last executing test programs: 3m2.521833334s ago: executing program 2 (id=3): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff0001}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_dev$video(0x0, 0x7, 0x8182) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) 3m0.457956933s ago: executing program 2 (id=7): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1eb242, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[], 0x0) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x5b) keyctl$revoke(0x3, r3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0xc493, 0x8000, 0x103, 0x296, 0x0, r4}, 0x0, 0x0, &(0x7f0000000000)) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) 2m44.166284402s ago: executing program 32 (id=7): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1eb242, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[], 0x0) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x5b) keyctl$revoke(0x3, r3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0xc493, 0x8000, 0x103, 0x296, 0x0, r4}, 0x0, 0x0, &(0x7f0000000000)) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) 50.163045593s ago: executing program 3 (id=171): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x801) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x45, 0xc529, 0x50, @mcast1, @local, 0x8, 0x40, 0x7ff, 0x101}}) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0xa, 0x3, 0x3a) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x87da, 0x200, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x40000, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x1, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x6080, 0x0, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2252, 0x10, 0x3, 0x1}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f00000001c0)={0xffffffff, 0x0, 0x200, 0x6, 0x1fb8, 0x5}) 44.7303288s ago: executing program 3 (id=174): r0 = open(0x0, 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setpriority(0x0, 0x1, 0xa7a8) futex(0x0, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) fremovexattr(r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x3, 0x1, 0x1, 0x1, 0x8}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x19) read(r5, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000300)=0xa, 0x4) r7 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r7, 0x0, 0x6020) write$binfmt_misc(r2, &(0x7f0000000300), 0x6) 44.139232898s ago: executing program 3 (id=180): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80800) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x1e, 0x805, 0x2) getsockopt(r3, 0x114, 0x5, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 41.592469838s ago: executing program 3 (id=185): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/4092}) r2 = eventfd(0x10000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 40.710594179s ago: executing program 3 (id=188): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x2e, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x21, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000"], 0x0, 0x3c}, 0x28) socket$kcm(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 36.60537625s ago: executing program 3 (id=190): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r1 = openat$ppp(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000640)=0x2) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x7, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0x6a040000) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @broadcast, 0x4e20, 0x3, 'fo\x00', 0x2, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x1a4, 0xec, 0xec, 0xffffffff, 0xffffffff, 0x2c4, 0x2c4, 0x2c4, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xec, 0x0, {0x100000000000000}, [@common=@inet=@udp={{0x2c}, {[0x4e21, 0x4e20], [0x4e23, 0x4e23]}}, @common=@unspec=@connmark={{0x2c}, {0x5}}]}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x1ff, 0x100}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@unspec=@state={{0x24}, {0x7}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x5b, 0x1}, 0x0, 0xb4, 0x120, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x4, 0xfffe, 0x8000, 0x11, 0x0, "1c70c140687fea1ca1272e16b93a2e21cd0f0ab7f51302f21ceb2f6f1888546b03a09213bd3c9a20228e44a4e6356ec7ca03a902572b5981171a7c74ba88f495"}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3b4) write$cgroup_subtree(r0, &(0x7f00000005c0)={[{0x2b, 'perf_event'}, {0x2d, 'net_cls'}, {0x2b, 'pids'}, {0x2d, 'rdma'}, {0x38, 'hugetlb'}, {0x2b, 'memory'}, {0x6, 'devices'}, {0x2d, 'rlimit'}, {0x2b, 'perf_event'}, {0x2d, 'devices'}]}, 0x58) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x7c, &(0x7f00000002c0)="1a00000002000000", 0x8) socket(0x10, 0x3, 0x0) 23.943831245s ago: executing program 33 (id=190): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r1 = openat$ppp(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000640)=0x2) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x7, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0x6a040000) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @broadcast, 0x4e20, 0x3, 'fo\x00', 0x2, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x1a4, 0xec, 0xec, 0xffffffff, 0xffffffff, 0x2c4, 0x2c4, 0x2c4, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xec, 0x0, {0x100000000000000}, [@common=@inet=@udp={{0x2c}, {[0x4e21, 0x4e20], [0x4e23, 0x4e23]}}, @common=@unspec=@connmark={{0x2c}, {0x5}}]}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x1ff, 0x100}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@unspec=@state={{0x24}, {0x7}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x5b, 0x1}, 0x0, 0xb4, 0x120, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x4, 0xfffe, 0x8000, 0x11, 0x0, "1c70c140687fea1ca1272e16b93a2e21cd0f0ab7f51302f21ceb2f6f1888546b03a09213bd3c9a20228e44a4e6356ec7ca03a902572b5981171a7c74ba88f495"}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3b4) write$cgroup_subtree(r0, &(0x7f00000005c0)={[{0x2b, 'perf_event'}, {0x2d, 'net_cls'}, {0x2b, 'pids'}, {0x2d, 'rdma'}, {0x38, 'hugetlb'}, {0x2b, 'memory'}, {0x6, 'devices'}, {0x2d, 'rlimit'}, {0x2b, 'perf_event'}, {0x2d, 'devices'}]}, 0x58) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x7c, &(0x7f00000002c0)="1a00000002000000", 0x8) socket(0x10, 0x3, 0x0) 13.753944312s ago: executing program 1 (id=222): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x2e, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x21, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000"], 0x0, 0x3c}, 0x28) socket$kcm(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.689422359s ago: executing program 4 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setstatus(r1, 0x4, 0x800) ioctl(r1, 0x8934, &(0x7f00000002c0)="657468310000000000000000000000cf06000000c40ff3075b04dc727a8b9bc395a2e0f662de91f6b95cfbf004c8bcf76d2bba4f29276179f5ebe0d3a4f3f508a34cc0015792690151925b083904b755ffaf8415d5ef35b2493f5f97b125c30dd2e8148024e60cb8646ccf3e8366fd7469577f7ca0419d1e0dc47d7a3ebebe4a082cb14e418d3362f11cf5a9abaeb32c5c7ec13b30f73137654dcbcd47d417c366a317c4a41a13a00483208bd603042496419eb89e36febeae1a31dc8d9a717905c1b4a09e8689719b2f1332e09f336f2a4c499aebc0b8cf98") ioctl(r1, 0x8914, &(0x7f00000000c0)="6c61706230000000000000000000000001000000") ioctl(r1, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00\x00\x00\x00\x00\x00\x00') r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmmsg(r2, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000001280)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4020044) bind$x25(r1, &(0x7f0000000080), 0x12) connect$x25(r1, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) pread64(r3, &(0x7f0000000340)=""/69, 0x45, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r0], 0x1c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000440)={0xf4243, 0x2, @qpsk={0x7, 0x13}}) 13.51164334s ago: executing program 0 (id=224): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00&\x00'], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000980)={0x1, 0x0, 0xb, 0xd, 0x32, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 13.177504601s ago: executing program 1 (id=225): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x10, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8c, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) listen(r0, 0xa) listen(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) mmap(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r4, 0xffffe000) sendfile(r3, r3, 0x0, 0x1ffffc) 12.210881004s ago: executing program 4 (id=226): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r4, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="ec0002001000130720000000fedbdf25e0000001000000000000000000000000ac00000000000000000000000400004e210e020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e000000200000000000000000000000000000000000000000000000000000000020000000000000009000000000000000d00000000000000000000000000000001000080000000004305000000000000040000000000000000000000000000800000000000000000fdffffffffffffff0000000000000000020000002cbd700003350000020000004d000000"], 