304][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 951.917549][ C1] netlink_unicast+0x7f0/0x990 [ 951.922397][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 951.927727][ C1] ? __virt_addr_valid+0x183/0x530 [ 951.932938][ C1] ? __check_object_size+0x49c/0x900 [ 951.938262][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 951.943446][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 951.948255][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.953635][ C1] ? __import_iovec+0x536/0x820 [ 951.958519][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 951.963562][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 951.968882][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 951.974401][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.979742][ C1] __sock_sendmsg+0x221/0x270 [ 951.984479][ C1] ____sys_sendmsg+0x525/0x7d0 [ 951.989295][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 951.994682][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 951.999315][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 952.004542][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 952.010900][ C1] ? do_syscall_64+0x100/0x230 [ 952.015721][ C1] ? do_syscall_64+0xb6/0x230 [ 952.020432][ C1] do_syscall_64+0xf3/0x230 [ 952.025014][ C1] ? clear_bhb_loop+0x35/0x90 [ 952.029719][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.035714][ C1] RIP: 0033:0x7fe3b1f75b29 [ 952.040166][ C1] RSP: 002b:00007fe3b19ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.048658][ C1] RAX: ffffffffffffffda RBX: 00007fe3b2103fa0 RCX: 00007fe3b1f75b29 [ 952.056775][ C1] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000009 [ 952.064826][ C1] RBP: 00007fe3b1ff6756 R08: 0000000000000000 R09: 0000000000000000 [ 952.072883][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.080881][ C1] R13: 000000000000000b R14: 00007fe3b2103fa0 R15: 00007ffe95e030f8 [ 952.088948][ C1] [ 952.092011][ C1] [ 952.092011][ C1] Showing all locks held in the system: [ 952.099759][ C1] 3 locks held by kworker/0:1/9: [ 952.104767][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 952.115832][ C1] #1: ffffc900000e7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 952.126876][ C1] #2: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 952.136012][ C1] 2 locks held by getty/4847: [ 952.140723][ C1] #0: ffff88802a7b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 952.150548][ C1] #1: ffffc900034c32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 952.160732][ C1] 3 locks held by syz-executor/5082: [ 952.166077][ C1] #0: ffff888011a083d0 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 952.176466][ C1] #1: ffff88802f18e518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f0/0xdf0 [ 952.186247][ C1] #2: ffff88802f19a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x203f/0x22a0 [ 952.196046][ C1] 3 locks held by kworker/u8:21/12479: [ 952.201517][ C1] #0: ffff888029fb2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 952.213153][ C1] #1: ffffc90013707d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 952.226878][ C1] #2: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 952.236493][ C1] 3 locks held by kworker/u8:22/12481: [ 952.242024][ C1] 5 locks held by kworker/u8:0/30947: [ 952.247415][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 952.258391][ C1] #1: ffffc9000b89fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 952.268977][ C1] #2: ffffffff8f5eee50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 952.278447][ C1] #3: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 952.288545][ C1] #4: ffffffff8e33abb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 952.299484][ C1] 7 locks held by syz-executor/32261: [ 952.304899][ C1] #0: ffff88802f294420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 952.313908][ C1] #1: ffff88807b887c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 952.323770][ C1] #2: ffff888022fdac38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 952.333898][ C1] #3: ffffffff8ef028c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 952.344279][ C1] #4: ffff88805f6260e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 952.354943][ C1] #5: ffff888065bc9250 (&devlink->lock_key#22){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 952.365183][ C1] #6: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 952.374190][ C1] 1 lock held by syz.0.2170/591: [ 952.379168][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 952.388753][ C1] 1 lock held by syz.3.2172/602: [ 952.393750][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 952.403366][ C1] 1 lock held by syz.3.2172/603: [ 952.408332][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 952.417920][ C1] 1 lock held by syz.3.2172/605: [ 952.422911][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 952.432512][ C1] 1 lock held by syz.3.2172/606: [ 952.437470][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 952.447042][ C1] 2 locks held by syz.3.2172/607: [ 952.452099][ C1] #0: ffffffff8f6650f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 952.460358][ C1] #1: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 952.469692][ C1] 2 locks held by syz.1.2173/611: [ 952.474734][ C1] #0: ffffffff8f6650f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 952.482991][ C1] #1: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 952.492343][ C1] 2 locks held by syz.4.2178/655: [ 952.497392][ C1] #0: ffffffff8f6650f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 952.505689][ C1] #1: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 952.514993][ C1] 1 lock held by syz-executor/657: [ 952.520128][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 952.529734][ C1] 1 lock held by syz-executor/663: [ 952.534905][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 952.544512][ C1] 3 locks held by syz-executor/667: [ 952.549730][ C1] #0: ffffc90000a18c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 952.559925][ C1] #1: ffffffff8e3357e0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 952.569725][ C1] #2: ffffffff8e3357e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 