last executing test programs: 3m27.066713199s ago: executing program 2 (id=3): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x4, 0x8a}, 0x9c) setresuid(0xee01, 0xee00, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242", 0x1c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) dup3(r3, r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setfsgid(0xffffffffffffffff) syz_io_uring_setup(0x14fe, &(0x7f0000000040)={0x0, 0x0, 0x200, 0x0, 0x3b6}, 0x0, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@bridge_getlink={0x20, 0x12, 0x101, 0x0, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}}, 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 3m24.463647057s ago: executing program 2 (id=9): bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) r1 = socket$nl_audit(0x10, 0x3, 0x9) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x7fffffff) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="b6d2b6ed780ef358338f3db4ad5affcf2d040100aaa2aaaaaa10"], 0x9) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x1000}], 0x0) fchown(r1, 0xee01, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r7, 0x8400ae8e, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010023bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="01000040032aae9efb000000050021000000000005001100"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x3, 0x4, 0x4, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x16c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in=@private=0xa010100, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x44}, {}, {0x9, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2d, 0x70bd25, 0x70bd2d, 0x1}}]}, 0x16c}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES64=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x19, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r9, @ANYBLOB="00000000000000004e800000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfe, &(0x7f00000004c0)=""/254}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r11}, 0x20) fspick(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) 3m9.204085407s ago: executing program 32 (id=9): bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) r1 = socket$nl_audit(0x10, 0x3, 0x9) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x7fffffff) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="b6d2b6ed780ef358338f3db4ad5affcf2d040100aaa2aaaaaa10"], 0x9) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x1000}], 0x0) fchown(r1, 0xee01, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r7, 0x8400ae8e, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010023bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="01000040032aae9efb000000050021000000000005001100"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x3, 0x4, 0x4, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x16c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in=@private=0xa010100, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x44}, {}, {0x9, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2d, 0x70bd25, 0x70bd2d, 0x1}}]}, 0x16c}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES64=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x19, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r9, @ANYBLOB="00000000000000004e800000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfe, &(0x7f00000004c0)=""/254}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r11}, 0x20) fspick(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) 21.358393699s ago: executing program 3 (id=235): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000"], 0xec}}, 0x0) io_setup(0x3, &(0x7f0000000040)) socket$phonet(0x23, 0x2, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="9f0910bc996c301c8107070400", 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f00000006c0), 0x20, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x4, 0x0, 0xffffffffffffffff, 0xf9ffffffffffffff) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = fcntl$dupfd(r4, 0x0, r5) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x11, 0x10, 0x0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000340), 0x9, 0x40000) eventfd2(0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r7, 0x89e1, &(0x7f0000000040)={0x4}) r8 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0x100000000000f7) socket$nl_sock_diag(0x10, 0x3, 0x4) 14.35051544s ago: executing program 4 (id=249): r0 = socket$kcm(0x10, 0x2, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000680)=ANY=[], 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$mice(0xffffffffffffff9c, 0x0, 0x80082) r8 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x1000001c}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x80003a}, &(0x7f00000001c0)=0x8) 14.252261817s ago: executing program 0 (id=250): socket$inet6(0xa, 0xd, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000002400)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x85c, 0x1f5100) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000140)={0x0, 0x2}) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r5, 0x80047456, 0xffefff1f00000000) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x307, 0x0, 0x0, 0x4, 0x90, @broadcast}, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="a1fc009907000001010000000002000000"], 0x0) 13.326153897s ago: executing program 4 (id=251): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "9c304bad897e0216795983be31b98b78a3cddf"}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x400, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='qgroup_meta_free_all_pertrans\x00', 0xffffffffffffffff, 0x0, 0x13b59609}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="20f5e18fd8d17321fa3ebec2650800"/29], 0x3c}, 0x1, 0x0, 0x0, 0x845}, 0x20000000) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r5) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r6, 0x0, 0x4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040848) 13.271927624s ago: executing program 3 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x3, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916300000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty, 0x0, 0x3c}, @in=@loopback, {}, {}, {0x0, 0x1ec}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000580)={0x0, [[0x2, 0x0, 0x0, 0x0, 0x54], [0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x44, 0x8, 0x0, 0x7f]], '\x00', [{}, {}, {0xfffffffc, 0x9}, {}, {}, {0x0, 0x1000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x8}], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r5) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) shutdown(r6, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000001180)={0x23d, 0x7d, 0x0, {{0x500, 0xfc, 0x0, 0xfffffffa, {}, 0x1bac0000, 0x0, 0x0, 0x0, 0x25, '\x04no\xc8f\xc9}`\x99\x06\x00\x00\x00\x00\x00\x00\x00\x90\x00\x00\x1d\xf6\xdb\x00\x00\x00\x00\x00\x00=\xd3\x00\x00\x00\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x17, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x0fX\x05\x02\xb6n\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x05\x00\x00\x00\x00\x00\x00\x00\xc2g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23d) listen(r6, 0x1) connect$unix(r6, &(0x7f0000000640)=@file={0x1}, 0x6e) 12.804351944s ago: executing program 0 (id=253): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e"], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x7}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000003780)={@private2}, &(0x7f00000037c0)=0x14) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) close(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x2, 0x80805, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11.667004908s ago: executing program 3 (id=254): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x9, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') read$msr(r5, &(0x7f0000000040)=""/59, 0xffb5) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r6, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r6, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)}, {&(0x7f0000000540)='c6V', 0x3}], 0x2}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000f32000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0}, &(0x7f0000000800)=0x40) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x96}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) 10.466845398s ago: executing program 4 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB], 0x30}, 0x7ffffffe}, 0x0) syz_usb_connect(0x6, 0x9a2, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) write$tun(r1, &(0x7f0000000300)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x6, 0x30, 0x65, 0x0, 0xd, 0x1, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, @parameter_prob={0xc, 0x0, 0x0, 0xe, 0xa, 0x0, {0x5, 0x4, 0x2, 0xa, 0x8, 0x67, 0x6, 0x5, 0x5c, 0x2000, @private=0xa010102, @empty}}}}}}}, 0x42) syz_open_dev$sndmidi(&(0x7f00000004c0), 0xffffffffffffe59c, 0x25c102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = dup(r5) ioctl$BLKRRPART(r6, 0x125f, 0x5729030000000000) syz_io_uring_setup(0x310, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000002440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000022c0)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1, &(0x7f00000035c0)=""/162, 0xa2}, 0x1ff}, {{&(0x7f0000003680), 0x80, &(0x7f0000003900)=[{&(0x7f0000003700)=""/101, 0x65}, {&(0x7f0000003780)=""/81, 0x51}, {&(0x7f0000003800)=""/235, 0xeb}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f00000039c0)=""/228, 0xe4}, {&(0x7f0000003ac0)=""/237, 0xed}, {&(0x7f0000003c00)=""/216, 0xd8}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/108, 0x6c}, {&(0x7f0000004d80)=""/9, 0x9}], 0x6}, 0x6}, {{&(0x7f0000004e40)=@hci, 0x80, &(0x7f0000005000)=[{&(0x7f0000004ec0)=""/49, 0x31}, {&(0x7f0000004f00)=""/253, 0xfd}], 0x2, &(0x7f0000005040)=""/133, 0x85}}, {{&(0x7f0000005100)=@x25, 0x80, &(0x7f0000005800)=[{&(0x7f0000005180)=""/101, 0x65}, {&(0x7f0000005200)=""/45, 0x2d}, {&(0x7f0000005240)=""/243, 0xf3}, {&(0x7f0000005340)=""/166, 0xa6}, {&(0x7f0000005400)=""/197, 0xc5}, {&(0x7f0000005500)=""/209, 0xd1}, {&(0x7f0000005600)=""/139, 0x8b}, {&(0x7f00000056c0)=""/207, 0xcf}, {&(0x7f00000057c0)=""/30, 0x1e}], 0x9, &(0x7f00000058c0)=""/19, 0x13}, 0x7}], 0x5, 0x4001a100, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f0000000080), 0xc, &(0x7f0000000940)={&(0x7f0000000780)=ANY=[@ANYBLOB="540000001c000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000408000f000002000008000800", @ANYBLOB="04000100ff0100000000000000000000000000010c000e8005000100000000000800"], 0x54}}, 0x0) 9.066616509s ago: executing program 0 (id=258): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000440), 0x2, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f0000000400)=[0x0], 0x0, &(0x7f0000000040)=[r2], &(0x7f0000000280)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000008c000000184300000400000000000000000000008520000004000000077b060009000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x5, 0x5, 0xe, 0x2}]}, 0x94) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000b00)=""/179, 0xb3, 0x2000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x30e, 0x80200) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000380)={{0x1, 0x1, 0x5, 0x8, 'syz0\x00', 0x3}, 0x0, [0x6, 0x1, 0x1, 0x3, 0x3, 0xffff, 0x8, 0x1, 0x3, 0x5, 0x8, 0x9, 0x1, 0x9, 0x80000000, 0x9, 0x5, 0x7, 0x200000000, 0x8, 0xa46, 0x200, 0x1d16, 0x1000000001c, 0x6, 0xd, 0x0, 0x163d, 0x2, 0x100, 0x8, 0x0, 0x3, 0x8, 0x895, 0x4, 0x9f8, 0x2d97b2ef, 0x1, 0x2, 0x1, 0x0, 0x10001, 0x5b7, 0x871, 0x4, 0x9, 0x1, 0x3b7fe403, 0xfff, 0xe, 0x8000000000000001, 0x3, 0x4, 0x100, 0x0, 0xffffffffffffffff, 0xaf, 0x7fffffffffffffff, 0x2, 0x1, 0xfffffffffffffffb, 0xfffffffffffffada, 0x8, 0x0, 0x5, 0x6, 0x400, 0x3, 0x2, 0xfffffffffffffffe, 0x3, 0x100000001, 0x60, 0x5, 0x5, 0x6, 0x9, 0x1, 0x7, 0x8000000000219, 0x6c, 0x4c6, 0x101, 0x8, 0x7fffffffffffffff, 0x0, 0x47b3bbdc, 0x9, 0x7, 0x7fff, 0x1ff, 0x4000000000, 0x5, 0x8, 0xc, 0x0, 0x100000004, 0x4, 0xfffffffffffffffb, 0x4, 0x3, 0x4, 0x6, 0x2, 0x7fffffff, 0xa8, 0x4, 0x9, 0x8b0, 0x4, 0x2, 0x401, 0x100, 0x2, 0xceed, 0x7, 0xd, 0xffffffffffffffff, 0x5, 0x10, 0x70a, 0x2, 0x9, 0xffffffff, 0x100, 0x3, 0x2]}) r4 = fcntl$dupfd(r0, 0x0, r0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000080000000100010009"], 0x48) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {}, 0x0, 0x14, 0x0, 0x0, 0x8, 0x2, 0x85ce, 0x9, 0x9, 0x0}) ptrace(0x10, r5) ptrace$setregs(0x1a, r5, 0xc, &(0x7f0000000000)) write$sndseq(r4, &(0x7f0000001400)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x1c) r6 = syz_io_uring_setup(0x49b, &(0x7f00000000c0)={0x0, 0x7079, 0x0, 0x7, 0x221}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r9 = accept$unix(r4, &(0x7f0000000a00), &(0x7f0000000a80)=0x6e) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r9, {0x1}}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.368442888s ago: executing program 1 (id=259): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00'], 0x48) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {}, 0x0, 0x14, 0x0, 0x0, 0x8, 0x2, 0x85ce, 0x9, 0x9, 0x0}) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 8.359160696s ago: executing program 0 (id=260): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2000000000000, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x94, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x433}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xec3}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000380)={0x1, 0x1, 0x5, 0x0, 0x200}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0x5}, 0x0, {[0x0, 0x1, 0x0, 0xfffdfffe, 0x0, 0x0, 0x0, 0xfffffffd]}}, 0x5c) 7.562629735s ago: executing program 1 (id=261): r0 = socket$kcm(0x10, 0x2, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000680)=ANY=[], 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$mice(0xffffffffffffff9c, 0x0, 0x80082) r8 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x1000001c}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x80003a}, &(0x7f00000001c0)=0x8) 6.536007339s ago: executing program 4 (id=262): socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x9, 0x7, {0x5, 0x4, 0x0, 0x30, 0xfffa, 0x64, 0x81, 0xea, 0x32, 0x0, @private=0xa010101, @loopback}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0x0, 0x16}, @val={0x0, 0x0, 0x10, 0x2, 0x7}, @mpls={[{}, {0x7f, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xc}, {0x1ff}, {0xd21c}], @ipv4=@igmp={{0x7, 0x4, 0x0, 0x18, 0x1024, 0x66, 0x0, 0xfb, 0x2, 0x0, @local, @multicast1, {[@generic={0x86, 0x8, "c365162f0553"}]}}, {0x11, 0x7, 0x0, @loopback, "22691a88d843b78dba2d9611b86afcc12e652eb9a43d93ad0361709ced052452d6c644526b4ead710997340ee61a9e1752db6eff2785060dc9da690fcaae37c74960260e4151196b5523ab62b0f8090e8f7cc48ce377dbe09198baabf530fc14daa4c8b67f3c90bc431733cb2a21673eba8fb2d88859931543bda169f404289de1e8fe68e26a07c16318519fdf86bd2ffa166c2b066e7264d25a29db144b8fd5fccd5ae9a37514c368e0bc5726f6136d1fa41df7f1348793d8c163f7bc67deaf2e5843ef376b8cf52338c6ecdf1583a25141583336bf4e53c4d9228e5306708ba88a138f7138b638ffe128991176c7074bc99e83b3b7e1fb093594eb2708192e138b02efe2ffdab66403add69e3d8b75a52cf16f752166c6c1bf83de9b1fa747e4ba88b204ca3669fc003d7948e4db35b26baaaada74e8be1de6b23e134b0537239b73731c7b247b217d21a08c8227ad1d406c6ea496ea96598e2b6a324584152f2af3a6c492e61800c18b20021d6f582a994b332831e07ecef3dd6aa3f5cf2105a4ab6a095102b6b287f4426dab51f0dff2144fa1d96c715aadc98308f3c054244f859da5af731319ac229f6e1ba52772e0f730dbc519146f780c968fa9640bc767c04d1b5b18c554e331f4992c96aa628153cfff8909e1328f0e236b492646917ecba253a9e573b7929d74856d1ffd3461e64901cb207175ff9f077d1f10ddb9087dc8ee81f979fd954d877fca224e1f8cba4b5bb4eb15ffeca8267fd85c5c8a845e877ab97b41dd793c8cfb6eabff1487e479e349cbee27c6f30e13177f28a968ec82b10d6734fcc092b606100e6a4d53a1c7c0d48c8017e41f4935facd491738c944b25c24a5c4ef9fe4d42e07b37b5ee498e35740e97a715e79252670451e6febb781d6a3ea150202c384420d21fd74a4d2f0105ecb901c97bef1a5729a50050055a1ba44c1950510797b110150d0e8dc6814818f05acd35818cf6a307fcb3a97766c6c815d2ca34436b8f7e71e9b794048a7af715b82f64c25f8c2c9779360ea353a064b6cf9832eedaa2978205cfea9d210c50db8cee06db1c014421ccb8e4a8abf168f89523256c5fd918d2f82d6006efc7514d23a618d0aef5d7a50a7627bf1b6e7a90f4ec5d9883b027bad9ee3b79546c90d401bff078f926cfa538a271756b29982cacf4f600585db1ecbf148eca03a9308706a90abb9bf1f3f21f5504383c69b8bf183c4bbbd87c170737608a73e651822e56547ce3a037b75eb6e0310e9631ac03ceab7eaa75e015c23b0c819c52c6a94c1d0c740150e8a7931bd71e7c04d148b8049b2bc2341185390dabd74a5eb8c519e50c17042bf0027317bc48fa0fbfb998fc637f45a363fc25a19176dc0a84cea5050090ee72c8719edc346e44a9aaa6623e37638bad049b3a86aa7af8b0fa678a51ac30637e16a7d9c70e19b4e8184d92765f180dbcc653cb4fdc2be264fd82afe015ec8e66f629d549743241bca153a69b56b5527368608dcd2fa327b7bbfc8dc9e5de844d162480d2b69850b3e2c3cc4d2b8748cfcb1692eb570711821d30bf7c96e57dd2495b9d8d46f10da21340c0506b7182b84e16d5eaeb09b9e37b2b08ade2cea3a96e31dfaf8d48f21f8e15aff5ea1d3c9a9ae7b8a72527df3322e08e802dec6febedd2a058b9d4bcad3939e9181627d47261cf4c7845e38a895da95a36468fcf21e0f626ac8a30126011032168eefa54471c6b4a38f5f5d72f83be4130125b11a81a684e1c905cfef974b36005352cd922939a917626819d55af976f7407a35296043e404ae6afc514653680eab2a3d8249e3bb4e854c4ab0cf108985fbbd095046fde407ee94392a92d13557a1459581dd578138ced78ccccb3b70bc5f02904eea00fe9b3cbc306c81c72cc25fcd4b926d4a83a50bd53b96d04be40aa5406a34a13fce34bdfffa302eb05c5d292034556eb1c53baed4dd0d503606466694c10788fe3114c02aa15286e1c1ff50b7b4263c1191bcdeaf6ad6ea052175ff66306635a40205b28aa92f8cb4f9d73763e34bdadda91b4d783d865ddb0408212d1c3d66653eea17c7e2fe4320cb19671f2583b38f83d87370e2663e23f5975d5c2aa8c0e7b222a69f48c08cb978cfcbeccc0f1cddc935aae3cafb592c0c07c89468dc1ca26a6688492866e9e679bfa9fd9e7642b4d3bec12310e8dd97f2b8d01b6cfd837114361314ed46ab69a050bdef183f8f0957fe1f5c55e1777d228661af2dc208f744447fb2212776315f533398bd61979ea96843ec473f13fa6c478566042cfdebe6f387a624bd1baa7249fb251c3799def3cbf77c264a0959af5ebcf206a3b70b065c7fd3f0a8228aa0bbb1bbbcf88e90db030ff2a51d124ebe605c39fb8589851ebd2664baa80327caf42e73f32d189fd2b77623a3ca0297acc3468e4008e193b57d8a5e525eba69e10bbf3958a01ed4c3ec9ab2661ab1f4aba945525abc67d1897bad0392db48982354393125d4573c71257524937bee95a17bad91eb8bed46e355d2f5ad9e8ef7bd8e6a45db8ef91169efc5c1f2be417f89de27a5efbd85a41e9c62c34911f80fae80a87560ddc43714a3967087e681907ca2756e0a99e614ea2103ee4bec2dae7d75d92e4256fbb10ea6ad98877b20ed289fce68c11da47ba258d33f3e8d937c081871c3e94d10b83a6c40d256f3cda4306d07057563347ee5e25f30a7b91c3fb151a45273e4fa3844d4340b9fbbe39347ffbe4209a6f88c2c17c03f5f27e43e111d2da7cc69cf0c2a2a9262fb8bf3e8326f3598a8956ce6d490b77153d27b5ff5d6e37be3afb9a7cf6451686ba294c1b0479f8141e19f50e983163c04ecfc72f4fc60f97996cef88d682b17d97de06a0e22bb6a985b78594123af1e542030e86dd8de91ddc568966231cd107c0b7992ffdebb878241f338fc81b7a8bf36df0c99f0fe4d29a24c087c920c44298834eea70bdcd21e21c4765abb43de31149ff95f478e427e2677af499404cee9a4183ab64509410b5ff9661896f0d6ff71629aacd29d6cde03d1783a647be3281b258535d833dec06cbe24ef4d812d18015d6df5ee5d1f44046c8b7d043eb5121e363ec51201d1147cdb3f7dc387553216ed43e77b977ba3a145a2f56f04077e73215185978432d4c954b6ffb1d0b61f163666312e9451cf427360b1cb0cddbc5d2c2abdb1c9ea1e9bbbc0044e3741118d2d357c62035b7acf727a53f876bc5a173bbad350355c7f021bedb6b4cce6bfdda4ab5e3c96ae97b0fa4b11b84652e957b8dcabb3671f99bf581e13ec8f206e36755a9dbf171427a116b62597331dc2702b8ab6df43580a9073d6832a959e2072215743e03d02a7765d369bcfdfd75a20a940750dd87ace6b6c5a041c8ab26c779bd5c8208be5cf04716356de57e39440f1eb79d4788c2964a7f0149c27c5f4202bd305dd4e94bc84a4d2c885be08139a91d90f6b5d67b92a1857ac80f289a140cdb4b39f4144280f2eeae62a5c0ed1530316e3b5e35999481de8fac8af429511f02a69f75a6e7fe4828e233f8427aaecbb67d4393309b403c1584311fcb397d89cdd7b61033dcf19d3ff94385ad6fdf52075343ba40d02725c9e921438d6e33e554cd800f801c54f0e46174816c772b3c5d71a93d43f430497cedbc9299a2564b6adb28f2f4bce536627836555fbc303f726a23d4159f5c7f1ff3a3cd43809bee31f8617d8bcefd889013eae416f1b01dc307afe4ad55e1fd09f594bee33f78a081619539eb6403602ce8bd22c06bde60a9bb484a70e27c33c6ee40d861719734d8adc7722a12f756d248321e1514e290fd3dfe2b06db581fafe8e0c64ef1db293f1219eaddb8e30da62ecb04fdb2dba7a83fabde04ca321764681d6005b8033edb0e88021c25c6ac1584c75acd75eba9625039dd51adb3e0971dca46c9c29075ab0553258780e208e3e5d81c60fd2cd1762ef7c3217b9ab5950c31c8e8cedeb3808f0ccb648af4815510d961bb7490590dbe35d32cccb19050df8e8ff36dda81af605aee5a381b665489ae8a7e5f7518f735e7b794de689136a76baa76688f0387488a599bb28674145f8b1f82e4f4479b670bb7358be0bc63fb50a94014cc0ac3b6c10ade286596ae157a09ed88aaf66b3ca81723875985516bb1bf29b3d3340a75bcc98cfb03d7a6105182a488845fd03691fd02c31a34cf04e18c001c36f8152b31de557e312b796ce6de3be0fc7f309fffa197c47fb8bde7f7762bb53c98f42a486a2b0501585cc24d8b9949c711f6685600c4b27045bd6f4733ba0f78a8e9c035131919f7f11d2f79aad8036bae16a1bb29912a327783bbf500b684fa082cb0130c15b27e7953f7b1f2a60e0f0011bbdd4264f91cd300f19bdd9b0c83a2ff9d33ecbb2b14da8284d7c0fa922990fee3038b899a7430fa85a979c3ebe942e0bd561b84967ba89a8a3d091a55ba9656db02cb39c2e8505d4593087dc6da59151b768bd39a7cc51de87ccd206b41197c6cf414ff0e71d2746aa803bc33d405c1942f9cd418bdbc0d87b1116b59f3559e2e59c258d96a13cb59dda5034076c64841b42dbbf05baa58a9f8f88db02a0a0fb51fef34377b3b211e2bda1da4917de0d5c9eb059b349ca17b1ac7e20a15d6544c74b95c9738d8469daabf0d308e9fbfbdea7013cc19428def7d6c589ca075d6d7eb4bfe6139a7e9fdf5b8aca33caac0309c98e28437d8964eb0e2c3922c9247d88e17c647d9d2e16167b7baa94cda1ea9bdf9682ba52257c84c594386b5f5f3396a859a6f1bbbf84cdba1838b17d49652089b1c7ba35826d2a21a66e0cd5f61d88087972f4c00b4cc4315d7e9094b1563a667562e443d6136b75e7d1e1fd8175aeea358852acda49c68702afafcf089c75b4e5d1a74c66c22e51663214ccb4bb95bc47b4cb9f46379322789fa6d7aae2887e584ef4d8e634669508a0798123d5408e9a9acbcbfa5b953490d49cafdb0c0bfee0799ce19509b280952c8aafcba88ecfd625f2085f8532a348bb54e205c0105f1b4507edee898205f4791805ed651aaed333df0d8477f7b7d889f94b59118b630ca3f9ca304c0dc21a999127d3abfd2245d523cf5c09db4eca7f03b20cc8032b91cc7a026a53efd010171cb334264ba82abd87162819f0c0668cc2f9fc6384c83af825028db61f7a3a4ef392e86518ba9b54ee337141bd3589f50f8ea0f74d4963a05a8a00866cef913d6f92b06f2a60b6062f1452f0d04425b00b11f754b3799de7d5fbd527c6d6302549bfbd38d52e4e8c14b7f5c059ca9024c643d7891d4e05af6e5448e90724c8d4480b455a0e3b1a86d3faac4065ee7175460ad2da3efdc742671ca98227673b45e53375ab4e5befc796c4273f8aed44d26de6c90da25c106201b2e1db974859e7f1aec5eb5d35edb2e643a28c64d239fce57d8a08a7f66ed8ee849724067f93db299946ab107ea78356abdc120aaf9d63b16f342f49ad7bf91fede60db5596f6cdd68f6d31498f5055afe6c44ffe0a3180117ae12cd4de4ec51b0f520f0b549309320677a1744ae4e92a3a26d12a9456e189f95f12fa6e2dfd178975c50e96facbf330b29d8caaee03e89a01602e89a260a107c4c4ec0e371595490d7b5647c91106b448efd0d208ea29580a2e2de0ee1a39224dec186f508c296241fe1ff399cfabd605f9196c0fa7079a10c1a64a25868fa6180c0849effcaa90e17b54cbf5373c88081c573851aee416670092a17eb14eed0ea5f332c9714fd865591f020599f21a25fc9ea10db0147ea74fe0f"}}}}, 0x104a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$swradio(&(0x7f0000003900), 0x1, 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000140), 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0x66, 0x0, &(0x7f0000000380)) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES16=r5], 0x1c}}, 0x0) 6.396119755s ago: executing program 1 (id=263): r0 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) socket$netlink(0x10, 0x3, 0x9) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000028c0)={0x2020}, 0x2020) socket$kcm(0x29, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x24044004) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0200020000000008000400010000", 0x23) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xec5, 0x4d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x80) sendto$inet(r0, 0x0, 0x0, 0x880, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) 4.707444627s ago: executing program 4 (id=264): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000003000000000400000005000000f8ffffff0000000000000010020000000000004557e8879ba62c8d28385d7eaa25cb74db8b30773360bfc3d25323bb8d20459a4ea475150661977798c16d4f8e1e6dd64ba400f77782385fd6d09d16fc3ade6b381183d5fa0813ab95cdbc747cc70c65de39ace559e24b389427479f12ca98a5f0fb8cbe8d79e5c1362ad100badb51cae6c786456f8e7e55a04a87b4eed923d3f6ab65e197b28adf19"], 0x0, 0x3f}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000240)) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.509206727s ago: executing program 1 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{}, {}]}) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000018c0)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x2000) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000000040)) r6 = socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @multicast1}, {0x1, @broadcast}, 0x6, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) syz_usb_connect(0x5, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x40800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r9, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x14, r8, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) 4.41429907s ago: executing program 3 (id=266): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) close(r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x83]}]}, 0x70}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 2.617000798s ago: executing program 4 (id=267): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x800002, 0x40082) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x200068c0, &(0x7f0000000180)={0x11, 0xf6, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$I2C_SMBUS(r1, 0x720, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r5, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x3b, 0x80801, 0x5883) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r9, r8, 0x25, 0x8, @val=@iter={0x0}}, 0x20) r10 = socket(0x8, 0x6, 0x7f) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f0000000000)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x3ffffffffffff7c, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$TIOCSTI(r0, 0x5412, 0x0) close_range(r0, r0, 0x0) 1.333147906s ago: executing program 1 (id=268): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e25, 0x5, @mcast1, 0x1000}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4000010) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r6, 0x407, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x20000010) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 1.154679879s ago: executing program 3 (id=269): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "9c304bad897e0216795983be31b98b78a3cddf"}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x400, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='qgroup_meta_free_all_pertrans\x00', r0, 