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r5, &(0x7f0000000180)=0xfe5f, 0x12) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e00200001e00010029bd7000fcdbdf2514000000cc00f30077650b8a3ff9624abc1fd3da1bc0c6165a422c86814441545cb1b21b10faf9156b52762a3a585b0505a754f2b3179eb9f54b9c7acb9b63e89f0a7cf36901758b047a9eb5721469c5ab335e702191f66210049ccf5281e56ba0", @ANYRES32, @ANYBLOB="8f00"], 0x2e0}, 0x1, 0x0, 0x0, 0x890}, 0x20004080) syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') 12.02729195s ago: executing program 0 (id=227): ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000640)={0xd5, &(0x7f0000000540)="1b0b86dce85c1be13340a487954dd9634653f8166258668481aae63dfe199c7f73658fd42208bf55428280e3e49a3f461bc6bee86c60fa77826a253f930f895738fd778d94b03690b2c135ee28b2e7764a1cd89dc704e0af7035cfafb6222e66a4e6898cfeda7eb465b31d1c0b820529f92bb3aa139c09cbf1044e285d842a9dd1c58e93b17d52e4678469eae5e18c58f1520acb05fdaff40d60cacb3c4b8159c37f1eadce239fddc36a35e0ca9d05b351f7169bb596cecec7c11d44077bef6813fe88882f078322eec75ae081917736a6e366adcb"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4048810}, 0x2404c050) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="00000b92007a468b797a02d7eff9162a937a03b08abb8d337f6a6abd930599b5b2581c3acf0585f15b4edf3fb3f49257c17eb7bb92d272", @ANYRESHEX, @ANYBLOB=',msize=0x000000007fffffff,noextend,k']) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/24/smp_affinity\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) 10.532418592s ago: executing program 0 (id=228): r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$sock(r2, &(0x7f0000000b00)={&(0x7f00000003c0)=@nl=@unspec, 0x80, 0x0}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$cachefiles(0xffffff9c, &(0x7f0000000280), 0xc3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000340)={0x3, 0xeceb, 0x1}) setregid(0x0, 0xee01) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=0x0, @ANYBLOB="d8118b386c186781dbce68b70cc167b6fe54547c85f8e755b4fe7d17563861aaff159e392476cd6a2ee9412759b46a27a353ea14c32d55ae1ae0939b8ff8a37384f7f27941d491378783f7ec794f2a1318c2d7d518f57820bb7f0a7426056486244dfb32884835bcc6a48d9d00c28d77b75fa217988256f51b2c70ace11a9560d715b8bca0e63a4395e7c32bcc6536ab74bfc66e46affc91894d4370e2032390de"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r6 = socket$key(0xf, 0x3, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000083cd000000000000fefffdff8500000017000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r8 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r8, 0xffffffffffffffff, 0x9f) keyctl$chown(0x4, r8, 0x0, 0xee01) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x8040000) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000003800018006000100020000000c00f9ff0000000000000000080009000000000000000000090000000800060009007000"], 0x4c}}, 0x0) 9.777358702s ago: executing program 1 (id=229): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, 0x0, 0x0, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000980)={0x1, 0x0, 0xb, 0xd, 0x32, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 7.04582576s ago: executing program 1 (id=230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2d, 'cpu'}, {0x2b, 'pids'}]}, 0xb) syz_open_dev$loop(&(0x7f00000008c0), 0x7ff, 0x2) syz_open_dev$loop(&(0x7f0000000000), 0xd5d1, 0x103a83) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x7f, {{0x5, 0x4, 0x0, 0x3b, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast1, @broadcast}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x10, 0x2000000, 0x4, 0x6, 0x6, 0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x52, 0x0, 0x1}, 0x28) mount(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x4002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x7fe81e5246626bb5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x4c}}, 0x0) 6.882632511s ago: executing program 0 (id=231): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, 0x0, &(0x7f0000000680)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000440)={0xffffffffffffffff, 0xfffffc00, 0x1}) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x8044) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600170008000300", @ANYRES32=r6], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=r6, @ANYBLOB="0ab7137a640778e55681799640258900340002020202020200000a004f0050505050505000"], 0x34}, 0x1, 0x0, 0x0, 0x4044044}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 6.874160075s ago: executing program 4 (id=232): splice(0xffffffffffffffff, &(0x7f0000000040)=0x800, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x3, 0xa) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x3c, 0xc8, 0x9, 0x1, "d933eb8d358769d4"}}}, 0x10) 5.914396484s ago: executing program 4 (id=233): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x2e, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x21, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000"], 0x0, 0x3c}, 0x28) socket$kcm(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.835441276s ago: executing program 1 (id=234): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) keyctl$clear(0x11, 0xfffffffffffffffd) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x10, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8c, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) listen(r0, 0xa) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) mmap(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r4, 0xffffe000) sendfile(r3, r3, 0x0, 0x1ffffc) 2.358560792s ago: executing program 4 (id=235): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00'], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000980)={0x1, 0x0, 0xb, 0xd, 0x32, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.161567145s ago: executing program 0 (id=236): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@fwd={0x9}]}, {0x0, [0x2e, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2f, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) socket$kcm(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.899559582s ago: executing program 0 (id=237): ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000640)={0xa0, &(0x7f0000000540)="1b0b86dce85c1be13340a487954dd9634653f8166258668481aae63dfe199c7f73658fd42208bf55428280e3e49a3f461bc6bee86c60fa77826a253f930f895738fd778d94b03690b2c135ee28b2e7764a1cd89dc704e0af7035cfafb6222e66a4e6898cfeda7eb465b31d1c0b820529f92bb3aa139c09cbf1044e285d842a9dd1c58e93b17d52e4678469eae5e18c58f1520acb05fdaff40d60cacb3c4b8159"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048810}, 0x2404c050) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000ec0)={0x0, 0x0, 0x9, 0x13, 0x1e9, &(0x7f0000000ac0)="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"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000480)={0x2, 0x0, 0x1}) close(r5) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000340)={0x0, 'sit0\x00', {0x800001}, 0x26}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r6, &(0x7f0000001180)={0x2020}, 0x2020) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f000000b1c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000007580)=ANY=[@ANYBLOB="300000000000000089000000010000000af807000443e9800000ffffffff0e0000007f000000f9ffffff0800", @ANYRES32=0x0], 0x30, 0x40018}], 0x1, 0x44455) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[]) 108.904373ms ago: executing program 4 (id=238): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r4, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="ec0002001000130720000000fedbdf25e0000001000000000000000000000000ac00000000000000000000000400004e210e020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e000000200000000000000000000000000000000000000000000000000000000020000000000000009000000000000000d00000000000000000000000000000001000080000000004305000000000000040000000000000000000000000000800000000000000000fdffffffffffffff0000000000000000020000002cbd700003350000020000004d000000"], 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r5, &(0x7f0000000180)=0xfe5f, 0x12) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e00200001e00010029bd7000fcdbdf2514000000cc00f30077650b8a3ff9624abc1fd3da1bc0c6165a422c86814441545cb1b21b10faf9156b52762a3a585b0505a754f2b3179eb9f54b9c7acb9b63e89f0a7cf36901758b047a9eb5721469c5ab335e702191f66210049ccf5281e56ba0", @ANYRES32, @ANYBLOB="8f00"], 0x2e0}, 0x1, 0x0, 0x0, 0x890}, 0x20004080) 0s ago: executing program 1 (id=239): ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000640)={0xa0, &(0x7f0000000540)="1b0b86dce85c1be13340a487954dd9634653f8166258668481aae63dfe199c7f73658fd42208bf55428280e3e49a3f461bc6bee86c60fa77826a253f930f895738fd778d94b03690b2c135ee28b2e7764a1cd89dc704e0af7035cfafb6222e66a4e6898cfeda7eb465b31d1c0b820529f92bb3aa139c09cbf1044e285d842a9dd1c58e93b17d52e4678469eae5e18c58f1520acb05fdaff40d60cacb3c4b8159"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048810}, 