last executing test programs: 1m13.717815597s ago: executing program 0 (id=15): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0x8, 0x0, &(0x7f00000002c0)) creat(&(0x7f0000000080)='./file0\x00', 0x2a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="85000000a00000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r5, &(0x7f0000000a40)=[{{0x0, 0x26, &(0x7f0000000000)=[{&(0x7f0000000700)=""/283, 0x10b}], 0x1}, 0x8}], 0x1, 0x40000002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x1, r6, 0x0, 0x2000005, 0x1000000000005}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r6, 0x0, 0xfa32, 0x7}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r6, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) 1m12.474378781s ago: executing program 0 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000000a0a01ff"], 0x14}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'ip6gretap0\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) close(r6) 1m11.166177099s ago: executing program 0 (id=17): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x2, 0x10100, 0x0, 0x215}, &(0x7f00000003c0), 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000400)={{0x3, 0x0, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0xf0, 0x9403, 0x3002, 0xf0, 0x2c0, 0x1d0, 0x3d8, 0x3d8, 0x1d0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x6, 0x48}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x5422) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pselect6(0xffffff09, &(0x7f00000001c0)={0x0, 0x100000, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x6, 0x8000, 0x4, 0x9, 0x40000000000000, 0xf, 0x2, 0x2}, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000680)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x20040) close_range(r0, 0xffffffffffffffff, 0x0) 1m11.163509974s ago: executing program 4 (id=5): r0 = socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket(0x15, 0x3, 0x0) r4 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000180)={0xe, @output={0x0, 0x1, {0x1, 0x3}, 0x5, 0x48}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x4, 0x8000000, 0xffffffffffffffff, 0x0) bind$inet6(r0, 0x0, 0x0) 1m6.295082135s ago: executing program 0 (id=21): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead9591", 0x19, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r7 = dup(r2) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r7) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r8, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40080) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m0.750811649s ago: executing program 4 (id=25): socket(0xa, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002840), 0xa0000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r5, 0x0, 0x20, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r7 = socket(0x10, 0x3, 0x0) write(r7, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x8) r8 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f00000001c0)={0x9, 0x3, 0x1, {0xb, 0xfdfffe40, 0x20000009, 0xf}}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x11, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bac904fc3c65f1a259e8f0dea5"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x68}}, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) 58.638177456s ago: executing program 0 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x6, &(0x7f0000000040)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000001) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=r8], 0x3c}, 0x1, 0x1000000, 0x0, 0x800}, 0x0) io_pgetevents(r1, 0xe678, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c0, 0x258, 0xd0, 0xd0, 0x0, 0x258, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x0, 0x69}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x3, 0x0, 0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@addrtype={{0x30}, {0x100, 0x1, 0x0, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xf7}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) 56.613938191s ago: executing program 4 (id=30): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], 0x0}, 0x94) r0 = dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = io_uring_setup(0x1abf, &(0x7f0000000000)={0x0, 0xa4ec, 0x400, 0x1, 0x102a8}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000080)=[0xfff, 0x6], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) timerfd_create(0x7, 0x81000) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001ec0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0xfffffffc, {0x60, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x8, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x3000c88c) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f0000000400000004000000ff07000000000000c63bc11eeba14a4e6e93df6907a174e50eee5511f1e98c20f579197afb6171ba55997f6e54e3f4dd5c13800b0700000000000000ddc1fdddf98419192304dec6844130ae87280cf9161678a41acdaaa8d5f33881f62b35b1e824d740b9af78f5eb16", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r6 = socket(0x10, 0x803, 0x40000004) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x7) 52.756796166s ago: executing program 0 (id=34): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x0, 0x4], 0x4, 0x6}, {0x2, [0x4, 0x0, 0x6, 0x6, 0x4, 0x6], 0x6, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xb7, 0x28, "8b4339262144083f90283c71f224b2fcee2f47d0d3735bee809d59439ece"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfff1, 0xffff, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) clock_adjtime(0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f000091e000/0x2000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000b10000000000000000611228000000000095080000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) rename(0x0, &(0x7f0000000100)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000249c08000000010067656e657665000014000005000a000100"/44], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x40) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) accept4$alg(r6, 0x0, 0x0, 0x80800) io_setup(0x19, &(0x7f00000009c0)) 51.575490958s ago: executing program 4 (id=35): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100eb38ad0640711e0e17000000000001890224000100000000090400b92103000000a72102eca97cf067d2328c933772480008050122050009058103000007"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0x7dca, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0xfc}, {0x2000, 0x0, 0x0, 0x0, 0x7, 0x4, 0x2, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x10, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x4}, {0xeeee0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f}, {0x80a0000, 0x3000, 0x10, 0x0, 0xfd, 0x1, 0x10, 0xa, 0x26}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0xeeee0000, 0xf0, 0x8, 0xdd00, 0x0, [0xe, 0xffffffffffffffff, 0x1]}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000000c0)) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f00000000c0)='$\x00', 0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e5f, @local}]}, 0x0) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 46.844471326s ago: executing program 4 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000800000000000000070000006b110f00000000009500000000000000bc694198f7430ff439ee2a7eec7ed227eaaac6fb9affd86bacea2bcdc644de3efe95bc35ad559982ff072dfa6eaefb47d908238ada0f04f53e83a7e728244bc7d650224506ffea04978733bf657c081334d953236761d491cbc9ce732dc0c2ee03432fde14522a8cb96652f8bd7afbba88b24e3c6dde850d8282e0bc22b8eae825da8786948d1bddca04b368b2e44f4b7a10204863cd30089062624344da3e09c9a0d388434351c2ebe41cb116c0d36b2c94416e2220aa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000040)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d5, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3506, 0x0, 0x2, 0x2, 0x9, 0x101, 0x8}]}]}, 0x1ac}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000002180)='/dev/comedi1\x00', 0x8602, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x44}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0) 41.927133822s ago: executing program 4 (id=42): add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000010c0)="67d2d976", 0x4, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x141842, 0x1c2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xffffffffa003e45c, 0x700000000000000) read$FUSE(0xffffffffffffffff, &(0x7f0000002440)={0x2020}, 0x2020) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f00000000c0), &(0x7f0000000080)=@udp}, 0x20) 37.615795202s ago: executing program 32 (id=34): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x0, 0x4], 0x4, 0x6}, {0x2, [0x4, 0x0, 0x6, 0x6, 0x4, 0x6], 0x6, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xb7, 0x28, "8b4339262144083f90283c71f224b2fcee2f47d0d3735bee809d59439ece"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfff1, 0xffff, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) clock_adjtime(0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f000091e000/0x2000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000b10000000000000000611228000000000095080000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) rename(0x0, &(0x7f0000000100)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000249c08000000010067656e657665000014000005000a000100"/44], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x40) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) accept4$alg(r6, 0x0, 0x0, 0x80800) io_setup(0x19, &(0x7f00000009c0)) 33.686473318s ago: executing program 2 (id=53): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_OFF(r6, 0x7004) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000280)=@ethtool_cmd={0x25, 0x9, 0xe4b, 0x6, 0x6, 0x0, 0x1, 0x5, 0x2, 0x7, 0x3d95, 0x2, 0x40, 0x6, 0x3, 0x8006, [0x104, 0x7]}}) r7 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCSTI(r1, 0x5412, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000040)={r0, 0x8000000000000001, 0x9, 0x1ff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000200)=0x3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) socket$phonet(0x23, 0x2, 0x1) 25.276196116s ago: executing program 33 (id=42): add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000010c0)="67d2d976", 0x4, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x141842, 