952.579664][ C1] [ 952.582044][ C1] ============================================= [ 952.582044][ C1] [ 952.597054][ T5095] Bluetooth: hci5: command tx timeout [ 953.004882][ T5098] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 953.018568][ T5098] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 953.027992][ T603] netlink: 'syz.3.2172': attribute type 10 has an invalid length. [ 953.039788][ T5098] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 953.055089][ T5098] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 953.055132][ T603] bridge0: port 3(team0) entered disabled state [ 953.074369][ T5098] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 953.088811][ T603] team0: left allmulticast mode [ 953.092098][ T5098] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 953.096424][ T603] team_slave_0: left allmulticast mode [ 953.106538][ T603] team_slave_1: left allmulticast mode [ 953.113009][ T5095] Bluetooth: hci6: command tx timeout [ 953.132296][ T603] team0: left promiscuous mode [ 953.137137][ T603] team_slave_0: left promiscuous mode [ 953.143395][ T603] team_slave_1: left promiscuous mode [ 953.149211][ T603] bridge0: port 3(team0) entered disabled state [ 953.173640][ T603] batman_adv: batadv0: Adding interface: team0 [ 953.180429][ T603] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.212070][ T603] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 953.226810][ T605] netlink: 'syz.3.2172': attribute type 10 has an invalid length. [ 953.234993][ T605] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2172'. [ 953.245215][ T605] team0: entered promiscuous mode [ 953.250321][ T605] team_slave_0: entered promiscuous mode [ 953.256327][ T605] team_slave_1: entered promiscuous mode [ 953.264522][ T605] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.271478][ T605] batman_adv: batadv0: Interface activated: team0 [ 953.278143][ T605] batman_adv: batadv0: Interface deactivated: team0 [ 953.286407][ T605] batman_adv: batadv0: Removing interface: team0 [ 953.294326][ T605] bridge0: port 3(team0) entered blocking state [ 953.300710][ T605] bridge0: port 3(team0) entered disabled state [ 953.307306][ T605] team0: entered allmulticast mode [ 953.312522][ T605] team_slave_0: entered allmulticast mode [ 953.318276][ T605] team_slave_1: entered allmulticast mode [ 953.326495][ T605] bridge0: port 3(team0) entered blocking state [ 953.332934][ T605] bridge0: port 3(team0) entered forwarding state [ 954.073290][ T701] fuse: Unknown parameter 'use00000000000000000000' [ 954.640987][ T5098] Bluetooth: hci5: command tx timeout [ 954.795823][ T5146] usb 1-1: USB disconnect, device number 110 [ 955.126846][ T5098] Bluetooth: hci7: command tx timeout [ 955.173100][T13649] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 955.194262][ T5098] Bluetooth: hci6: command tx timeout [ 955.322396][T32261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 955.381649][T32261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 955.388938][T13649] usb 5-1: Using ep0 maxpacket: 16 [ 955.397636][T13649] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 955.406933][T13649] usb 5-1: config 1 has no interface number 1 [ 955.414301][T13649] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 955.425163][T13649] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 955.425922][T32261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 955.445863][T13649] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 955.468449][T13649] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 955.485731][T13649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.501944][T13649] usb 5-1: Product: syz [ 955.506595][T13649] usb 5-1: Manufacturer: syz [ 955.511247][T13649] usb 5-1: SerialNumber: syz [ 955.536802][T32261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 955.843219][ T964] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2181'. [ 955.884794][T13649] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 955.909296][T13649] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 955.976340][T13649] usb 5-1: USB disconnect, device number 105 [ 956.110020][ T663] chnl_net:caif_netlink_parms(): no params data found [ 956.137438][ T657] chnl_net:caif_netlink_parms(): no params data found [ 956.221154][ T670] chnl_net:caif_netlink_parms(): no params data found [ 956.522175][ T657] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.530480][ T657] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.540540][ T657] bridge_slave_0: entered allmulticast mode [ 956.571046][ T657] bridge_slave_0: entered promiscuous mode [ 956.594879][ T1227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2182'. [ 956.610212][ T663] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.618547][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.626838][ T663] bridge_slave_0: entered allmulticast mode [ 956.635770][ T663] bridge_slave_0: entered promiscuous mode [ 956.711063][T30947] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.722256][ T5098] Bluetooth: hci5: command tx timeout [ 956.752486][ T657] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.759730][ T657] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.767968][ T657] bridge_slave_1: entered allmulticast mode [ 956.775710][ T657] bridge_slave_1: entered promiscuous mode [ 956.808338][ T663] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.815653][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.823374][ T663] bridge_slave_1: entered allmulticast mode [ 956.831612][ T663] bridge_slave_1: entered promiscuous mode [ 956.913768][ T670] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.920934][ T670] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.933318][ T670] bridge_slave_0: entered allmulticast mode [ 956.940825][ T670] bridge_slave_0: entered promiscuous mode [ 957.047410][T30947] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.092913][ T670] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.100214][ T670] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.109104][ T670] bridge_slave_1: entered allmulticast mode [ 957.123877][ T670] bridge_slave_1: entered promiscuous