0x2404c050) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000ec0)={0x0, 0x0, 0x9, 0x13, 0x1e9, &(0x7f0000000ac0)="5914aef1962e7583162bebd202005c00ec1e75eb2be488a0bef40f22848a846a5a81b8a3bde3ed7adaecf2e4146bbe9d04f169f7c420f713743562c2d9ad6bf354862567106507cea6830a75e86665a3bb7c4212d9b6794283e2753767e7ebbad0b8fa1928b836e0cdd27e1673904d61265b30dd42c9cc2fc9be800863f9b6a255c1f73d4f230f377b223595f30c98ea626901f112dbaef8bf90157f14be95faa03cb1f3e5bd75388be8d1a5f497329fc1e04eaf9e23da8560f91d43e9bb80d3f68d23290b478d2c0da802c586496c047f36013c7f21d57ff08a3574708824e49ce12303cf0aae12b532e7c9ea4ff7d80a983915e2f641ffb15d78d85e22ae9b0b1658a7e017adb9c0a345644a7241b1974e3868bfe79c1ad4377932f04a710f5c0d268748ce475c3dcd8d7be62dc3a78e2dff2a310a4f616be17de228faac3127a6f85bae5cb9be6b21930600a8f2afddcb2370c214b3e1d6238c36ca7541791a8a4dbfda60904d05f09ef30253395bd1f2b7128f858b5b3f1914912b23883674297ab630764bfe67997c9f6e09e7c8741cfd88e6eee6e0072698705a210cc1ab918cc2ffa63cd78d7fef299f464e6fa252f228cadf834460bce1b9b331dcb55ef48172d15a6648cc436dc557f9fcc862795807fa577f1c837a5ce72b300a148bbc84402f3149a1b1248e33e636e432bd16775dae9697a3f84379f52163cb3d9a41c1a5b47de411a8677da8085388bd6c2228fb95cbca1e2b4e539dbe1b799a4ce9959a2a84e186417c72149e431bb264e289f56a0df93c8c639ff3f22b78cc9ad56a2bfffe022b5eb3d379bacb4c1679b1fd0a6368a9106e87678ba981904cc38bbcb99f3797ca0cc1f58f3627752d97907678a363004f411413237e86bd93dd899675f57c00654732fe29fde9c18d28de213ed7288abf33c95c554ddafd3c4e99840eedeebc8c63129b80d6c0c4c73eeea4667978e9c0ba03b757108b011f289c6b1be101bf5117dfd3544a019202118ed1c43c9d892f074d4bd1bf0e9b518a5ab7a82b0a8ffb3fb90f50f3c31b6d7d8dae961cdd290931c7a4a3f17b30856f6e0a5d1a23ce238bcae96e8c53038d1de9f160c88e02450ac5ab666489267f4b904c344323f7d8c62d13dae62a20f9d14e2515bc0004d21076f1e39dc227b79387e658001920af6e742d8a43ea048365d4eb4d2241feb389d68b329b6867582cd258dd2111226ab4b3ebb2fdeb33279afcf37ca13b526b0185f4e6daa736d23bbe17bf47eabf3e1ccf90f950412e4cc1dcb3c78045de6b46c5152723a91be8342039d09b90e6f5e0c7cf5dfe4089da07710a4623a1cf92aff04866f61839df528bad7ec60ac6efb159f6baaa4ae6d211e0affba16c5cff6a2b71fe78d338072b8b45023a879cf0c983edbadba6d60f6e88e29d9611ea9621d7296a720085c7"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000480)={0x2, 0x0, 0x1}) close(r5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [ 83.049714][ T5572] cgroup: Unknown subsys name 'net' [ 83.301286][ T5572] cgroup: Unknown subsys name 'cpuset' [ 83.345993][ T5572] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.231340][ T5572] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.808737][ T5595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.809670][ T5595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.849549][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.850758][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.869144][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.869939][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.881320][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.890636][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.916194][ T5604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.931504][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.948802][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.949369][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.956494][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.977793][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.983375][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.987477][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.990769][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.994490][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.995887][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.022373][ T5605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.048036][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.048251][ T5591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.049450][ T5591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.054762][ T5591] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.072599][ T5591] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.176493][ T5595] Bluetooth: hci1: command tx timeout [ 90.176500][ T5591] Bluetooth: hci2: command tx timeout [ 90.176742][ T5601] Bluetooth: hci0: command tx timeout [ 90.255567][ T5601] Bluetooth: hci3: command tx timeout [ 90.255694][ T5601] Bluetooth: hci4: command tx timeout [ 90.594481][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.595155][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.595277][ T5588] bridge_slave_0: entered allmulticast mode [ 90.612586][ T5588] bridge_slave_0: entered promiscuous mode [ 90.670705][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.670801][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.670935][ T5588] bridge_slave_1: entered allmulticast mode [ 90.672991][ T5588] bridge_slave_1: entered promiscuous mode [ 90.842630][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.842821][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.843138][ T5587] bridge_slave_0: entered allmulticast mode [ 90.844869][ T5587] bridge_slave_0: entered promiscuous mode [ 90.873383][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.906196][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.906283][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.906729][ T5585] bridge_slave_0: entered allmulticast mode [ 90.908511][ T5585] bridge_slave_0: entered promiscuous mode [ 90.960144][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.960239][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.960638][ T5587] bridge_slave_1: entered allmulticast mode [ 90.962882][ T5587] bridge_slave_1: entered promiscuous mode [ 90.971961][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.973540][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.973837][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.974272][ T5585] bridge_slave_1: entered allmulticast mode [ 90.983495][ T5585] bridge_slave_1: entered promiscuous mode [ 91.033680][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.033792][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.033940][ T5589] bridge_slave_0: entered allmulticast mode [ 91.037746][ T5589] bridge_slave_0: entered promiscuous mode [ 91.110997][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.111123][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.111236][ T5586] bridge_slave_0: entered allmulticast mode [ 91.113846][ T5586] bridge_slave_0: entered promiscuous mode [ 91.121269][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.121580][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.121915][ T5589] bridge_slave_1: entered allmulticast mode [ 91.134777][ T5589] bridge_slave_1: entered promiscuous mode [ 91.204112][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.204251][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.204403][ T5586] bridge_slave_1: entered allmulticast mode [ 91.211081][ T5586] bridge_slave_1: entered promiscuous mode [ 91.247966][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.250371][ T5588] team0: Port device team_slave_0 added [ 91.254538][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.311198][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.315357][ T5588] team0: Port device team_slave_1 added [ 91.334095][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.358649][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.441669][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.444490][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.506782][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.530178][ T5587] team0: Port device team_slave_0 added [ 91.532264][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.532275][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.532292][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.554992][ T5585] team0: Port device team_slave_0 added [ 91.615086][ T5587] team0: Port device team_slave_1 added [ 91.620523][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.620561][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.620637][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.640365][ T5585] team0: Port device team_slave_1 added [ 91.682309][ T5589] team0: Port device team_slave_0 added [ 91.724596][ T5586] team0: Port device team_slave_0 added [ 91.732049][ T5589] team0: Port device team_slave_1 added [ 91.769337][ T5586] team0: Port device team_slave_1 added [ 91.787564][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.787575][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.787593][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.789518][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.789527][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.789544][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.912190][ T997] cfg80211: failed to load regulatory.db [ 91.914308][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.914322][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.914347][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.969757][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.969768][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.969785][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.255608][ T5595] Bluetooth: hci0: command tx timeout [ 92.255658][ T5595] Bluetooth: hci1: command tx timeout [ 92.255775][ T5601] Bluetooth: hci2: command tx timeout [ 92.335644][ T5591] Bluetooth: hci4: command tx timeout [ 92.335677][ T5591] Bluetooth: hci3: command tx timeout [ 92.486978][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.486991][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.487011][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.564550][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.564567][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.564593][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.616039][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.616051][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.616071][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.624167][ T5588] hsr_slave_0: entered promiscuous mode [ 92.625235][ T5588] hsr_slave_1: entered promiscuous mode [ 92.683795][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.683807][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.683825][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.832257][ T5587] hsr_slave_0: entered promiscuous mode [ 92.833139][ T5587] hsr_slave_1: entered promiscuous mode [ 92.833813][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 92.833907][ T5587] Cannot create hsr debugfs directory [ 92.884787][ T5585] hsr_slave_0: entered promiscuous mode [ 92.892465][ T5585] hsr_slave_1: entered promiscuous mode [ 92.893144][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 92.893159][ T5585] Cannot create hsr debugfs directory [ 92.960312][ T5589] hsr_slave_0: entered promiscuous mode [ 92.961216][ T5589] hsr_slave_1: entered promiscuous mode [ 92.961869][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 92.961885][ T5589] Cannot create hsr debugfs directory [ 92.999073][ T5586] hsr_slave_0: entered promiscuous mode [ 93.000052][ T5586] hsr_slave_1: entered promiscuous mode [ 93.000691][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 93.000708][ T5586] Cannot create hsr debugfs directory [ 94.029488][ T5588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.070963][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.076194][ T5588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.104233][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.115034][ T5588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.149736][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.173327][ T5588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.209229][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.337108][ T5591] Bluetooth: hci0: command tx timeout [ 94.343260][ T5585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.349626][ T5591] Bluetooth: hci2: command tx timeout [ 94.349716][ T5591] Bluetooth: hci1: command tx timeout [ 94.399500][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.409025][ T5585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.425722][ T5591] Bluetooth: hci3: command tx timeout [ 94.425750][ T5591] Bluetooth: hci4: command tx timeout [ 94.461031][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.482328][ T5585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.519126][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.542868][ T5585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.580951][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.695699][ T5586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.729982][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.746597][ T5586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.790038][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.805270][ T5586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.839728][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.864337][ T5586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.904486][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.100252][ T5589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.129646][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.141459][ T5589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.189807][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.194858][ T5589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.242024][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.269927][ T5589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.299368][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.416712][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.484051][ T5587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.523585][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.536533][ T5587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.560210][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.564376][ T5587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.598918][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.614351][ T5587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.646717][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.681700][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.733589][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.754089][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.754348][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.835016][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.835158][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.908556][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.938446][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.961833][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.961973][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.021520][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.021616][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.087560][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.149314][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.154291][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.154424][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.223863][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.224221][ T3370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.348442][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.401969][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.402185][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.415995][ T5591] Bluetooth: hci2: command tx timeout [ 96.416052][ T5591] Bluetooth: hci0: command tx timeout [ 96.416217][ T5601] Bluetooth: hci1: command tx timeout [ 96.462465][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.496308][ T5595] Bluetooth: hci3: command tx timeout [ 96.496357][ T5601] Bluetooth: hci4: command tx timeout [ 96.517208][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.517344][ T3370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.647375][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.708872][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.709024][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.800227][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.800353][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.652665][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.849646][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.123398][ T5588] veth0_vlan: entered promiscuous mode [ 98.221322][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.238695][ T5588] veth1_vlan: entered promiscuous mode [ 98.254914][ T5585] veth0_vlan: entered promiscuous mode [ 98.282097][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.331727][ T5585] veth1_vlan: entered promiscuous mode [ 98.460969][ T5588] veth0_macvtap: entered promiscuous mode [ 98.507525][ T5588] veth1_macvtap: entered promiscuous mode [ 98.642872][ T5585] veth0_macvtap: entered promiscuous mode [ 98.659484][ T5589] veth0_vlan: entered promiscuous mode [ 98.678949][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.680970][ T5585] veth1_macvtap: entered promiscuous mode [ 98.703028][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.739957][ T5589] veth1_vlan: entered promiscuous mode [ 98.743463][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.799931][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.844229][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.203074][ T5589] veth0_macvtap: entered promiscuous mode [ 99.279670][ T5586] veth0_vlan: entered promiscuous mode [ 99.281628][ T5589] veth1_macvtap: entered promiscuous mode [ 99.318415][ T5587] veth0_vlan: entered promiscuous mode [ 99.519877][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.519898][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.531714][ T5586] veth1_vlan: entered promiscuous mode [ 99.624811][ T5587] veth1_vlan: entered promiscuous mode [ 99.664595][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.721191][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.727261][ T3395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.727280][ T3395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.821282][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.821300][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.923486][ T3395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.923507][ T3395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.131711][ T5586] veth0_macvtap: entered promiscuous mode [ 100.268740][ T5587] veth0_macvtap: entered promiscuous mode [ 100.273394][ T5586] veth1_macvtap: entered promiscuous mode [ 100.352838][ T5587] veth1_macvtap: entered promiscuous mode [ 100.580734][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.599084][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.644065][ T3395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.644083][ T3395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.673311][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.699838][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.395190][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.395207][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.619051][ T5786] tipc: Started in network mode [ 101.619167][ T5786] tipc: Node identity ffff0001, cluster identity 4711 [ 101.619203][ T5786] tipc: Node number set to 4294901761 [ 101.646765][ T5786] Invalid ELF header magic: != ELF [ 102.350743][ T5787] overlayfs: overlapping lowerdir path [ 103.078156][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.107855][ T5791] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.271830][ T1115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.271876][ T1115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.271911][ T1115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.271946][ T1115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.271982][ T1115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272017][ T1115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272051][ T1115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272085][ T1115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272120][ T1115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272154][ T1115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272189][ T1115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272224][ T1115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272259][ T1115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272293][ T1115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272326][ T1115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272357][ T1115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272389][ T1115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272431][ T1115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272465][ T1115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.905330][ T3395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.905346][ T3395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.355354][ T3304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.355369][ T3304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.791685][ T5574] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.835545][ T1452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.835564][ T1452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.147723][ T5574] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 105.194608][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.194627][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.236589][ T5574] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.299563][ T5574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 105.299589][ T5574] usb 3-1: Product: syz [ 105.299603][ T5574] usb 3-1: Manufacturer: syz [ 105.299617][ T5574] usb 3-1: SerialNumber: syz [ 108.900349][ T5820] process 'syz.4.11' launched '/dev/fd/3' with NULL argv: empty string added [ 109.216041][ T5814] input: syz0 as /devices/virtual/input/input6 [ 109.968355][ T5826] tipc: Started in network mode [ 109.968460][ T5826] tipc: Node identity ffff0001, cluster identity 4711 [ 109.968504][ T5826] tipc: Node number set to 4294901761 [ 110.915907][ T5827] syz.0.12 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 110.987739][ T5825] overlayfs: overlapping lowerdir path [ 111.201487][ T5574] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 114.551400][ T5841] Invalid ELF header magic: != ELF [ 115.406759][ T5842] overlayfs: overlapping lowerdir path [ 116.189352][ T5851] IPv6: Can't replace route, no match found [ 117.695833][ T5714] usb 3-1: USB disconnect, device number 2 [ 117.954394][ T5714] usblp0: removed [ 120.586043][ T5878] tipc: Started in network mode [ 120.586065][ T5878] tipc: Node identity ffff0001, cluster identity 4711 [ 120.586078][ T5878] tipc: Node number set to 4294901761 [ 120.586962][ T5878] Invalid ELF header magic: != ELF [ 120.662554][ T5882] overlayfs: overlapping lowerdir path [ 121.065438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.167001][ T5595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 121.201981][ T5595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 121.222534][ T5595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 121.247329][ T5595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 121.253471][ T5595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.069700][ T5905] tipc: Started in network mode [ 123.069721][ T5905] tipc: Node identity ffff0001, cluster identity 4711 [ 123.069734][ T5905] tipc: Node number set to 4294901761 [ 123.793337][ T5904] overlayfs: overlapping lowerdir path [ 123.822198][ T5601] Bluetooth: hci5: command tx timeout [ 124.185150][ T5911] input: syz0 as /devices/virtual/input/input7 [ 124.230587][ T37] audit: type=1800 audit(1786262308.035:2): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.26" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 124.284907][ T5887] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 124.284933][ T5887] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 124.284946][ T5887] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 125.856530][ T5601] Bluetooth: hci5: command tx timeout [ 127.856965][ T5954] tipc: Started in network mode [ 127.857084][ T5954] tipc: Node identity ffff0001, cluster identity 4711 [ 127.857142][ T5954] tipc: Node number set to 4294901761 [ 127.868549][ T5954] Invalid ELF header magic: != ELF [ 128.469014][ T5954] overlayfs: overlapping lowerdir path [ 128.529045][ T5601] Bluetooth: hci5: command tx timeout [ 131.025476][ T5966] 8021q: VLANs not supported on sit0 [ 132.916425][ T5963] overlayfs: overlapping lowerdir path [ 133.103642][ T5595] Bluetooth: hci5: command tx timeout [ 133.379551][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.379646][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.419400][ T5987] netlink: 512 bytes leftover after parsing attributes in process `syz.4.44'. [ 138.504754][ T3370] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.048795][ T5805] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 140.609193][ T5805] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 140.738734][ T5805] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.033907][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 141.033997][ T5805] usb 4-1: Product: syz [ 141.034058][ T5805] usb 4-1: Manufacturer: syz [ 141.034074][ T5805] usb 4-1: SerialNumber: syz [ 142.871999][ T3370] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.969155][ T6024] 8021q: VLANs not supported on sit0 [ 144.802814][ T6031] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 144.802881][ T6031] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 144.802917][ T6031] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 145.513004][ T6031] syz.0.55 (6031) used greatest stack depth: 16960 bytes left [ 145.567796][ T3370] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.857891][ T3370] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.067360][ T5805] usb 4-1: can't set config #1, error -110 [ 147.268261][ T6053] Zero length message leads to an empty skb [ 148.115424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 148.175422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 148.652734][ T6066] kernel profiling enabled (shift: 7) [ 150.188673][ T6062] netlink: 