0x1c2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xffffffffa003e45c, 0x700000000000000) read$FUSE(0xffffffffffffffff, &(0x7f0000002440)={0x2020}, 0x2020) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f00000000c0), &(0x7f0000000080)=@udp}, 0x20) 22.975110735s ago: executing program 2 (id=58): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_socket_connect_nvme_tcp() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) setsockopt$inet_int(r5, 0x0, 0x2, 0x0, 0x0) getsockopt$bt_hci(r5, 0x0, 0x2, 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x80000) r6 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x433a009df3d0706a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x3000000000000) r8 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r8, 0x29, 0x39, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x0) close(r6) sendto$inet_nvme_icreq_pdu(r1, &(0x7f0000000000)={{0x0, 0xe, 0x80, 0x4}, 0x0, 0x0, 0x0, 0x6}, 0x80, 0x0, 0x0, 0x0) connect(r0, &(0x7f00000001c0)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) 19.604866136s ago: executing program 2 (id=62): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff, 0x2}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000000000005c00000008000300", @ANYRES32=r5, @ANYBLOB="08006b0082"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1c74}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe10000", 0x0, 0x104, 0x6000000000000000, 0xb1, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602"}, 0x50) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000001d80)=ANY=[@ANYBLOB="40000000010401020000000000000000020000010600064000020000050001000200679f1d332c91bbb7ee420a0002000000000303000000080040a09c259fb3a48a0440800000001a0afa8f4978ee5e712250e8e2df59387998d92b184b4f78363902e851cffb95540000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x91c7ae8ef1ed1265) writev(r0, &(0x7f0000000240), 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x58, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x1, 0x0, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa}}, @TCA_U32_INDEV={0x14, 0x8, 'geneve0\x00'}]}}]}, 0x58}}, 0x24040084) connect$can_j1939(0xffffffffffffffff, &(0x7f0000001e00)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0xd1d829f3c14d4a9}, 0xff}, 0x18) sendmsg$inet(r12, 0x0, 0x408d3) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x4, 0x0, 0x0, {[@md5sig={0x13, 0x12, "aad1f088fc8c37ec2125c14f83fd3642"}]}}}}}}}}, 0x0) 19.53846213s ago: executing program 1 (id=63): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x0) io_setup(0x5, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) mount$afs(&(0x7f0000000080)=@cell={0x25, 'syz1:', 'syz1', '.readonly'}, &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) setregid(0xffffffffffffffff, r2) socket$inet(0x2, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000600)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x61, 0x0, 0x0, 0xa00}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) close(r4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0xffffff7e, 0x2, 0x1c, 0x200, &(0x7f0000000040)="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"}) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)=0xa431) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000000)) 16.110634513s ago: executing program 1 (id=66): creat(0x0, 0x102) mount(&(0x7f00000003c0)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)='trans=rdma,') socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0xfb6, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r6 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x5000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x5f) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000040)) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x50, r7, 0xe17, 0x0, 0xfffffffc, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0xffffffffffffff83}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x1c, 0x2, 0x20, 0x4da, 0x390d, 0x93a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf6, 0xc7, 0x7c, 0x0, [], [{{0x9, 0x5, 0x3, 0x1, 0x200}}]}}]}}]}}, 0x0) 14.247977995s ago: executing program 3 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r4 = socket$packet(0x11, 0x2, 0x300) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x1000}, 0x4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c0, 0x258, 0xd0, 0xd0, 0x0, 0x258, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x0, 0x69}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x3, 0x0, 0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@addrtype={{0x30}, {0x100, 0x1, 0x0, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xf7}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000104000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) 13.064933797s ago: executing program 3 (id=68): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r4 = io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r6, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, 0x0, 0x0) 12.696308341s ago: executing program 1 (id=69): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00'}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000040), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="2c7f8951aa5c7db7da776664e26f3d", @ANYRESHEX=r5, @ANYBLOB]) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x0) 12.661699439s ago: executing program 2 (id=70): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x1, 0x0, 0x10001000}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(r0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x840) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) mkdir(&(0x7f0000000340)='./file0/file0\x00', 0x1c0) semget$private(0x0, 0x3, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 10.759705169s ago: executing program 1 (id=71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = accept$netrom(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @rose}, [@bcast, @bcast, @bcast, @netrom, @remote, @remote, @netrom, @netrom]}, &(0x7f0000000540)=0x48) accept4(r4, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80, 0x80000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$hiddev(r5, &(0x7f00000017c0)=""/185, 0xb9) read$hiddev(r5, &(0x7f0000001a40)=""/203, 0xcb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019140)=@newtaction={0x214, 0x30, 0xb, 0x1, 0x0, {}, [{0x200, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xabdb, 0xfffffff9, 0x6, 0x8, 0xd173d5fd}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6}, @TCA_CT_NAT_PORT_MIN={0xfffffffffffffefc, 0xd, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x80, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x54, 0x6, "7828370f07642927266dc4337f42c970293a5e2c822fddd5a12a08ae36caf23af7354ffbfa988930365182bb7d0bc81e6defa96b44e74d2876ec0b252eda327ef4f8ac76e22379fd2437aba8694215cf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x98, 0x20, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0xffffffc1, 0x3, 0xc5}]}, {0x61, 0x6, "b9bc520909cf28f439461b54ad7bf078620a823a4b3a5ce5eae8666494063a8fbf8dadf8b089f174a37a925280ed2d6d00f398bbee115645709800237afb0e87251f27ef28d54d5fdd27c2c12cb1cf861b6e38d4f98843acaadd9236d7"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x7c, 0xf, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf5, 0x7ff, 0x10000000, 0xa73a, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}]}, {0x1d, 0x6, "b0236ea4c7ce01af93d4e269777bfcc596b57e8359d001eb7b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x214}, 0x1, 0x0, 0x0, 0xc091}, 0x480c0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000cc0)={'virt_wifi0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "ff918db4b2ea864f5815795e5c517b777bf7d391e3a422329473449b6549c7ed", "1a324626a66fea4c37e166fb9b76dbb0b34a4b52c396450339b98a84de4a9567", "b767d3283bdd19a0bac6fc57d24dc8ec638ab26a47bc5f7cf96061a759cdef6c", "bea2a66f7ab0e327991883899b8aa68cbdb0cdcc65ba8de2a80f983f3bc5c9b5", "bf445359f87c8d9d44597e290cfd1c5ef93ac3eabc63287ff01f140e67ad238a", "7fb9d290634203ca8f9ca834", 0x8, 0x7fff, 0x6, 0x5, 0x6}}) r8 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r8, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$vhost_msg_v2(r1, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, &(0x7f00000001c0)=""/83, 0x3, 0x1}}, 0x48) ioctl$KVM_RUN(r2, 0xae80, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r11, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.747697163s ago: executing program 3 (id=72): r0 = gettid() tkill(r0, 0x16) 9.422338132s ago: executing program 3 (id=73): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x6, 0x208604) r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, 0x0, 0x0) syz_usb_disconnect(r1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x32d7, 0x0, 0x46, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0x2020) syz_usb_disconnect(r0) r8 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x20, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r8, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r9, &(0x7f0000006800), 0x0) write$char_usb(r9, &(0x7f0000000000), 0x0) syz_usb_disconnect(r8) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r1) syz_open_dev$evdev(&(0x7f0000000000), 0x8e5, 0x841) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r10 = timerfd_create(0x0, 0x0) timerfd_settime(r10, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0) 9.307460016s ago: executing program 2 (id=74): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x3, @empty, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x3d9a, 0x4) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000000008001) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) unshare(0x2a020400) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r8, &(0x7f00000004c0)="8194a713fb8c07ebb9423607c5f31bac76782fda07131ee74eea61f546fbc38871007784afee543ea273048d1cdc567c0d8a0804cac96f9fe04e4f2feaa50984316b96a25c8863673ab7fd740cfd1ef4d91b7535e45ec09c7ff35914ff90aa735479203992035126d1c3699e499da41ce16fd6ff9a6dbd748d744ceb4fa44e0a76585af65f15", 0x2e, 0x4004000, &(0x7f0000000100)={0xa, 0x3, 0x5ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}, 0xffffffffffffffcb) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240008c0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x101000) ioctl$VIDIOC_QUERY_EXT_CTRL(r10, 