0x0, 0x13b59609}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB="20f5e18fd8d17321fa3ebec2650800"/29], 0x3c}, 0x1, 0x0, 0x0, 0x845}, 0x20000000) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r6) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r7, 0x0, 0x4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040848) 1.087103571s ago: executing program 0 (id=270): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00'], 0x48) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {}, 0x0, 0x14, 0x0, 0x0, 0x8, 0x2, 0x85ce, 0x9, 0x9, 0x0}) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 200.978997ms ago: executing program 0 (id=271): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @multicast1, {[@generic={0x7, 0x4, "0405"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x9f1}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000280)={0x4c, 0x5f, 0x6, 0x3, 0x7, "00da900eaf7919c635d4a15ac41e3100", 0x80000000, 0x7fe}) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000300)={0xd, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f35006c090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc10700000032d0ad7bc946813591bd8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x7a00}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x3000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xffffffff, 0x1ff, {0x0}, {0xee00}, 0x7, 0x2}) ptrace$cont(0x9, r7, 0x4, 0x6) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 120.506461ms ago: executing program 1 (id=272): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002d000101000000000000070000000080"], 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000003000000000400000005000000f8ffffff0000000000000010020000000000004557e8879ba62c8d28385d7eaa25cb74db8b30773360bfc3d25323bb8d20459a4ea475150661977798c16d4f8e1e6dd64ba400f77782385fd6d09d16fc3ade6b381183d5fa0813ab95cdbc747cc70c65de39ace559e24b389427479f12ca98a5f0fb8cbe8d79e5c1362ad100badb51cae6c786456f8e7e55a04a87b4eed923d3f6ab65e197b28adf19"], 0x0, 0x3f}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000720000000005000000030000000000000f000000040000006100"], 0x0, 0x29, 0x0, 0x1}, 0x28) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000240)) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 3 (id=273): r0 = dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = io_uring_setup(0x1abf, &(0x7f0000000000)={0x0, 0xa4ec, 0x400, 0x1, 0x102a8}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000080)=[0xfff, 0x6], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) timerfd_create(0x7, 0x81000) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f0000000400000004000000ff07000000000000c63bc11eeba14a4e6e93df6907a174e50eee5511f1e98c20f579197afb6171ba55997f6e54e3f4dd5c13800b0700000000000000ddc1fdddf98419192304dec6844130ae87280cf9161678a41acdaaa8d5f33881f62b35b1e824d740b9af78f5eb16", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r4 = socket(0x10, 0x803, 0x40000004) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000080)={"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"}) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) accept4$ax25(r5, 0x0, 0x0, 0x80000) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001c7a67d40b1134200ec000102030109022400013600000009049a00027ed72592090503084000090100090502"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.237' (ED25519) to the list of known hosts. [ 78.089598][ T5822] cgroup: Unknown subsys name 'net' [ 78.220480][ T5822] cgroup: Unknown subsys name 'cpuset' [ 78.229535][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.616459][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.162356][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.174579][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.184233][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.196243][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.204775][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.213362][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.224796][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.243721][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.251653][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.268002][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.276361][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.289553][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.307263][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.316209][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.337098][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.388760][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.397035][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.408247][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.416411][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.424991][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.432973][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.440573][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.450482][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.457701][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.469338][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.106998][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 83.220611][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 83.283179][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 83.412132][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 83.452176][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.461372][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.468984][ T5836] bridge_slave_0: entered allmulticast mode [ 83.476131][ T5836] bridge_slave_0: entered promiscuous mode [ 83.495994][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 83.514487][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.522305][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.529994][ T5836] bridge_slave_1: entered allmulticast mode [ 83.537198][ T5836] bridge_slave_1: entered promiscuous mode [ 83.633587][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.640863][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.648459][ T5848] bridge_slave_0: entered allmulticast mode [ 83.655464][ T5848] bridge_slave_0: entered promiscuous mode [ 83.672282][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.679626][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.686955][ T5848] bridge_slave_1: entered allmulticast mode [ 83.694022][ T5848] bridge_slave_1: entered promiscuous mode [ 83.757390][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.764555][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.771970][ T5840] bridge_slave_0: entered allmulticast mode [ 83.779124][ T5840] bridge_slave_0: entered promiscuous mode [ 83.787400][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.794561][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.801883][ T5840] bridge_slave_1: entered allmulticast mode [ 83.810924][ T5840] bridge_slave_1: entered promiscuous mode [ 83.820386][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.833312][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.874745][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.929736][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.957947][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.027943][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.055610][ T5836] team0: Port device team_slave_0 added [ 84.067876][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.075482][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.083176][ T5846] bridge_slave_0: entered allmulticast mode [ 84.090625][ T5846] bridge_slave_0: entered promiscuous mode [ 84.100561][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.107864][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.115379][ T5846] bridge_slave_1: entered allmulticast mode [ 84.122733][ T5846] bridge_slave_1: entered promiscuous mode [ 84.145358][ T5848] team0: Port device team_slave_0 added [ 84.153920][ T5848] team0: Port device team_slave_1 added [ 84.174573][ T5836] team0: Port device team_slave_1 added [ 84.245318][ T5840] team0: Port device team_slave_0 added [ 84.255371][ T5840] team0: Port device team_slave_1 added [ 84.262582][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.269794][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.296237][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.317701][ T5838] Bluetooth: hci2: command tx timeout [ 84.317707][ T5841] Bluetooth: hci0: command tx timeout [ 84.331526][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.340620][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.349014][ T5832] bridge_slave_0: entered allmulticast mode [ 84.359290][ T5832] bridge_slave_0: entered promiscuous mode [ 84.368630][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.375803][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.383153][ T5832] bridge_slave_1: entered allmulticast mode [ 84.391682][ T5832] bridge_slave_1: entered promiscuous mode [ 84.398122][ T5838] Bluetooth: hci1: command tx timeout [ 84.428564][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.435586][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.461880][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.475806][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.499310][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.506292][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.532788][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.557136][ T5838] Bluetooth: hci3: command tx timeout [ 84.557544][ T5841] Bluetooth: hci4: command tx timeout [ 84.577890][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.585601][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.611901][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.626103][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.650075][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.657353][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.683437][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.702366][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.709408][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.735673][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.779681][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.792723][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.848477][ T5846] team0: Port device team_slave_0 added [ 84.897759][ T5832] team0: Port device team_slave_0 added [ 84.907051][ T5832] team0: Port device team_slave_1 added [ 84.927845][ T5846] team0: Port device team_slave_1 added [ 84.940861][ T5836] hsr_slave_0: entered promiscuous mode [ 84.948951][ T5836] hsr_slave_1: entered promiscuous mode [ 85.005086][ T5840] hsr_slave_0: entered promiscuous mode [ 85.013566][ T5840] hsr_slave_1: entered promiscuous mode [ 85.020279][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.028366][ T5840] Cannot create hsr debugfs directory [ 85.078487][ T5848] hsr_slave_0: entered promiscuous mode [ 85.084876][ T5848] hsr_slave_1: entered promiscuous mode [ 85.091603][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.099486][ T5848] Cannot create hsr debugfs directory [ 85.108644][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.115642][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.141850][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.153709][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.161381][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.187484][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.239971][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.247200][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.273454][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.292862][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.300167][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.327009][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.560777][ T5846] hsr_slave_0: entered promiscuous mode [ 85.567315][ T5846] hsr_slave_1: entered promiscuous mode [ 85.573340][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.580958][ T5846] Cannot create hsr debugfs directory [ 85.592491][ T5832] hsr_slave_0: entered promiscuous mode [ 85.599572][ T5832] hsr_slave_1: entered promiscuous mode [ 85.606081][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.614073][ T5832] Cannot create hsr debugfs directory [ 86.036306][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.068827][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.094657][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.113331][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.161769][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.188245][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.204726][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.241636][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.284354][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.309260][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.324145][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.353187][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.397849][ T5841] Bluetooth: hci2: command tx timeout [ 86.397989][ T5838] Bluetooth: hci0: command tx timeout [ 86.439947][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.452874][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.477104][ T5838] Bluetooth: hci1: command tx timeout [ 86.478457][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.497700][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.604023][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.636916][ T5838] Bluetooth: hci3: command tx timeout [ 86.641828][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.649165][ T5838] Bluetooth: hci4: command tx timeout [ 86.659067][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.673011][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.748910][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.789480][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.835241][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.854156][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.877139][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.884358][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.894502][ T43] cfg80211: failed to load regulatory.db [ 86.900434][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.900560][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.938794][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.950119][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.957321][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.982005][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.989210][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.050405][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.079330][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.091844][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.099489][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.143646][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.162155][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.169345][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.189205][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.239849][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.247071][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.292977][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.300222][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.328163][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.449871][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.505737][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.512966][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.540738][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.556543][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.563776][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.681854][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.949870][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.109546][ T5840] veth0_vlan: entered promiscuous mode [ 88.165624][ T5840] veth1_vlan: entered promiscuous mode [ 88.274246][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.289540][ T5840] veth0_macvtap: entered promiscuous mode [ 88.312447][ T5840] veth1_macvtap: entered promiscuous mode [ 88.330044][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.392529][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.431722][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.452325][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.465889][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.475197][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.484300][ T5838] Bluetooth: hci0: command tx timeout [ 88.487104][ T5838] Bluetooth: hci2: command tx timeout [ 88.492046][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.504185][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.557552][ T5838] Bluetooth: hci1: command tx timeout [ 88.573750][ T5832] veth0_vlan: entered promiscuous mode [ 88.672090][ T5848] veth0_vlan: entered promiscuous mode [ 88.694313][ T5832] veth1_vlan: entered promiscuous mode [ 88.717775][ T5841] Bluetooth: hci3: command tx timeout [ 88.723311][ T5838] Bluetooth: hci4: command tx timeout [ 88.743916][ T5836] veth0_vlan: entered promiscuous mode [ 88.756346][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.761038][ T5848] veth1_vlan: entered promiscuous mode [ 88.774799][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.787941][ T5836] veth1_vlan: entered promiscuous mode [ 88.810749][ T5846] veth0_vlan: entered promiscuous mode [ 88.873981][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.897832][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.927571][ T5846] veth1_vlan: entered promiscuous mode [ 88.950308][ T5836] veth0_macvtap: entered promiscuous mode [ 88.963657][ T5836] veth1_macvtap: entered promiscuous mode [ 88.984791][ T5832] veth0_macvtap: entered promiscuous mode [ 89.010000][ T5848] veth0_macvtap: entered promiscuous mode [ 89.014219][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.038656][ T5832] veth1_macvtap: entered promiscuous mode [ 89.061033][ T5848] veth1_macvtap: entered promiscuous mode [ 89.091992][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.137430][ T5846] veth0_macvtap: entered promiscuous mode [ 89.160751][ T5846] veth1_macvtap: entered promiscuous mode [ 89.184048][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.216111][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.228988][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.242563][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.253273][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.266671][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.383285][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.409262][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.029209][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.041516][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.051886][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.062664][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.151896][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.198528][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.243010][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.263969][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.272843][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.281837][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.312999][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.327684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.336694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 90.345025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 90.354326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.527011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.542344][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.556818][ T5838] Bluetooth: hci2: command tx timeout [ 90.562437][ T5838] Bluetooth: hci0: command tx timeout [ 90.565068][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.637520][ T5838] Bluetooth: hci1: command tx timeout [ 90.727025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.794475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.807128][ T5841] Bluetooth: hci3: command tx timeout [ 90.812692][ T5838] Bluetooth: hci4: command tx timeout [ 90.819986][ T5961] geneve2: entered allmulticast mode [ 90.887051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.899252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.960700][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.984512][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.019850][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.079389][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.470718][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.499090][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.746563][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.759342][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.813344][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.838288][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.960785][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.984292][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.075153][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.114120][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.216955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.326316][ T5965] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.040249][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.128383][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.613811][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.644141][ T5965] syz.1.7 (5965) used greatest stack depth: 20000 bytes left [ 94.658963][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.132391][ T5999] hugetlbfs: syz.0.1 (5999): Using mlock ulimits for SHM_HUGETLB is obsolete [ 103.557783][ T6026] lo speed is unknown, defaulting to 1000 [ 103.564992][ T6026] lo speed is unknown, defaulting to 1000 [ 103.573111][ T6026] lo speed is unknown, defaulting to 1000 [ 103.584992][ T6026] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.602615][ T6026] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 103.695514][ T6026] lo speed is unknown, defaulting to 1000 [ 103.703263][ T6026] lo speed is unknown, defaulting to 1000 [ 103.746844][ T6026] lo speed is unknown, defaulting to 1000 [ 103.809139][ T6026] lo speed is unknown, defaulting to 1000 [ 103.826776][ T6026] lo speed is unknown, defaulting to 1000 [ 105.620774][ T6042] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 106.261148][ T6043] orangefs_mount: mount request failed with -4 [ 106.729376][ T6030] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17'. [ 109.111092][ T6064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.566836][ T30] audit: type=1326 audit(1753579375.188:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89af18e9a9 code=0x7ffc0000 [ 109.588000][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.814163][ T30] audit: type=1326 audit(1753579375.188:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89af18e9a9 code=0x7ffc0000 [ 109.835417][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.850112][ T30] audit: type=1326 audit(1753579375.188:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f89af18e9a9 code=0x7ffc0000 [ 109.871334][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.902666][ T30] audit: type=1326 audit(1753579375.188:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89af18e9a9 code=0x7ffc0000 [ 109.933641][ T30] audit: type=1326 audit(1753579375.318:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f89af18e9a9 code=0x7ffc0000 [ 109.966565][ T30] audit: type=1326 audit(1753579375.328:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89af18e9a9 code=0x7ffc0000 [ 110.106776][ T6071] netlink: 'syz.1.25': attribute type 10 has an invalid length. [ 110.120476][ T30] audit: type=1326 audit(1753579375.328:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f89af18e9a9 code=0x7ffc0000 [ 110.145904][ T30] audit: type=1326 audit(1753579375.338:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89af18e9a9 code=0x7ffc0000 [ 110.345402][ T30] audit: type=1326 audit(1753579375.338:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89af18e9a9 code=0x7ffc0000 [ 110.564173][ T6071] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 112.517875][ T30] audit: type=1326 audit(1753579375.338:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f89af18e9a9 code=0x7ffc0000 [ 112.941348][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 112.954166][ T6081] warning: `syz.0.