512 bytes leftover after parsing attributes in process `syz.1.63'. [ 151.265591][ T5597] usb 4-1: USB disconnect, device number 2 [ 151.747604][ T6082] netlink: 512 bytes leftover after parsing attributes in process `syz.4.66'. [ 153.150254][ T6094] netlink: 'syz.3.69': attribute type 4 has an invalid length. [ 156.114687][ T6095] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 156.114723][ T6095] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 156.114737][ T6095] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 156.148136][ T6081] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 156.289396][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.289612][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.289993][ T5885] bridge_slave_0: entered allmulticast mode [ 156.436914][ T5885] bridge_slave_0: entered promiscuous mode [ 156.527947][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.528074][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.612582][ T5885] bridge_slave_1: entered allmulticast mode [ 156.655087][ T5885] bridge_slave_1: entered promiscuous mode [ 158.106742][ T6108] netlink: 'syz.4.73': attribute type 2 has an invalid length. [ 161.349160][ T6124] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 162.500552][ T6108] : entered promiscuous mode [ 162.528879][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 162.935631][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.069127][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.333511][ T6178] netlink: 'syz.3.80': attribute type 4 has an invalid length. [ 164.468353][ T3370] bridge_slave_1: left allmulticast mode [ 164.469133][ T3370] bridge_slave_1: left promiscuous mode [ 164.472537][ T3370] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.713097][ T3370] bridge_slave_0: left allmulticast mode [ 164.713133][ T3370] bridge_slave_0: left promiscuous mode [ 164.713398][ T3370] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.892217][ T6192] input: syz0 as /devices/virtual/input/input9 [ 169.336047][ T3370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.377272][ T3370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.398245][ T3370] bond0 (unregistering): Released all slaves [ 169.817282][ T6189] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 169.817313][ T6189] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 169.817327][ T6189] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 170.691857][ T6202] overlayfs: overlapping lowerdir path [ 171.909336][ T5885] team0: Port device team_slave_0 added [ 172.430589][ T5885] team0: Port device team_slave_1 added [ 173.761989][ T3370] tipc: Left network mode [ 174.145419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 174.835822][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.835835][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.835854][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.892384][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.892395][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.892413][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.325667][ T5595] Bluetooth: hci0: unexpected subevent 0x18 length: 30 > 19 [ 176.325721][ T5595] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 176.599953][ T6238] netlink: 'syz.0.95': attribute type 4 has an invalid length. [ 178.022063][ T6258] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 178.363076][ T6262] Invalid ELF header magic: != ELF [ 179.503252][ T6262] overlayfs: overlapping lowerdir path [ 180.203474][ T5885] hsr_slave_0: entered promiscuous mode [ 180.223657][ T5885] hsr_slave_1: entered promiscuous mode [ 180.236410][ T5885] debugfs: 'hsr0' already exists in 'hsr' [ 180.236453][ T5885] Cannot create hsr debugfs directory [ 180.666691][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 181.755829][ T6280] Invalid ELF header magic: != ELF [ 182.515767][ T6288] Invalid ELF header magic: != ELF [ 183.697572][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.733834][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.746402][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.749241][ T5601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.750143][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.406446][ T5575] IPVS: starting estimator thread 0... [ 184.468092][ T6298] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 184.575747][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.107'. [ 184.633156][ T6301] bridge_slave_1: left allmulticast mode [ 184.633190][ T6301] bridge_slave_1: left promiscuous mode [ 184.665561][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.677048][ T6313] IPVS: using max 11 ests per chain, 26400 per kthread [ 185.187686][ T6326] Invalid ELF header magic: != ELF [ 185.523805][ T6326] overlayfs: overlapping lowerdir path [ 185.617845][ T6301] bridge_slave_0: left allmulticast mode [ 185.617879][ T6301] bridge_slave_0: left promiscuous mode [ 185.618124][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.287387][ T5601] Bluetooth: hci4: command tx timeout [ 186.828194][ T6334] Invalid ELF header magic: != ELF [ 188.336819][ T5601] Bluetooth: hci4: command tx timeout [ 190.081233][ T6346] Invalid ELF header magic: != ELF [ 190.686974][ T5601] Bluetooth: hci4: command tx timeout [ 191.013486][ T6353] input: syz0 as /devices/virtual/input/input11 [ 192.045716][ T3370] hsr_slave_0: left promiscuous mode [ 192.097558][ T3370] hsr_slave_1: left promiscuous mode [ 192.099827][ T3370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.099910][ T3370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.231199][ T3370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.231239][ T3370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.523590][ T3370] veth1_macvtap: left promiscuous mode [ 192.523840][ T3370] veth0_macvtap: left promiscuous mode [ 192.524140][ T3370] veth1_vlan: left promiscuous mode [ 192.524583][ T3370] veth0_vlan: left promiscuous mode [ 192.737473][ T5601] Bluetooth: hci4: command tx timeout [ 192.745284][ T6378] netlink: 'syz.1.120': attribute type 2 has an invalid length. [ 194.286248][ T6411] Invalid ELF header magic: != ELF [ 194.767740][ T6411] overlayfs: overlapping lowerdir path [ 194.871659][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.871708][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.587129][ T3370] team0 (unregistering): Port device team_slave_1 removed [ 195.618221][ T3370] team0 (unregistering): Port device team_slave_0 removed [ 195.928485][ T5246] 8021q: adding VLAN 0 to HW filter on device eth2 [ 195.991243][ T6378] : entered promiscuous mode [ 197.477380][ T6428] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 197.815396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 197.835393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 197.845401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 197.855387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 197.865385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 197.875395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 198.100314][ T6432] Invalid ELF header magic: != ELF [ 201.684421][ T6469] netlink: 'syz.3.132': attribute type 2 has an invalid length. [ 202.349502][ T6476] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 203.418766][ T6469] : entered promiscuous mode [ 203.876407][ T6460] netlink: 128 bytes leftover after parsing attributes in process `syz.1.131'. [ 203.970531][ T6506] netlink: 'syz.3.134': attribute type 2 has an invalid length. [ 205.035048][ T6460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.341185][ T5246] 8021q: adding VLAN 0 to HW filter on device eth3 [ 205.365486][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 205.979133][ T5597] IPVS: starting estimator thread 0... [ 206.066850][ T6544] IPVS: using max 8 ests per chain, 19200 per kthread [ 211.741477][ T3370] bridge_slave_1: left allmulticast mode [ 211.741507][ T3370] bridge_slave_1: left promiscuous mode [ 211.812975][ T3370] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.865469][ T5604] Bluetooth: hci2: command 0x0406 tx timeout [ 211.865633][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 211.879041][ T5601] Bluetooth: hci3: command 0x0406 tx timeout [ 211.879150][ T5601] Bluetooth: hci1: command 0x0406 tx timeout [ 212.143728][ T3370] bridge_slave_0: left allmulticast mode [ 212.143764][ T3370] bridge_slave_0: left promiscuous mode [ 212.144042][ T3370] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.948599][ T6601] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 216.181481][ T3370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.256073][ T3370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.305569][ T5575] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 216.323498][ T3370] bond0 (unregistering): Released all slaves [ 