0xc0445624, &(0x7f0000000300)={0xf0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x100000000, 0xfffffffffdfff003, 0x0, 0x9, 0x5, 0x2, 0x2, [0x9, 0x2, 0x0, 0xfffffffd]}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r0, 0x80000000) 6.503340416s ago: executing program 1 (id=75): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffffcc58dee0", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x803, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=@deltaction={0x6c, 0x31, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0x40384708, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x2, "3eccd8000200000500"}) r6 = socket$kcm(0x10, 0x2, 0x10) close_range(r0, r6, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80, 0x1c3) syz_emit_ethernet(0x81, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60120008004b3a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0280907800000000605b29ab04011100fc0000000000000000000000000000000002010000040000061a97105d00000000000000e5f18c8f1e2b144100"/129], 0x0) 5.950494203s ago: executing program 3 (id=76): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'os2.', './binderfs/binder0\x00'}, &(0x7f0000000180)='./binderfs/binder0\x00', 0x13, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x200}) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r9, r9, 0x0) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x100, 0x800001}, @flat=@weak_binder={0x77622a85, 0x1101, 0x800001}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 5.082501763s ago: executing program 2 (id=77): r0 = syz_open_dev$vcsn(&(0x7f0000000580), 0x3fc00000, 0x448c00) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000edfe0f21e0939dd7080000007c9f5106844038819500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xd, 0xd1d, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f00000005c0)=[r0, 0xffffffffffffffff, r0], &(0x7f0000000600)=[{0x3, 0x1, 0x8, 0x3}, {0x1, 0x3, 0xc, 0x5}, {0x0, 0x3, 0x8, 0xb}, {0x1, 0x2, 0x4, 0x3}, {0x0, 0x3, 0xf, 0x7}, {0x5, 0x1, 0xdcf3}, {0x3, 0x1, 0xd, 0x4}, {0x1, 0x2, 0x7, 0x8}, {0x3, 0x2, 0x7, 0x8}, {0x5, 0x4, 0x7, 0x8}], 0x10, 0x80000001}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}}, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) copy_file_range(r5, &(0x7f0000000000)=0x3ff, r5, 0x0, 0x6, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x203, 0x2581) fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x40010, r2, 0xcd230000) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64=r6], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0xa3c}}, 0x0) getpid() unshare(0x24020400) 722.729159ms ago: executing program 3 (id=78): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_POLL(r0, 0x640f) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000021301000600000600000000000000000e0003006269746d61f03a6970000000050003"], 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) landlock_create_ruleset(&(0x7f0000000940)={0xe134, 0x0, 0x1}, 0xfffffffffffffff0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x8, 0x4000040d}) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r5}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x2, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4", 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) ioctl$COMEDI_POLL(r0, 0x640f) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0x400e2df, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]}) 0s ago: executing program 1 (id=79): r0 = syz_io_uring_setup(0x3a, &(0x7f0000000580)={0x0, 0xe5b8, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) writev(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000100)="b6ff819269042ffc3d4e2250da53e28b71f967f8863a5003a090583bc7033e0627ab2a6553a1ebf167b7560203398fc11cadbdaebcb1ed419e4d3d3c6f2a0df2fc8e2f5b6417a4ee83997700f90894f8fcd26fa5c9a9b681e9f190eb27654f4a0aae0e589c18dc", 0x67}, {&(0x7f0000000180)="37e6ee081081cf3e51e0ca91961d4935885bb8352f2994b08e9abfc6f7c2da990f7ad5562a72d6c2bcdb916c7655a854eec2219d4045e91b66c0b1ac8f3b3235a5ea8b6665cf4215988b3e019e2b4dabd919a086b53640efa95313041220f09a730f10e611c2af991c0dd2b3d4fb9819d27f758e0c63dd9012645da4135332e61d76efcaeede67069ac164b60ce01df40f184ea02b565091faa4ff0fee8d729dbdc3e6a7c17aa9f973e451b7797469cb9422c9f897eb3738aaa351d07e451f33622af989b6c7bad95b4918484b46fda9346045c6c8824ed7688bcf2f907ebe6a5f5412f59858f2427e8a8586118bb59167", 0xf1}, {&(0x7f0000000280)="21934bff40f093059eaa76719f313c02900daba0d5cf716dbd4f25d6abfa6940f01bfe70b227d32178de700a4488b85001c865b52b6bc043b87e0756bedaba213c91db94dc1a346be6ed08b31766b901f7f2257877411097407ca00c273a01ef62b6f9d4c35a55d77f36fa55a759aff30d4edc8e143b49f67e2ff22c2cb718d1f444c3efa295ec59d849037213d3391033915aadac4166ffeef4185d97a500565f6564488971ed07b5fa0c2a253c42a640ba0037e64489516427badd062a237f17ade3e485b71c5b250227dafd65516f4f3e4501b249ca53c6a3", 0xda}, {&(0x7f0000000380)="cbc214ca58b3bbecfdb0cf0c2ead634fba6896bbf1d9ac3ef5db56db62afc1288a75505d4e5874d4e88eb4834edad8e1421fda65938cb3f7c72be3083f3acead67347b08b7b9d60529705c5f24077cd9af33f9020cc8bb1f6fd9c062162bad46b4b2c543fd5794108f8265323c187e56b7e34e1a38634b3aa6c3ebedcfdf999f3ecc094c01a034d11459edc2fb6dd7f31642127132f44ab58eecebf5c86b83b05f8fdf1ca1fe6b28d30140b859c902a7010e43", 0xb3}], 0x5) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r1, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/sys/kernel/debug/sync/info\x00'}, 0x30) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TCXONC(r7, 0x4b3a, 0x2) r8 = socket$inet_sctp(0x2, 0x5, 0x84) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000600)="7a561dacc16d5eedf63a212abd48230c6525a27bfcd3c7738c3202a6e644c5c2f8dc81aaa98af9499b7154c12dec16113442c64700f2576bf157bd1bf95a73f45dd32ccf58650feedea6f98a78f4a395b0f3325e4e7d50b3bdaf2a23bc7b9d5a94ec0b82d3513d04c9e34dff6c850e3237", 0x71}, {&(0x7f0000000680)="cb58259f0728ec1a6efbaa3ab6c69ccc37574898aa2928739df8a6f0eb42c391141f1e72bca25dcd3bdc1f75fc7b51e33146ef9e693e21808a0259aa4b1e363fd51f951694f1e8cd", 0x48}], 0x2) sendmmsg$inet_sctp(r8, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}, {&(0x7f0000000240)}, {0x0}], 0x3, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x14001}], 0x1, 0x4044040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.219' (ED25519) to the list of known hosts. [ 92.079969][ T44] cfg80211: failed to load regulatory.db [ 92.851773][ T5827] cgroup: Unknown subsys name 'net' [ 93.103749][ T5827] cgroup: Unknown subsys name 'cpuset' [ 93.158678][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.158410][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.092013][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.094371][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.098710][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.120850][ T5157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.123235][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.124090][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.126436][ T5157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.141510][ T5157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.145127][ T5157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.146154][ T5157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.155460][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.190552][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.193280][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.201177][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.202129][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.259954][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.261635][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.262414][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.263629][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.267828][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.350267][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.353086][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.354841][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.379361][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.382806][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.399028][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 99.451324][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 99.609322][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 99.658152][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 99.802009][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 100.229662][ T5841] Bluetooth: hci1: command tx timeout [ 100.229668][ T5845] Bluetooth: hci2: command tx timeout [ 100.309077][ T5841] Bluetooth: hci3: command tx timeout [ 100.388227][ T5841] Bluetooth: hci0: command tx timeout [ 100.390889][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.392242][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.392845][ T5847] bridge_slave_0: entered allmulticast mode [ 100.395962][ T5847] bridge_slave_0: entered promiscuous mode [ 100.468233][ T5841] Bluetooth: hci4: command tx timeout [ 100.535240][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.535394][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.535957][ T5847] bridge_slave_1: entered allmulticast mode [ 100.547178][ T5847] bridge_slave_1: entered promiscuous mode [ 100.659988][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.660131][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.660377][ T5842] bridge_slave_0: entered allmulticast mode [ 100.663299][ T5842] bridge_slave_0: entered promiscuous mode [ 100.929831][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.929979][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.930168][ T5842] bridge_slave_1: entered allmulticast mode [ 100.933140][ T5842] bridge_slave_1: entered promiscuous mode [ 101.030698][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.030921][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.031123][ T5839] bridge_slave_0: entered allmulticast mode [ 101.033199][ T5839] bridge_slave_0: entered promiscuous mode [ 101.255149][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.255540][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.255683][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.255866][ T5839] bridge_slave_1: entered allmulticast mode [ 101.266276][ T5839] bridge_slave_1: entered promiscuous mode [ 101.279404][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.279659][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.279890][ T5846] bridge_slave_0: entered allmulticast mode [ 101.283193][ T5846] bridge_slave_0: entered promiscuous mode [ 101.447820][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.519589][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.519761][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.519946][ T5846] bridge_slave_1: entered allmulticast mode [ 101.522827][ T5846] bridge_slave_1: entered promiscuous mode [ 101.560345][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.659844][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.659995][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.660153][ T5852] bridge_slave_0: entered allmulticast mode [ 101.662079][ T5852] bridge_slave_0: entered promiscuous mode [ 101.890498][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.890852][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.890979][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.891146][ T5852] bridge_slave_1: entered allmulticast mode [ 101.893060][ T5852] bridge_slave_1: entered promiscuous mode [ 101.976022][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.180939][ T5847] team0: Port device team_slave_0 added [ 102.186310][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.209567][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.308259][ T5841] Bluetooth: hci1: command tx timeout [ 102.318670][ T5841] Bluetooth: hci2: command tx timeout [ 102.362836][ T5847] team0: Port device team_slave_1 added [ 102.388077][ T5841] Bluetooth: hci3: command tx timeout [ 102.432776][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.435194][ T5842] team0: Port device team_slave_0 added [ 102.450043][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.468103][ T5841] Bluetooth: hci0: command tx timeout [ 102.548087][ T5841] Bluetooth: hci4: command tx timeout [ 102.655178][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.657029][ T5842] team0: Port device team_slave_1 added [ 102.743195][ T5839] team0: Port device team_slave_0 added [ 103.211399][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.211418][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.211445][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.217391][ T5839] team0: Port device team_slave_1 added [ 103.220753][ T5846] team0: Port device team_slave_0 added [ 103.381404][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.381422][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.381450][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.385719][ T5846] team0: Port device team_slave_1 added [ 103.472303][ T5852] team0: Port device team_slave_0 added [ 103.473830][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.473845][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.473874][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.631696][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.631715][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.631743][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.634826][ T5852] team0: Port device team_slave_1 added [ 103.725050][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.725068][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.725096][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.855054][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.855068][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.855088][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.856430][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.856444][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.856473][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.089679][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.089732][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.089752][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.117252][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.117274][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.117306][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.309787][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.309806][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.309833][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.319136][ T5847] hsr_slave_0: entered promiscuous mode [ 104.321057][ T5847] hsr_slave_1: entered promiscuous mode [ 104.388262][ T5841] Bluetooth: hci1: command tx timeout [ 104.389395][ T5841] Bluetooth: hci2: command tx timeout [ 104.468815][ T5845] Bluetooth: hci3: command tx timeout [ 104.498089][ T5842] hsr_slave_0: entered promiscuous mode [ 104.499550][ T5842] hsr_slave_1: entered promiscuous mode [ 104.500765][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 104.500883][ T5842] Cannot create hsr debugfs directory [ 104.548561][ T5845] Bluetooth: hci0: command tx timeout [ 104.628283][ T5845] Bluetooth: hci4: command tx timeout [ 104.701581][ T5839] hsr_slave_0: entered promiscuous mode [ 104.702968][ T5839] hsr_slave_1: entered promiscuous mode [ 104.703887][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 104.703912][ T5839] Cannot create hsr debugfs directory [ 104.972170][ T5846] hsr_slave_0: entered promiscuous mode [ 104.973576][ T5846] hsr_slave_1: entered promiscuous mode [ 104.974560][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 104.974585][ T5846] Cannot create hsr debugfs directory [ 105.377294][ T5852] hsr_slave_0: entered promiscuous mode [ 105.384030][ T5852] hsr_slave_1: entered promiscuous mode [ 105.384717][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 105.384743][ T5852] Cannot create hsr debugfs directory [ 106.469157][ T5845] Bluetooth: hci2: command tx timeout [ 106.469172][ T5841] Bluetooth: hci1: command tx timeout [ 106.549320][ T5841] Bluetooth: hci3: command tx timeout [ 106.628194][ T5841] Bluetooth: hci0: command tx timeout [ 106.708381][ T5841] Bluetooth: hci4: command tx timeout [ 107.091616][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.145421][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.176646][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.225802][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.368849][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.407587][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.450582][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.517009][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.684005][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.726302][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.768373][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.816745][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.021205][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.068633][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.115419][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.187206][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.260074][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.374481][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.409697][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.465703][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.509844][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.561049][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.624599][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.629039][ T1485] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.629274][ T1485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.685301][ T1485] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.685428][ T1485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.790813][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.850770][ T1485] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.851003][ T1485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.920027][ T1485] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.920211][ T1485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.944182][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.057677][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.123689][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.123863][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.175598][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.225927][ T1363] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.226786][ T1363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.395281][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.416002][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.473440][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.473675][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.547674][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.547837][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.610310][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.707574][ T1363] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.707863][ T1363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.770069][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.772674][ T1363] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.774488][ T1363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.031887][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.283781][ T5847] veth0_vlan: entered promiscuous mode [ 110.369751][ T5847] veth1_vlan: entered promiscuous mode [ 110.381830][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.491123][ T5842] veth0_vlan: entered promiscuous mode [ 110.544603][ T5842] veth1_vlan: entered promiscuous mode [ 110.624085][ T5847] veth0_macvtap: entered promiscuous mode [ 110.647889][ T5847] veth1_macvtap: entered promiscuous mode [ 110.727075][ T5842] veth0_macvtap: entered promiscuous mode [ 110.783475][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.798334][ T5842] veth1_macvtap: entered promiscuous mode [ 110.852742][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.910296][ T1363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.919233][ T1363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.935568][ T1363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.945130][ T1363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.963593][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.975054][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.051257][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.082078][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.194633][ T3523] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.232159][ T3523] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.254787][ T3523] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.267605][ T3523] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.627743][ T1363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.627770][ T1363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.696782][ T5846] veth0_vlan: entered promiscuous mode [ 111.747069][ T5852] veth0_vlan: entered promiscuous mode [ 111.800137][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.800159][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.843619][ T5839] veth0_vlan: entered promiscuous mode [ 111.859857][ T5846] veth1_vlan: entered promiscuous mode [ 111.895384][ T5852] veth1_vlan: entered promiscuous mode [ 111.934323][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.934345][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.985095][ T5839] veth1_vlan: entered promiscuous mode [ 111.998862][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.999044][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.163540][ T5846] veth0_macvtap: entered promiscuous mode [ 112.197152][ T5846] veth1_macvtap: entered promiscuous mode [ 112.205457][ T5852] veth0_macvtap: entered promiscuous mode [ 112.271857][ T5852] veth1_macvtap: entered promiscuous mode [ 112.300535][ T5839] veth0_macvtap: entered promiscuous mode [ 112.383887][ T5839] veth1_macvtap: entered promiscuous mode [ 112.430854][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.740925][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.744258][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.501250][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.534959][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.677989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.688000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.697973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.707960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.717970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.723345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.731486][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.271984][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.277406][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.461363][ T1363] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.511288][ T1363] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.519185][ T1363] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.526547][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.551768][ T1363] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.746202][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.806211][ T1363] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.988589][ T5965] ======================================================= [ 114.988589][ T5965] WARNING: The mand mount option has been deprecated and [ 114.988589][ T5965] and is ignored by this kernel. Remove the mand [ 114.988589][ T5965] option from the mount to silence this warning. [ 114.988589][ T5965] ======================================================= [ 115.228177][ T5965] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 115.493671][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.495860][ T5964] process 'syz.3.6' launched '/dev/fd/9' with NULL argv: empty string added [ 115.732817][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.757967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.784458][ T1363] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.834382][ T1363] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.847104][ T1363] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.105361][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.155949][ T1363] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.354537][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 116.358151][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.432305][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.453004][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.765932][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.002959][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.008982][ T1363] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.194295][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.438006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.440936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.578324][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.727994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.081003][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.148571][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.148593][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.230436][ T31] usb 1-1: device descriptor read/64, error -71 [ 119.316269][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.316291][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.489011][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.652200][ T31] usb 1-1: device descriptor read/64, error -71 [ 119.800208][ T31] usb usb1-port1: attempt power cycle [ 120.379428][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.574776][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.638001][ T31] usb 1-1: device not accepting address 4, error -71 [ 121.272431][ T5982] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 126.424495][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.424518][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.672327][ T5999] program syz.3.12 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.733269][ T6000] program syz.3.12 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.350706][ T6000] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 128.618555][ T6001] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 128.618584][ T6001] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 128.632728][ T6002] mmap: syz.0.13 (6002) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.311413][ T1508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.311434][ T1508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.644229][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.644250][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.089456][ T1292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.089480][ T1292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.280763][ T6012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.701629][ T6009] netlink: 'syz.3.14': attribute type 10 has an invalid length. [ 131.873468][ T6009] team0: Port device wlan1 added [ 135.806804][ T5841] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 135.806862][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.806896][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.806912][ T5841] Workqueue: hci1 hci_rx_work [ 135.806954][ T5841] Call Trace: [ 135.806962][ T5841] [ 135.806972][ T5841] dump_stack_lvl+0x189/0x250 [ 135.807012][ T5841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.807045][ T5841] ? __pfx__printk+0x10/0x10 [ 135.807075][ T5841] ? kernfs_path_from_node+0x2c/0x280 [ 135.807098][ T5841] ? kernfs_path_from_node+0x243/0x280 [ 135.807119][ T5841] ? kernfs_path_from_node+0x2c/0x280 [ 135.807145][ T5841] sysfs_create_dir_ns+0x259/0x280 [ 135.807180][ T5841] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 135.807206][ T5841] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 135.807243][ T5841] ? rt_spin_unlock+0x65/0x80 [ 135.807272][ T5841] kobject_add_internal+0x5a5/0xb50 [ 135.807315][ T5841] kobject_add+0x155/0x220 [ 135.807353][ T5841] ? __pfx_kobject_add+0x10/0x10 [ 135.807393][ T5841] ? get_device_parent+0x370/0x3a0 [ 135.807431][ T5841] device_add+0x408/0xb50 [ 135.807481][ T5841] hci_conn_add_sysfs+0xd5/0x1e0 [ 135.807519][ T5841] le_conn_complete_evt+0xc3a/0x1220 [ 135.807564][ T5841] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 135.807594][ T5841] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 135.807623][ T5841] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.807657][ T5841] ? skb_pull_data+0xfb/0x200 [ 135.807684][ T5841] hci_le_conn_complete_evt+0x187/0x450 [ 135.807719][ T5841] hci_event_packet+0x78f/0x1200 [ 135.807758][ T5841] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 135.807786][ T5841] ? __pfx_hci_event_packet+0x10/0x10 [ 135.807822][ T5841] ? __pfx_migrate_enable+0x10/0x10 [ 135.807851][ T5841] ? __rcu_read_unlock+0x84/0xe0 [ 135.807881][ T5841] ? hci_send_to_monitor+0xe2/0x570 [ 135.807917][ T5841] hci_rx_work+0x46a/0xe80 [ 135.807946][ T5841] ? process_scheduled_works+0x9ef/0x17b0 [ 135.807988][ T5841] process_scheduled_works+0xade/0x17b0 [ 135.808048][ T5841] ? __pfx_process_scheduled_works+0x10/0x10 [ 135.808094][ T5841] worker_thread+0x8a0/0xda0 [ 135.808125][ T5841] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 135.808162][ T5841] ? __kthread_parkme+0x7b/0x200 [ 135.808202][ T5841] kthread+0x711/0x8a0 [ 135.808237][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 135.808263][ T5841] ? __pfx_kthread+0x10/0x10 [ 135.808303][ T5841] ? __pfx_kthread+0x10/0x10 [ 135.808334][ T5841] ret_from_fork+0x3fc/0x770 [ 135.808362][ T5841] ? __pfx_ret_from_fork+0x10/0x10 [ 135.808398][ T5841] ? __switch_to_asm+0x39/0x70 [ 135.808419][ T5841] ? __switch_to_asm+0x33/0x70 [ 135.808438][ T5841] ? __pfx_kthread+0x10/0x10 [ 135.808483][ T5841] ret_from_fork_asm+0x1a/0x30 [ 135.808525][ T5841] [ 135.847401][ T5841] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 135.849361][ T5841] Bluetooth: hci1: failed to register connection device [ 137.711464][ T6046] syz.4.5 (6046) used greatest stack depth: 17840 bytes left [ 138.343874][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.357882][ T6056] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 