mode [ 957.163968][ T657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.178687][ T657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.209706][ T5098] Bluetooth: hci7: command tx timeout [ 957.214513][ T663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.251673][T30947] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.282545][ T5098] Bluetooth: hci6: command tx timeout [ 957.352713][ T663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.388628][ T670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.425085][T30947] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.450421][ T657] team0: Port device team_slave_0 added [ 957.490337][ T670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.520016][ T657] team0: Port device team_slave_1 added [ 957.537125][ T663] team0: Port device team_slave_0 added [ 957.606157][ T663] team0: Port device team_slave_1 added [ 957.650208][ T670] team0: Port device team_slave_0 added [ 957.698570][ T657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.706789][ T657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.734794][ T657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.811208][ T670] team0: Port device team_slave_1 added [ 957.844545][ T657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.859410][ T657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.894996][ T657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.907343][ T1463] loop4: detected capacity change from 0 to 512 [ 957.916264][ T663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.925831][ T663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.931356][ T1463] EXT4-fs (loop4): bad s_min_extra_isize: 65528 [ 957.952221][ T663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.013075][ T663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.020091][ T663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.049646][ T663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.091881][ T670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.099694][ T670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.132489][ T670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.213377][ T670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.223510][ T670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.255690][ T670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.351256][ T657] hsr_slave_0: entered promiscuous mode [ 958.366295][ T657] hsr_slave_1: entered promiscuous mode [ 958.373110][ T657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.380725][ T657] Cannot create hsr debugfs directory [ 958.494489][ T663] hsr_slave_0: entered promiscuous mode [ 958.501944][ T663] hsr_slave_1: entered promiscuous mode [ 958.508630][ T663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.516970][ T663] Cannot create hsr debugfs directory [ 958.536218][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 958.704806][T30947] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.765911][ T670] hsr_slave_0: entered promiscuous mode [ 958.775628][ T670] hsr_slave_1: entered promiscuous mode [ 958.782458][ T670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.790044][ T670] Cannot create hsr debugfs directory [ 958.795710][ T5098] Bluetooth: hci5: command tx timeout [ 958.871223][T30947] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.934056][ T9] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 958.996813][T30947] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.055204][T32261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.131236][T30947] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.160970][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 959.171483][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.190578][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 959.213289][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 959.227411][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.235628][ T9] usb 5-1: Product: syz [ 959.239824][ T9] usb 5-1: Manufacturer: syz [ 959.250280][ T9] usb 5-1: SerialNumber: syz [ 959.272273][ T5098] Bluetooth: hci7: command tx timeout [ 959.523308][T32261] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.605027][T30947] team0: left allmulticast mode [ 959.609944][T30947] team_slave_0: left allmulticast mode [ 959.616311][T30947] team_slave_1: left allmulticast mode [ 959.623628][T30947] bridge0: port 3(team0) entered disabled state [ 959.634932][T30947] bridge_slave_1: left allmulticast mode [ 959.640836][T30947] bridge_slave_1: left promiscuous mode [ 959.652371][T30947] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.664103][T30947] bridge_slave_0: left allmulticast mode [ 959.669799][T30947] bridge_slave_0: left promiscuous mode [ 959.676134][T30947] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.690645][T30947] team0: left allmulticast mode [ 959.696081][T30947] team_slave_0: left allmulticast mode [ 959.701600][T30947] team_slave_1: left allmulticast mode [ 959.708729][T30947] bridge0: port 3(team0) entered disabled state [ 959.718352][T30947] bridge_slave_1: left allmulticast mode [ 959.727848][T30947] bridge_slave_1: left promiscuous mode [ 959.734395][T30947] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.744250][T30947] bridge_slave_0: left allmulticast mode [ 959.749971][T30947] bridge_slave_0: left promiscuous mode [ 959.756678][T30947] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.075424][ T1596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.085739][ T1596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.098695][ T9] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 960.140120][ T9] cdc_ncm 5-1:1.0: bind() failure [ 960.165952][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 960.175987][ T9] cdc_ncm 5-1:1.1: bind() failure [ 960.184777][ T9] usb 5-1: USB disconnect, device number 106 [ 960.852781][T30947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.905332][T30947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.927151][T30947] bond0 (unregistering): Released all slaves [ 961.318340][T30947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.338524][T30947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.352646][ T5095] Bluetooth: hci7: command tx timeout [ 961.364927][T30947] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 961.391506][T30947] bond0 (unregistering): Released all slaves [ 961.518889][ T4870] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.526175][ T4870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.717797][ T4870] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.725207][ T4870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.473160][ T931] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 962.523393][T30947] hsr_slave_0: left promiscuous mode [ 962.530026][T30947] hsr_slave_1: left promiscuous mode [ 962.540138][T30947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.550469][T30947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.560771][T30947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.569130][T30947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.590831][T30947] hsr_slave_0: left promiscuous mode [ 962.597603][T30947] hsr_slave_1: left promiscuous mode [ 962.604226][T30947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.611734][T30947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.620593][T30947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.628622][T30947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.677681][T30947] veth5: left promiscuous mode [ 962.683654][T30947] veth3: left promiscuous mode [ 962.688703][T30947] veth1_macvtap: left promiscuous mode [ 962.695972][T30947] veth0_macvtap: left promiscuous mode [ 962.700481][ T931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 962.702128][T30947] veth1_vlan: left promiscuous mode [ 962.717226][T30947] veth0_vlan: left promiscuous mode [ 962.722306][ T931] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.734658][T30947] veth3: left promiscuous mode [ 962.739891][T30947] veth1_macvtap: left promiscuous mode [ 962.743875][ T931] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 962.745694][T30947] veth0_macvtap: left promiscuous mode [ 962.764232][T30947] veth1_vlan: left promiscuous mode [ 962.769591][T30947] veth0_vlan: left promiscuous mode [ 962.776020][ T931] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 962.785622][ T931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.794551][ T931] usb 5-1: Product: syz [ 962.798779][ T931] usb 5-1: Manufacturer: syz [ 962.804271][ T931] usb 5-1: SerialNumber: syz [ 963.644839][ T1844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.656373][ T1844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.668220][ T931] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 963.695357][ T931] cdc_ncm 5-1:1.0: bind() failure [ 963.722464][ T931] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 963.729808][ T931] cdc_ncm 5-1:1.1: bind() failure [ 963.739613][ T931] usb 5-1: USB disconnect, device number 107 [ 963.908897][T30947] team_slave_1 (unregistering): left promiscuous mode [ 963.929695][T30947] team0 (unregistering): Port device team_slave_1 removed [ 963.992889][T30947] team_slave_0 (unregistering): left promiscuous mode [ 964.009104][T30947] team0 (unregistering): Port device team_slave_0 removed [ 965.274384][ T1890] overlayfs: workdir and upperdir must be separate subtrees [ 965.860992][T30947] team_slave_1 (unregistering): left promiscuous mode [ 965.927886][T30947] team0 (unregistering): Port device team_slave_1 removed [ 966.326065][T30947] team_slave_0 (unregistering): left promiscuous mode [ 966.395281][T30947] team0 (unregistering): Port device team_slave_0 removed [ 966.689994][ T1899] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 966.696589][ T1899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 966.707153][ T1899] vhci_hcd vhci_hcd.0: Device attached [ 966.858884][ T1903] loop4: detected capacity change from 0 to 2048 [ 966.867536][ T1903] nilfs2: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000023ÿÿÿÿÿÿÿÿ017777777777777777777770000000000000000000002700000000000000000000006Á?@¥Àz¾óR†h¢äRI' [ 966.953548][ T1900] vhci_hcd: cannot find a urb of seqnum 61814 max seqnum 5 [ 966.965219][T30954] vhci_hcd: stop threads [ 966.969728][T30954] vhci_hcd: release socket [ 966.979940][T30954] vhci_hcd: disconnect device [ 966.985110][ T931] usb 17-1: new low-speed USB device number 15 using vhci_hcd [ 967.316926][ T1899] IPv6: Can't replace route, no match found [ 967.370477][T32261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.459823][ T670] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.562345][ T670] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.689005][ T670] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.725633][T32261] veth0_vlan: entered promiscuous mode [ 967.799181][ T670] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.875330][T32261] veth1_vlan: entered promiscuous mode [ 968.127851][T32261] veth0_macvtap: entered promiscuous mode [ 968.175724][T32261] veth1_macvtap: entered promiscuous mode [ 968.241208][ T670] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 968.280206][ T670] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 968.304682][ T670] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 968.335470][T32261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.346436][T32261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.357122][T32261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.368320][T32261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.380947][T32261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 968.389641][ T670] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 968.457237][ T4870] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 968.466585][T32261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.483586][T32261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.493703][T32261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.504354][T32261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.516823][T32261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.554522][T32261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.563755][T32261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.574907][T32261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.584162][T32261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.614942][ T657] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 968.653930][ T657] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 968.666426][ T657] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 968.673517][ T4870] usb 5-1: Using ep0 maxpacket: 8 [ 968.681429][ T4870] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 968.693083][ T4870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.708319][ T4870] usb 5-1: config 0 descriptor?? [ 968.740243][ T657] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 968.828739][ T4870] viperboard 5-1:0.0: version 0.00 found at bus 005 address 108 [ 968.849974][ T4870] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 968.860288][ T4870] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 968.898391][ T663] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 968.933884][ T5147] usb 5-1: USB disconnect, device number 108 [ 968.949498][ T663] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 968.963961][ T663] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 968.989446][ T663] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 969.097747][T12463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.115352][T12463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.202720][T12463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.211085][T12463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.308404][ T2004] 9pnet_fd: Insufficient options for proto=fd [ 969.351043][ T670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.522947][ T670] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.623944][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.631162][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.691427][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.698751][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.857420][ T657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.237743][ T663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.410385][ T657] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.703450][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.710693][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.805940][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.813242][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.845809][ T663] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.908630][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.915887][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.984154][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.991378][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.237472][ T2051] netlink: 'syz.4.2212': attribute type 12 has an invalid length. [ 971.567371][ T670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.056837][ T2069] loop4: detected capacity change from 0 to 512 [ 972.092313][ T2069] EXT4-fs (loop4): bad s_min_extra_isize: 65528 [ 972.107049][ T657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.153103][ T670] veth0_vlan: entered promiscuous mode [ 972.172387][ T931] vhci_hcd: vhci_device speed not set [ 972.277545][ T670] veth1_vlan: entered promiscuous mode [ 972.384268][ T663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.600606][ T657] veth0_vlan: entered promiscuous mode [ 972.786814][ T657] veth1_vlan: entered promiscuous mode [ 972.842718][ T670] veth0_macvtap: entered promiscuous mode [ 973.048306][ T663] veth0_vlan: entered promiscuous mode [ 973.154198][ T670] veth1_macvtap: entered promiscuous mode [ 973.493165][ T663] veth1_vlan: entered promiscuous mode [ 973.706153][ T670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.731556][ T670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.744066][ T670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.765850][ T670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.812228][ T670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.823396][ T670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.847537][ T670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.919019][ T670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.930700][ T670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.958969][ T2083] loop2: detected capacity change from 0 to 512 [ 973.966216][ T670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.977948][ T670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.982760][ T2083] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 973.987865][ T670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.019039][ T670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.035452][ T670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.058146][ T657] veth0_macvtap: entered promiscuous mode [ 974.087046][ T670] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.097020][ T670] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.106554][ T670] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.115419][ T670] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.156534][ T657] veth1_macvtap: entered promiscuous mode [ 974.254292][ T663] veth0_macvtap: entered promiscuous mode [ 974.288437][ T657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.299665][ T657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.310673][ T657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.322192][ T657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.335571][ T657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.346192][ T657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.356485][ T657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.367177][ T657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.390796][ T657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.412912][ T663] veth1_macvtap: entered promiscuous mode [ 974.462171][ T657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.486914][ T657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.498384][ T657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.510893][ T657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.521083][ T657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.532238][ T657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.542538][ T657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.556888][ T657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.569030][ T657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.695694][ T657] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.717154][ T657] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.732980][ T657] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.749904][ T657] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.894552][ T663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.921143][ T663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.186899][ T663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.291572][ T663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.386871][ T663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.622619][ T663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.652178][ T663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.680840][ T663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.710628][ T663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.752202][ T663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.807094][ T663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.837620][T12452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.853844][T12452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.926015][ T663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.938629][ T663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.976012][ T663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.992231][ T663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.014556][ T663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.031369][ T663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.041409][ T663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.059705][ T663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.072398][ T663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.091987][ T663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.104357][ T663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.175656][ T663] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.212271][ T663] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.262386][ T663] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.271147][ T663] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.346900][T12481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.374506][T12481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.177638][T30947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.195116][T30947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.217650][ T29] audit: type=1804 audit(1719564796.110:124): pid=2151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2179" name="/root/syzkaller.Lo1neW/0/bus" dev="sda1" ino=2042 res=1 errno=0 [ 977.308520][ T29] audit: type=1804 audit(1719564796.140:125): pid=2151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2179" name="/root/syzkaller.Lo1neW/0/bus" dev="sda1" ino=2042 res=1 errno=0 [ 977.400191][ T29] audit: type=1804 audit(1719564796.160:126): pid=2151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2179" name="/root/syzkaller.Lo1neW/0/bus" dev="sda1" ino=2042 res=1 errno=0 [ 977.426855][ T2164] pim6reg1: entered promiscuous mode [ 977.439980][ T2164] pim6reg1: entered allmulticast mode [ 977.526835][T12463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.547615][T12463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.698292][T12481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.709209][ T2183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2228'. [ 977.735799][T12481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.840100][T12463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.875717][T12463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.012947][ T5146] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 978.236657][ T5146] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 978.253088][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.322915][ T5146] usb 1-1: config 0 descriptor?? [ 979.300831][ T2240] netlink: 'syz.4.2234': attribute type 12 has an invalid length. [ 979.443564][ T5146] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 980.663664][ T5095] BUG: workqueue leaked atomic, lock or RCU: kworker/u9:2[5095] [ 980.663664][ T5095] preempt=0x00000000 lock=0->1 RCU=0->0 workfn=hci_rx_work [ 980.680170][ T5095] 1 lock held by kworker/u9:2/5095: [ 980.687090][ T5095] #0: ffff88802b7fc518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x7ce/0x10840 [ 980.698690][ T5095] CPU: 0 UID: 0 PID: 5095 Comm: kworker/u9:2 Not tainted 6.10.0-rc5-next-20240627-syzkaller #0 [ 980.709089][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 980.719191][ T5095] Workqueue: hci6 hci_rx_work [ 980.723927][ T5095] Call Trace: [ 980.727237][ T5095] [ 980.730210][ T5095] dump_stack_lvl+0x241/0x360 [ 980.734935][ T5095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 980.740255][ T5095] ? skb_dequeue+0x113/0x150 [ 980.744956][ T5095] process_scheduled_works+0x1121/0x1830 [ 980.750655][ T5095] ? __pfx_process_scheduled_works+0x10/0x10 [ 980.756737][ T5095] ? assign_work+0x364/0x3d0 [ 980.761371][ T5095] worker_thread+0x86d/0xd40 [ 980.766026][ T5095] ? __kthread_parkme+0x169/0x1d0 [ 980.771100][ T5095] ? __pfx_worker_thread+0x10/0x10 [ 980.776338][ T5095] kthread+0x2f0/0x390 [ 980.780444][ T5095] ? __pfx_worker_thread+0x10/0x10 [ 980.785594][ T5095] ? __pfx_kthread+0x10/0x10 [ 980.790233][ T5095] ret_from_fork+0x4b/0x80 [ 980.794708][ T5095] ? __pfx_kthread+0x10/0x10 [ 980.799346][ T5095] ret_from_fork_asm+0x1a/0x30 [ 980.804171][ T5095] [ 981.346626][ T2262] loop1: detected capacity change from 0 to 32768 [ 981.353924][T16697] usb 1-1: USB disconnect, device number 111 [ 981.400629][ T2262] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 981.490293][ T2262] XFS (loop1): Ending clean mount [ 982.417552][ T670] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791