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.552886][ T6071] syz.1.25 (6071) used greatest stack depth: 18048 bytes left [ 115.413544][ T6103] loop9: detected capacity change from 0 to 7 [ 115.428541][ T6103] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.437513][ T6103] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.446043][ T6103] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.454287][ T6103] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.462675][ T6103] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.471157][ T6103] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.479525][ T6103] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.487922][ T6103] ldm_validate_partition_table(): Disk read failed. [ 115.495326][ T6103] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.504247][ T6103] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.516026][ T6103] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.525717][ T6103] Dev loop9: unable to read RDB block 0 [ 115.533754][ T6103] loop9: unable to read partition table [ 115.540705][ T6103] loop9: partition table beyond EOD, truncated [ 115.547036][ T6103] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 115.547036][ T6103] ) failed (rc=-5) [ 116.402878][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 116.402895][ T30] audit: type=1326 audit(1753579382.028:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6095 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569a38e9a9 code=0x7ffc0000 [ 118.220912][ T30] audit: type=1326 audit(1753579382.028:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6095 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569a38e9a9 code=0x7ffc0000 [ 118.246301][ T30] audit: type=1326 audit(1753579382.028:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6095 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f569a38e9a9 code=0x7ffc0000 [ 118.271851][ T30] audit: type=1326 audit(1753579382.028:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6095 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569a38e9a9 code=0x7ffc0000 [ 118.294542][ T30] audit: type=1326 audit(1753579382.028:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6095 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569a38e9a9 code=0x7ffc0000 [ 118.330375][ T30] audit: type=1326 audit(1753579382.028:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6095 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f569a38e9a9 code=0x7ffc0000 [ 118.405122][ T30] audit: type=1326 audit(1753579382.028:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6095 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569a38e9a9 code=0x7ffc0000 [ 118.676967][ T30] audit: type=1326 audit(1753579382.028:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6095 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f569a38e9a9 code=0x7ffc0000 [ 118.703072][ T30] audit: type=1326 audit(1753579382.028:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6095 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569a38e9a9 code=0x7ffc0000 [ 118.724635][ T30] audit: type=1326 audit(1753579382.028:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6095 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f569a38e9a9 code=0x7ffc0000 [ 119.612855][ T6116] bond1 (unregistering): Released all slaves [ 119.698689][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.707528][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.717035][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.725929][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.734305][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.704119][ T6138] delete_channel: no stack [ 121.721468][ T1084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.916790][ T5841] Bluetooth: hci3: command tx timeout [ 123.666448][ T6153] overlay: ./file0 is not a directory [ 124.013051][ T5841] Bluetooth: hci3: command tx timeout [ 124.029972][ T1084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.052921][ T6124] lo speed is unknown, defaulting to 1000 [ 124.096037][ T1084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.192746][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 124.601978][ T1084] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.578662][ T5841] Bluetooth: hci3: command tx timeout [ 126.818506][ T6176] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 128.796908][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 130.410115][ T5838] Bluetooth: hci5: sending frame failed (-49) [ 130.418186][ T5838] Bluetooth: hci3: command tx timeout [ 131.683473][ T6185] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 132.484936][ T6124] chnl_net:caif_netlink_parms(): no params data found [ 133.395517][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.400719][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 133.407299][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.411173][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 134.067669][ T1084] bridge_slave_1: left allmulticast mode [ 134.073652][ T1084] bridge_slave_1: left promiscuous mode [ 134.080721][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.100435][ T1084] bridge_slave_0: left allmulticast mode [ 134.106127][ T1084] bridge_slave_0: left promiscuous mode [ 134.137801][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.528487][ T6209] ubi31: attaching mtd0 [ 134.546704][ T6209] ubi31: scanning is finished [ 134.551490][ T6209] ubi31: empty MTD device detected [ 135.090545][ T6209] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 135.099349][ T6209] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 135.107031][ T6209] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 135.114243][ T6209] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 135.121950][ T6209] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 135.129047][ T6209] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 135.137342][ T6209] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3198752034 [ 135.147762][ T6209] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 135.159532][ T6215] ubi31: background thread "ubi_bgt31d" started, PID 6215 [ 135.483804][ T6219] siw: device registration error -23 [ 135.586154][ T6220] netlink: 240 bytes leftover after parsing attributes in process `syz.1.52'. [ 136.534298][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.550533][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.564538][ T1084] bond0 (unregistering): Released all slaves [ 136.605897][ T6218] tipc: Started in network mode [ 136.613634][ T6218] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 136.621139][ T6218] tipc: Enabled bearer , priority 10 [ 137.100170][ T6234] overlay: ./file0 is not a directory [ 137.283214][ T6242] process 'syz.1.53' launched './file0' with NULL argv: empty string added [ 137.854375][ T3594] tipc: Node number set to 10005162 [ 138.079747][ T6236] syz.0.55 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 138.344636][ T6249] dns_resolver: Unsupported server list version (0) [ 138.370642][ T6249] loop6: detected capacity change from 0 to 524287487 [ 138.384409][ T6249] buffer_io_error: 4 callbacks suppressed [ 138.384427][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.408040][ T3594] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.436404][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.501669][ T6252] loop6: detected capacity change from 524287487 to 0 [ 138.543357][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.546772][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.566987][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.576902][ T6124] bridge_slave_0: entered allmulticast mode [ 138.587281][ T3594] usb 1-1: Using ep0 maxpacket: 16 [ 138.588927][ T6124] bridge_slave_0: entered promiscuous mode [ 138.597635][ T3594] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 138.611323][ T6249] ldm_validate_partition_table(): Disk read failed. [ 138.635400][ T6249] Dev loop6: unable to read RDB block 0 [ 138.642567][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.655099][ T6249] loop6: unable to read partition table [ 138.662754][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.670877][ T3594] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.680252][ T6249] loop6: partition table beyond EOD, truncated [ 138.684562][ T6124] bridge_slave_1: entered allmulticast mode [ 138.694518][ T3594] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 138.710813][ T6124] bridge_slave_1: entered promiscuous mode [ 138.711886][ T6249] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 138.719462][ T3594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.763618][ T3594] usb 1-1: config 0 descriptor?? [ 138.840736][ T1084] hsr_slave_0: left promiscuous mode [ 138.894253][ T1084] hsr_slave_1: left promiscuous mode [ 138.907522][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.934795][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.137240][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.776906][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.083288][ T1084] veth1_macvtap: left promiscuous mode [ 142.223983][ T10] usb 1-1: USB disconnect, device number 2 [ 142.242707][ T1084] veth0_macvtap: left promiscuous mode [ 142.338026][ T1084] veth1_vlan: left promiscuous mode [ 142.438044][ T1084] veth0_vlan: left promiscuous mode [ 142.761125][ T6282] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 144.539213][ T6300] siw: device registration error -23 [ 144.647222][ T6301] netlink: 240 bytes leftover after parsing attributes in process `syz.0.63'. [ 145.315780][ T5849] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 145.353843][ T5849] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 145.411128][ T5849] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 145.672732][ T5849] hid-generic 0000:0004:0034.0001: hidraw0: HID v0.0e Device [syz0] on syz1 [ 146.585547][ T6305] fido_id[6305]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.943380][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 146.988712][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 147.461341][ T6299] tipc: Started in network mode [ 147.466532][ T6299] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 147.474033][ T6299] tipc: Enabled bearer , priority 10 [ 147.565229][ T6303] syz_tun: entered allmulticast mode [ 148.168180][ T6124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.301863][ T6124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.466861][ T5849] tipc: Node number set to 10005162 [ 148.841033][ T6303] syz_tun: left allmulticast mode [ 150.653932][ T6124] team0: Port device team_slave_0 added [ 150.924337][ T6124] team0: Port device team_slave_1 added [ 152.751358][ T6337] syz.4.70 (6337): drop_caches: 2 [ 153.007815][ T51] Bluetooth: hci1: SCO packet too small [ 159.294431][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.311696][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.492360][ T6124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.598373][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.605381][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.793014][ T6124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.925481][ T6379] 9pnet_fd: Insufficient options for proto=fd [ 163.316860][ T5849] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 163.456891][ T5849] usb 5-1: device descriptor read/64, error -71 [ 164.299507][ T5849] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 164.470216][ T6124] hsr_slave_0: entered promiscuous mode [ 164.514143][ T6124] hsr_slave_1: entered promiscuous mode [ 164.537616][ T6124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.577050][ T6124] Cannot create hsr debugfs directory [ 165.052497][ T6392] mmap: syz.3.80 (6392) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 168.174591][ T6426] netlink: 'syz.4.85': attribute type 9 has an invalid length. [ 170.126884][ T6418] 9pnet: Could not find request transport: fd0x0000000000000003 [ 171.811038][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 171.811066][ T30] audit: type=1804 audit(1753579437.438:78): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.87" name="/newroot/18/file0" dev="tmpfs" ino=119 res=1 errno=0 [ 172.220143][ T6450] Zero length message leads to an empty skb [ 172.957325][ T5849] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 173.055008][ T977] libceph: connect (1)[c::]:6789 error -101 [ 173.064198][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 173.069143][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.074553][ T6445] ceph: No mds server is up or the cluster is laggy [ 173.088746][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.226741][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.243474][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.253177][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.340145][ T10] libceph: connect (1)[c::]:6789 error -101 [ 173.346271][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 173.355361][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.376682][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.476511][ T5849] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 173.753843][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.774129][ T6457] lo speed is unknown, defaulting to 1000 [ 174.171541][ T5849] usb 5-1: config 0 descriptor?? [ 174.179217][ T977] libceph: connect (1)[c::]:6789 error -101 [ 174.207696][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 174.774288][ T5849] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 175.110820][ T6483] netlink: 'syz.3.93': attribute type 1 has an invalid length. [ 175.451315][ T51] Bluetooth: hci5: command tx timeout [ 175.517528][ T5849] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 175.693199][ T5849] cp2112 0003:10C4:EA90.0002: error requesting version [ 175.756318][ T5849] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -32 [ 175.898246][ T6491] genirq: Flags mismatch irq 5. 