138.409166][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.409275][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.946636][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.973639][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.418844][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.708215][ T6065] netlink: 'syz.1.22': attribute type 10 has an invalid length. [ 139.738006][ T6065] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.746809][ T6065] bond0: (slave team0): Enslaving as an active interface with an up link [ 140.484172][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.168692][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.199584][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.373832][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.279576][ T6072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23'. [ 142.730339][ T6078] vivid-007: ================= START STATUS ================= [ 142.731107][ T6078] vivid-007: Generate PTS: true [ 142.731367][ T6078] vivid-007: Generate SCR: true [ 142.731492][ T6078] tpg source WxH: 320x240 (Y'CbCr) [ 142.731556][ T6078] tpg field: 1 [ 142.731565][ T6078] tpg crop: (0,0)/320x240 [ 142.731657][ T6078] tpg compose: (0,0)/320x240 [ 142.731718][ T6078] tpg colorspace: 8 [ 142.731783][ T6078] tpg transfer function: 0/0 [ 142.731849][ T6078] tpg Y'CbCr encoding: 0/0 [ 142.731910][ T6078] tpg quantization: 0/0 [ 142.732066][ T6078] tpg RGB range: 0/2 [ 142.732131][ T6078] vivid-007: ================== END STATUS ================== [ 142.834552][ T6078] syz.1.24 uses obsolete (PF_INET,SOCK_PACKET) [ 143.214142][ T6079] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 143.214177][ T6079] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 143.309267][ T6082] vhci_hcd: connection closed [ 143.373781][ T6079] vhci_hcd vhci_hcd.0: Device attached [ 143.405916][ T13] vhci_hcd: stop threads [ 143.415910][ T13] vhci_hcd: release socket [ 143.415996][ T13] vhci_hcd: disconnect device [ 143.950211][ T6088] Zero length message leads to an empty skb [ 144.708286][ T38] audit: type=1326 audit(1756068460.455:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6093 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541e59ebe9 code=0x7ffc0000 [ 144.708350][ T38] audit: type=1326 audit(1756068460.455:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6093 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541e59ebe9 code=0x7ffc0000 [ 144.708396][ T38] audit: type=1326 audit(1756068460.455:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6093 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f541e59ebe9 code=0x7ffc0000 [ 144.708441][ T38] audit: type=1326 audit(1756068460.465:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6093 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541e59ebe9 code=0x7ffc0000 [ 144.708505][ T38] audit: type=1326 audit(1756068460.465:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6093 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541e59ebe9 code=0x7ffc0000 [ 144.708552][ T38] audit: type=1326 audit(1756068460.465:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6093 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f541e59ebe9 code=0x7ffc0000 [ 144.708676][ T38] audit: type=1326 audit(1756068460.465:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6093 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541e59ebe9 code=0x7ffc0000 [ 144.708725][ T38] audit: type=1326 audit(1756068460.465:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6093 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f541e59ebe9 code=0x7ffc0000 [ 144.708772][ T38] audit: type=1326 audit(1756068460.465:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6093 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541e59ebe9 code=0x7ffc0000 [ 144.708820][ T38] audit: type=1326 audit(1756068460.465:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6093 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f541e59ebe9 code=0x7ffc0000 [ 148.995507][ T6109] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 150.696643][ T6126] input: syz1 as /devices/virtual/input/input5 [ 151.801279][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.802413][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.033474][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 152.171157][ T6139] netlink: 'syz.2.36': attribute type 2 has an invalid length. [ 152.171251][ T6139] netlink: 'syz.2.36': attribute type 2 has an invalid length. [ 152.171307][ T6139] netlink: 'syz.2.36': attribute type 2 has an invalid length. [ 152.171379][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 152.235047][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.658989][ T5911] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 153.666136][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 153.819921][ T5911] usb 5-1: device descriptor read/64, error -32 [ 154.068154][ T5911] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 154.068445][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 154.198720][ T5911] usb 5-1: device descriptor read/64, error -32 [ 154.322487][ T5911] usb usb5-port1: attempt power cycle [ 154.498026][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.507758][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.848036][ T5911] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 155.057142][ T5911] usb 5-1: device descriptor read/8, error -71 [ 155.775002][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.301480][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.398225][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.398637][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.788271][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.936712][ T6138] sched: DL replenish lagged too much [ 160.366602][ T6159] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.309958][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.310518][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.285547][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.550936][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.827239][ T6173] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 162.827263][ T6173] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 162.827521][ T6173] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 162.827535][ T6173] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 164.021495][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.323369][ T6164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.628343][ T6188] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.629932][ T6188] (syz.1.46,6188,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 164.630050][ T6188] (syz.1.46,6188,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 164.630094][ T6188] (syz.1.46,6188,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 164.630136][ T6188] (syz.1.46,6188,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 165.041375][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.320635][ T6182] pim6reg: entered allmulticast mode [ 166.416877][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.462107][ T6196] netlink: 'syz.2.48': attribute type 4 has an invalid length. [ 166.462130][ T6196] netlink: 152 bytes leftover after parsing attributes in process `syz.2.48'. [ 166.775509][ T6192] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 167.681336][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.681612][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.827738][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.828697][ T6196] Ã: renamed from bond0 (while UP) [ 168.727858][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.088045][ T6162] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 169.218031][ T6162] usb 4-1: device descriptor read/64, error -71 [ 169.769726][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.035703][ T6210] netlink: 200 bytes leftover after parsing attributes in process `syz.3.52'. [ 170.063236][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'. [ 170.868469][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.709172][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.781103][ T3624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.782673][ T3624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.802508][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 177.808327][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.808451][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.820018][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.942484][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.961082][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.964598][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.965935][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.966913][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.099340][ T6214] tty tty25: ldisc open failed (-12), clearing slot 24 [ 178.480276][ T6222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.272125][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.308070][ T5845] Bluetooth: hci5: command tx timeout [ 181.467801][ T6238] vivid-002: kernel_thread() failed [ 181.613145][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.330169][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.367205][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.387996][ T5845] Bluetooth: hci5: command tx timeout [ 182.414903][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 182.414940][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 182.674355][ T6251] binder: BINDER_SET_CONTEXT_MGR already set [ 182.674372][ T6251] binder: 6248:6251 ioctl 4018620d 200000000040 returned -16 [ 182.836049][ T6254] net_ratelimit: 2 callbacks suppressed [ 182.836070][ T6254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.836827][ T6254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.839349][ T6254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.840137][ T6254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.840676][ T6254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.074502][ T6255] fuse: Unknown parameter '' [ 183.531780][ T6254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.533486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.559743][ T6254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.559978][ T6254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.560282][ T6254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.771808][ T6258] netlink: 200 bytes leftover after parsing attributes in process `syz.2.62'. [ 183.777570][ T6258] netlink: 44 bytes leftover after parsing attributes in process `syz.2.62'. [ 183.913502][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.938616][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.943284][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.950460][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.953372][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.965467][ T6258] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 183.965489][ T6258] netlink: 224 bytes leftover after parsing attributes in process `syz.2.62'. [ 184.468635][ T5841] Bluetooth: hci5: command tx timeout [ 185.906567][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.106916][ T6273] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 186.178273][ T6273] cramfs: wrong magic [ 186.602103][ T5845] Bluetooth: hci5: command tx timeout [ 186.842084][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.925221][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.925889][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.556535][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.558419][ T5845] Bluetooth: hci0: command tx timeout [ 187.938942][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.841872][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.846169][ T3624] net_ratelimit: 10 callbacks suppressed [ 188.846190][ T3624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.949220][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.154738][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.178359][ T5936] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 189.418602][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 189.553146][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 189.590433][ T5845] Bluetooth: hci0: command tx timeout [ 189.630890][ T5936] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 189.631143][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.631491][ T5936] usb 2-1: Product: syz [ 189.631631][ T5936] usb 2-1: Manufacturer: syz [ 189.631797][ T5936] usb 2-1: SerialNumber: syz [ 190.043349][ T5936] usb 2-1: config 0 descriptor?? [ 190.102128][ T6288] vlan2: entered promiscuous mode [ 190.102370][ T6288] vlan2: entered allmulticast mode [ 190.102385][ T6288] hsr_slave_1: entered allmulticast mode [ 190.196067][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.358093][ T5936] ath6kl: Failed to submit usb control message: -71 [ 190.358138][ T5936] ath6kl: unable to send the bmi data to the device: -71 [ 190.358151][ T5936] ath6kl: Unable to send get target info: -71 [ 190.374442][ T5936] ath6kl: Failed to init ath6kl core: -71 [ 190.390092][ T5936] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 190.454532][ T5936] usb 2-1: USB disconnect, device number 2 [ 190.629617][ T3624] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 190.797427][ T3624] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 190.797461][ T3624] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.837314][ T3624] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 190.837345][ T3624] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 190.837365][ T3624] usb 4-1: Product: syz [ 190.837380][ T3624] usb 4-1: Manufacturer: syz [ 190.837395][ T3624] usb 4-1: SerialNumber: syz [ 190.895435][ T3624] usb 4-1: config 0 descriptor?? [ 191.006581][ T3624] usb 4-1: selecting invalid altsetting 0 [ 191.953396][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.443407][ T5845] Bluetooth: hci0: command tx timeout [ 192.543180][ T6164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.014313][ T3548] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.341270][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.539643][ T10] usb 4-1: USB disconnect, device number 4 [ 193.686744][ T6306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'. [ 194.169458][ T3548] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.614251][ T5845] Bluetooth: hci0: command tx timeout [ 194.828961][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.868337][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.976922][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.391463][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.438861][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 196.440989][ T38] audit: type=1804 audit(1756068512.235:25): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.74" name="/newroot/13/file0" dev="tmpfs" ino=85 res=1 errno=0 [ 196.480149][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.608022][ T5936] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 196.756594][ T6333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.75'. [ 196.782594][ T5936] usb 4-1: config 1 interface 0 has no altsetting 0 [ 196.801875][ T5936] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 196.801906][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.801927][ T5936] usb 4-1: Product: syz [ 196.801942][ T5936] usb 4-1: Manufacturer: syz [ 196.801956][ T5936] usb 4-1: SerialNumber: syz [ 197.588601][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.201110][ T5936] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 199.537775][ T3548] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.626955][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.672145][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.221018][ T6164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.265695][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.291423][ T5936] usb 4-1: USB disconnect, device number 5 [ 202.393716][ T5936] usblp0: removed [ 203.268943][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.282911][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 203.404706][ T3548] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.796890][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.369634][ T6353] [ 204.369647][ T6353] ====================================================== [ 204.369657][ T6353] WARNING: possible circular locking dependency detected [ 204.369673][ T6353] syzkaller #0 Not tainted [ 204.369686][ T6353] ------------------------------------------------------ [ 204.369694][ T6353] syz.1.79/6353 is trying to acquire lock: [ 204.369707][ T6353] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 204.369772][ T6353] [ 204.369772][ T6353] but task is already holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 204.369780][ T6353] ffff888142f283a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 204.369832][ T6353] [ 204.369832][ T6353] which lock already depends on the new lock. [ 204.369832][ T6353] [ 204.369840][ T6353] [ 204.369840][ T6353] the existing dependency chain (in reverse order) is: [ 204.369849][ T6353] [ 204.369849][ T6353] -> #4 (&dev->vblank_time_lock){+.+.}-{3:3}: [ 204.369879][ T6353] lock_acquire+0x120/0x360 [ 204.369920][ T6353] rt_spin_lock+0x88/0x2c0 [ 204.369940][ T6353] drm_crtc_vblank_on_config+0x2cd/0x860 [ 204.369965][ T6353] drm_crtc_vblank_on+0x88/0xc0 [ 204.369988][ T6353] drm_atomic_helper_commit_modeset_enables+0x602/0xe10 [ 204.370013][ T6353] vkms_atomic_commit_tail+0x69/0x210 [ 204.370036][ T6353] commit_tail+0x281/0x3a0 [ 204.370059][ T6353] drm_atomic_helper_commit+0xa6b/0xb10 [ 204.370083][ T6353] drm_atomic_commit+0x262/0x2c0 [ 204.370102][ T6353] drm_client_modeset_commit_atomic+0x620/0x760 [ 204.370136][ T6353] drm_client_modeset_commit_locked+0xce/0x4d0 [ 204.370169][ T6353] drm_client_modeset_commit+0x4a/0x70 [ 204.370201][ T6353] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 204.370225][ T6353] drm_fb_helper_set_par+0xaf/0x100 [ 204.370248][ T6353] fbcon_init+0x1255/0x2370 [ 204.370275][ T6353] visual_init+0x2ef/0x650 [ 204.370300][ T6353] do_bind_con_driver+0x890/0xf70 [ 204.370327][ T6353] do_take_over_console+0x899/0xa10 [ 204.370354][ T6353] do_fbcon_takeover+0x118/0x200 [ 204.370381][ T6353] fbcon_fb_registered+0x35e/0x610 [ 204.370407][ T6353] register_framebuffer+0x70f/0x890 [ 204.370437][ T6353] __drm_fb_helper_initial_config_and_unlock+0x130a/0x18a0 [ 204.370463][ T6353] drm_fbdev_client_hotplug+0x16f/0x230 [ 204.370489][ T6353] drm_client_register+0x16f/0x210 [ 204.370531][ T6353] drm_fbdev_client_setup+0x19f/0x3f0 [ 204.370557][ T6353] drm_client_setup+0x10a/0x230 [ 204.370580][ T6353] vkms_init+0x3e0/0x4b0 [ 204.370607][ T6353] do_one_initcall+0x233/0x820 [ 204.370626][ T6353] do_initcall_level+0x104/0x190 [ 204.370658][ T6353] do_initcalls+0x59/0xa0 [ 204.370688][ T6353] kernel_init_freeable+0x334/0x4b0 [ 204.370719][ T6353] kernel_init+0x1d/0x1d0 [ 204.370737][ T6353] ret_from_fork+0x3fc/0x770 [ 204.370763][ T6353] ret_from_fork_asm+0x1a/0x30 [ 204.370783][ T6353] [ 204.370783][ T6353] -> #3 (&dev->vbl_lock){+.+.}-{3:3}: [ 204.370812][ T6353] lock_acquire+0x120/0x360 [ 204.370838][ T6353] rt_spin_lock+0x88/0x2c0 [ 204.370856][ T6353] vblank_disable_fn+0x72/0x190 [ 204.370876][ T6353] call_timer_fn+0x17b/0x5f0 [ 204.370911][ T6353] __run_timer_base+0x648/0x970 [ 204.370935][ T6353] run_timer_softirq+0xb7/0x180 [ 204.370959][ T6353] handle_softirqs+0x22c/0x710 [ 204.370984][ T6353] run_ktimerd+0xcf/0x190 [ 204.371012][ T6353] smpboot_thread_fn+0x542/0xa60 [ 204.371037][ T6353] kthread+0x711/0x8a0 [ 204.371068][ T6353] ret_from_fork+0x3fc/0x770 [ 204.371094][ T6353] ret_from_fork_asm+0x1a/0x30 [ 204.371114][ T6353] [ 204.371114][ T6353] -> #2 ((&vblank->disable_timer)){+...}-{0:0}: [ 204.371145][ T6353] lock_acquire+0x120/0x360 [ 204.371170][ T6353] call_timer_fn+0xdb/0x5f0 [ 204.371197][ T6353] __run_timer_base+0x648/0x970 [ 204.371220][ T6353] run_timer_softirq+0xb7/0x180 [ 204.371245][ T6353] handle_softirqs+0x22c/0x710 [ 204.371270][ T6353] run_ktimerd+0xcf/0x190 [ 204.371298][ T6353] smpboot_thread_fn+0x542/0xa60 [ 204.371323][ T6353] kthread+0x711/0x8a0 [ 204.371353][ T6353] ret_from_fork+0x3fc/0x770 [ 204.371378][ T6353] ret_from_fork_asm+0x1a/0x30 [ 204.371398][ T6353] [ 204.371398][ T6353] -> #1 (&base->expiry_lock){+...