216.365944][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.366092][ T6294] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.366316][ T6294] bridge_slave_0: entered allmulticast mode [ 216.369258][ T6294] bridge_slave_0: entered promiscuous mode [ 216.382395][ T5246] 8021q: adding VLAN 0 to HW filter on device eth4 [ 216.387773][ T6294] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.388130][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.388589][ T6294] bridge_slave_1: entered allmulticast mode [ 216.440772][ T6294] bridge_slave_1: entered promiscuous mode [ 216.574862][ T5575] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 216.650894][ T5575] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 216.650924][ T5575] usb 5-1: config 160 has no interface number 0 [ 216.650969][ T5575] usb 5-1: config 160 interface 200 has no altsetting 0 [ 216.681639][ T5575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.681663][ T5575] usb 5-1: Product: syz [ 216.681677][ T5575] usb 5-1: Manufacturer: syz [ 216.681691][ T5575] usb 5-1: SerialNumber: syz [ 216.947165][ T6294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.978931][ T6294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.022964][ T3370] hsr_slave_0: left promiscuous mode [ 217.084070][ T3370] hsr_slave_1: left promiscuous mode [ 217.085043][ T3370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.120699][ T3370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.121006][ T5575] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 217.121069][ T5575] usb 5-1: MIDIStreaming interface descriptor not found [ 217.495570][ T6619] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 218.288635][ T197] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 218.740536][ T197] usb 2-1: device descriptor read/64, error -71 [ 218.786347][ T5575] usb 5-1: USB disconnect, device number 2 [ 218.855791][ T3370] team0 (unregistering): Port device team_slave_1 removed [ 218.987673][ T6628] udevd[6628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.056586][ T6633] capability: warning: `syz.4.150' uses 32-bit capabilities (legacy support in use) [ 219.685857][ T6633] NILFS (nbd4): device size too small [ 220.232227][ T197] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 222.116461][ T3370] team0 (unregistering): Port device team_slave_0 removed [ 222.425596][ T5575] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 224.111872][ T6645] Invalid ELF header magic: != ELF [ 224.534333][ T6645] overlayfs: overlapping lowerdir path [ 224.631316][ T6607] netlink: 128 bytes leftover after parsing attributes in process `syz.1.146'. [ 224.852369][ T6607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.851960][ T6294] team0: Port device team_slave_0 added [ 226.948187][ T6663] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 227.073275][ T6666] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 227.670668][ T6294] team0: Port device team_slave_1 added [ 228.799448][ T6294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.799464][ T6294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.799490][ T6294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.801685][ T6294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.801698][ T6294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.801721][ T6294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.851781][ T6679] Invalid ELF header magic: != ELF [ 229.058433][ T6677] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 229.214123][ T6679] overlayfs: overlapping lowerdir path [ 229.265453][ T197] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 229.343910][ T6294] hsr_slave_0: entered promiscuous mode [ 229.345267][ T6294] hsr_slave_1: entered promiscuous mode [ 229.566662][ T197] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 229.569624][ T197] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 229.569649][ T197] usb 5-1: config 160 has no interface number 0 [ 229.569696][ T197] usb 5-1: config 160 interface 200 has no altsetting 0 [ 229.574777][ T197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.574805][ T197] usb 5-1: Product: syz [ 229.574821][ T197] usb 5-1: Manufacturer: syz [ 229.574837][ T197] usb 5-1: SerialNumber: syz [ 229.730388][ T4900] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 230.166639][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 230.166684][ T6693] netlink: 348 bytes leftover after parsing attributes in process `syz.1.164'. [ 230.166806][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 230.166845][ T6693] netlink: 348 bytes leftover after parsing attributes in process `syz.1.164'. [ 230.167757][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 231.465932][ T197] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 231.466002][ T197] usb 5-1: MIDIStreaming interface descriptor not found [ 232.194205][ T6709] netlink: 512 bytes leftover after parsing attributes in process `syz.0.168'. [ 232.222611][ T6708] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.201944][ T4900] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 233.596785][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 233.596831][ T6719] netlink: 348 bytes leftover after parsing attributes in process `syz.1.170'. [ 233.596921][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 233.596960][ T6719] netlink: 348 bytes leftover after parsing attributes in process `syz.1.170'. [ 234.687754][ T197] usb 5-1: USB disconnect, device number 4 [ 235.133451][ T6612] udevd[6612]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.890608][ T6732] overlayfs: overlapping lowerdir path [ 235.985538][ T197] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 236.093047][ T6724] __nla_validate_parse: 1 callbacks suppressed [ 236.093124][ T6724] netlink: 128 bytes leftover after parsing attributes in process `syz.4.169'. [ 236.286817][ T6724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.296511][ T197] usb 5-1: device descriptor read/64, error -71 [ 237.797182][ T6294] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 238.324053][ T6294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 238.366933][ T6294] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 238.599242][ T6294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 238.602068][ T6294] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 238.717193][ T6294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 238.724133][ T6294] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 238.856781][ T6294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 242.259619][ T5591] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.278764][ T5591] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.282984][ T5591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.328677][ T5591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.329474][ T5591] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.656503][ T6804] netlink: 128 bytes leftover after parsing attributes in process `syz.4.187'. [ 242.687665][ T6804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.355504][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 244.483480][ T6829] Bluetooth: MGMT ver 1.23 [ 244.496058][ T4900] Bluetooth: hci5: command tx timeout [ 244.515434][ T31] usb 5-1: device descriptor read/64, error -71 [ 244.765562][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 244.828780][ T997] IPVS: starting estimator thread 0... [ 244.905471][ T31] usb 5-1: device descriptor read/64, error -71 [ 244.939825][ T6836] IPVS: using max 8 ests per chain, 19200 per kthread [ 245.015948][ T31] usb usb5-port1: attempt power cycle [ 245.425630][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 245.781789][ T31] usb 5-1: device descriptor read/8, error -71 [ 246.596029][ T4900] Bluetooth: hci5: command tx timeout [ 248.187432][ T6844] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 248.220297][ T6844] netlink: 512 bytes leftover after parsing attributes in process `syz.1.194'. [ 249.374621][ T4900] Bluetooth: hci5: command tx timeout [ 251.375435][ T4900] Bluetooth: hci5: command tx timeout [ 252.250452][ T6876] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 252.550333][ T6881] netlink: 'syz.4.202': attribute type 2 has an invalid length. [ 252.663236][ T6883] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 253.072928][ T31] IPVS: starting estimator thread 0... [ 253.173021][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 253.185507][ T6894] IPVS: using max 8 ests per chain, 19200 per kthread [ 254.805976][ T6889] bridge_slave_1: left allmulticast mode [ 254.806014][ T6889] bridge_slave_1: left promiscuous mode [ 254.806287][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.130333][ T6889] bridge_slave_0: left allmulticast mode [ 255.130366][ T6889] bridge_slave_0: left promiscuous mode [ 255.130623][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.368576][ T6928] Invalid ELF header magic: != ELF [ 255.700873][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.700936][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.862626][ T6930] input: syz0 as /devices/virtual/input/input13 [ 262.508373][ T5591] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 262.545079][ T5591] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 262.563126][ T5591] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 262.588294][ T5591] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 262.589140][ T5591] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.811210][ T6981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.214'. [ 263.858263][ T6981] ip6gre1: entered promiscuous mode [ 263.858288][ T6981] ip6gre1: entered allmulticast mode [ 264.112256][ T6988] input: syz0 as /devices/virtual/input/input14 [ 264.667543][ T5591] Bluetooth: hci4: command tx timeout [ 266.211027][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.211153][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.219305][ T6799] bridge_slave_0: entered allmulticast mode [ 266.230082][ T7006] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 266.284795][ T6799] bridge_slave_0: entered promiscuous mode [ 266.771870][ T5591] Bluetooth: hci4: command tx timeout [ 268.288836][ T7015] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 268.312466][ T7015] netlink: 512 bytes leftover after parsing attributes in process `syz.4.219'. [ 268.816326][ T5591] Bluetooth: hci4: command tx timeout [ 269.060225][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.060353][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.060590][ T6799] bridge_slave_1: entered allmulticast mode [ 269.066159][ T6799] bridge_slave_1: entered promiscuous mode [ 269.562688][ T6799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.584087][ T6799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.962007][ T6799] team0: Port device team_slave_0 added [ 270.019663][ T7039] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 270.057643][ T7045] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 270.905657][ T5591] Bluetooth: hci4: command tx timeout [ 271.091786][ T6799] team0: Port device team_slave_1 added [ 271.878595][ T7059] 9p: Bad value for 'rfdno' [ 272.962455][ T7055] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 272.973018][ T7055] netlink: 512 bytes leftover after parsing attributes in process `syz.4.226'. [ 273.639592][ T7063] netlink: 'syz.0.228': attribute type 2 has an invalid length. [ 273.729155][ T7066] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 274.496227][ T1045] bridge_slave_1: left allmulticast mode [ 274.496266][ T1045] bridge_slave_1: left promiscuous mode [ 274.496652][ T1045] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.887349][ T1045] bridge_slave_0: left allmulticast mode [ 274.887385][ T1045] bridge_slave_0: left promiscuous mode [ 274.888607][ T1045] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.886124][ T1045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.967164][ T1045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.027350][ T1045] bond0 (unregistering): Released all slaves [ 276.148291][ T7063] : entered promiscuous mode [ 276.151799][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 276.153034][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.153044][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.153068][ T6799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.287115][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.287128][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.287148][ T6799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.308551][ T7110] input: syz0 as /devices/virtual/input/input15 [ 281.216666][ T1045] hsr_slave_0: left promiscuous mode [ 281.259494][ T1045] hsr_slave_1: left promiscuous mode [ 281.260494][ T1045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.300837][ T1045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.545726][ T7126] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 283.979508][ T7144] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 283.997808][ T7144] netlink: 512 bytes leftover after parsing attributes in process `syz.4.238'. [ 284.346557][ T1045] team0 (unregistering): Port device team_slave_1 removed [ 284.396122][ T1045] team0 (unregistering): Port device team_slave_0 removed [ 284.576179][ T7132] 8021q: VLANs not supported on sit0 [ 284.603141][ T6799] hsr_slave_0: entered promiscuous mode [ 284.610222][ T6799] hsr_slave_1: entered promiscuous mode [ 284.656176][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3829 [ 284.656201][ C0] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 16, name: ktimers/0 [ 284.656222][ C0] preempt_count: 0, expected: 0 [ 284.656233][ C0] RCU nest depth: 2, expected: 0 [ 284.656260][ C0] 4 locks held by ktimers/0/16: [ 284.656273][ C0] #0: ffffffff8e059220 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 284.656365][ C0] #1: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 284.656424][ C0] #2: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 284.656490][ C0] #3: ffff88803b9b6358 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_kill_by_neigh+0x134/0x2a0 [ 284.656579][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 284.656610][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.656633][ C0] Call Trace: [ 284.656642][ C0] [ 284.656657][ C0] dump_stack_lvl+0xe8/0x150 [ 284.656693][ C0] __might_resched+0x329/0x480 [ 284.656730][ C0] lock_sock_nested+0x56/0x130 [ 284.656770][ C0] x25_kill_by_neigh+0x134/0x2a0 [ 284.656804][ C0] ? x25_kill_by_neigh+0x2b/0x2a0 [ 284.656845][ C0] x25_lapb_receive_frame+0x1b0/0xfb0 [ 284.656874][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 284.656907][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 284.656938][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 284.656964][ C0] netif_receive_skb_core+0x2a6/0x2b0 [ 284.657004][ C0] lapbeth_napi_poll+0x45/0x90 [ 284.657031][ C0] __napi_poll+0xae/0x550 [ 284.657070][ C0] net_rx_action+0x621/0xd70 [ 284.657121][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 284.657180][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 284.657218][ C0] handle_softirqs+0x1d9/0x6c0 [ 284.657267][ C0] run_ktimerd+0x69/0x100 [ 284.657295][ C0] smpboot_thread_fn+0x57c/0xa80 [ 284.657324][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 284.657359][ C0] kthread+0x388/0x470 [ 284.657389][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 284.657415][ C0] ? __pfx_kthread+0x10/0x10 [ 284.657446][ C0] ret_from_fork+0x514/0xb70 [ 284.657480][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 284.657511][ C0] ? __switch_to+0xc89/0x1420 [ 284.657540][ C0] ? __pfx_kthread+0x10/0x10 [ 284.657571][ C0] ret_from_fork_asm+0x1a/0x30 [ 284.657620][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 285.825130][ T5246] 8021q: adding VLAN 0 to HW filter on device eth5 [ 287.532261][ T5246] 8021q: adding VLAN 0 to HW filter on device eth6 [ 288.051779][ T1045] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.102588][ T5246] 8021q: adding VLAN 0 to HW filter on device eth7 [ 288.446365][ T1045] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.574071][ T5246] 8021q: adding VLAN 0 to HW filter on device eth8 [ 288.750074][ T1045] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.038157][ T1045] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.844911][ T1045] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.956960][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 290.251431][ T1045] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.582169][ T1045] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.640157][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 290.964957][ T1045] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.184805][ T5246] 8021q: adding VLAN 0 to HW filter on device eth11 [ 291.833486][ T1045] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.902313][ T5246] 8021q: adding VLAN 0 to HW filter on device eth12 [ 292.192541][ T1045] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.541898][ T1045] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.567406][ T5246] 8021q: adding VLAN 0 to HW filter on device eth13 [ 292.830578][ T1045] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.079358][ T5246] 8021q: adding VLAN 0 to HW filter on device eth14 [ 293.665100][ T1045] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.715083][ T5246] 8021q: adding VLAN 0 to HW filter on device eth15 [ 294.023774][ T1045] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.330303][ T1045] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.384219][ T5246] 8021q: adding VLAN 0 to HW filter on device eth16 [ 294.670618][ T1045] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0