00200000 (pcl812) vs. 00200000 (dt2814) [ 176.844472][ T30] audit: type=1800 audit(1753579441.768:79): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.94" name="bus" dev="overlay" ino=147 res=0 errno=0 [ 177.024117][ T6497] netlink: 'syz.1.96': attribute type 4 has an invalid length. [ 177.089314][ T5849] usb 5-1: USB disconnect, device number 4 [ 177.609560][ T51] Bluetooth: hci5: command tx timeout [ 179.706825][ T51] Bluetooth: hci5: command tx timeout [ 180.227281][ T6457] chnl_net:caif_netlink_parms(): no params data found [ 181.031394][ T59] bridge_slave_1: left allmulticast mode [ 181.049846][ T59] bridge_slave_1: left promiscuous mode [ 181.066436][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.188135][ T59] bridge_slave_0: left allmulticast mode [ 181.302599][ T59] bridge_slave_0: left promiscuous mode [ 181.311674][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.756960][ T51] Bluetooth: hci5: command tx timeout [ 182.967305][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.979958][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.002278][ T59] bond0 (unregistering): Released all slaves [ 184.484910][ T6529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.571527][ T6545] netlink: 'syz.0.106': attribute type 4 has an invalid length. [ 185.718266][ T6555] netlink: 'syz.0.106': attribute type 4 has an invalid length. [ 185.869458][ T59] hsr_slave_0: left promiscuous mode [ 185.875390][ T6565] 9pnet_fd: Insufficient options for proto=fd [ 185.904641][ T59] hsr_slave_1: left promiscuous mode [ 185.925135][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.962915][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.392285][ T6576] siw: device registration error -23 [ 187.383349][ T59] team0 (unregistering): Port device team_slave_1 removed [ 187.529526][ T59] team0 (unregistering): Port device team_slave_0 removed [ 189.878393][ T977] lo speed is unknown, defaulting to 1000 [ 190.047823][ T6602] netlink: 'syz.3.116': attribute type 10 has an invalid length. [ 192.468154][ T30] audit: type=1400 audit(1753579457.478:80): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=6604 comm="syz.4.117" dest=2 [ 192.495203][ T6602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.520658][ T6602] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 192.541488][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.611887][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.280091][ T6457] bridge_slave_0: entered allmulticast mode [ 193.420368][ T6457] bridge_slave_0: entered promiscuous mode [ 193.434281][ T6607] smc: net device bond0 applied user defined pnetid SYZ2 [ 193.434873][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.471396][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.479035][ T6457] bridge_slave_1: entered allmulticast mode [ 193.505371][ T6457] bridge_slave_1: entered promiscuous mode [ 194.311119][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'. [ 194.474448][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.481291][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.077812][ T6620] IPv6: Can't replace route, no match found [ 195.313945][ T6625] siw: device registration error -23 [ 195.511242][ T30] audit: type=1400 audit(1753579460.988:81): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=6621 comm="syz.4.121" daddr=fe88::5 dest=20001 [ 196.403052][ T6617] vlan2: entered promiscuous mode [ 196.408216][ T6617] bridge0: entered promiscuous mode [ 196.413766][ T6617] vlan2: entered allmulticast mode [ 196.418965][ T6617] bridge0: entered allmulticast mode [ 196.454354][ T6619] bridge_slave_0: left allmulticast mode [ 198.233430][ T6619] bridge_slave_0: left promiscuous mode [ 198.281149][ T6619] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.514989][ T6630] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 199.285294][ T6619] bridge_slave_1: left allmulticast mode [ 199.292927][ T6619] bridge_slave_1: left promiscuous mode [ 199.305990][ T6619] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.343027][ T6619] bond0: (slave bond_slave_0): Releasing backup interface [ 199.387846][ T6619] bond0: (slave bond_slave_1): Releasing backup interface [ 199.432242][ T6619] team0: Port device team_slave_0 removed [ 199.458532][ T6619] team0: Port device team_slave_1 removed [ 199.474291][ T6619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.483854][ T6619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.510796][ T6619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.526505][ T6619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.703982][ T6457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.906894][ T30] audit: type=1400 audit(1753579465.408:82): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=6637 comm="syz.1.125" daddr=fc01:: [ 200.498649][ T30] audit: type=1400 audit(1753579465.408:83): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=6637 comm="syz.1.125" daddr=fc02:: [ 200.589445][ T6457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.720742][ T6657] netlink: 'syz.0.127': attribute type 3 has an invalid length. [ 201.728551][ T6657] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.127'. [ 201.750246][ T6657] sctp: [Deprecated]: syz.0.127 (pid 6657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.750246][ T6657] Use struct sctp_sack_info instead [ 203.019329][ T6671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.069629][ T6671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.756152][ T6457] team0: Port device team_slave_0 added [ 203.855678][ T6676] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 204.219703][ T6457] team0: Port device team_slave_1 added [ 204.282317][ T6664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.128'. [ 204.295616][ T30] audit: type=1400 audit(1753579469.918:84): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=6663 comm="syz.3.128" daddr=fe80:: [ 205.153155][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.185426][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.957002][ T6457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.166009][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.196708][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.435688][ T6457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.714120][ T6699] siw: device registration error -23 [ 206.736080][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 206.742734][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 207.466803][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 207.809643][ T30] audit: type=1400 audit(1753579473.408:85): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=6693 comm="syz.4.133" daddr=fe80::1b dest=16385 [ 208.223375][ T6711] syz.1.135 uses obsolete (PF_INET,SOCK_PACKET) [ 209.106321][ T6716] usb usb1: check_ctrlrecip: process 6716 (syz.3.136) requesting ep 01 but needs 81 [ 209.774232][ T30] audit: type=1400 audit(1753579475.398:86): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=6708 comm="syz.3.136" dest=20002 [ 209.924524][ T6717] bridge_slave_0: left allmulticast mode [ 209.959917][ T6717] bridge_slave_0: left promiscuous mode [ 209.985717][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.045484][ T6717] bridge_slave_1: left allmulticast mode [ 210.056596][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 210.069941][ T6724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.139'. [ 210.243362][ T6717] bridge_slave_1: left promiscuous mode [ 210.259607][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.344005][ T6728] netlink: 'syz.0.139': attribute type 10 has an invalid length. [ 210.922403][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.079855][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.191536][ T10] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 211.209180][ T6717] bond0: (slave bond_slave_0): Releasing backup interface [ 211.249740][ T10] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 211.313755][ T10] usb 5-1: Product: syz [ 211.352675][ T10] usb 5-1: config 0 descriptor?? [ 211.359079][ T6717] bond0: (slave bond_slave_1): Releasing backup interface [ 211.490838][ T6717] team0: Port device team_slave_0 removed [ 211.645745][ T6717] team0: Port device team_slave_1 removed [ 211.704027][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.736471][ T6735] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 211.767425][ T6717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.806813][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.853067][ T6717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.382328][ T6457] hsr_slave_0: entered promiscuous mode [ 212.453174][ T6457] hsr_slave_1: entered promiscuous mode [ 212.468336][ T6457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.484654][ T6457] Cannot create hsr debugfs directory [ 212.523372][ T6739] Bluetooth: MGMT ver 1.23 [ 212.570706][ T6728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.579959][ T6728] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 212.618937][ T6729] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.625038][ T6729] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 212.660692][ T6729] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.667447][ T6729] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 212.688715][ T6729] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 212.695122][ T6729] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 212.708890][ T6729] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 212.714875][ T6729] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 212.723912][ T6729] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 212.813414][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.142'. [ 212.889860][ T6719] team0: Mode changed to "loadbalance" [ 213.642983][ T6749] program syz.1.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.696823][ T6750] program syz.1.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.898624][ T6750] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 214.243594][ T24] usb 5-1: USB disconnect, device number 5 [ 214.275447][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 214.637314][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 214.717882][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 214.726241][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 214.797072][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 215.456220][ T6764] netlink: 'syz.4.146': attribute type 10 has an invalid length. [ 216.085444][ T6764] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 216.717475][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 216.796833][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 216.802921][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 216.878498][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 217.257925][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 217.572527][ T6773] netlink: 'syz.1.149': attribute type 1 has an invalid length. [ 217.572568][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 217.590189][ T6457] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.513149][ T6457] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.647296][ T6457] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.784536][ T6457] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.026867][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 219.214617][ T6807] comedi comedi0: mpc624: I/O port conflict (0xee,16) [ 219.780188][ T6813] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 220.019717][ T6818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.027402][ T6828] bond0: (slave batadv0): Releasing backup interface [ 222.066900][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 222.180053][ T6828] bridge_slave_0: left allmulticast mode [ 222.185773][ T6828] bridge_slave_0: left promiscuous mode [ 222.189252][ T6842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.202711][ T6828] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.224325][ T6828] bridge_slave_1: left allmulticast mode [ 222.230371][ T6828] bridge_slave_1: left promiscuous mode [ 222.236291][ T6828] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.259823][ T6828] bond0: (slave bond_slave_0): Releasing backup interface [ 222.278903][ T6828] bond0: (slave bond_slave_1): Releasing backup interface [ 222.322412][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.332540][ T6828] team0: Port device team_slave_0 removed [ 222.347772][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.365262][ T6828] team0: Port device team_slave_1 removed [ 222.371616][ T24] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 222.396732][ T24] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 222.404778][ T24] usb 4-1: Product: syz [ 222.410510][ T6828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.432328][ T24] usb 4-1: config 0 descriptor?? [ 222.437918][ T6828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.455562][ T6828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.466724][ T6828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.714461][ T6457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.243958][ T6848] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 223.244051][ T6848] CIFS mount error: No usable UNC path provided in device string! [ 223.244051][ T6848] [ 223.244321][ T6848] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 223.864149][ T6457] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.894265][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.901495][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.945892][ T24] usb 4-1: USB disconnect, device number 2 [ 224.036019][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.043278][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.874649][ T6858] netlink: 'syz.4.161': attribute type 3 has an invalid length. [ 224.882779][ T6858] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.161'. [ 224.903603][ T6858] sctp: [Deprecated]: syz.4.161 (pid 6858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.903603][ T6858] Use struct sctp_sack_info instead [ 225.746801][ T30] audit: type=1400 audit(1753579491.338:87): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=6864 comm="syz.4.164" daddr=fe80::aa dest=16385 [ 227.876992][ T6882] netlink: 'syz.1.167': attribute type 3 has an invalid length. [ 227.884727][ T6882] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.167'. [ 228.191285][ T6877] qrtr: Invalid version 47 [ 229.131777][ T6895] overlayfs: overlapping lowerdir path [ 229.614146][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 229.623437][ T6898] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 230.230673][ T6457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.665773][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.883557][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.899994][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.909997][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.923092][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.115533][ T6966] netlink: 'syz.4.179': attribute type 3 has an invalid length. [ 238.123365][ T6966] netlink: 199556 bytes leftover after parsing attributes in process `syz.4.179'. [ 238.147423][ T6966] sctp: [Deprecated]: syz.4.179 (pid 6966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.147423][ T6966] Use struct sctp_sack_info instead [ 238.773503][ T6956] lo speed is unknown, defaulting to 1000 [ 239.246909][ T6981] loop6: detected capacity change from 0 to 524287999 [ 240.294831][ T6982] binder: BINDER_SET_CONTEXT_MGR already set [ 240.301412][ T6982] binder: 6976:6982 ioctl 4018620d 200000000040 returned -16 [ 240.310598][ T6983] netlink: 40 bytes leftover after parsing attributes in process `syz.4.180'. [ 240.893587][ T5838] Bluetooth: hci3: command tx timeout [ 241.969076][ T24] IPVS: starting estimator thread 0... [ 242.216886][ T6990] IPVS: using max 49 ests per chain, 117600 per kthread [ 243.027216][ T5838] Bluetooth: hci3: command tx timeout [ 243.368077][ T6998] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 245.214761][ T5838] Bluetooth: hci3: command tx timeout [ 245.286202][ T7010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.187'. [ 246.232783][ T7029] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 7029 comm: syz.3.190) [ 246.250199][ T30] audit: type=1800 audit(1753579511.868:88): pid=7029 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.190" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=10928 res=0 errno=0 [ 246.276170][ T5849] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 246.423445][ T6956] chnl_net:caif_netlink_parms(): no params data found [ 246.639877][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.801328][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.941948][ T5849] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 247.085860][ T5849] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 247.096454][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 247.115755][ T5849] usb 5-1: Product: syz [ 247.423264][ T7043] netlink: 'syz.0.193': attribute type 3 has an invalid length. [ 247.431153][ T7043] netlink: 199556 bytes leftover after parsing attributes in process `syz.0.193'. [ 247.505550][ T7043] sctp: [Deprecated]: syz.0.193 (pid 7043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.505550][ T7043] Use struct sctp_sack_info instead [ 247.693373][ T5838] Bluetooth: hci3: command tx timeout [ 247.758066][ T5849] usb 5-1: config 0 descriptor?? [ 247.911790][ T5849] usb 5-1: can't set config #0, error -71 [ 247.921409][ T5849] usb 5-1: USB disconnect, device number 6 [ 248.010336][ T59] bridge_slave_1: left allmulticast mode [ 248.016051][ T59] bridge_slave_1: left promiscuous mode [ 248.060187][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.084909][ T59] bridge_slave_0: left allmulticast mode [ 248.096920][ T59] bridge_slave_0: left promiscuous mode [ 248.235788][ T7050] overlayfs: overlapping lowerdir path [ 248.349818][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.379346][ T7073] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 251.041817][ T7060] slcan: can't register candev [ 251.047422][ T7060] Falling back ldisc for ptm0. [ 252.704884][ T7097] kvm: pic: non byte write [ 252.848011][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.861322][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.873189][ T59] bond0 (unregistering): Released all slaves [ 252.899752][ T30] audit: type=1326 audit(1753579518.528:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7094 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569a38e9a9 code=0x7ffc0000 [ 252.923870][ T30] audit: type=1326 audit(1753579518.528:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7094 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569a38e9a9 code=0x7ffc0000 [ 253.737361][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 254.162633][ T7124] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 254.367419][ T7126] x_tables: ip_tables: osf match: only valid for protocol 6 [ 254.505268][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.519910][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.297467][ T30] audit: type=1400 audit(1753579520.438:91): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7115 comm="syz.0.203" dest=2 [ 255.320985][ T7134] block device autoloading is deprecated and will be removed. [ 255.404815][ T6956] bridge_slave_0: entered allmulticast mode [ 255.510070][ T6956] bridge_slave_0: entered promiscuous mode [ 255.568193][ T7126] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 255.849829][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.856198][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.155330][ T59] hsr_slave_0: left promiscuous mode [ 256.771405][ T59] hsr_slave_1: left promiscuous mode [ 256.834307][ T7144] netlink: 'syz.3.208': attribute type 1 has an invalid length. [ 256.842242][ T7144] netlink: 224 bytes leftover after parsing attributes in process `syz.3.208'. [ 256.851982][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.220298][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.380519][ T7159] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 261.159510][ T7177] xt_TPROXY: Can be used only with -p tcp or -p udp [ 261.194714][ T59] team0 (unregistering): Port device team_slave_1 removed [ 261.588674][ T59] team0 (unregistering): Port device team_slave_0 removed [ 262.875058][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.883147][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.891040][ T6956] bridge_slave_1: entered allmulticast mode [ 262.908508][ T6956] bridge_slave_1: entered promiscuous mode [ 263.026968][ T30] audit: type=1326 audit(1753579528.648:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7184 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 263.823834][ T30] audit: type=1326 audit(1753579528.658:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7184 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 263.853528][ T30] audit: type=1326 audit(1753579528.688:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7184 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 263.942887][ T30] audit: type=1326 audit(1753579528.688:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7184 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 263.968503][ T30] audit: type=1326 audit(1753579528.688:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7184 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 264.005360][ T30] audit: type=1326 audit(1753579528.688:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7184 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 264.042602][ T30] audit: type=1326 audit(1753579528.688:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7184 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 264.195975][ T30] audit: type=1326 audit(1753579528.688:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7184 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 265.079878][ T7197] netlink: 'syz.0.219': attribute type 4 has an invalid length. [ 265.090099][ T30] audit: type=1326 audit(1753579528.688:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7184 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 265.312442][ T30] audit: type=1326 audit(1753579528.688:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7184 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 265.425244][ T6956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.511267][ T6956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.057857][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'. [ 266.278917][ T6956] team0: Port device team_slave_0 added [ 266.312117][ T6956] team0: Port device team_slave_1 added [ 267.266100][ T5911] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 267.445760][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.457086][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 267.485467][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.533324][ T5911] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 267.538702][ T3594] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 267.569229][ T5911] usb 2-1: config 0 has no interface number 0 [ 267.583149][ T3594] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 267.603891][ T5911] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 267.606312][ T6956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.629914][ T3594] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 267.793139][ T3594] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 267.812081][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.832425][ T5911] usb 2-1: Product: syz [ 267.842602][ T5911] usb 2-1: Manufacturer: syz [ 267.852796][ T5911] usb 2-1: SerialNumber: syz [ 267.867504][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.877849][ T5911] usb 2-1: config 0 descriptor?? [ 267.895008][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.952383][ T5911] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 268.182955][ T7229] capability: warning: `syz.4.225' uses deprecated v2 capabilities in a way that may be insecure [ 268.409183][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 268.409221][ T30] audit: type=1400 audit(1753579533.828:117): lsm=SMACK fn=smack_inode_remove_acl action=denied subject="w" object="_" requested=w pid=7221 comm="syz.4.225" name="file1" dev="tmpfs" ino=303 [ 268.967067][ T6956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.619322][ T7225] fido_id[7225]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 269.658508][ T5911] usb 2-1: qt2_attach - failed to power on unit: -71 [ 269.666107][ T5911] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 269.947498][ T5911] usb 2-1: USB disconnect, device number 2 [ 270.757490][ T7251] ubi31: detaching mtd0 [ 271.669631][ T7251] ubi31: mtd0 is detached [ 273.483240][ T6956] hsr_slave_0: entered promiscuous mode [ 273.499468][ T6956] hsr_slave_1: entered promiscuous mode [ 273.511200][ T6956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.536771][ T6956] Cannot create hsr debugfs directory [ 273.847848][ T7265] netlink: 'syz.4.231': attribute type 1 has an invalid length. [ 273.855853][ T7265] netlink: 224 bytes leftover after parsing attributes in process `syz.4.231'. [ 274.232703][ T7266] netlink: 'syz.3.240': attribute type 1 has an invalid length. [ 274.287183][ T7266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.488681][ T7266] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 276.059451][ T7280] ALSA: mixer_oss: invalid OSS volume 'LI' [ 276.846928][ T5849] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 277.145332][ T5849] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 277.705289][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.768337][ T5849] usb 4-1: config 0 descriptor?? [ 277.794749][ T5849] usb 4-1: can't set config #0, error -71 [ 277.946543][ T7300] netlink: 'syz.0.234': attribute type 3 has an invalid length. [ 277.954401][ T7300] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.234'. [ 277.979041][ T7300] sctp: [Deprecated]: syz.0.234 (pid 7300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.979041][ T7300] Use struct sctp_sack_info instead [ 278.528742][ T5849] usb 4-1: USB disconnect, device number 3 [ 278.955532][ T7307] CIFS mount error: No usable UNC path provided in device string! [ 278.955532][ T7307] [ 278.965935][ T7307] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 280.035591][ T7310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.239'. [ 281.861155][ T6956] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 281.918342][ T6956] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 281.967867][ T6956] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 282.016774][ T6956] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 282.939792][ T30] audit: type=1400 audit(1753579548.028:118): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7336 comm="syz.4.245" daddr=ff04::1 [ 283.461366][ T6956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.483051][ T6956] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.563982][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.571303][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.642073][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.649400][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.290186][ T7384] netlink: 'syz.4.249': attribute type 3 has an invalid length. [ 285.298250][ T7384] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.249'. [ 285.322663][ T7384] sctp: [Deprecated]: syz.4.249 (pid 7384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.322663][ T7384] Use struct sctp_sack_info instead [ 287.657083][ T6956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.608639][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 288.705084][ T24] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 288.900258][ T7416] fido_id[7416]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 290.048486][ T7428] netlink: 'syz.3.254': attribute type 9 has an invalid length. [ 290.811176][ T6956] veth0_vlan: entered promiscuous mode [ 290.872319][ T6956] veth1_vlan: entered promiscuous mode [ 291.055403][ T30] audit: type=1326 audit(1753579556.608:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 291.164842][ T30] audit: type=1326 audit(1753579556.608:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 291.345377][ T7454] pim6reg: entered allmulticast mode [ 291.373164][ T6956] veth0_macvtap: entered promiscuous mode [ 291.377205][ T30] audit: type=1326 audit(1753579556.608:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 291.411050][ T6956] veth1_macvtap: entered promiscuous mode [ 291.471201][ T30] audit: type=1326 audit(1753579556.608:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 291.550481][ T30] audit: type=1326 audit(1753579556.608:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 291.664057][ T30] audit: type=1326 audit(1753579556.608:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 292.212674][ T7465] netlink: 'syz.1.261': attribute type 3 has an invalid length. [ 292.220551][ T7465] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.261'. [ 292.244466][ T7465] sctp: [Deprecated]: syz.1.261 (pid 7465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.244466][ T7465] Use struct sctp_sack_info instead [ 292.607658][ T30] audit: type=1326 audit(1753579556.608:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 292.763220][ T30] audit: type=1326 audit(1753579556.608:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 292.968263][ T7470] input: syz0 as /devices/virtual/input/input9 [ 292.982105][ T7470] input: failed to attach handler leds to device input9, error: -6 [ 293.042392][ T30] audit: type=1326 audit(1753579556.608:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 293.319649][ T7449] pim6reg: left allmulticast mode [ 293.428671][ T30] audit: type=1326 audit(1753579556.608:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7449 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6c20b8e9a9 code=0x7ffc0000 [ 296.033997][ T7487] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.040324][ T7487] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 296.051999][ T7487] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.058106][ T7487] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 296.075762][ T7487] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.081988][ T7487] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 296.097417][ T7487] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.103456][ T7487] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 296.468726][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.485649][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.696193][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.731143][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.739039][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.805477][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 297.340948][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.357439][ T59] Bluetooth: hci3: Frame reassembly failed (-84) [ 297.358005][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.377342][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.752433][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.777258][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.032435][ T7492] lo speed is unknown, defaulting to 1000 [ 298.166943][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 298.166998][ T30] audit: type=1400 audit(1753579563.778:163): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7507 comm="syz.1.268" daddr=ff01::1 dest=20005 [ 298.188323][ T7513] trusted_key: syz.1.268 sent an empty control message without MSG_MORE. [ 299.357866][ T5841] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 299.358005][ T5838] Bluetooth: hci3: command 0x1003 tx timeout [ 299.569398][ T7543] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 299.575414][ T7543] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 299.836645][ C1] ------------[ cut here ]------------ [ 299.842519][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci5 [ 299.849306][ C1] WARNING: CPU: 1 PID: 0 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0 [ 299.858104][ C1] Modules linked in: [ 299.862298][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc7-syzkaller-00138-g513fc69f8fc7 #0 PREEMPT(full) [ 299.873948][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.884025][ C1] RIP: 0010:__queue_work+0xd62/0xfe0 [ 299.889332][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 09 2c 95 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 00 e9 89 8b 4c 89 fa e8 4f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 a0 44 35 00 90 0f 0b 90 e9 dd fc ff [ 299.908961][ C1] RSP: 0018:ffffc90000a08b08 EFLAGS: 00010046 [ 299.915020][ C1] RAX: 25612f24d4ec1200 RBX: 0000000000000100 RCX: ffff88801d2e5a00 [ 299.923046][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 299.931007][ C1] RBP: 1ffff1100f0bb538 R08: 0000000000000003 R09: 0000000000000004 [ 299.938970][ C1] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: dffffc0000000000 [ 299.946932][ C1] R13: ffff888077e60988 R14: 0000000000000008 R15: ffff8880785da978 [ 299.954893][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 299.963807][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.970376][ C1] CR2: 0000001b3060eff8 CR3: 0000000034256000 CR4: 00000000003526f0 [ 299.978333][ C1] Call Trace: [ 299.981611][ C1] [ 299.984449][ C1] call_timer_fn+0x17b/0x5f0 [ 299.989029][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 299.994819][ C1] ? call_timer_fn+0xbe/0x5f0 [ 299.999500][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 300.004632][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 300.009829][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 300.015625][ C1] __run_timer_base+0x646/0x860 [ 300.020468][ C1] ? ktime_get+0x3e/0x1f0 [ 300.024793][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 300.030156][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 300.036433][ C1] run_timer_softirq+0xb7/0x180 [ 300.041284][ C1] handle_softirqs+0x283/0x870 [ 300.046039][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 300.050798][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 300.056094][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 300.061292][ C1] __irq_exit_rcu+0xca/0x1f0 [ 300.065892][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 300.071082][ C1] irq_exit_rcu+0x9/0x30 [ 300.075310][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 300.080933][ C1] [ 300.083852][ C1] [ 300.086797][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 300.092764][ C1] RIP: 0010:tick_nohz_idle_exit+0x36b/0x470 [ 300.098647][ C1] Code: 0f 85 0f ff ff ff e8 f4 d8 0d 00 49 bc 00 00 00 00 00 fc ff df eb 05 e8 e3 d8 0d 00 e8 fe 64 15 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 65 48 8b 05 24 43 ea 10 48 3b 44 24 40 [ 300.118247][ C1] RSP: 0018:ffffc90000197d60 EFLAGS: 00000286 [ 300.124303][ C1] RAX: 25612f24d4ec1200 RBX: ffff8880b8728400 RCX: 25612f24d4ec1200 [ 300.132273][ C1] RDX: 0000000000000000 RSI: ffffffff8d982ff2 RDI: ffffffff8be1ba80 [ 300.140253][ C1] RBP: ffffc90000197df0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 300.148240][ C1] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: dffffc0000000000 [ 300.156207][ C1] R13: 1ffff92000032fac R14: 0000000000000004 R15: 00000045cd78f3d8 [ 300.164193][ C1] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 300.169823][ C1] ? default_idle_call+0x9d/0xb0 [ 300.174757][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.179945][ C1] do_idle+0x49e/0x510 [ 300.184007][ C1] ? __pfx_do_idle+0x10/0x10 [ 300.188584][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.193786][ C1] cpu_startup_entry+0x44/0x60 [ 300.198547][ C1] start_secondary+0x101/0x110 [ 300.203305][ C1] common_startup_64+0x13e/0x147 [ 300.208242][ C1] [ 300.211248][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 300.218532][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc7-syzkaller-00138-g513fc69f8fc7 #0 PREEMPT(full) [ 300.230145][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.240207][ C1] Call Trace: [ 300.243503][ C1] [ 300.246338][ C1] dump_stack_lvl+0x99/0x250 [ 300.250933][ C1] ? __asan_memcpy+0x40/0x70 [ 300.255525][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.260736][ C1] ? __pfx__printk+0x10/0x10 [ 300.265322][ C1] panic+0x2db/0x790 [ 300.269212][ C1] ? __pfx_panic+0x10/0x10 [ 300.273639][ C1] ? show_trace_log_lvl+0x4fb/0x550 [ 300.278831][ C1] ? common_startup_64+0x13e/0x147 [ 300.283943][ C1] __warn+0x31b/0x4b0 [ 300.287911][ C1] ? __queue_work+0xd62/0xfe0 [ 300.292584][ C1] ? __queue_work+0xd62/0xfe0 [ 300.297258][ C1] report_bug+0x2be/0x4f0 [ 300.301578][ C1] ? __queue_work+0xd62/0xfe0 [ 300.306242][ C1] ? __queue_work+0xd62/0xfe0 [ 300.310907][ C1] ? __queue_work+0xd64/0xfe0 [ 300.315572][ C1] handle_bug+0x84/0x160 [ 300.319807][ C1] exc_invalid_op+0x1a/0x50 [ 300.324297][ C1] asm_exc_invalid_op+0x1a/0x20 [ 300.329172][ C1] RIP: 0010:__queue_work+0xd62/0xfe0 [ 300.334457][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 09 2c 95 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 00 e9 89 8b 4c 89 fa e8 4f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 a0 44 35 00 90 0f 0b 90 e9 dd fc ff [ 300.354058][ C1] RSP: 0018:ffffc90000a08b08 EFLAGS: 00010046 [ 300.360119][ C1] RAX: 25612f24d4ec1200 RBX: 0000000000000100 RCX: ffff88801d2e5a00 [ 300.368081][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 300.376040][ C1] RBP: 1ffff1100f0bb538 R08: 0000000000000003 R09: 0000000000000004 [ 300.383996][ C1] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: dffffc0000000000 [ 300.391955][ C1] R13: ffff888077e60988 R14: 0000000000000008 R15: ffff8880785da978 [ 300.399952][ C1] ? __queue_work+0xd61/0xfe0 [ 300.404680][ C1] call_timer_fn+0x17b/0x5f0 [ 300.409301][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 300.415141][ C1] ? call_timer_fn+0xbe/0x5f0 [ 300.419855][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 300.425040][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 300.430240][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 300.436040][ C1] __run_timer_base+0x646/0x860 [ 300.440895][ C1] ? ktime_get+0x3e/0x1f0 [ 300.445248][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 300.450615][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 300.456862][ C1] run_timer_softirq+0xb7/0x180 [ 300.461708][ C1] handle_softirqs+0x283/0x870 [ 300.466459][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 300.471216][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 300.476491][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 300.481682][ C1] __irq_exit_rcu+0xca/0x1f0 [ 300.486261][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 300.491455][ C1] irq_exit_rcu+0x9/0x30 [ 300.495688][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 300.501310][ C1] [ 300.504230][ C1] [ 300.507147][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 300.513129][ C1] RIP: 0010:tick_nohz_idle_exit+0x36b/0x470 [ 300.519015][ C1] Code: 0f 85 0f ff ff ff e8 f4 d8 0d 00 49 bc 00 00 00 00 00 fc ff df eb 05 e8 e3 d8 0d 00 e8 fe 64 15 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 65 48 8b 05 24 43 ea 10 48 3b 44 24 40 [ 300.538634][ C1] RSP: 0018:ffffc90000197d60 EFLAGS: 00000286 [ 300.544694][ C1] RAX: 25612f24d4ec1200 RBX: ffff8880b8728400 RCX: 25612f24d4ec1200 [ 300.552657][ C1] RDX: 0000000000000000 RSI: ffffffff8d982ff2 RDI: ffffffff8be1ba80 [ 300.560642][ C1] RBP: ffffc90000197df0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 300.568602][ C1] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: dffffc0000000000 [ 300.576565][ C1] R13: 1ffff92000032fac R14: 0000000000000004 R15: 00000045cd78f3d8 [ 300.584563][ C1] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 300.590196][ C1] ? default_idle_call+0x9d/0xb0 [ 300.595125][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.600313][ C1] do_idle+0x49e/0x510 [ 300.604404][ C1] ? __pfx_do_idle+0x10/0x10 [ 300.608995][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.614199][ C1] cpu_startup_entry+0x44/0x60 [ 300.618972][ C1] start_secondary+0x101/0x110 [ 300.623730][ C1] common_startup_64+0x13e/0x147 [ 300.628664][ C1] [ 300.631941][ C1] Kernel Offset: disabled [ 300.636261][ C1] Rebooting in 86400 seconds..