}-{3:3}: [ 204.371428][ T6353] lock_acquire+0x120/0x360 [ 204.371453][ T6353] rt_spin_lock+0x88/0x2c0 [ 204.371471][ T6353] __run_timer_base+0x114/0x970 [ 204.371494][ T6353] run_timer_softirq+0x67/0x180 [ 204.371519][ T6353] handle_softirqs+0x22c/0x710 [ 204.371545][ T6353] run_ktimerd+0xcf/0x190 [ 204.371572][ T6353] smpboot_thread_fn+0x542/0xa60 [ 204.371605][ T6353] kthread+0x711/0x8a0 [ 204.371635][ T6353] ret_from_fork+0x3fc/0x770 [ 204.371722][ T6353] ret_from_fork_asm+0x1a/0x30 [ 204.371743][ T6353] [ 204.371743][ T6353] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 204.371767][ T6353] validate_chain+0xb9b/0x2140 [ 204.371793][ T6353] __lock_acquire+0xab9/0xd20 [ 204.371821][ T6353] reacquire_held_locks+0x127/0x1d0 [ 204.371850][ T6353] lock_release+0x1b4/0x3e0 [ 204.371875][ T6353] __local_bh_enable_ip+0x10c/0x270 [ 204.371900][ T6353] hrtimer_cancel+0x39/0x60 [ 204.371938][ T6353] drm_vblank_disable_and_save+0x1bc/0x380 [ 204.371961][ T6353] drm_crtc_vblank_off+0x22e/0x820 [ 204.371983][ T6353] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 204.372008][ T6353] vkms_atomic_commit_tail+0x51/0x210 [ 204.372030][ T6353] commit_tail+0x281/0x3a0 [ 204.372051][ T6353] drm_atomic_helper_commit+0xa6b/0xb10 [ 204.372074][ T6353] drm_atomic_commit+0x262/0x2c0 [ 204.372092][ T6353] drm_atomic_helper_set_config+0xe2/0x160 [ 204.372116][ T6353] drm_mode_setcrtc+0x9a4/0x1c50 [ 204.372143][ T6353] drm_ioctl_kernel+0x2d2/0x3a0 [ 204.372168][ T6353] drm_ioctl+0x685/0xb20 [ 204.372192][ T6353] __se_sys_ioctl+0xfc/0x170 [ 204.372214][ T6353] do_syscall_64+0xfa/0x3b0 [ 204.372240][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.372259][ T6353] [ 204.372259][ T6353] other info that might help us debug this: [ 204.372259][ T6353] [ 204.372267][ T6353] Chain exists of: [ 204.372267][ T6353] (softirq_ctrl.lock) --> &dev->vbl_lock --> &dev->vblank_time_lock [ 204.372267][ T6353] [ 204.372303][ T6353] Possible unsafe locking scenario: [ 204.372303][ T6353] [ 204.372310][ T6353] CPU0 CPU1 [ 204.372317][ T6353] ---- ---- [ 204.372323][ T6353] lock(&dev->vblank_time_lock); [ 204.372337][ T6353] lock(&dev->vbl_lock); [ 204.372353][ T6353] lock(&dev->vblank_time_lock); [ 204.372369][ T6353] lock((softirq_ctrl.lock)); [ 204.372382][ T6353] [ 204.372382][ T6353] *** DEADLOCK *** [ 204.372382][ T6353] [ 204.372388][ T6353] 8 locks held by syz.1.79/6353: [ 204.372401][ T6353] #0: ffffc90004a07b20 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_setcrtc+0x555/0x1c50 [ 204.372459][ T6353] #1: ffffc90004a07b48 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_mode_setcrtc+0x555/0x1c50 [ 204.372519][ T6353] #2: ffff888142f284b8 (&dev->event_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xe4/0x820 [ 204.372574][ T6353] #3: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 204.372623][ T6353] #4: ffff888142f28420 (&dev->vbl_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xf5/0x820 [ 204.372676][ T6353] #5: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 204.372725][ T6353] #6: ffff888142f283a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 204.372776][ T6353] #7: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 204.372824][ T6353] [ 204.372824][ T6353] stack backtrace: [ 204.372838][ T6353] CPU: 0 UID: 0 PID: 6353 Comm: syz.1.79 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.372864][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.372877][ T6353] Call Trace: [ 204.372887][ T6353] [ 204.372896][ T6353] dump_stack_lvl+0x189/0x250 [ 204.372941][ T6353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.372974][ T6353] ? __pfx__printk+0x10/0x10 [ 204.372999][ T6353] ? print_lock_name+0xde/0x100 [ 204.373024][ T6353] print_circular_bug+0x2ee/0x310 [ 204.373047][ T6353] check_noncircular+0x134/0x160 [ 204.373086][ T6353] validate_chain+0xb9b/0x2140 [ 204.373124][ T6353] ? irqentry_exit+0x74/0x90 [ 204.373151][ T6353] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.373182][ T6353] __lock_acquire+0xab9/0xd20 [ 204.373214][ T6353] reacquire_held_locks+0x127/0x1d0 [ 204.373248][ T6353] ? __local_bh_disable_ip+0x264/0x400 [ 204.373280][ T6353] lock_release+0x1b4/0x3e0 [ 204.373309][ T6353] ? __local_bh_enable_ip+0x100/0x270 [ 204.373338][ T6353] __local_bh_enable_ip+0x10c/0x270 [ 204.373366][ T6353] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 204.373397][ T6353] ? rt_spin_unlock+0x65/0x80 [ 204.373420][ T6353] ? hrtimer_cancel_wait_running+0xe5/0x180 [ 204.373453][ T6353] ? hrtimer_cancel_wait_running+0x142/0x180 [ 204.373487][ T6353] ? __pfx_vkms_disable_vblank+0x10/0x10 [ 204.373514][ T6353] hrtimer_cancel+0x39/0x60 [ 204.373546][ T6353] drm_vblank_disable_and_save+0x1bc/0x380 [ 204.373572][ T6353] drm_crtc_vblank_off+0x22e/0x820 [ 204.373600][ T6353] ? drm_atomic_bridge_chain_disable+0x157/0x180 [ 204.373633][ T6353] ? __pfx_vkms_crtc_atomic_disable+0x10/0x10 [ 204.373664][ T6353] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 204.373699][ T6353] vkms_atomic_commit_tail+0x51/0x210 [ 204.373725][ T6353] ? read_tsc+0x9/0x20 [ 204.373750][ T6353] ? __pfx_vkms_atomic_commit_tail+0x10/0x10 [ 204.373775][ T6353] commit_tail+0x281/0x3a0 [ 204.373804][ T6353] drm_atomic_helper_commit+0xa6b/0xb10 [ 204.373834][ T6353] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 204.373860][ T6353] drm_atomic_commit+0x262/0x2c0 [ 204.373884][ T6353] ? __pfx_drm_atomic_commit+0x10/0x10 [ 204.373905][ T6353] ? __pfx___drm_printfn_info+0x10/0x10 [ 204.373951][ T6353] ? drm_atomic_state_init+0x231/0x310 [ 204.373989][ T6353] drm_atomic_helper_set_config+0xe2/0x160 [ 204.374020][ T6353] drm_mode_setcrtc+0x9a4/0x1c50 [ 204.374065][ T6353] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 204.374094][ T6353] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.374126][ T6353] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 204.374169][ T6353] ? rt_spin_unlock+0x65/0x80 [ 204.374193][ T6353] ? drm_is_current_master+0x1a2/0x210 [ 204.374220][ T6353] drm_ioctl_kernel+0x2d2/0x3a0 [ 204.374250][ T6353] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 204.374281][ T6353] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 204.374317][ T6353] drm_ioctl+0x685/0xb20 [ 204.374349][ T6353] ? smk_tskacc+0x2fc/0x370 [ 204.374383][ T6353] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 204.374417][ T6353] ? __pfx_drm_ioctl+0x10/0x10 [ 204.374452][ T6353] ? __fget_files+0x2a/0x420 [ 204.374486][ T6353] ? bpf_lsm_file_ioctl+0x9/0x20 [ 204.374512][ T6353] ? __pfx_drm_ioctl+0x10/0x10 [ 204.374540][ T6353] __se_sys_ioctl+0xfc/0x170 [ 204.374565][ T6353] do_syscall_64+0xfa/0x3b0 [ 204.374594][ T6353] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.374621][ T6353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.374644][ T6353] ? clear_bhb_loop+0x60/0xb0 [ 204.374668][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.374690][ T6353] RIP: 0033:0x7f2ba07eebe9 [ 204.374721][ T6353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.374741][ T6353] RSP: 002b:00007f2b9e5f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.374765][ T6353] RAX: ffffffffffffffda RBX: 00007f2ba0a16270 RCX: 00007f2ba07eebe9 [ 204.374782][ T6353] RDX: 0000200000000740 RSI: 00000000c06864a2 RDI: 0000000000000006 [ 204.374797][ T6353] RBP: 00007f2ba0871e19 R08: 0000000000000000 R09: 0000000000000000 [ 204.374812][ T6353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.374825][ T6353] R13: 00007f2ba0a16308 R14: 00007f2ba0a16270 R15: 00007ffdf644ad78 [ 204.374850][ T6353] [ 204.795684][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.841360][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.949448][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.008120][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.260023][ T6262] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 205.268319][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.838305][ T3548] bridge_slave_1: left allmulticast mode [ 205.838336][ T3548] bridge_slave_1: left promiscuous mode [ 205.838553][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.908286][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.988306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.125616][ T3548] bridge_slave_0: left allmulticast mode [ 206.125645][ T3548] bridge_slave_0: left promiscuous mode [ 206.125853][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.948295][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.888522][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.968577][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.990398][ T3548] bond0 (unregistering): Released all slaves [ 207.998902][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.308197][ T6162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.036982][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.065396][ T3548] hsr_slave_0: left promiscuous mode [ 210.068378][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.094502][ T3548] hsr_slave_1: left promiscuous mode [ 210.095088][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.095109][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.138728][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.138754][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.218712][ T3548] veth1_macvtap: left promiscuous mode [ 210.218781][ T3548] veth0_macvtap: left promiscuous mode [ 210.218924][ T3548] veth1_vlan: left promiscuous mode [ 210.219030][ T3548] veth0_vlan: left promiscuous mode [ 211.118802][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.348158][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.999598][ T3548] team0 (unregistering): Port device team_slave_1 removed [ 212.158289][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.176565][ T3548] team0 (unregistering): Port device team_slave_0 removed [ 213.188213][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.228325][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.308986][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.388226][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog